Re: Auth_Groups and Auth_Permissions

On 15 août 04, at 05:21, Jon Wood wrote: Snip

I wouldn't personally +1 an Auth package because, from my experience, Auth itself is very lightweight.

This isn't a replacement for Auth, it's an extension - allowing simple management of groups and permissions without the extra overhead involved in the existing solutions, which implement everything (login, permissions, groups, user management etc.) in one package. It's mainly designed as a direction to go in for people already using Auth for login management, who would like to extend the capabilities of their application without ripping out all the auth stuff and starting again.

I see you point but, once again sorry if I am too upfront, I don't see something like "Auth_Permissions will be a package designed to allow basic permission checking (true/false will probably be the only form supported, unless there is huge demand for more)," true/false only permission package to provide any substantial benefit to PEAR users. If you are looking for such a system (true/false only) and you will code from scratch the rest, you probably would code everything from scratch. On the other hand, whomever is looking for a more structured (see Auth source code, I don't see any overhead there...if you don't want the login then you probably don't want an Auth system library either). To my the current existing Auth packages on pear (Auth, Liveuser) do cover this category very well. Of course this is just my opinion but as you are just at a draft level, I wouldn't encourage new packages in this direction. Cheers David Costa