hm... i could have told you that the LDAPUser class in the LDAPUserFolder product can do that but i had the whole thread mostly tuned out. initially it did not look like anything i could help with and the first posting was very long if i remember correctly. jens On Thursday, Mar 6, 2003, at 17:13 US/Eastern, Paul Winkler wrote:
On Fri, Mar 07, 2003 at 08:56:59AM +1100, Adrian van den Dries wrote:
(/me revisits LDAPUserFolder)
Looks like the work is already done for you anyway: allowed() and friends check if the context has an attribute acl_satellite, and queries it for any additional roles, and it even keeps a cache.
!!!!!!!!!! OMG !!!!!!!!!!!
thank you - for some obscure reason it never would have occurred to me in a million years that LDAPUserFolder already does this. Well, duh.
Huzzah open-source software!
Amen!
--
Paul Winkler