Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

How can you have users authenticate on a web site with different permissions. I would like to have administrator, superuser, collaborators and normal users. In particular, I would like to restrict access to normal users, and only allow the others. Moreover superusers and administrators should allow/revoke access to collaborators. I mean, not everyone should be able to login, but only the people designated by the administrator and by superusers. Does it make sense to use openId for this? And if yes, how shall I go about doing this? How can the admin grant access to a superuser before he logs in for the first time? Thanks

share|improve this question

1 Answer 1

up vote 0 down vote accepted

OpenID is an Authentication system.

You're asking about integrating OpenID into an Authorization system.

The details about how you pre-grant an OpenID a level of authorization depends on how OpenID security principles are represented in the authorization framework. If they're predictable, then you can pre-grant. If they're not, you have some more work to do in the application.

share|improve this answer
    
Yes, about the integration, but are there some example? As far as pre-granting, it is still an open question. It should work based on invitation, where the person that makes invitation grants the invitee. Well, that will make it pre-granted. –  azzurroverde Apr 21 '13 at 12:46
    
@AnnaZacchi I'm afraid that's above where I usually work. The only places I've seen openID used are in web-application, and that layer is usually handled by StackOverflow. –  sysadmin1138 Apr 21 '13 at 15:15

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.