Security internals, was Re: [Zope-dev] LOTS of roles?

[Paul Winkler]

On Fri, Mar 07, 2003 at 08:56:59AM +1100, Adrian van den Dries wrote:
> (/me revisits LDAPUserFolder)
> 
> Looks like the work is already done for you anyway: allowed() and
> friends check if the context has an attribute acl_satellite, and
> queries it for any additional roles, and it even keeps a cache.


!!!!!!!!!!  OMG !!!!!!!!!!!

thank you - for some obscure reason it never would have occurred to
me in a million years that LDAPUserFolder already does this.
Well, duh.

> Huzzah open-source software!

Amen!

-- 

Paul Winkler
http://www.slinkp.com