4

I'm currently supporting a Python web app with increasingly complicated user/role/permission management requirements. Currently, we are rolling our own user, groups, permissions, etc. code and supporting database.

I'd like to find something like ASP.NET membership that can help manage user authentication and authorization, rather than risk security issues in continuing to create an increasingly complicated custom solution. Are there any similar projects out there worth taking a look at?

1
  • What framework are you using for your web app? Solutions depend on the framework (or the ability to inject appropriate WSGI middleware). Apr 1, 2010 at 20:48

1 Answer 1

1

If you are looking for off site user authentication you might want to consider openid. People have added openid support to cherrypy.

If you are looking for more user management type code. I guess it depends on exactally what you are doing but others have done user management before, why not leverage off them. Skeletonz is a CMS written on top of cherrypy. If you are not wed to cherrypy you might also want to consider Pinax. It's built on Django with the idea of reusing work others have done so you don't have to do it again.

3
  • I agree that openid is probably the best option, unfortunately this system will be a closed one without Internet access. Thanks for the input though.
    – Tony Lenzi
    Apr 14, 2010 at 18:48
  • Tony, where I work we are using ldap instead of a windows solution. While ldap isn't simple it is common standard and is a good starting place. Apr 19, 2010 at 6:53
  • Thanks for the follow up Paul. That's been my thinking as well, authenticating against an existing LDAP will probably be the approach we'll take for authentication.
    – Tony Lenzi
    Apr 28, 2010 at 19:27

Not the answer you're looking for? Browse other questions tagged or ask your own question.