官术网_书友最值得收藏!

Chapter 4. Administrators, Users, and Guests

With some general ideas about a CMS framework established, it is time to dive into specifics. First, we will look at handling the different people who will use the CMS, creating a basis for ensuring that each individual is able to do appropriate things. Although we might talk generally of users, mostly the discussion of "users" means those people who have identified themselves to the system, while those who have not are deemed "guests". A special subset of users contains people who are given access to the special administrator interface provided by the system.

Questions arise concerning how to store data about users securely and efficiently. If the mechanisms are to work at all, the ability to authenticate people coming to the website is vital. Someone will have to look after the permanent records, so most sites will need the CMS to support basic administrative functions. And the nature of user management implies that customization is quite likely.

Not all of these potentially complex mechanisms will be fully described in this chapter, but looking at what is needed will reveal the need for other services. They will be described in detail in later chapters. For the time being, please accept that they are all available, to help solve the current set of issues. In this chapter, we are solely concerned with the general questions about user identification and authentication. Later chapters will consider the technical issues of sessions and the question of who can do what, otherwise known as access control.

The problem

We need to define the categories of user and, at least for some of them, provide an authentication mechanism. So mechanisms are needed to:

  • Securely and efficiently store information about regular users
  • Authenticate users
  • Manage the stored information about users
  • Provide for user "self service"
  • Customize or extend user information
主站蜘蛛池模板: 康保县| 江永县| 淮阳县| 平顶山市| 怀化市| 湾仔区| 莎车县| 博野县| 通化县| 白河县| 澄迈县| 邮箱| 文昌市| 西畴县| 通州市| 日照市| 紫阳县| 扎鲁特旗| 上高县| 亳州市| 景宁| 铁力市| 永吉县| 通渭县| 临沂市| 措勤县| 漯河市| 马龙县| 阜新市| 嘉义县| 顺平县| 永嘉县| 建宁县| 株洲市| 大石桥市| 扬州市| 宝应县| 上林县| 慈利县| 济宁市| 临夏市|