Authentication/authorization API mistakes detailed in http://plope.com/pyramid_auth_design_api_postmortem
Having Pyramid raise HTTPNotFound instead of an internal exception when it can't find a view.
Having Pyramid raise HTTPForbidden instead of an internal exception when view execution is not permitted.
There was an error while loading. Please reload this page.