#34: Using PAS instead of GRUF (draft)
- Contents
- Proposed by
- tiran
- Proposal type
- State
- rejected
Motivation
PAS is written and highly used by Zope Corp which makes it trustworthy, maintained - and we can assume that it is written clean, fast and secure.
In the past we had lot's of problems with GRUF and the security part of a site in crucial.
Proposal
PAS is Zope Corp's new pluggable authentication service (see http://cvs.zope.org/Products).
Implementation
Replace GRUF by PAS + PluginRegistry.
Write a migration from GRUF to PAS.
Change all api calls to groups and users to use the PAS api.
Change template to use the PAS api
groups
All templates involving groups (and, hopefully, members) should use the tools. If they don't, this should be fixed.
So rewriting the tools should be sufficient, provided the tool interfaces are semantically compatible.