[Pas-dev] Security and menus

[Kaare R. <ka...@ka...>]

Security
 --------
In my opinion there are two kinds of security.
 - Access to applications or objects
 - Access to data (filter) 

I will look at the former here. 

My idea is to have a framework database with tables like this 

User<-->user group<-->object group<-->object 

Meaning:
A user can be a member of 1 or more user groups, and a group can have 1 or 
more users
An object can be a member of 1 or more object groups, and a group can have 1 
or more objects
User groups can have 1 or more object groups and vice versa 

I imagine som sort of loader / controller in Pas that will only allow the 
user access to the relevant objects. I don't know how well it fits with Pas 
as it is - you tell me :-) 

Menu
 ----
Menus are closely connected to security. 

Something like this: 

object<-->menu<-
          ^    |
          |    |
           ---- 

An object can be in 1 or more menus, and a menu can have 1 or more objects.
A menu can have submenus. 

Notice that I don't make any distinction between objects, pages and 
applications. I hope that it can be this way. If an object is referred to 
from a menu, it has to be something that makes sense to use at that point. 

There can be more than one menu in a page (Top, Left...). The developer only 
has to invoke the Menu Loader to get a menu on the page. This menu will only 
contain the objects allowed for this user (of course). 

 --
Kaare Rasmussen            --Linux, spil,--        Tlf:        3816 2582
Kaki Data                tshirts, merchandize      Fax:        3816 2501
Howitzvej 75               Åben 12.00-18.00        Web:      www.suse.dk
2000 Frederiksberg        Lørdag 12.00-16.00       Email:ka...@ka...