Let me start by saying how impressed I am with TG2, and also how excited I am to finally be starting to attempt to make some applications with it (I started out reading the TG1 book, and really watching the development, but never really made anything with TG1).
I have decided to make my first attempt at a 'real' application, and need some advice on where to start to figure out my first road block: Authentication and Authorization. The way I am thinking about the users does not seem to fit into the User, Group, Permission setup quite right. Let me describe the structure I have put down on paper, and hopefully someone can help me get started with a link or some advice. The application is based around self-contained instances of events. Any user has the right to create their own events (which they are the manager for). A user can be a participant in events, an assistant for an event, a manager of an event, or they can also be a system administrator. This breaks down really into two 'system-level' groups: Users and System Admins. This seems like it would work fine with the usual User, Group, Permission setup. It is the authorization of content, based on the user's specific role within an event that has me stumped, however. A user may be part of any number of events, and have different roles within each event. User A might be the manager of Event A, and a participant in Event B. What I want to accomplish is that when User A requests details of Event A that they would receive additional options than what they receive when they request details of Event B. There is one additional piece to all of this, which is that all participants in an event are put into 'Teams' which further changes what is displayed on each page. The way I would describe it is: User, Group, Role (per event), Team (per event), Permission. I guess my overall question is: Can this be done with the existing TG2 auth (or by extending it), or will I need to do something more involved? Please ask for any clarification where I haven't been clear. Thank you so much for any help. --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "TurboGears" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/turbogears?hl=en -~----------~----~----~----~------~----~------~--~---
