fixed issue 937, thanks Dulakian

2012-08-19 13:49:26 -05:00
parent 51dfb71063
commit 0214613182
2 changed files with 3 additions and 3 deletions
@@ -1627,9 +1627,9 @@ class SQLFORM(FORM):

        referrer = session.get('_web2py_grid_referrer_'+formname, url())
        if user_signature:
-            if (args != request.args and \
+            if (args != request.args and user_signature and \
                    not URL.verify(request,user_signature=user_signature)) or \
-                    (not auth.user and \
+                    (not session.auth.user and \
                         ('edit' in request.args or \
                              'create' in request.args or \
                              'delete' in request.args)):