diff options
| author | Chris McDonough <chrism@agendaless.com> | 2009-01-25 05:19:28 +0000 |
|---|---|---|
| committer | Chris McDonough <chrism@agendaless.com> | 2009-01-25 05:19:28 +0000 |
| commit | cb4b8039c677a4907d999598b96505298a3e7401 (patch) | |
| tree | 58339841826683ec8feb046a52b02eb44389c6a1 /repoze/bfg/security.py | |
| parent | c8cab3395432983c2165dce196ad5204e420a900 (diff) | |
| download | pyramid-cb4b8039c677a4907d999598b96505298a3e7401.tar.gz pyramid-cb4b8039c677a4907d999598b96505298a3e7401.tar.bz2 pyramid-cb4b8039c677a4907d999598b96505298a3e7401.zip | |
- It is no longer permissible to pass a "nested" list of principals to
``repoze.bfg.ACLAuthorizer.permits`` (e.g. ['fred', ['larry',
'bob']). The principals list must be fully expanded. This feature
was never documented, and was never an API, so it's not a backwards
incompatibility.
Diffstat (limited to 'repoze/bfg/security.py')
| -rw-r--r-- | repoze/bfg/security.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/repoze/bfg/security.py b/repoze/bfg/security.py index 693f253d0..2b1d3e0de 100644 --- a/repoze/bfg/security.py +++ b/repoze/bfg/security.py @@ -75,7 +75,7 @@ class ACLAuthorizer(object): for ace in acl: ace_action, ace_principal, ace_permissions = ace - for principal in flatten(principals): + for principal in principals: if ace_principal == principal: permissions = flatten(ace_permissions) if permission in permissions: |