RE: [Blogcfc-develop] First big discussion

[William N. S. <Wil...@hk...>]

I agree...This is what I was trying to say earlier...but Ben says it MUCH
MUCH more eloquently.

-william.

-----Original Message-----
From: Ben Forta [mailto:bf...@ma...]
Sent: Monday, August 04, 2003 3:28 PM
To: blo...@li...
Subject: RE: [Blogcfc-develop] First big discussion


So, here's what I suggest ...

Core blog.cfc is tied to a blog, no users, no roles, no rights, it's an
API.

You then have another version of the code inherit of blog.cfc, that
version implements all the user stuff. It also relies on an external
file called user.cfc for calls like authenticate() and so on. You
provide a default user.cfc and anyone can create their own to change how
authentication and validation works.

This way ...

* Blog can be used as is simply on sites like mine.
* Blog supports multi users as needed.
* Blog also supports any existing security if already in place.

I think. :-)




-----Original Message-----
From: blo...@li...
[mailto:blo...@li...] On Behalf Of
Raymond Camden
Sent: Monday, August 04, 2003 11:09 AM
To: blo...@li...
Subject: RE: [Blogcfc-develop] First big discussion


Forta does have a strong point. There are, essentially, two products
here. One a client and one a server. In general, I care a lot more about
the server since I assume people will use their own client, however, I
do think a significant amount of people use the client as well. We could
simply remove the authenticate method from the blog and simply make it
so that you pass in a username. So, for example, when I add an entry,
it's my responsibility to pass in username=morpheus and the blog just
trusts it. The blog doesn't care who morpheus it - for it - the name
morpheus is just a signature. That would make certain aspects a bit
easier for sure. At the same time though, I think people like being able
to use the basic authenticate method already stored in the blog.

I don't know - what do others think?

========================================================================
===
Raymond Camden, ColdFusion Jedi Master for Mindseye, Inc
(www.mindseye.com)
Member of Team Macromedia (http://www.macromedia.com/go/teammacromedia)

Email    : jed...@mi...
Blog     : www.camdenfamily.com/morpheus/blog
Yahoo IM : morpheus

"My ally is the Force, and a powerful ally it is." - Yoda 

> -----Original Message-----
> From: blo...@li...
> [mailto:blo...@li...] On 
> Behalf Of Ben Forta
> Sent: Sunday, August 03, 2003 7:37 AM
> To: blo...@li...
> Subject: RE: [Blogcfc-develop] First big discussion
> 
> 
> I've been giving this one lots of thought, and honestly, I
> don't believe users and passwords belong here at all. In the 
> current distribution, the first thing I do each time I grab a 
> new build is to comment out the line of code in 
> Application.cfm which invokes the user authentication method 
> (and I also do not execute the SQL to create the user table). 
> Why? Because I already have users and passwords and access 
> control for other parts of my site and I just reuse those.
> 



-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01
/01
_______________________________________________
Blogcfc-develop mailing list
Blo...@li...
https://lists.sourceforge.net/lists/listinfo/blogcfc-develop



-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Blogcfc-develop mailing list
Blo...@li...
https://lists.sourceforge.net/lists/listinfo/blogcfc-develop