Re: LiveUser Question

Richard wrote:

just wondering about some things in LiveUser... in table liveuser_perm_users what do these colums actually represent

      auth_user_id  type  auth_container_name 

Hi Richard, auth_user_id: The unique identifier for the user as used in the auth container where the user is stored. As any user can be stored in any type of auth container, this is simply to be able to map auth id´s to permission container id´s. type: The type of the auth container the user is stored in (i.e. "DB", "XML", "LDAP" or whatever containers you might have). auth_container_name: The name of the auth container the user is stored in. Every auth container can be given a unique name like "Internal Active Directory Server" or "Webusers", so that you can have multiple auth containers with of the same type that are still distinguishable from each other - I´m unsure if this is implemented yet, but that´s the general idea.

and how is teh auth_user_id generated

It is not really "generated", it´s taken from the auth container where the user is stored. In the DB container, for example, this can be the user_id - a numeric value. If the user is in an LDAP directory, he is identified by his "DN", a string that looks something like "o=foo,ou=bar,cn=foobar". It is the value that identifies the user in the auth container. How exactly it is generated, is up to that container.

also why not just have liveuser_areas i dont see the need for liveuser_area_admin_areas

That´s a question that Lukas might be the better man to answer... my area of expertise is mainly the DB_medium container, where there are no admin areas.

also with rights that are specified for user and for the group his in... and for the subgroup that that group is in is there some sort of order in which rights are considered... and how does conflicts in rights solve itself out

As I said, I can only speak for the DB_medium container - in which there are no subgroups. DB_medium considers the group rights first, and then overrides them with the individual user rights, if present. That means, if a user does not have a right via his membership in a group, you can still give it to him individually. Or, if a user has a right via group membership, you can still revoke that right for this particular user. Regards, Markus