RE: [PEAR-DEV] New Package Proposal: Enterprise A&A

> -----Original Message----- > From: Tony Bibbs [mailto:tony@tonybibbs.com] > Sent: Tuesday, January 14, 2003 9:25 PM > To: Lukas Smith > Cc: 'Roberto Bertó'; 'PEAR Development' > Subject: RE: [PEAR-DEV] New Package Proposal: Enterprise A&A > > Yeah I saw live user. There are some similar concepts and you have the > benefit of at least a couple of additional heads. I didn't see a > convenient link to CVS for it on the PEAR site so without seeing some of > the code, it doesn't sound like it was designed to be exposed as a web > service. Is that right? Actually it is planned to have an xml-rpc/soap interface. > Regarding implied rights, the A&A system makes no assumptions about how > permissions are used. It is up to the application to design appriopriate > permissions as needed. That, IMHO, offers the greatest level of > flexibility. All I do is get the groups a user belongs to any rights > those groups may have and any rights tied directly to the user. How those > rights are used is up to the application. Of course this can be handled on the application level. But this is a common requirement. I for one want to group rights for all my modules because I also want to be able to define special types users that have all rights to one module etc. Implied rights are just a handy tool to ensure that users get all the rights they need. Using implied rights you can also bundle several rights to be easily granted or revoked. > So, now what? Be a little more patient :-) I have not looked at the source myself nor am I currently an active contributor to LiveUser. Anyways I am sure the active contributors to LiveUser will take a look at your package and so will other pear users. As this is not a simple package it will take people a bit longer to comment. Regards, Lukas