Re: [Exist-development] security refactoring

[Dmitriy S. <sha...@gm...>]

On Wed, 2010-07-21 at 22:04 +0100, Adam Retter wrote:
> >  - 'system account' (id = 0, dba group), it will be use by system only.
> > It will be useful as owner of the /system resources, so it will be never
> > modified by anybody, only by system it self (throw special functions);
> 
> fine :-)
> 
> >  - 'nobody' (id = -1, guest group), the use didn't offer himself. This
> > account can't be used as resource owner.
> 
> How is this any different to the current 'guest' user?

Current "guest" account can be used by user (authenticate), I do miss
something before user introduce oneself. This account should not be
allowed to create anything @database, but only limited read permissions.

-- 
Cheers,

Dmitriy Shabanov