Rainer Sokoll wrote:
> On Mon, Apr 30, 2007 at 05:50:01PM +0200, Christian Boos wrote:
>   
>> Brian McCann wrote:
>>     
>>>  
>>> Hi Christian,
>>>  
>>> once I add the permissions to the group authenticated, I can remove the 
>>> user anonymous then?
>>>   
>>>       
>> Yes.
>>     
>
> So, what is the reason for "authenticated", then?
> I mean, if I have a site that requires authentication, there is no
> difference between "anonymous" and "authenticated", correct?
> On the other side, if I allow anonymous access, I have still a need for
> the group "anonymous"?
>   

"authenticated" is a pseudo-group for all the logged in users, and 
"anonymous" is one for all non-logged in users. It's up to you to define 
permissions for one, both or none of them. The new default is to allow 
only read permissions for "anonymous", and write permissions for 
"authenticated", as suggested in Brian's first mail. He then asked if he 
can remove the user anonymous altogether (at least, that's how I 
understood his question), and of course he can do so. By doing this , he 
effectively requires authentication for his Trac. 
So when you have a site that requires authentication, there's no 
"anonymous" users, by definition. Likewise, when you allow anonymous 
access, it's because you have set up some permissions for the group 
"anonymous".

At least that's how I understand it, feel free to correct me if I'm wrong.

-- Christian


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Trac 
Users" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/trac-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to