[mod_python] Access checking against another path

Roger Binns rogerb at rogerbinns.com
Mon Apr 30 20:16:01 EDT 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Roberto C. Sánchez wrote:
> Have you considered cookies?

They won't help :-(.  The problem I am trying to solve is the
administrator not having to set duplicate authentication and access
control directives.  They should set them once on /api/object/whatever.

But then in the code below /admin I need to perform actions on object as
well as providing HTML user interface.  I don't want the web
administrator to have to set another set of authentication and access
control on /admin.

That means the code in /admin has to use the credentials it was supplied
with and ask /api/object/whatever if they are ok.

Roger
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGNobBmOOfHg372QQRArflAJ0WbQfJ0TE2I1qX8N9V8huTdTRT4wCgwLgq
RbjYcoU6BSikFkCgdSfn+vU=
=FP3u
-----END PGP SIGNATURE-----


More information about the Mod_python mailing list