can you post the link again - I coulnt find it on this thread... :)
http://projects.21st-hq.de/liveuser/
Thanks - had a quick look through - not sure I understand the rights stuff, but just as a basis of a auth class it's reasonably flexible.. - and probably easy to integrate into an existing infratucture..
The only request is that you dont 'enforce' xml config files - you can accept a associate array like most other pear classes, and it's up to the user to decide if they want to use a xml config file, and ini file or a database.. - using the config class or similar...
regards
alan