On Tue, 10 Aug 2004 14:51:38 +1000, Michael Kear <[EMAIL PROTECTED]> wrote:
> [A] While it's less flexible that rolling your own framework, is it
> reliable within what it's supposed to do?
Yes (we use it on macromedia.com). Just bear in mind that "framework"
is probably a bit too grand for what <cflogin> / <cfloginuser>
actually provides.
> [B] Am I understanding the roles functionality correctly in that users can
> only be in one group - that the isUserInRole() function can only reference
> an entire field and not a part of a field. (i.e. you can have roles like
> "Admin" and "Owner" but not "Admin,Owner,Contributor" unless you are going
> to reference them as follows: isUserInRole("Admin,Owner,Contributor") )
When you log a user in, you specify a comma-separated list of roles
that they have. So if you said:
<cfloginuser ... roles="Admin,Owner,Contributor" ... />
then you would say:
isUserInRole("Admin")
At least that's my understanding.
What you can't get (easily) is the list of roles that the currently
logged in user has been assigned (if you know all possible roles you
can loop over them calling isUserInRole() to build the list - yuk!)
> [C] Where are the user's variables stored? They don't appear to be part of
> the session scope.
What "user's variables"? The idea is that you you use <cflogin> /
<cfloginuser> to authenticate users but store whatever data you want
in session scope.
Every request should pass through <cflogin> so you normally need it in
your Application.cfm file (again, as I understand it).
--
Sean A Corfield -- http://www.corfield.org/blog/
"If you're not annoying somebody, you're not really alive."
-- Margaret Atwood
---
You are currently subscribed to cfaussie as: [EMAIL PROTECTED]
To unsubscribe send a blank email to [EMAIL PROTECTED]
Aussie Macromedia Developers: http://lists.daemon.com.au/
