[Phpwiki-talk] Re: user auth/email notification (fwd)

[Steve W. <sw...@pa...>]

dunno why this wasn't on the list...

---
                  http://www.panix.com/~swain/
"Without music to decorate it, time is just a bunch of boring
production deadlines or dates by which bills must be paid."
                     -- Frank Zappa
---------- Forwarded message ----------
Date: Wed, 7 Nov 2001 09:38:39 -0800
From: Jeff Dairiki <da...@da...>
To: Steve Wainstead <sw...@pa...>
Cc: Gary Benson <ga...@in...>, Pablo Roca <pr...@cl...>
Subject: Re: user auth/email notification

On Wed, 7 Nov 2001 11:30:01 -0500 (EST)
"Steve Wainstead" <sw...@pa...> wrote:

> Here's how I'd like to see this work:
[...many good ideas deleted...]

> (Perhaps later we can expand that to include ACLs, and there will be
pages
> that can/cannot be edited depending on the user. We can just copy the
way
> Unix does stuff. I would think that would be enough control.)

I say we should plan the ACL mechanism in from the beginning, since we
know we want it.  Unix-style access controls are, I think, sufficient,
provided we include the group access mechanisms (each user can be a
member of an arbitrary number of groups; each object can control access
to three types of users: the owner (a user), the owning group, everybody
else.)  On the other hand, why not real ACLs (where one can specify access
for multiple users/groups)?


Also, and this has been talked about before, with no real resolution, it
would sure be nice to find an already written library to handle this stuff
for us.  I keep meaning to look into the PHPNuke, etc... thingies, but
haven't gotten around to it yet.