|
From: clayton c. <cc...@ca...> - 2001-04-25 15:42:22
|
Jason,
im working on specs for security (actually access control). we can handle
security in a way that does not require each table to have an additional
security related table. check out Todd's website for the translations i did
of ACS's 3.x permission system. it handles security in a much more granular
way than just the "seclevel" way.
the benefit of this approach is that the module writer simply has to
define a set of permissions for the module (maybe in a module XML
description file), and the security admin code can handle everything else in
a generic way. In other words, the module writer can simply write the module
and not have to worry about implementing his/her own code for setting up
permissions.
while on the subject, how are we segmenting admin "levels"? my thought
is site admin, group admin, maybe module admin, and if we decide to do
multiple sites per install, "super" admin
|