29 Apr
2006
29 Apr
'06
11:38 p.m.
Hi Hans,
hope you have has a nice trip to Toronto :-)
yep, Canada is great! The Pier & Magritte presentation was a success.
One Question: in the PRContext>>user, there will
be set property
user to nil if this property does not exist. Could that be
dangorous ? Should there be set some default user with smallest
rights ? (And should this user come from PRKernel as the smallest
user in current kernel or come from PRUser class as the smallest
thinkable user ?)
Yeah, this is not a nice design. Similar as the 'admin' user and
'admin' role, there should be an 'anonymous' user and an
'anonymous'
role. There are several checks for nil now, what makes it quite ugly
in the oo-world, however I don't think this imposes any security
risk ;-)
I will have a look at this as soon as possible.
Cheers,
Lukas
--
Lukas Renggli
http://www.lukas-renggli.ch