lYou have to provide user and group handling ("The semantics of users, groups,
processes and pages
are usually defined in another layer")
lNo admin interface to create rules
l"There is currently no way to specify a
token with spaces
or slashes.”
l“Diagnostics is poor. Unrecognized tokens
won't cause errors
or warnings.”
lNo precedence other than rule order (e.g. how
do I deny a tree
except for a sub-tree which is allowed).
lNo plugin methods matching/precedence caclulation.
l But you could use the ideas and
code as a basis for
your own authorisation library.Have a look at the code on CPAN.
l
l