[eluser]Phil Sturgeon[/eluser]
Quote:At the end of the day, people want to be able to protect certain areas of their applications, and they want to allow certain people to do certain things, based on who they are (or what their role is).
Sure but not too much of the application management should be done by something that basically says "this is a user, let them in or not".
In PyroCMS we use Ion Auth which only really handles authentication. It says "you are a user, you have an email, this is your name". That's all you really need from that (some would argue its still too much).
Obviously PyroCMS needs to manage what modules, pages, etc users can look at, but what does that have to do with the login system? Nothing!
Permissions is a whole extra module with a different database. It has nothing to do with Ion Auth and would be totally different from the next application I use Ion Auth for.
