Access control for reading.

[Jeffrey M. Vinocur]

On 1 Feb 2001, Russ Allbery wrote:

> Depends on which way you think about it.  The way I'd think about it is
> that from the perspective of INN, if you're doing group-based access
> restrictions, the group *is* the username.  "User" is just a token that
> INN uses to decide what access rule to apply, after all.

Yes, but it's useful to have the proper user info both in the logs and to
put in Sender: if you choose.


> Viewed from that perspective, all I think you need is an option to
> ckpasswd to return the user's group instead of their username and an
> option to the ident resolver that does the same.

Bleargh, duplicate code.  But yeah, I guess that would work.


-- 
Jeffrey M. Vinocur
jeff at litech.org