Re: Proposal: Django Security

2006-04-10 Thread Joseph Kocherhans
On 4/7/06, Malcolm Tredinnick <[EMAIL PROTECTED]> wrote: > > On Fri, 2006-04-07 at 17:02 -0600, Joseph Kocherhans wrote: > > django.contrib.auth.models.User has too many methods and too many > > properties. It's tightly coupled to permissions, groups, the admin > > system > > > > has_permission(us

Re: Proposal: Django Security

2006-04-07 Thread Malcolm Tredinnick
On Fri, 2006-04-07 at 17:02 -0600, Joseph Kocherhans wrote: > django.contrib.auth.models.User has too many methods and too many > properties. It's tightly coupled to permissions, groups, the admin > system > > has_permission(user, permission) > is_anonymous(user) > > The problem is that we shoul

Proposal: Django Security

2006-04-07 Thread Joseph Kocherhans
django.contrib.auth.models.User has too many methods and too many properties. It's tightly coupled to permissions, groups, the admin system has_permission(user, permission) is_anonymous(user) The problem is that we should always assume that the user is an instance of django.contrib.auth.models.U