Welcome Guest, Not a member yet? Register   Sign In
Authentication (ACL) - Challenges - Solutions - Dilemmas
#15

[eluser]Randy Casburn[/eluser]
[quote author="inparo" date="1222292680"]So you say this is only the first in a row of products to build a full ACL. Will the others be free? Suffice to say that I would have a hard time justifying a $100 auth system.[/quote]
As much as I embellish I should expect this, but nowhere on the site did you see $100 for anything. I've never suggested that nor will I. I knew it would be up hill to generate any interest at all in a Free based community. So that was a little unfair.

[quote author="inparo" date="1222292680"]
It's compiled so I can't change it, the license says I cannot decompile it, and it's declared as final so I can't extend it. You really think this is usable?[/quote]
You bet your buttons it is!

[quote author="inparo" date="1222292680"]Reading the documentation (and I read most of it), it looks like this doesn't offer a lot more than Redux can offer.[/quote]
If you look at from a user's perspective, Redux and others have more "features". When you take the dress, or the pants, off Plurious Auth has more Chastity (it's more secure than any other CodeIgniter authentication capability in existence.[/quote]

That is what is so cool about this whole affair. If features are more important than security, than there are always other choices.

Now, when it comes to features, you, of all people, looked right past the direct interface with JS frontends and the JSON encoded return to an AJAX login requests. That's one I've not seen built into any of the others.

[quote author="inparo" date="1222292680"]Sell it to me, how is this new or better?[/quote]

1) Want to secure a controller? Move the file to the 'secure' directory. OK. Now it is secure. There is not code the write, nothing to modify, period. You cannot access the contents that controller controls without logging in...

2) Want to un-secure that controller? Move the file out of the 'secure' directory. OK. Now it is no longer secure. No code to change, nothing to modify, period. You can now access the contents that controller controls...

3) You don't have to write any code to check any user stuff unless you want to

4) Every bit of session handling is done inside the class. You don't have to write any code to handle a bit of it.

5) Every bit of page caching is handling inside the class. There are no more worries about the darn "back button" issue that plagues almost every CI application in existence. At least the browser folks are helping (FF3 is fixing this). If you're not using FF3, log out of this forum and hit the back button...you'll see your old outdated authenticated page!!! That is Expression Engine ladies and Gentleman. That cannot happen with Plurious Auth.

[quote author="inparo" date="1222292680"]I like having certain freedoms and for 35 bucks I would be in violation of the license agreement within 10 minutes.[/quote]

Then this isn't the solution for you.

This solution is for folks that compare the business cost of spending 1, 2, 3, 4, 5, or 20 man hours to create or integrate a solution to a $35 drop-in solution. Most PHP developers cost more than $35/hr US.

@inparo -- thanks so much for taking the time to provide your detailed feedback. I truly appreciate and respect your words here and will consider everything you've said.

Randy


Messages In This Thread
Authentication (ACL) - Challenges - Solutions - Dilemmas - by El Forum - 09-24-2008, 11:26 AM



Theme © iAndrew 2016 - Forum software by © MyBB