As a part of PM project, i included a Security core module intended to be a generic way to manage authentication aspect of the project. The main goal is to provide an interface to any security engine that the final user wants. I will soon post a module with a standard DB user authentication and I will be working soon in LDAP authentication module and in a simple file authentication to take users and other information from xml files. Feel free to suggest me another authentication mechanisms that may apply to this project.
The global structure of security module is to have users, user's groups and profiles. All of then can have a list of permissions and a user can have several profiles or to be included in one or more groups.
The main functionality is authentication and permission check. It also includes administration (add, update or delete any of this entities) but its not mandatory to be implemented on an instance module.
I will also include soon a module implemented with PM to administrate security mainly to be used as an example of the PM power.
No comments:
Post a Comment