Hi, Carlos! 

> I haven't tested it, but why is not possible to use both?
I haven't tested this either. Probably you could create groups as well as
roles but can't use both for authentication/authorization... Well, I'm just
guessing, probably the
org.apache.slide.security.ACLSecurityImpl 
class can provide more insight into the matter...

> 
> The reason I asked is because we need a feature present in 
> some CMS or PDM systems in which users take a role on login. 
> For the duration of that session the user only belongs to 
> that one role. So I was thinking that groups could be used 
> for static groupings and roles for this type of dynamic 
> grouping. As far as configuration, a user belongs to one or 
> more groups and one or more roles. But the list of roles are 
> only the list of allowed roles, only one (or maybe a set) is 
> taken on a particular session.
I see. Couldn't you use different "types" of roles if groups and roles
really can't be used together? 

Yours sincerely,
Andrey.


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to