[Zope3-dev] a note on groups and roles

[Lennart Regebro]

From: "Joachim Werner" <joe@iuveno-net.de>

> Internally, this can be solved by only using fully qualified identifiers
> that include the full domain, but in the login dialog, it should be
possible
> to just enter the username and choose the domain (or leave it at the
> preset). Probably that's just a GUI issue ...

Yup. This is exactly how it is done in NetWare NDS. You have a setting for
default domain, or you can enter the fully qualified name, in the form of
organisation.organisationalunit.bla.foo.username (where bla.foo is an
arbitrary depth).

Would it be possible to have a similar scheme in Zope 3, where the fully
qualified username of a user in /folder1/folder2/acl_user would be
folder1.folder2.username ?

That way users in user folder would not nessecarily have to be incremental,
but one ac_user could be replaced by the ones further down, and if you want
to log in as the user of the root user folder, you log in as .user.

Is this feasible, or?