Changes between Version 42 and Version 43 of BluePrintAuthenticationAccess

Timestamp:

01/30/09 22:14:45 (16 years ago)

Author:

Fran Boon

Comment:

Web2Py's Auth now includes it's own sahana_events table with granular logging options, so we may wish to make use of this

BluePrintAuthenticationAccess

@@ -47 +47 @@
 
 Additional roles such as Country/Regional Admin, Organisation/Office/Camp Admin are set within the GIS/OR/CR modules respectively.
+
 === Implementation ===
-S3 builds on the default T2 AAA system:
+S3 builds on the default Web2Py Auth system (in {{{gluon/tools.py}}}):
  * DeveloperGuidelinesAuthenticationAccess
 
-Anonymous access is currently granted for all Read operations, with Create/Update/Delete requiring a user to be Authenticated: {{{t2.logged_in}}}
- * T2 can extend this by protecting resources with {{{t2.have_membership()}}} (table level security which can be separated for C/R/U/D) & {{{t2.have_access()}}} (record-level security)
+Anonymous access is currently granted for all Read operations, with Create/Update/Delete requiring a user to be Authenticated: {{{auth.is_logged_in()}}}
+ * Web2Py can extend this by protecting resources with {{{auth.has_membership()}}} (table level security which can be separated for C/R/U/D) & {{{auth.has_permission()}}} (record-level security)
  * we should probably support these by adding hooks into the [wiki:BluePrintREST RESTlike controller]
 
-We use {{{t2_group}}} table for Roles & {{{t2_membership}}} to show which roles a user has.
- * roles initialised in {{{_db.py}}}
+We use {{{sahana_group}}} table for Roles & {{{sahana_membership}}} to show which roles a user has.
+ * admin role initialised in {{{_db.py}}}
  * 1st user to register gets Administrator role
- * module writers need to add any required roles there
 
 We expose this as s3.roles so that it is accessible to Controllers & Views.[[BR]]
@@ -76 +76 @@
 STATUS: Complete apart from needing to get new_values back from the form after processing.[[BR]]
 The solution hooks the [wiki:BluePrintREST RESTlike controller] so anything which bypasses that is not logged (unless using the T2 fields: {{{created_by}}}, {{{updated_by}}}).[[BR]]
+
 To do more would require patching the DAL.
 
@@ -99 +100 @@
 If each is ticked, this sets the {{{audit_write}}} & opens up an extra checkbox for 'Enable Auditing of Reads' (sets {{{audit_read}}}).
 
+NB Web2Py's Auth now includes it's own sahana_events table with granular logging options, so we may wish to make use of this.
+
 ----
 BluePrints