Re: [nyphp-talk] phpGACL access control

2007-08-27 Thread Dan Cech
Cliff Hirsch wrote: > Does anyone use phpGACL? Good, bad, ugly? Alternative? Other suggestions for > access control? This looks like an easy drop in, although the UI is wicked > confusing. Back in the day I actually rewrote most of the phpGACL database structure and reskinned the 'wicked confusing

Re: [nyphp-talk] phpGACL access control

2007-08-26 Thread csnyder
On 8/26/07, Cliff Hirsch <[EMAIL PROTECTED]> wrote: > > I was waiting for you to chime in here. Just re-read your RBAC chapter in Pro > PHP Security (AWESOME BOOK, BTW). Nice Hamptons beach reading. Its that or > Clive Cussler. > > As I think about this, the problem is all the "locations". A front-

Re: [nyphp-talk] phpGACL access control

2007-08-26 Thread Cliff Hirsch
On Sat, 25 Aug 2007 23:52:39 -0400, csnyder wrote > On 8/24/07, Cliff Hirsch <[EMAIL PROTECTED]> wrote: > > > As for phpGACL, the feedback I got was that most ACLs out there are > > > good at answering one question, from the following list: > > > > > > 1) "Can I access this object?" > > > 2) "Who c

Re: [nyphp-talk] phpGACL access control

2007-08-25 Thread csnyder
On 8/24/07, Cliff Hirsch <[EMAIL PROTECTED]> wrote: > > As for phpGACL, the feedback I got was that most ACLs out there are > > good at answering one question, from the following list: > > > > 1) "Can I access this object?" > > 2) "Who can access this object?" > > > > The trouble is finding an ACL

Re: [nyphp-talk] phpGACL access control

2007-08-24 Thread Cliff Hirsch
> As for phpGACL, the feedback I got was that most ACLs out there are > good at answering one question, from the following list: > > 1) "Can I access this object?" > 2) "Who can access this object?" > > The trouble is finding an ACL that is equally adept at doing both. I understand #1. That's th

Re: [nyphp-talk] phpGACL access control

2007-08-24 Thread Keith Casey
On 8/24/07, Mitch Pirtle <[EMAIL PROTECTED]> wrote: > phpGACL was what was originally intended to be implemented, however > there were some challenges behind making that possible. Andrew Eddie > is behind the current ACL work, so he's most definitely the best > resource to ask that question to. do

Re: [nyphp-talk] phpGACL access control

2007-08-24 Thread Mitch Pirtle
On 8/24/07, Mark Withington <[EMAIL PROTECTED]> wrote: > It's used in Joomla! 1.x although I think this was something that was to be > replaced in 1.5? Perhaps Mitch can chime in here. It was intended for 1.0, then got pushed to 1.1 which became 1.5, and now is sitting in 1.6 waiting for the chan

Re: [nyphp-talk] phpGACL access control

2007-08-24 Thread Mark Withington
It's used in Joomla! 1.x although I think this was something that was to be replaced in 1.5? Perhaps Mitch can chime in here. On 8/24/07, Cliff Hirsch <[EMAIL PROTECTED]> wrote: > > Does anyone use phpGACL? Good, bad, ugly? Alternative? Other suggestions > for > access control? This looks like an

[nyphp-talk] phpGACL access control

2007-08-24 Thread Cliff Hirsch
Does anyone use phpGACL? Good, bad, ugly? Alternative? Other suggestions for access control? This looks like an easy drop in, although the UI is wicked confusing. Clif ___ New York PHP Community Talk Mailing List http://lists.nyphp.org/mailman/listinfo/t