We use a two stage system, Access and a combination
Authentication/Authorization stage.
When the user attempts to access a page a mod_perl Access handler checks
for a cookie (we think it's pretty secure :) showing they have been
previously authenticated. If not, they are sent off to an Authenti
Sent: Thursday, April 27, 2000 1:45 PM
To: 'Michael Nachbaur'
Subject: RE: Authorization questions
Why not rely upon the underlying filesystem's ACL's...
Have the REMOTE_USER be in various groups on the system, to gain various
priveleges to various files... (and set euid an
I have a question. I'm working on a project that requires not only file-by-file
authentication and authorization, but task-by-task authorization within a file (for
instance...read access, but not write). Basically, I'd like to have a database table
define permissions (which can be associated