[Openflow-dev] User Management

[<jm...@so...>]

On Wed, 19 Dec 2001, Vincenzo Di Somma wrote:

> The fact is that CMF has a very convenient view on a lot of open
> problems for OpenFlow: user management, content management, separating
> functionality from usage and so on.

About User Management.

It would be an interesting feature that an automatic activity could
acquire some roles, or become a diferente user (ie admin, or
another).

I have solved this calling a python script with a proxy role set to
"Manager", and passing it a password parameter from the openflow. And only
openflow should know this password.

But that's not very secure, imagine there is and error, the user could see
the password in the traceback (I read in Zope mail-list that even in "no
debug mode", the traceback appears in the html-code, but is not displayed
in the browser).

There is maybe another cleaner way of doing it ?


--=20

      __o
    _ \<_
   (_)/(_)

Saludos de Juli=E1n
EA4ACL
-.-