#10809: mod_wsgi authentication handler
-------------------------------------+--------------------------------------
          Reporter:  baumer1122      |         Owner:  nobody  
            Status:  new             |     Milestone:          
         Component:  Authentication  |       Version:  SVN     
        Resolution:                  |      Keywords:  mod_wsgi
             Stage:  Unreviewed      |     Has_patch:  1       
        Needs_docs:  1               |   Needs_tests:  0       
Needs_better_patch:  1               |  
-------------------------------------+--------------------------------------
Changes (by mtredinnick):

  * needs_better_patch:  0 => 1
  * needs_docs:  0 => 1

Comment:

 Graham's point about authentication versus authorisation is correct here.
 The permissions somebody has is authorisation and the "auth" backends are
 abbreviation for ''authentication'' (yes, ambiguously named, but
 consistently implemented. And, yes, the HTTP header naming has to be
 looked at in just the right way not to appear to be incorrect, so that
 doesn't help).

 A few things to consider for subsequent versions:
  1. Part of the patch would have to change the docs/ directory. Right now,
 there's no documentation.
  2. If you're adding some kind of authorisation helpers, why are they only
 appropriate for this pathway and not every other authentication backend?
 That's the question I'd be asking myself and it really comes down to
 whether you're proposing two features here (which should be split into
 separate tickets): an authentication handler for modwsgi and a way to also
 fold in permission checking for authentication handlers, which should be
 more holistic and integrate with all authentication backends.

-- 
Ticket URL: <http://code.djangoproject.com/ticket/10809#comment:2>
Django <http://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to