diff --git a/gluon/sqlhtml.py b/gluon/sqlhtml.py index 0c888074..e0cba56c 100644 --- a/gluon/sqlhtml.py +++ b/gluon/sqlhtml.py @@ -2111,10 +2111,8 @@ class SQLFORM(FORM): # - url has valid signature (vars are not signed, only path_info) # = url does not contain 'create','delete','edit' (readonly) if user_signature: - if not ( - '/'.join(str(a) for a in args) == '/'.join(request.args) or - URL.verify(request, user_signature=user_signature, - hash_vars=False) or + if not ('/'.join(map(str,args)) == '/'.join(map(str,request.args)) or + URL.verify(request, user_signature=user_signature, hash_vars=False) or (request.args(len(args)) == 'view' and not logged)): session.flash = T('not authorized') redirect(referrer)