[TurboGears] Re: checking permissions

[Jeff Watkins]

Benoit, this would be the only way to put permissions on the fetching of the actual image. Unfortunately, because of the design of CherryPy, the static filter probably gets first crack at the request before the IdentityFilter. On the otherhand, it wouldn't be too hard to create a secure version of the StaticFilter that first checks for permissions before serving files. On 1 Nov, 2005, at 2:51 pm, Benoit Masson wrote: the secured script will fetch identity and read and deliver the img content as a file stream... -- Jeff Watkins http://metrocat.org/ "Just because you have the right to do something, doesn't mean it's the right thing to do." -- Fred Friendly, former president of CBS News