|
From: clayton c. <cc...@ca...> - 2001-03-31 08:55:50
|
Todd,
the code i sent you can be made to accomodate parts of what Zope does,
with the exception of heirarchical permissions. with its user-groups and the
general permissions code, it can support named, object-level permissions
which can be assigned to a user (registered or unregistered), group, and
roles within groups. One deviation from Zope roles is the notion of
"actions" - or operations permissible for a role. one can assign multiple
actions per role. it is flexible enough to allow the user to choose what
style of permissions s/he wishes to employ.
ACS in its later versions began to implement a more layered user (hence
permissions) structure, but based on my reading of the code, it really would
take a well tuned back end to deal with the type of queries they needed to
support it. definitely not for your garden variety ISP. thats one of the
reasons i stopped tracking it at version 3.xxx. The Zope architecture is
indeed nice, but i think they have custom serialization to handle their data
model.
i'll give the AccessControl.txt file a read ....
|