> Craig Berry wrote:

> My apologies.  For various reasons, I'm stuck using Outlook for my
> at-work email.  I thought I had it set to always use plain text format
> for email; apparently not.  I've reconfirmed the setting, so hopefully
> this is going out correctly.  If not, I'll take a deeper look at it.

It's still html. Life with Microsoft is not easy... It was great relief
when my company switched from MSMail+POP3 to IMAP mail and I was able
to switch to Netscape from Outlook. It still crashes on me from time
to time, but it's so much easier to persuade it to do what *I* want,
not the other way around :-).

> So instead you put the username and password for an admin account
> in the config file, of course.  My point was only that the minimum
> possible level of privilege should (ideally) be used for each action.

Note that I need to have the password for application administrator
in the config file, not for the administrator of the whole database
server, which is much more acceptable situation.

> If all you need is to read a single user's data, and perhaps update
> non-privileged fields, then authenticate as that user.  Again, ideally.
> In reality, authenticating as an admin user for all purposes may be
> more practical.

Minimal necessary privileges is certainly a good pattern to follow, but
what I'm saying is that to implement that you need human intervention
for account creation, or db/directory server administration rights 
for the application, which gives pretty much opposite result than
planned.

> Do you ever sleep? :)  Great work on the whole thing, by the way.

For the past week? Not much :) But coding gives me a lot of satisfaction.

> I just broached the subject on the Jetspeed list.  No response so far.
> But it's definitely fundamentally broken by the new Turbine.  Ouch.

Now my buddies here at e-point are unhappy because lot of their code
got broken... But it's all for a good purpose. :-)

Rafal

--
Rafal Krzewski
Senior Internet Developer
mailto:[EMAIL PROTECTED]
+48 22 8534830 http://e-point.pl


------------------------------------------------------------
To subscribe:        [EMAIL PROTECTED]
To unsubscribe:      [EMAIL PROTECTED]
Search: <http://www.mail-archive.com/turbine%40list.working-dogs.com/>
Problems?:           [EMAIL PROTECTED]

Reply via email to