Mistakes - Pylons/pyramid GitHub Wiki

Authentication/authorization API mistakes detailed in http://plope.com/pyramid_auth_design_api_postmortem

Having Pyramid raise HTTPNotFound instead of an internal exception when it can't find a view.

Having Pyramid raise HTTPForbidden instead of an internal exception when view execution is not permitted.