Changes between Version 8 and Version 9 of S3/S3AAA

Timestamp:

01/17/11 09:42:36 (14 years ago)

Author:

Dominic König

Comment:

--

S3/S3AAA

@@ -28 +28 @@
 == Roles ==
 
-Access permissions are granted to roles, i.e. to get a particular permission the user must be assigned a role with this permission.
+Roles are defined in the {{{auth_group}}} table. This table is defined by the {{{AuthS3}}} module in {{{modules/s3/s3aaa.py}}}. Each role as an ID, a unique name and can have a description.
 
-Roles are defined in the {{{auth_group}}} table. This table is defined by the {{{AuthS3}}} module in {{{modules/s3/s3aaa.py}}}. Each role as an ID, a unique name and can have a description.
+Access permissions are granted to roles, while a user gets permissions by assigning roles to him. Role assignment is stored in the {{{auth_membership}}} table, which is defined by the {{{AuthS3}}} class (in {{{modules/s3/s3aaa.py}}}).
 
 At the start of every request, the IDs of all roles of the currently logged-in user are stored as list in {{{session.s3.roles}}} (in {{{models/00_utils.py}}}. In cases where the user is logged-in during the request (e.g. by HTTP simple auth), a refresh of this list is also triggered by the {{{login_bare()}}} method of {{{AuthS3}}}.