Sorry, "squirrel away" as in how a squirrel saves/hides food for later. Thanks, the impersonator information was exactly what I was after. I have a banner at the top of the page that shows the user information, and wanted to also show impersonator information in the case the user is being impersonated.
Still no joy on the decorator, though. I understand what you mean about a decorator within a decorator... I didn't realize I needed to distinguish. The example you sent makes sense, and explains why I was having trouble specifying the user id in auth.has_permission. So I tried both your example and this one where user id is specified with auth.has_permission: @auth.requires(auth.user and auth.has_permission('impersonate',db.auth_user,0,auth.user.id) Unfortunately, there was no resulting change in behavior... it gets redirected to the login page for any user that is a) already logged in and b) not in a group authorized to impersonate. -- You received this message because you are subscribed to the Google Groups "web2py-users" group. To post to this group, send email to web...@googlegroups.com. To unsubscribe from this group, send email to web2py+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/web2py?hl=en.