[cgiapp] Re: CA::Plugin::Authentication and CA::Plugin::Forward

[Mark Stosberg <suppressed>]

On 2005-12-21, Michael Peters <suppressed> wrote:
>
>> I usually don't run into this problem, since I either protect all
>> runmodes in an app module, or I don't protect any.  By separating out
>> the runmodes into modules according to their task this becomes pretty
>> easy.

I can also vouch for this approach.

In the case I need the same functionality exposed to two different user
groups, I simply create two instance scripts in two diffent directories.

This way, reviewing what's secure is as simple as reviewing the simple
lookup table and checking that things are accessed through appropriate
directories.

    Mark

-- 
http://mark.stosberg.com/ 


---------------------------------------------------------------------
Web Archive:  http://www.mail-archive.com/suppressed/
              http://marc.theaimsgroup.com/?l=cgiapp&r=1&w=2
To unsubscribe, e-mail: suppressed
For additional commands, e-mail: suppressed