In fact the 'Public' group don't exist in db.auth_membership (it is a
'virtual group' and can't be created)
when trying my code it works and if session.group='Public' the user is
redirect by "auth.on_failed_authorization"...
But is it secure to use a session.variable in @auth.requires_membership
()?
independently of my code
Note :at first I tryed to use a tupple as session.group=('id','role')
and when using @auth.requires_membership(session.group[1]) ...it
generate a ticket issue witch link generate a ticket issue
witch ..etc...
Jean-Marc
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"web2py Web Framework" group.
To post to this group, send email to web2py@googlegroups.com
To unsubscribe from this group, send email to
web2py+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/web2py?hl=en
-~----------~----~----~----~------~----~------~--~---
