Re: Authorization questions

2000-04-27 Thread Nick Tonkin
We use a two stage system, Access and a combination Authentication/Authorization stage. When the user attempts to access a page a mod_perl Access handler checks for a cookie (we think it's pretty secure :) showing they have been previously authenticated. If not, they are sent off to an Authenti

RE: Authorization questions

2000-04-27 Thread Michael Nachbaur
Sent: Thursday, April 27, 2000 1:45 PM To: 'Michael Nachbaur' Subject: RE: Authorization questions Why not rely upon the underlying filesystem's ACL's... Have the REMOTE_USER be in various groups on the system, to gain various priveleges to various files... (and set euid an

Authorization questions

2000-04-27 Thread Michael Nachbaur
I have a question. I'm working on a project that requires not only file-by-file authentication and authorization, but task-by-task authorization within a file (for instance...read access, but not write). Basically, I'd like to have a database table define permissions (which can be associated