[PyCS-devel] user supplied access restrictions for PyCS

[Georg B. <gb...@mu...>]

Hi!

The following link:

http://pyds.muensterland.org/weblog/2003/05/15.html#P118

announces a description of a way to set up access restrictions on blogs 
with an XML-RPC API. This is to allow blogging tools to set up user 
accounts and access restrictions from within the tool. I am planning to 
build such a tool for the PyDS.

It's much like a <Location ~ /^..../> ... </Location> block in Apache, 
only there is only _one_ password list and restrictions are always 
based on groups. The blogging tools can easily build a GUI on top of 
the API.

One way to use this is to set up access restrictions for your backup 
path, so others can't access your backups. Or to set up private 
categories that are rendered and upstreamed, but should only be read by 
a group of visitors you personally know.

Phil: I have applied patches to search.py, but since I don't use 
ht:/Dig, I can't test it. So you better look over my code before you 
upgrade pycs.net ;-)

swish.py doesn't honor the access restrictions, but since it only gives 
out the URL, I don't see big problems with this. Users could use the 
swish searching to discover what a document might be about, though. 
Phil once wrote that he had applied patches to swish.py to hook it into 
the access stuff, but I can't find them and so didn't bother to add my 
own stuff ;-)

This XML-RPC API is mostly ignorant of the kind of community server it 
runs on, so it could be implemented on top of PSS or RCS, too.

Comments? Ideas? Bugs?

bye, Georg