> Hi Santi. Thank you for your reply. I am attempting to adapt output
> emitted from zetadb to work in Plone so see what I can do. The
> question I have is how to manage access to the data.
> Lets say you have your main roles like anonymous, authenticated,
> manager, owner. Typically in most businesses you have people that
> create the data as owners of it but only want the data to be viewed by
> a department not across a whole organization. In a RDBS system, this
> mostly equates to filtering records to the department or user depending
> or role I believe. How is security managed or proposed in zetadb to
> restrict views or accesses?
>
Hi, Dave.
Good question. What zetadb can do nowadays is just filter records to
view. This filtering is semi-secure, you can define SESSION variables
that will result in a filter in all programs. But this is not integrated
into zope security, it doesn't work with user roles and zope security
management. So, the answer is: it is possible, but you should add some
code to enable filters you want.
Apart of this, I'm working in a big framework to develop business
applications over Zope and relational databases. In this framework, I've
patched zope security to have an integrated security system. The solution
consists in a parallel table for each entity (name table_security) where
to store a custom security for each record. Thus, if there is a custom
security for a record, it is applied instead of Zope security, and
otherwise Zope security is used. When a table has a custom security,
users with security role will be able to custom it for each record. This
also includes the ability to work with gruops of users and assign roles to
this groups.
It is still in development, but if you are interested you can subscribe to
zetadb-list and you will be notified when released (I hope this will
happens in one or two months).
Regards
Santi Camps
http://zetadb.sourceforge.net
-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
|
