[Twisted-web] Finer-Grained Security System for Twisted Web/Nevow?

[Michał Pasternak]
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