Some questions about LiveUser

hi, I am currently involved in the planning of a webbased software application. For the usermanagment we have a set of requirements and would like to use an existing implementation rather than reinventing the wheel. ;-) But although I read the LiveUser documentation (which sounds good!), I am not quiet sure, if it can do what we want.. first: we obviously need to have useraccounts with passwords. we also need to assign one-to-many roles to a user, a role being 'administrator', 'tutor', 'student' and 'guest', all basically being a set of permissions. a user assigned to more than one role must inherit all of these roles' permissions. further we need to be able to place existing users in groups called 'classes'. a class being a collection of at least one tutor, many students and maybe one or more guests. these classes gain access to certain documents and project data (this has ntohing to do with permissions). a user can be assigned to one-to-many classes. is this possible to do with LiveUser? second: I like the database abstraction in LiveUser using PEAR::DB. but is it possible to use PEAR::DB_ldap[2] also? we have a very hard requirement to use a local ldap server. but need to be able to replace it by any other database structure. so we want to be independant of the database solution of the user, that uses our system, but will privately be dependant on ldap. further more we will be using two ldap server. one being local with total control, the second being external. accounts of the second will be aliased on the local one. so the ldap implementation must be able to handle ldap aliases. is this entirely possible? thanks in advance! regards /Christian mailto:caefer@krachstoff.net -- I propose that the following character sequence for joke markers: :-) 19-Sep-82 11:44 Scott E Fahlman