Security internals, was Re: [Zope-dev] LOTS of roles?
Jens Vagelpohl
jens@zope.com
Fri, 7 Mar 2003 07:52:16 -0500
hm... i could have told you that the LDAPUser class in the
LDAPUserFolder product can do that but i had the whole thread mostly
tuned out. initially it did not look like anything i could help with
and the first posting was very long if i remember correctly.
jens
On Thursday, Mar 6, 2003, at 17:13 US/Eastern, Paul Winkler wrote:
> On Fri, Mar 07, 2003 at 08:56:59AM +1100, Adrian van den Dries wrote:
>> (/me revisits LDAPUserFolder)
>>
>> Looks like the work is already done for you anyway: allowed() and
>> friends check if the context has an attribute acl_satellite, and
>> queries it for any additional roles, and it even keeps a cache.
>
>
> !!!!!!!!!! OMG !!!!!!!!!!!
>
> thank you - for some obscure reason it never would have occurred to
> me in a million years that LDAPUserFolder already does this.
> Well, duh.
>
>> Huzzah open-source software!
>
> Amen!
>
> --
>
> Paul Winkler