From: Steve W. <sw...@pa...> - 2001-11-07 19:37:13
|
--- http://www.panix.com/~swain/ "Without music to decorate it, time is just a bunch of boring production deadlines or dates by which bills must be paid." -- Frank Zappa ---------- Forwarded message ---------- Date: Wed, 7 Nov 2001 17:42:20 +0000 (GMT) From: Gary Benson <ga...@in...> To: Jeff Dairiki <da...@da...> Cc: Steve Wainstead <sw...@pa...>, Pablo Roca <pr...@cl...> Subject: Re: user auth/email notification This chat should really be happening on the list... G On Wed, 7 Nov 2001, Jeff Dairiki wrote: > On Wed, 7 Nov 2001 11:30:01 -0500 (EST) > "Steve Wainstead" <sw...@pa...> wrote: > > > Here's how I'd like to see this work: > [...many good ideas deleted...] > > > (Perhaps later we can expand that to include ACLs, and there will be > pages > > that can/cannot be edited depending on the user. We can just copy the > way > > Unix does stuff. I would think that would be enough control.) > > I say we should plan the ACL mechanism in from the beginning, since we > know we want it. Unix-style access controls are, I think, sufficient, > provided we include the group access mechanisms (each user can be a > member of an arbitrary number of groups; each object can control access > to three types of users: the owner (a user), the owning group, everybody > else.) On the other hand, why not real ACLs (where one can specify access > for multiple users/groups)? > > > Also, and this has been talked about before, with no real resolution, it > would sure be nice to find an already written library to handle this stuff > for us. I keep meaning to look into the PHPNuke, etc... thingies, but > haven't gotten around to it yet. > > [ ga...@in... ][ GnuPG 85A8F78B ][ http://inauspicious.org/ ] |