From: clayton c. <cc...@ca...> - 2001-03-31 08:55:50
|
Todd, the code i sent you can be made to accomodate parts of what Zope does, with the exception of heirarchical permissions. with its user-groups and the general permissions code, it can support named, object-level permissions which can be assigned to a user (registered or unregistered), group, and roles within groups. One deviation from Zope roles is the notion of "actions" - or operations permissible for a role. one can assign multiple actions per role. it is flexible enough to allow the user to choose what style of permissions s/he wishes to employ. ACS in its later versions began to implement a more layered user (hence permissions) structure, but based on my reading of the code, it really would take a well tuned back end to deal with the type of queries they needed to support it. definitely not for your garden variety ISP. thats one of the reasons i stopped tracking it at version 3.xxx. The Zope architecture is indeed nice, but i think they have custom serialization to handle their data model. i'll give the AccessControl.txt file a read .... |