Re: A word about CSRF Protection and AJAX

2011-02-19 Thread Sayane
http://code.djangoproject.com/ticket/15354 2011/2/19 Luke Plant > On Sat, 2011-02-19 at 12:00 +0100, Sayane wrote: > > There's a problem with CSRF Protection and XHR requests. It works > > perfectly if 'csrftoken' cookie has been set already. But what if it's

A word about CSRF Protection and AJAX

2011-02-19 Thread Sayane
There's a problem with CSRF Protection and XHR requests. It works perfectly if 'csrftoken' cookie has been set already. But what if it's not? Cookie with token will be set only, if META["CSRF_COOKIE_USED"] is True [1]. It's set to True in function get_token() [2]. get_token() is called in CsrfRespo

TemplateResponse, url tag and custom urlconf

2011-01-14 Thread Sayane
There is a problem with TemplateResponse and request.urlconf. Custom urlconf is removed[1] before TemplateResponse is rendered[2]. This means that any call to reverse() when rendering template will use default urlconf (from settings). This makes TemplateResponse useless when using custom urlconf.

User_logged_in signal

2011-01-09 Thread Sayane
Take a look at this: http://code.djangoproject.com/browser/django/trunk/django/contrib/auth/__init__.py#L73 Is there any reason, why this signal is sent before flushing session? It makes request.session useless for all receivers. -- You received this message because you are subscribed to the Goo

Re: contrib.Auth

2010-02-22 Thread Sayane
It's not only about character restrictions on usernames. Some of developers want to use email as login (so we have to remove username and add unique option to email). Another example are english-only permissions. I would like to replace them with my own i18n permissions. Maybe someone needs somethi

Re: contrib.Auth

2010-02-10 Thread Sayane
I think that an easy way to define your own user model is better idea. Auth app should be more generic. It should define a protocol for user, group and permission objects (and of course there should be back compatible implementation of this protocols used by default). There is a ticket about extend

Re: Feature Request: Reinteract

2009-11-29 Thread Sayane
Or install IPython and run manage.py shell 2009/11/28 Antoni Aloy > 2009/11/28 James Bennett : > > On Fri, Nov 27, 2009 at 6:07 AM, noel wrote: > >> I really love this application Reinteract. Its an enhancement to > >> Python Interactive Shell. And it would be lovely if I can use > >> Reinterac