On Oct 20, 2006, at 7:41 PM, Michael Watkins wrote:

> - By default, user and therefore sessions are stored in a Durus object
>   database. Durus is something of a spitting image to ZODB, but
> simpler and
>   far easier to understand. You can replace this with any User and
> Session
>   management scheme you might like to implement - just like you can
> Quixote -
>   but there are more Quixote examples of this in the wild now.

For one site I have replaced the User model classes (including
Permissions) with my own extended variation. It works fine, but, as the
Publisher assumes a minimal API for these classes, for proper
functioning of everything  that subset of the API should be respected
-- this sub API includes get/create a user/session, authenicate against
a password, etc.

Plus, I believe the last couple versions of QP have made such
customization easier than it was earlier...

mario