[TurboGears] Re: TurboGears Role Based Security

[erisian]

Jeff,

Does the API provide for two basic types of role-based protection?

For example:

1) Declarative:

some class:

     some method:   / requires role("admin")

2) Procedural:

   if isInRole('jeff',"admin") then
       do something
   else
       do something else
   endif

and possibly:

3) Data Oriented

  ie: some mapping onto SQLObject of "isInRole()" to granted
permissions within the database?

Sorry for the pseudo-code.  I just woke up...

Thanks,

Jim Burnes
(erisian)