Recommended User Authentication setup? - CakePHP

Message from discussion Recommended User Authentication setup?
MIME-Version: 1.0
Date: Wed, 28 May 2008 10:22:54 -0700 (PDT)
In-Reply-To: <61E092F8-8918-4F0A-AC0E-75BB5915F0F0@cakephp.org>
References: <2c38d115-47c5-4a0c-8fbf-5aaf3e14435b@c58g2000hsc.googlegroups.com> 
	<61E092F8-8918-4F0A-AC0E-75BB5915F0F0@cakephp.org>
User-Agent: G2/1.0
Message-ID: <b9c59571-a667-47df-acff-43e69e018a6a@25g2000hsx.googlegroups.com>
Subject: Re: Recommended User Authentication setup?
From: 703designs <thomasmal...@gmail.com>
To: CakePHP <cake-php@googlegroups.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

I'm sorry, but "duh." I wasn't leveling any criticism, and I'm well
aware that the two are separate.I must have made myself unclear. In
any case, I'll take a look at Chris' tutorial. It's a bit old, can I
expect it to work with recent nightlies?

On May 28, 1:13 pm, John David Anderson <anderson.jo...@gmail.com>
wrote:
> On May 28, 2008, at 10:57 AM, 703designs wrote:
>
>
>
>
>
> > I'm working with Cake right now, and I thought that ACL was my answer
> > to this question, but it seems that Cake's ACL (ACL in general, I
> > suppose) only deals with roles, etc:
>
> > "It should be noted that ACL is *not* a system that is meant to
> > authenticate users. You should already have a way to store user
> > information and be able to verify that user's identity when they enter
> > the system."
>
> > Well, this is all good and well, but the user authentication systems I
> > develop, while being functional, leave quite a bit to be desired, and
> > I really wouldn't trust them beyond the limited purposes for which
> > I've deployed them. To put it simply, I expect that a framework like
> > this one would make developing a sane user authentication system a bit
> > easier for a developer like myself.
>
> ACL != Auth. It's *related* to authentication, but so is the
> FormHelper. The criticism you're leveling here doesn't quite make sense.
>
> In any case, I might check out the AuthComponent (which works well
> with the ACL stuff). Chris' tute should be a good starting point.
>