#pyramid

in an RBAC-like system, the callback= of the authentication policy also returns the permissions associated with the roles, right ?

is it better to use a callback or to subclass AuthTktAuthenticationPolicy ?

first question, no, permissions are part of an authorization policy. authentication policy has naught to do with permissions.

second question, i think callback is still the recommended way.

do whatever the docs tell you to do.

so, warehouse, https://pypi.python.org/simple/products.ploneho... is currently in the fresh-release quantum state i was on about prior, max-age=0 does the trick, but https://pastebin.com/nFs3wkGq does not

oh, there is dns round robin at play as well, that was the missing piece for me

https://pastebin.com/JY8uiL4v <- so this actually does the trick

unless there is some ipv6 thing also at play, then more conditions apply

and there is: https://pastebin.com/6jzxxkD9

hmm, shoudl that actually purge the download links as well, then?

any idea how to disable all those: 2017-11-28 16:51:59,277 DEBUG [txn.34393318400][MainThread] new transaction messages?

well it's the txn.* logger at DEBUG level... so set one of the loggers in that tree to higher than DEBUG

thanks :)

chrisrossi and mage_: We as the Pylons project recommend sub-classing these days instead of doing the callback knob.

raydeo has a sample somewhere, I am sure of it, since he has code samples for everything.

the docs recommend it

Ohhh, and Michael is about to beat me to linkgint to the docs.

Couldn't even finished my damn sentence :P

<3

:(