From 068193e303b45fdfdf2e4f62a7e89b6e1119bba5 Mon Sep 17 00:00:00 2001
From: Michael Merickel <michael@merickel.org>
Date: Sat, 28 Nov 2020 23:15:13 -0600
Subject: add the missing authenticated principal

---
 docs/whatsnew-2.0.rst | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'docs/whatsnew-2.0.rst')

diff --git a/docs/whatsnew-2.0.rst b/docs/whatsnew-2.0.rst
index 3f745ea3f..d1f66707d 100644
--- a/docs/whatsnew-2.0.rst
+++ b/docs/whatsnew-2.0.rst
@@ -245,6 +245,8 @@ We can easily write our own :class:`pyramid.interfaces.ISecurityPolicy` implemen
             identity = request.identity
             principals = set([Everyone])
             if identity is not None:
+                principals.add(Authenticated)
+                principals.add(identity['userid'])
                 principals.update(identity['principals'])
             return ACLHelper().permits(context, principals, permission)
 
-- 
cgit v1.2.3