Hello,

I'm currently implementing a RBAC-like model for a webapp with the "usual suspects": users, roles, permissions, etc where a "Role" has one or more "Permissions", and an "User" can be in 1 or more "Role".

I would like to some virtual-like "Role" that are automatically attribued in some situations. For example "AnonymousUser" is the user is not logged, "AuthenticatedUser" is the user is authenticated, "Owner" if the user "owns" an object, etc. Those roles should always exist and should not be part of the unit-of-work process, in fact I don't want to store them in the database. I wondered if there is an elegant way to do that kind of stuff transparently with SQLAlchemy?

Another question: I have different kind of "Permission" (some of them are linked to a module, some to a content_type, some are "core" permissions, etc) and I planned to use one separate table per "permission type" with concrete table inheritance. I only used joined load inheritance (which work very well) and from what I understood from the documentation concrete table inheritance are somewhat discouraged?

Thank you :-)
Julien

--
No trees were killed in the creation of this message.
However, many electrons were terribly inconvenienced.

--
You received this message because you are subscribed to the Google Groups 
"sqlalchemy" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/sqlalchemy?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to