On Mon, 2007-13-08 at 21:02 -0400, Mark Ramm wrote: > I was talking to Ben on IM earlier today, and I just wanted to bring > some of that discussion out in the open and get feedback from the > wider community. > > I'm also hoping to recruit a few key people who care about this and > have good ideas to work on it with us. > > First, I think Identity has a good syntax for checking authorization, > and if we can keep that syntax but have a more plugable backend we'll > be in really good shape.
+1 on keeping the checkin syntax or at least something similar. I also like being able to make a controller inherit from SecureResource. > > Second, Authentication and Authorization should probably be split out > into separate packages. To that end, I think we really need a robust > authorization system implemented in WSGI middleware, that is usabel by > TG, Pylons, raw WSGI apps, and anybody else who wants it. At the > moment it looks like AuthKit seems to be the best candidate to become > that, but it needs a bit of continuing love to make it into all it > could be. > > Beyond that, I think the identity API is good (well, I'm not sure > about the visit tracking stuff, but the rest of it for sure!). And > it would be great to have a separate project be started to give that > some love and make it work great for both TG and Pylons users. My only real complaint with the present set up is that the table naming scheme is inconsistent. Some are prefaced by tg and others aren't. I would vote for renaming those consistently with a prefix that indicates clearly where these tables come from. It would be nice if they were all lumped together when looking at tables too, ie tgid_visit, tgid_user or somesuch thing. Thanks for listening! Iain --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "TurboGears" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/turbogears?hl=en -~----------~----~----~----~------~----~------~--~---
