[Slashcode-development] Re: [Slashcode] unifed logon for multiple slash sites ? (fwd)

[Brian A. <br...@ta...>]

Chris Nandor wrote:
> An admin is not tied in the same way as a user.  You cannot (now) easily
> log in across sites with a single admin login, because it works with a
> "session" cookie instead of a uid/password cookie.  That session cookie
> will expire, and is stored in the database.
That has changed in bender. If you wrote a library to pull from a slash
site
other then the default, you would gain the seclev from the site that
you pulled from.

I imagine that at some point in the near future the user methods will
become
their own library (I keep seeing this as being helpful for sites that
want to keep one set of logins/user info for all users). This will be
fairly trivial to do, its just not at the top of this list.

> >2. also tried creating different aids  to logon with for each slash
> >site... but does not help..
> Yeah, hrm.  The session cookie would get overwritten, since they all share
> a cookiedomain, so you could only be logged in as admin to one at a time.
> Well, we might be able to take care of this in Bender.  We are working on
> that code right now.  Krow, how do sessions work now, in Bender?  Do we
> still have them at all?
Sessions still exist but they are really only used to track when admins
last used the site and the current title of what they are working on.

Under bender you have one account, your seclev determines your privs. If
you
have a seclev >= 99 then you are an author. The admin.pl page determines
who
is displayed based on 1) if you have any stories posted 2) your seclev
is above >=99.

	-Brian