From f4f77b0cb6c145e2bb1bf3cd062915a17aa2b9f8 Mon Sep 17 00:00:00 2001 From: mdipierro Date: Thu, 25 Jun 2015 04:23:49 -0500 Subject: [PATCH] fixed issue #982, LOAD with ajax=False and args --- gluon/sqlhtml.py | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/gluon/sqlhtml.py b/gluon/sqlhtml.py index 0c888074..e0cba56c 100644 --- a/gluon/sqlhtml.py +++ b/gluon/sqlhtml.py @@ -2111,10 +2111,8 @@ class SQLFORM(FORM): # - url has valid signature (vars are not signed, only path_info) # = url does not contain 'create','delete','edit' (readonly) if user_signature: - if not ( - '/'.join(str(a) for a in args) == '/'.join(request.args) or - URL.verify(request, user_signature=user_signature, - hash_vars=False) or + if not ('/'.join(map(str,args)) == '/'.join(map(str,request.args)) or + URL.verify(request, user_signature=user_signature, hash_vars=False) or (request.args(len(args)) == 'view' and not logged)): session.flash = T('not authorized') redirect(referrer)