← Back to team overview

opensynergy team mailing list archive

Access control

 

Hi!

So let me start a first thread... There are a lot of things to do here in 
Synergy. One of the most essential issues to resolve is the mater of 'Access 
system' - the 'access api' will be be used by a number of the Synergy 
components, so the sooner we will start drafting the specification, the 
better for us.

I think, that it would be great to call:
 
  core
module
 /------\ 
 Users.GetUserAccess('access name', account)

to get the permision info frome any piece of code in Synergy itself of in any 
extension component. This is in fact, tha way the access info getter is 
realized in Drupal (http://api.drupal.org/api/function/user_access/6)
which I belive is a right code to take pattern from.

However, the way we would call the access getter is a secondary case, the 
major things whe have to discuss and decide are:
- how would we store the access data? 
- how would components define their own permisions?
- how should the UI for access granting/viewing look like?
- something else?

I will scan the Drupal (yes, I love it!) API and access solutions - maybe they 
have already found a nice solution we could use here (probably with some 
modifications).  By the time - please - think about the problems I've pointed 
out and post here.

Seba