On Monday February 2, 2009 23:47:26 Christoph Zwerschke wrote: > The reason why I didn't expect tg.identity to contain permissions is > that it is actually the same as repoze.who.identity, but permissions are > strictly speaking a feature of repoze.what - you said that the goal was > actually to not mix authentication and authorization. So this is a bit > confusing and certainly needs better documentation.
That needs better documentation? Well, taking into account the following facts: * The _first_ _thing_ the TG2 docs [1] on auth* do is explain that authentication and authorization are two different things, that repoze.who deals with authentication while repoze.what deals with authorization (so everything specific to authentication and authorization go into repoze.who and repoze.what, respectively), that the authentication+authorization TG1 identity module is gone, that the idea of groups and permissions is specific to repoze.what... and so on... * The TG2 documentation on authentication with repoze.who explains what environ['repoze.who.identity'] is, its short-cuts inside TG and that it's specific to repoze.who (not TG-specific). * That the repoze.who documentation _clearly_ states that it only deals with authentication and identification. * That the repoze.what documentation _clearly_ states that it only deals with authorization (using the groups/permissions-based authorization pattern by default). Some people would think that anybody who reads the documentation will understand that and so I can't think of another way to make it more clear. Can you please tell me how can we make it even _more_ clear? Cheers. [1] turbogears.org is down right now, but they're already working on it. -- Gustavo Narea <http://gustavonarea.net/>. Get rid of unethical constraints! Get freedomware: http://www.getgnulinux.org/ --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "TurboGears Trunk" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/turbogears-trunk?hl=en -~----------~----~----~----~------~----~------~--~---
