diff options
| author | Carlos de la Guardia <cguardia@yahoo.com> | 2009-11-27 05:39:15 +0000 |
|---|---|---|
| committer | Carlos de la Guardia <cguardia@yahoo.com> | 2009-11-27 05:39:15 +0000 |
| commit | 3b5add47414b938a5585b051beef6a6da0d02955 (patch) | |
| tree | 51610b761fcd266db4ddb5852319c0b839b044bf /docs/tutorials | |
| parent | b7e654239664ee21ac75457425def70d9f9d8d9e (diff) | |
| download | pyramid-3b5add47414b938a5585b051beef6a6da0d02955.tar.gz pyramid-3b5add47414b938a5585b051beef6a6da0d02955.tar.bz2 pyramid-3b5add47414b938a5585b051beef6a6da0d02955.zip | |
The forbidden stanza explanation was duplicated in the same paragraph
Diffstat (limited to 'docs/tutorials')
| -rw-r--r-- | docs/tutorials/bfgwiki2/authorization.rst | 15 |
1 files changed, 6 insertions, 9 deletions
diff --git a/docs/tutorials/bfgwiki2/authorization.rst b/docs/tutorials/bfgwiki2/authorization.rst index ac5f98c8d..f701b4ef8 100644 --- a/docs/tutorials/bfgwiki2/authorization.rst +++ b/docs/tutorials/bfgwiki2/authorization.rst @@ -78,15 +78,12 @@ Changing ``configure.zcml`` We'll change our ``configure.zcml`` file to enable an ``AuthTktAuthenticationPolicy`` and an ``ACLAuthorizationPolicy`` to -enable declarative security checking. We'll also add a ``forbidden`` -stanza. This configures our login view to show up when -:mod:`repoze.bfg` detects that a view invocation can not be -authorized. We'll also change ``configure.zcml`` to add a -``forbidden`` stanza which points at our login view. This configures -our newly created login view to show up when :mod:`repoze.bfg` detects -that a view invocation can not be authorized. Also, we'll add -``view_permission`` attributes with the value ``edit`` to the -``edit_page`` and ``add_page`` routes. This indicates that the views +enable declarative security checking. We'll also change +``configure.zcml`` to add a ``forbidden`` stanza which points at our +login view. This configures our newly created login view to show up when +:mod:`repoze.bfg` detects that a view invocation can not be authorized. +Also, we'll add ``view_permission`` attributes with the value ``edit`` to +the ``edit_page`` and ``add_page`` routes. This indicates that the views which these routes reference cannot be invoked without the authenticated user possessing the ``edit`` permission with respect to the current context. When you're done, your ``configure.zcml`` will |
