Is it possible to use LDAP together with the Goole App Engine? 2011/3/21 Martin Weissenboeck <mweis...@gmail.com>
> Thank you for this hint. > I do not have any experience with LDAP but of course it would be an > interesting callenge to learn more. > > > 2011/3/21 Joe Barnhart <joe.barnh...@gmail.com> > >> Isn't this a perfect example of a place to use web2py with LDAP? >> >> -- Joe >> >> On Mar 20, 5:22 am, Martin Weissenboeck <mweis...@gmail.com> wrote: >> > Hi everybody, >> > I have the following problem: I need some kind of hierarchical >> > authorization. >> > >> > This is a simplified model: >> > Company C001...C500 >> > Departement D01...D15 >> > Group G01...G40 >> > Person P01...P30 >> > >> > Not every company has 15 departements, not every departement has 40 >> groups >> > and so on, but the whole program should work with up 200.000 persons. >> > >> > Now some authorizations: >> > >> > - Every person is allowed to change most of (but not all) of his >> personal >> > data. >> > - Some persons are allowed to change some data of the members of a >> > specified group or some groups or a departement. >> > - Some persons are allowed to send messages single persons or to the >> > members of a group or some groups or a departement or a company. >> > - Some persons are allowed to change all data of the members of a >> group >> > or some groups or a departement or a company. >> > - Some persons are allowed to do everything (including impersonate) >> with >> > all data of the members of a whole departement or company. >> > - ... and so on ... >> > >> > One person could be identified by a string field like >> "C003:D03:G12:P15". >> > >> > I think I could use the authorization and the decoration of web2py to >> allow >> > one person to modify data or to send messages. >> > >> > - But how could I use the authorization e.g. to modify only some >> data? >> > - And if somebody is allowed to change some data he should only see >> these >> > persons he is allowed to make modifications. >> > >> > A sql-statement "where ident like 'C003:D03:G12:%" could do the job. >> > >> > - But would it be fast enough for 200.000 persons? >> > - Is there any way to use theauthentization mechanism for this >> problem? >> > >> > Regards Martin >> > > >
