> I'm working with Cake right now, and I thought that ACL was my answer
> to this question, but it seems that Cake's ACL (ACL in general, I
> suppose) only deals with roles, etc:

> "It should be noted that ACL is *not* a system that is meant to
> authenticate users. You should already have a way to store user
> information and be able to verify that user's identity when they enter
> the system."

> Well, this is all good and well, but the user authentication systems I
> develop, while being functional, leave quite a bit to be desired, and
> I really wouldn't trust them beyond the limited purposes for which
> I've deployed them. To put it simply, I expect that a framework like
> this one would make developing a sane user authentication system a bit
> easier for a developer like myself.