capabilities of forthcoming group changes

[Jason Pyeron]

On Wed, 9 Jul 2003, Joel Peshkin wrote:
...
> Personally, the only way I can see out of this quagmire would be to come 
> up with a system that is clean for AND groups and OR groups 
> simultaneously (an "AND-OR" system) but, as you point out, doing this 
> efficiently is a challenge.
> 
> -Joel

Efficiency can be achieved through caching of ACLs and resultant ACLs, but 
this is once again a mod_perl issue. We have our Java port going great 
right now, and we could try it out in there and drop it into the Perl (w/o 
caching).  This would be targeted for 8 weeks from now if we decide to 
prioritize it. Perl code to follow 2-3 weeks later.

Maybe we could whip up some demonstration code in Perl/java to show how to 
"use" it.  the code would be like:

 hash getACLs(userORgroup)
 bool testACL(userORgroup, rule) returns true/false/null(undef)


the ACL editor will most likely only be in a Java app for development 
efficiency here. (Applet too?) kinda like these screen shots (will expire 
someday) 

http://tmp.pyerotechnics.com/bz/capabilitiesofforthcominggroupchanges

Someone else can spend time($) doing HTML version in Perl (no ideas on 
interface yet)


Jason Pyeron

-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-                                                               -
- Jason Pyeron                   http://www.pyerotechnics.com   -
- Owner & Lead                  Pyerotechnics Development, Inc. -
- +1 410 808 6646 (c)           500 West University Parkway #1S -
- +1 410 467 2266 (f)           Baltimore, Maryland  21210-3253 -
-                                                               -
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

This message is for the designated recipient only and may contain 
privileged, proprietary, or otherwise private information. If you 
have received it in error, purge the message from your system and 
notify the sender immediately.  Any other use of the email by you 
is prohibited.