[OGo-Developer] SOPE security

[Wolfgang Sourdeau]

Hi Helge and all,


Is there any documentation about the SOPE security model? I am 
wandering in sope.opengroupware.org/en/docs/ and can't find anything 
besides the reference to SOPE security...

My questions in particular are related to the security declarations in 
the product.plist files. What is the "protectedBy" for, wrt 
defaultAccess and defaultRoles?
Also, I would like you to confirm something regarding the security 
mechanism:
we have 4 entities: users, permissions, roles and objects. Each users 
is assigned certain roles, each roles has a set of one or more 
permissions and each objects is assigned one or more roles, is that 
it? Or has each role specific permissions per objets? Could a username 
be a role?

Also, on a totally different subject, is the source code of your snsd 
available under the GNU GPL?


Thanks!


Wolfgang