Re: Auth_Groups and Auth_Permissions

Hi, Lukas, On Aug 15, 2004, at 10:52 AM, Lukas Smith wrote:

The second you have user groups, you also want to have sub groups.

Not me. :-) I'm very happy with the Unix model where you only have "groups". I also like the LDAP model, which is more complex, but follows the same basic pattern: "groups", not subgroups (strictly speaking this is not entirely accurate, but LDAP is an object store and not a relational store, so it's kind of hard for me to express properly). Perhaps I might go so far as to say roles within groups could be nice, but I've had no use for them as yet. To me, a "role" is just another name for "group" in lots of applications. Perhaps I am naive; but then, lots of web apps are naive and don't need that level of complexity.

The second you have permissions, you also want to have roles.

None of my earlier email was meant to say anything about permissions. If I was not clear before, let me be so now. I am only concerned with a Groups add-on to Auth, not permissions. I agree that permissions modeling is complex and difficult, but I am not worried about that at all with just an Auth_Groups package. Nothing I have said is in relation to permissions management in any way. To reiterate: Auth_Permissions may or may not be a good addition to PEAR, but Auth_Groups is a great idea and sorely needed. -- Paul M. Jones Savant: the simple alternative to Smarty for PHP. http://phpsavant.com/ DB_Table: build RDBMS tables and XHTML forms in one PHP class. http://wiki.ciaweb.net/yawiki/index.php?area=DB_Table Yawiki: your collaborative online documentation system. http://yawiki.com/ Yawp: a single-file foundation for PHP applications. http://phpyawp.com/