We need to agree on terminology, authentication would refer to
confirming a subject is who they say they are (checking user's name/
password combination), where authorization would refer to granting
access to something.
What we having been discussing is re-designing the way ofbiz handles
authorization. Authentication should be a completely different topic
all together.
On May 4, 2009, at 2:56 PM, Adrian Crum wrote:
So, no - the inheritance is not in user roles. However, user role
inheritance could be accommodated by the authentication mechanism.
