diff options
| author | Chris McDonough <chrism@agendaless.com> | 2010-08-01 16:37:24 +0000 |
|---|---|---|
| committer | Chris McDonough <chrism@agendaless.com> | 2010-08-01 16:37:24 +0000 |
| commit | 672bbe5a4c3141e2a995c4bf9998f9b73a99b752 (patch) | |
| tree | 64a9c557194c9568593ebec932b2fda61bfc4f3e /docs/designdefense.rst | |
| parent | 34547458e3ce880abfbf4248357d6b191b4d63ee (diff) | |
| download | pyramid-672bbe5a4c3141e2a995c4bf9998f9b73a99b752.tar.gz pyramid-672bbe5a4c3141e2a995c4bf9998f9b73a99b752.tar.bz2 pyramid-672bbe5a4c3141e2a995c4bf9998f9b73a99b752.zip | |
prep for 1.3a7
Diffstat (limited to 'docs/designdefense.rst')
| -rw-r--r-- | docs/designdefense.rst | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/docs/designdefense.rst b/docs/designdefense.rst index 396f8d395..a5d515d4e 100644 --- a/docs/designdefense.rst +++ b/docs/designdefense.rst @@ -1,3 +1,5 @@ +.. _design_defense: + Defending BFG's Design ====================== @@ -1143,7 +1145,7 @@ Zope 3 Enforces "TTW" Authorization Checks By Default; BFG Does Not ------------------------------------------------------------------- Challenge -~~~~~~~~~ ++++++++++ :mod:`repoze.bfg` performs automatic authorization checks only at :term:`view` execution time. Zope 3 wraps context objects with a @@ -1163,7 +1165,7 @@ access. I like this, because it means: :mod:`repoze.bfg` and in the Twisted-based system the same way. Defense -~~~~~~~ ++++++++ :mod:`repoze.bfg` was developed by folks familiar with Zope 2, which has a "through the web" security model. This "TTW" security model was |