Maybe a stupid question, but I haven't spent time trying to figure out how CAS works. Is it safe to pass something like an "access_level" in the extra attributes?
Also, how do you guys usually assign people to applications? I have a user management app I'm writing (LDAP just seems overkill). I'm thinking of assigning users to applications at this level. Then within each application, assign them to roles. Is this how you guys usually do this? Thanks, Bradford -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
