Re: Recommended User Authentication setup?

2008-05-28 Thread aranworld

Chris' tutorials are definitely still relevant.

In case you haven't seen it yet, I have created a sample website with
downloadable source code,
which demonstrates the integration of Auth and ACL in a CakePHP
project:

http://aranworld.com/article/170/cakephp-acl-and-auth-sample-website

This should hopefully also clarify the various roles that Auth and ACL
play in protecting a website access:

http://aranworld.com/article/164/cakephp-acl-tutorial-auth-component-example



On May 28, 11:55 am, "Dardo Sordi Bogado" <[EMAIL PROTECTED]>
wrote:
> > I assumed it already had some methods and attributes. Good to know
> > that I can freely edit AppModel and AppController.
>
> Yes App(Model|Controller|Helper) are well defined points of extension,
> cake is amazing.
>
> > On May 28, 1:54 pm, "Dardo Sordi Bogado" <[EMAIL PROTECTED]> wrote:
> >> Have a look at the CakePHP AppController, it is in
> >> cake/libs/controller/app_controller.php:
>
> >> On Wed, May 28, 2008 at 2:44 PM, 703designs <[EMAIL PROTECTED]> wrote:
>
> >> > You mention putting putting the auth component in app_controller.php.
> >> > From the manual, "The AppController class can be defined in /app/
> >> > app_controller.php and it should contain methods that are shared
> >> > between all of your application's controllers. It extends the
> >> > Controller class which is a standard CakePHP library." How do I
> >> > configure AppController without removing existing functionality? My
> >> > PHP OOP is rusty.
>
> >> > On May 28, 1:25 pm, "Chris Hartjes" <[EMAIL PROTECTED]> wrote:
> >> >> On Wed, May 28, 2008 at 1:22 PM, 703designs <[EMAIL PROTECTED]> wrote:
>
> >> >> > I'm sorry, but "duh." I wasn't leveling any criticism, and I'm well
> >> >> > aware that the two are separate.I must have made myself unclear. In
> >> >> > any case, I'll take a look at Chris' tutorial. It's a bit old, can I
> >> >> > expect it to work with recent nightlies?
>
> >> >> Yes, it should be fine as the Auth component hasn't really changed
> >> >> much since I wrote it.
>
> >> >> --
> >> >> Chris Hartjes
> >> >> Internet Loudmouth
> >> >> Motto for 2008: "Moving from herding elephants to handling snakes..."
> >> >> @TheKeyBoard:http://www.littlehart.net/atthekeyboard
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
"CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~--~~~~--~~--~--~---



Re: Recommended User Authentication setup?

2008-05-28 Thread Dardo Sordi Bogado

> I assumed it already had some methods and attributes. Good to know
> that I can freely edit AppModel and AppController.

Yes App(Model|Controller|Helper) are well defined points of extension,
cake is amazing.

> On May 28, 1:54 pm, "Dardo Sordi Bogado" <[EMAIL PROTECTED]> wrote:
>> Have a look at the CakePHP AppController, it is in
>> cake/libs/controller/app_controller.php:
>>
>> On Wed, May 28, 2008 at 2:44 PM, 703designs <[EMAIL PROTECTED]> wrote:
>>
>> > You mention putting putting the auth component in app_controller.php.
>> > From the manual, "The AppController class can be defined in /app/
>> > app_controller.php and it should contain methods that are shared
>> > between all of your application's controllers. It extends the
>> > Controller class which is a standard CakePHP library." How do I
>> > configure AppController without removing existing functionality? My
>> > PHP OOP is rusty.
>>
>> > On May 28, 1:25 pm, "Chris Hartjes" <[EMAIL PROTECTED]> wrote:
>> >> On Wed, May 28, 2008 at 1:22 PM, 703designs <[EMAIL PROTECTED]> wrote:
>>
>> >> > I'm sorry, but "duh." I wasn't leveling any criticism, and I'm well
>> >> > aware that the two are separate.I must have made myself unclear. In
>> >> > any case, I'll take a look at Chris' tutorial. It's a bit old, can I
>> >> > expect it to work with recent nightlies?
>>
>> >> Yes, it should be fine as the Auth component hasn't really changed
>> >> much since I wrote it.
>>
>> >> --
>> >> Chris Hartjes
>> >> Internet Loudmouth
>> >> Motto for 2008: "Moving from herding elephants to handling snakes..."
>> >> @TheKeyBoard:http://www.littlehart.net/atthekeyboard
> >
>

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
"CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~--~~~~--~~--~--~---



Re: Recommended User Authentication setup?

2008-05-28 Thread Dardo Sordi Bogado

Have a look at the CakePHP AppController, it is in
cake/libs/controller/app_controller.php:



On Wed, May 28, 2008 at 2:44 PM, 703designs <[EMAIL PROTECTED]> wrote:
>
> You mention putting putting the auth component in app_controller.php.
> From the manual, "The AppController class can be defined in /app/
> app_controller.php and it should contain methods that are shared
> between all of your application's controllers. It extends the
> Controller class which is a standard CakePHP library." How do I
> configure AppController without removing existing functionality? My
> PHP OOP is rusty.
>
> On May 28, 1:25 pm, "Chris Hartjes" <[EMAIL PROTECTED]> wrote:
>> On Wed, May 28, 2008 at 1:22 PM, 703designs <[EMAIL PROTECTED]> wrote:
>>
>> > I'm sorry, but "duh." I wasn't leveling any criticism, and I'm well
>> > aware that the two are separate.I must have made myself unclear. In
>> > any case, I'll take a look at Chris' tutorial. It's a bit old, can I
>> > expect it to work with recent nightlies?
>>
>> Yes, it should be fine as the Auth component hasn't really changed
>> much since I wrote it.
>>
>> --
>> Chris Hartjes
>> Internet Loudmouth
>> Motto for 2008: "Moving from herding elephants to handling snakes..."
>> @TheKeyBoard:http://www.littlehart.net/atthekeyboard
> >
>

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
"CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~--~~~~--~~--~--~---



Re: Recommended User Authentication setup?

2008-05-28 Thread 703designs

I assumed it already had some methods and attributes. Good to know
that I can freely edit AppModel and AppController.

On May 28, 1:54 pm, "Dardo Sordi Bogado" <[EMAIL PROTECTED]> wrote:
> Have a look at the CakePHP AppController, it is in
> cake/libs/controller/app_controller.php:
>
> On Wed, May 28, 2008 at 2:44 PM, 703designs <[EMAIL PROTECTED]> wrote:
>
> > You mention putting putting the auth component in app_controller.php.
> > From the manual, "The AppController class can be defined in /app/
> > app_controller.php and it should contain methods that are shared
> > between all of your application's controllers. It extends the
> > Controller class which is a standard CakePHP library." How do I
> > configure AppController without removing existing functionality? My
> > PHP OOP is rusty.
>
> > On May 28, 1:25 pm, "Chris Hartjes" <[EMAIL PROTECTED]> wrote:
> >> On Wed, May 28, 2008 at 1:22 PM, 703designs <[EMAIL PROTECTED]> wrote:
>
> >> > I'm sorry, but "duh." I wasn't leveling any criticism, and I'm well
> >> > aware that the two are separate.I must have made myself unclear. In
> >> > any case, I'll take a look at Chris' tutorial. It's a bit old, can I
> >> > expect it to work with recent nightlies?
>
> >> Yes, it should be fine as the Auth component hasn't really changed
> >> much since I wrote it.
>
> >> --
> >> Chris Hartjes
> >> Internet Loudmouth
> >> Motto for 2008: "Moving from herding elephants to handling snakes..."
> >> @TheKeyBoard:http://www.littlehart.net/atthekeyboard
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
"CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~--~~~~--~~--~--~---



Re: Recommended User Authentication setup?

2008-05-28 Thread 703designs

You mention putting putting the auth component in app_controller.php.
From the manual, "The AppController class can be defined in /app/
app_controller.php and it should contain methods that are shared
between all of your application’s controllers. It extends the
Controller class which is a standard CakePHP library." How do I
configure AppController without removing existing functionality? My
PHP OOP is rusty.

On May 28, 1:25 pm, "Chris Hartjes" <[EMAIL PROTECTED]> wrote:
> On Wed, May 28, 2008 at 1:22 PM, 703designs <[EMAIL PROTECTED]> wrote:
>
> > I'm sorry, but "duh." I wasn't leveling any criticism, and I'm well
> > aware that the two are separate.I must have made myself unclear. In
> > any case, I'll take a look at Chris' tutorial. It's a bit old, can I
> > expect it to work with recent nightlies?
>
> Yes, it should be fine as the Auth component hasn't really changed
> much since I wrote it.
>
> --
> Chris Hartjes
> Internet Loudmouth
> Motto for 2008: "Moving from herding elephants to handling snakes..."
> @TheKeyBoard:http://www.littlehart.net/atthekeyboard
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
"CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~--~~~~--~~--~--~---



Re: Recommended User Authentication setup?

2008-05-28 Thread Chris Hartjes

On Wed, May 28, 2008 at 1:22 PM, 703designs <[EMAIL PROTECTED]> wrote:
>
> I'm sorry, but "duh." I wasn't leveling any criticism, and I'm well
> aware that the two are separate.I must have made myself unclear. In
> any case, I'll take a look at Chris' tutorial. It's a bit old, can I
> expect it to work with recent nightlies?
>

Yes, it should be fine as the Auth component hasn't really changed
much since I wrote it.

-- 
Chris Hartjes
Internet Loudmouth
Motto for 2008: "Moving from herding elephants to handling snakes..."
@TheKeyBoard: http://www.littlehart.net/atthekeyboard

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
"CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~--~~~~--~~--~--~---



Re: Recommended User Authentication setup?

2008-05-28 Thread 703designs

I'm sorry, but "duh." I wasn't leveling any criticism, and I'm well
aware that the two are separate.I must have made myself unclear. In
any case, I'll take a look at Chris' tutorial. It's a bit old, can I
expect it to work with recent nightlies?

On May 28, 1:13 pm, John David Anderson <[EMAIL PROTECTED]>
wrote:
> On May 28, 2008, at 10:57 AM, 703designs wrote:
>
>
>
>
>
> > I'm working with Cake right now, and I thought that ACL was my answer
> > to this question, but it seems that Cake's ACL (ACL in general, I
> > suppose) only deals with roles, etc:
>
> > "It should be noted that ACL is *not* a system that is meant to
> > authenticate users. You should already have a way to store user
> > information and be able to verify that user's identity when they enter
> > the system."
>
> > Well, this is all good and well, but the user authentication systems I
> > develop, while being functional, leave quite a bit to be desired, and
> > I really wouldn't trust them beyond the limited purposes for which
> > I've deployed them. To put it simply, I expect that a framework like
> > this one would make developing a sane user authentication system a bit
> > easier for a developer like myself.
>
> ACL != Auth. It's *related* to authentication, but so is the
> FormHelper. The criticism you're leveling here doesn't quite make sense.
>
> In any case, I might check out the AuthComponent (which works well
> with the ACL stuff). Chris' tute should be a good starting point.
>
> -- John
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
"CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~--~~~~--~~--~--~---



Re: Recommended User Authentication setup?

2008-05-28 Thread John David Anderson


On May 28, 2008, at 10:57 AM, 703designs wrote:

>
> I'm working with Cake right now, and I thought that ACL was my answer
> to this question, but it seems that Cake's ACL (ACL in general, I
> suppose) only deals with roles, etc:
>
> "It should be noted that ACL is *not* a system that is meant to
> authenticate users. You should already have a way to store user
> information and be able to verify that user's identity when they enter
> the system."
>
> Well, this is all good and well, but the user authentication systems I
> develop, while being functional, leave quite a bit to be desired, and
> I really wouldn't trust them beyond the limited purposes for which
> I've deployed them. To put it simply, I expect that a framework like
> this one would make developing a sane user authentication system a bit
> easier for a developer like myself.

ACL != Auth. It's *related* to authentication, but so is the  
FormHelper. The criticism you're leveling here doesn't quite make sense.

In any case, I might check out the AuthComponent (which works well  
with the ACL stuff). Chris' tute should be a good starting point.

-- John

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
"CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~--~~~~--~~--~--~---



Recommended User Authentication setup?

2008-05-28 Thread 703designs

I'm working with Cake right now, and I thought that ACL was my answer
to this question, but it seems that Cake's ACL (ACL in general, I
suppose) only deals with roles, etc:

"It should be noted that ACL is *not* a system that is meant to
authenticate users. You should already have a way to store user
information and be able to verify that user's identity when they enter
the system."

Well, this is all good and well, but the user authentication systems I
develop, while being functional, leave quite a bit to be desired, and
I really wouldn't trust them beyond the limited purposes for which
I've deployed them. To put it simply, I expect that a framework like
this one would make developing a sane user authentication system a bit
easier for a developer like myself.

So, how should I go about developing a user authentication system in
Cake? Are these links the best starting point:
* 
http://www.littlehart.net/atthekeyboard/2007/09/11/a-hopefully-useful-tutorial-for-using-cakephps-auth-component/
* http://groups.google.com/group/cake-php/browse_thread/thread/871ff4c536bc1e00

Or should I look elsewhere? A search of "user authentication" under
Code in the Bakery returns nothing.
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
"CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~--~~~~--~~--~--~---