From 672bbe5a4c3141e2a995c4bf9998f9b73a99b752 Mon Sep 17 00:00:00 2001 From: Chris McDonough Date: Sun, 1 Aug 2010 16:37:24 +0000 Subject: prep for 1.3a7 --- docs/designdefense.rst | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'docs/designdefense.rst') diff --git a/docs/designdefense.rst b/docs/designdefense.rst index 396f8d395..a5d515d4e 100644 --- a/docs/designdefense.rst +++ b/docs/designdefense.rst @@ -1,3 +1,5 @@ +.. _design_defense: + Defending BFG's Design ====================== @@ -1143,7 +1145,7 @@ Zope 3 Enforces "TTW" Authorization Checks By Default; BFG Does Not ------------------------------------------------------------------- Challenge -~~~~~~~~~ ++++++++++ :mod:`repoze.bfg` performs automatic authorization checks only at :term:`view` execution time. Zope 3 wraps context objects with a @@ -1163,7 +1165,7 @@ access. I like this, because it means: :mod:`repoze.bfg` and in the Twisted-based system the same way. Defense -~~~~~~~ ++++++++ :mod:`repoze.bfg` was developed by folks familiar with Zope 2, which has a "through the web" security model. This "TTW" security model was -- cgit v1.2.3