Imagine this scenario...

The root url of the lenya application requires authentication. After
authenticating the user will be shown the lenya welcome page, listing
only publications which the user has priviledges on.

To accomplish this I am thinking of removing publication directory
from the user object, but leaving publication directory in the group
object. By doing this users will be global across all publications,
but groups will still be publication specific.

I can then make a user a member of the editor group on one
publication, and a member of the review group on a different
publication. The welcome page would then display the publication and
which groups they were a member of on that publication (or not display
the publication at all if they are not a member of any group).

What do you guys think of this idea? Would it be potentially useful
for lenya projects you have worked on? How difficult do you think it
would be to implement?

The first issue I am concerned about, it how to redirect a user to a
login page when they request the "Welcome to Apache Lenya" page.

How would I go about changing the Identity object? The method:
Identity.belongsTo(AccreditableManager manager)
would not really be applicable to how the new system works. As I
understand it, this method checks if the user contained in the current
identity belonds to the accreditableManager for the current
publication. Currently each publication has a different
accreditableManager. I guess I would need the accreditableManager to
be global across all publications.

Would it be easier to make all publications inherit their AC module
from the 'default' publication? If I did that how could I manage the
groups which users belonged to on a per publication basis?

thanks in advance for any feedback :)
Michael Ralston

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to