Pyramid.security: Is getting user info from a database with unauthenticated_userid(request) really secure?
- by yourfriendzak
I'm trying to make an accesible cache of user data using Pyramid doc's "Making A “User Object” Available as a Request Attribute" example.
They're using this code to return a user object to set_request_property:
from pyramid.security import unauthenticated_userid
def get_user(request):
# the below line is just an example, use your own method…
