Imagine this scenario... The root url of the lenya application requires authentication. After authenticating the user will be shown the lenya welcome page, listing only publications which the user has priviledges on.
To accomplish this I am thinking of removing publication directory from the user object, but leaving publication directory in the group object. By doing this users will be global across all publications, but groups will still be publication specific. I can then make a user a member of the editor group on one publication, and a member of the review group on a different publication. The welcome page would then display the publication and which groups they were a member of on that publication (or not display the publication at all if they are not a member of any group). What do you guys think of this idea? Would it be potentially useful for lenya projects you have worked on? How difficult do you think it would be to implement? The first issue I am concerned about, it how to redirect a user to a login page when they request the "Welcome to Apache Lenya" page. How would I go about changing the Identity object? The method: Identity.belongsTo(AccreditableManager manager) would not really be applicable to how the new system works. As I understand it, this method checks if the user contained in the current identity belonds to the accreditableManager for the current publication. Currently each publication has a different accreditableManager. I guess I would need the accreditableManager to be global across all publications. Would it be easier to make all publications inherit their AC module from the 'default' publication? If I did that how could I manage the groups which users belonged to on a per publication basis? thanks in advance for any feedback :) Michael Ralston --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
