[Users] users acl

[Bogdan-Andrei Iancu]

Hi Juha,

Just correct me if I get it wrong - you are talking about the 
possibility  of checking a dynamically selected group against a user; so 
far only fix group may be tested.

like, after some logic to figure out you want to test ACL  "acl_test", 
name stored in an AVP - and later test if the user belongs to the group 
name stored in the AVP?

Is this right?

regards,
Bogdan

Juha Heinanen wrote:

>Daniel-Constantin Mierla writes:
>
> > What do you think? Any other idea?
>
>i haven't used group module at all, because it really does not implement
>ACL capabilit, it just checks if a user belongs to a group.  which group
>a request belongs to, is not addressed by group module.
>
>group module is useful for simple group membership checking, for
>example, if a user is allowed to make a pstn call.  but if we (actually
>telecom law in finland) complicate things a bit by introducing different
>types of pstn destinations, for example, national local, national long
>distance, national cellular, national long distance, international,
>different kinds of service numbers, etc. we would first need to figure
>out the group of the request by some module function AND then find out
>if caller belongs to that group.  
>
>an efficient solution would combine the two actions into one.
>
>-- juha
>
>_______________________________________________
>Users mailing list
>Users at openser.org
>http://openser.org/cgi-bin/mailman/listinfo/users
>
>  
>