Changes between Version 6 and Version 7 of BluePrintAuthorizationB

Timestamp:

06/20/10 14:31:18 (14 years ago)

Author:

Dominic König

Comment:

--

BluePrintAuthorizationB

@@ -14 +14 @@
 
   - if a method is not restricted, then it is accessible for everyone
-  - if a method is restricted, then access must be explicitly granted, otherwise its declined (Allow=>Deny order)
+  - if a method is restricted, then permission must be explicitly granted, otherwise it is denied (Allow=>Deny order)
 
 Permissions are assigned to roles (not to individual users):
 
-  - roles are stored in auth_group
-  - admin role is auth_group 1 (cannot be modified)
-  - all methods on everything are allowed for members of the admin role
+  - roles are stored in '''auth_group'''
+  - '''admin''' role is auth_group 1 (cannot be modified)
+  - membership in the admin role overrides any restrictions everywhere
 
-  - roles are assigned to users by auth_membership
+  - roles are assigned to users by '''auth_membership'''
     - this can happen either through admin UI or implicitly (no admin interaction)
     - it must be possible to log this