I think you are approaching this the wrong way.

Why have two models with alternate Auth configurations?  I'm not even
sure if this is possible or what implications it has as once a user is
logged in how does the system then know which Auth Model to recheck
authentication against?

I specify Auth's settings within AppController so they are global for
my entire application.  I allow a login if the user is active, is a
member of an active usergroup and has correct username/password combo.

Then within each controller I create isAuthorized() functions to deal
with which users can have access to which actions on which records
etc.  If an authorised non-admin tries to access an admin only page/
record then they are told they do not have to required access level.
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"CakePHP" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to