At 03:15 02.07.2002 +0300, you wrote:
>On Tue, 2002-07-02 at 01:13, Matthias Gelbhardt wrote:
>
> > At the moment I try to program a comunity with the help of Midgard. I now
> > have a little problem with the registration of new members. Obviosly a
> > mgd_create_person does not work, if no user is logged in (I user the 
> nemein
> > authentication snippet). How can I manage the creation of a user, without
> > any user logged in, and without do that manual by writing direct to the
> > midgard db?
>
>You can call mgd_auth_midgard(username,passwd,0) within your
>code to authenticate as an admin user.

OK, that works. What about security? I can now create Users. But is it 
somehow possible to secure the login through asgard? Or to deny even read 
access to that users. At the moment they shall only update there own 
profile and reply to certain articles, but they should not be able to login 
through Asgard or to read other objects. Is that possible? Could it be a 
security-problem, that I make a mgd_auth_midgard with admin rights to 
create a user?

Matthias

Matthias Gelbhardt   |   brought to you by CommY-Entertainment
[EMAIL PROTECTED]        |   with the power of Debian-Linux
http://www.commy.de |
+49 (0)170 547 10 11 |   Abi 2000 im Netz http://abi2000.rats-ms.de

PGP-Fingerprint: 97DF 5DB4 2A29 247B 0A68  99CA 453D 9ABA 8BF3 42EA



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to