> > I'm working with Cake right now, and I thought that ACL was my answer
> > to this question, but it seems that Cake's ACL (ACL in general, I
> > suppose) only deals with roles, etc:

> > "It should be noted that ACL is *not* a system that is meant to
> > authenticate users. You should already have a way to store user
> > information and be able to verify that user's identity when they enter
> > the system."

> > Well, this is all good and well, but the user authentication systems I
> > develop, while being functional, leave quite a bit to be desired, and
> > I really wouldn't trust them beyond the limited purposes for which
> > I've deployed them. To put it simply, I expect that a framework like
> > this one would make developing a sane user authentication system a bit
> > easier for a developer like myself.

> ACL != Auth. It's *related* to authentication, but so is the
> FormHelper. The criticism you're leveling here doesn't quite make sense.

> In any case, I might check out the AuthComponent (which works well
> with the ACL stuff). Chris' tute should be a good starting point.

> -- John