cgi and ldap

People use the cgi variable to get the username of the currently logged in user (assuming an all-windows system). You can use ldap to get much more information, such as groups the user has been assigned to within the domain.

> I would like to create a web site with roles where one role would be able
> to
> see all pages in the site and another role would be able to see only a few
> pages in the site. I would like to restrict the access depending on the
> Intranet username login. Can I create groups or roles using the Intranet
> username login?
>

Yes. You will have to assign roles for usernames or assign
each username to a predefined group that indicates access.
You would probably need to add a new table to your db to
do this.