I think if you look at the current system it is as 'configurable' as you want without changing code.
You can simply set 'permissions' on each method/resource (in the code). Then if the client has a 'new' role to fill, they can (through a catwalk like facility) simply create a new group with the needed permissions. This is how Zope 2's security model works and it has been used to make countless CMS systems :) (and a few ERPs as well). What do you think? --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "TurboGears" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/turbogears -~----------~----~----~----~------~----~------~--~---

