diff options
| author | Chris McDonough <chrism@agendaless.com> | 2009-01-25 18:05:08 +0000 |
|---|---|---|
| committer | Chris McDonough <chrism@agendaless.com> | 2009-01-25 18:05:08 +0000 |
| commit | 62bcc58d7859fc2bdf5bab4a64b991e12250884b (patch) | |
| tree | b604a504500dda46d3f1a83c15b3b20a97ab5814 /CHANGES.txt | |
| parent | 7c7158db8d4e1a3cc52211b2ab5d679fab948823 (diff) | |
| download | pyramid-62bcc58d7859fc2bdf5bab4a64b991e12250884b.tar.gz pyramid-62bcc58d7859fc2bdf5bab4a64b991e12250884b.tar.bz2 pyramid-62bcc58d7859fc2bdf5bab4a64b991e12250884b.zip | |
- It is no longer permissible for a security ACE to contain a "nested"
list of permissions (e.g. ``(Allow, Everyone, ['read', ['view',
['write', 'manage']]])`)`. The list must instead be fully expanded
(e.g. ``(Allow, Everyone, ['read', 'view', 'write', 'manage])``). This
feature was never documented, and was never an API, so it's not a
backwards incompatibility.
Diffstat (limited to 'CHANGES.txt')
| -rw-r--r-- | CHANGES.txt | 15 |
1 files changed, 11 insertions, 4 deletions
diff --git a/CHANGES.txt b/CHANGES.txt index 90281e2af..1faf5d76c 100644 --- a/CHANGES.txt +++ b/CHANGES.txt @@ -25,10 +25,17 @@ Behavior Changes be raised (speed). - It is no longer permissible to pass a "nested" list of principals to - ``repoze.bfg.ACLAuthorizer.permits`` (e.g. ['fred', ['larry', - 'bob']). The principals list must be fully expanded. This feature - was never documented, and was never an API, so it's not a backwards - incompatibility. + ``repoze.bfg.ACLAuthorizer.permits`` (e.g. ``['fred', ['larry', + 'bob']]``). The principals list must be fully expanded. This + feature was never documented, and was never an API, so it's not a + backwards incompatibility. + +- It is no longer permissible for a security ACE to contain a "nested" + list of permissions (e.g. ``(Allow, Everyone, ['read', ['view', + ['write', 'manage']]])`)`. The list must instead be fully expanded + (e.g. ``(Allow, Everyone, ['read', 'view', 'write', 'manage])``). This + feature was never documented, and was never an API, so it's not a + backwards incompatibility. Implementation Changes ---------------------- |