Authentication by role and user name

[Manuel Siebeneicher <tr...@gmx.net>]

Hi *

know someone a good howto, an example or something else to authenticate 
documents by different roles or users, e.g. if the user is logged in he 
should have access to all docs belonging to a certain role but no access to 
docs of roles the users doesn't belong to?

Additionally the navigation is generated by this authentication.

I'm new at lenya and the documentation is a littlebit confusing me.

greetz && thx
Manuel

---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-user-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-user-help@cocoon.apache.org

Re: Authentication by role and user name

[Andreas Hartmann <an...@apache.org>]

Manuel Siebeneicher wrote:

> know someone a good howto, an example or something else to authenticate 
> documents by different roles or users, e.g. if the user is logged in he 
> should have access to all docs belonging to a certain role  but no access to
> docs of roles the users doesn't belong to?

The access control documentation is located at
http://cocoon.apache.org/lenya/docs/concepts/accesscontrol/terms.html

Probably some things could be added, but we didn't yet find the time.

To answer your question briefly:

In Lenya, documents are not assigned to roles. You can assign roles
to users/groups/IP-ranges at certain URLS. Assigning a role to somebody
means defining what is is allowed to do.

You find an example of access control configuration e.g. in
lenya/pubs/default/config/ac

> Additionally the navigation is generated by this authentication.

I don't know if someone already implemented such a usecase, but
it would be interesting to see an example.

Andreas



---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-user-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-user-help@cocoon.apache.org