NoseRub admin access. By database or file?

Blog - News about NoseRub

Tuesday, January 1. 2008

NoseRub admin access. By database or file?

I'm thinking about this for some time now, but don't know the definite answer, so I woud like to know you opinion.

It is all abot an admin area for NoseRub, where the admin can manually refresh caches, delete users, etc.. But how should this be managed?

Should there be stand alone admin accounts?
Should this be in the database?
Should the admin login be defined in config/.php?
Should there just be a special hash for admin work?
Should every registered user become an admin, when another admin says so?

For now, I prefer to have the information in a file, because I think it is more complicated to get write access to the filesystem that to the database. As I think it should be possible to have more than one admin account, I currently would prefer an array of usernames and md5 passwords in config/noserub_admins.php.

What is your opinion?

Posted by Dirk Olbertz at 22:58 | Comments (3) | Trackbacks (0)

Trackbacks

Trackback specific URI for this entry

No Trackbacks

Comments

Display comments as (Linear | Threaded)

In our system, Admins have "normal" User acounts, but their User-Ids are defined in one Array. Only if an user has the Admin-Flag (from the database) AND its Id is in the Array, he can perform administrative actions.

#1 Denis (Homepage) on 2008-01-01 23:44 (Reply)

Mh. I don't like the data redundancy. And you always have to perform two things in order to give someone admin access.

#1.1 Dirk Olbertz (Homepage) on 2008-01-02 09:57 (Reply)

I think it should be by Database. it's better and it's and standard

#1.2 leandro on 2008-02-20 01:12 (Reply)

Add Comment

Name
Email
Homepage
In reply to
Comment	Enclosing asterisks marks text as bold (word), underscore are made via _word_. Standard emoticons like :-) and ;-) are converted to images. To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly. Enter the string from the spam-prevention image above:
	Remember Information? Subscribe to this entry