[eluser]Peng Kong[/eluser]
which webpage are you referring to that i compared 4 auth projects? cuz i don't remember doing so. not sure i understand what you mean by special feature, so not that i can think off.
-
ok a3m = account, a1 (authentication) and a2 (authorization).
what you are currently seeing is only account + a1 = sign in + sign up + forget password + reset password + update of user info / profile + 3rd party sign in account management
oauth is kind of standalone from everything else, so you can ignore it for now. oauth is for ppl who are building APIs that need authentication.
what's missing is authorization which is where an ACL (access control list) comes into play.
basically it has 3 object: users, permissions and roles. a user can have permissions. a user can have roles. a role can have permissions. the ACL module i did is a admin panel to manage those 3 objects and their relationship.
e.g. a user signs up and has a a3m account. from the ACL panel the "admin" can create a role with certain permissions and assign it to that user. the programmer will then do a simple check to see if the signed in user has the necessary permission to access a certain feature. something like...
Code:
if ($this->authorization->has_permission($data['account']->id, 'access_control_management'))
{
// jump for joy
}
ok let's get back to the currently available a3m package...
