Hi David,

this is currently not supported. I'm not entirely sure that it's safe though, since it means that people with the 'any' role would automatically gains access to all new roles that would be added in the future. This could potentially create huge security leaks when some users have the 'any' role and a site maintainer adds a role without checking and validating that all the users really have access to the sections that are protected by it.

Best regards,

Geert

On 26 Dec 2006, at 07:40, David HM Spector wrote:

I would like to be able to log in as either an admin or a regular user to my application -- with the default system I seem to have to specify a role -- "user" "admin" or any other role I have in the role table. Is there way to specify "any" as the role? Given that there are ways to find out programmatically both at the template level and at the element level the userID and role(s) that the user account has, is there any reason why I wouldn't want to do this...?

David
--
Geert Bevin
Uwyn "Use what you need" - http://uwyn.com
RIFE Java application framework - http://rifers.org
Music and words - http://gbevin.com


_______________________________________________
Rife-users mailing list
[email protected]
http://lists.uwyn.com/mailman/listinfo/rife-users

Reply via email to