The ability to put a User Folder in any folder provides support for highly decentralized user management. It is also possible to create custom User Folders that can be used to interface with external user management systems, such as directory servers. User objects contain the information needed to identify and authenticate users, and to tie them into the authorization system. Users are identified by a name. When this variable is inserted in a DTML Method, the user's name is inserted.
Users also have authentication information.
Other user folders may use different authentication information. Users are tied into the authorization system by their assignment of roles. Roles describe the kind of responsibility and authorization possessed by a user.