On 11/15/06, Martin <[EMAIL PROTECTED]> wrote:

> Hi, we have the need to manage ACLs not only based on actions which
> allow/deny users (aros)
> to access controllers accions (acos), but also to include the ability
> to allow the users only to see a certain filtered view of the database
> (only every user's clients, providers, etc).

A very common situation in apps

> This situation makes us difficult trying to use the DBAcl part of the
> framework as
> AFAIK the ACO concept is based on actions that details the behaviour of
> a controller.

No - ACO is an abstract alias - and not hard wired into the app in any way

> One approach to use the dbacl is defining views on the backend
> accordingly to our needs
> and map them to models which are used by the appropriate controllers,
> but this would
> lead to duplicate controllers only tu refer different models. Other
> could be to rewrite AppModel or AppController classes to act as we
> need, using just a part of concept of cakephp's ACLs.

The approach I am considering is creating per user per controller per
action ACOs

Like in my case I want users to edit only those albums which belong to
them and each album has a unique ID so my ACO alias looks like
albums:edit:2

The ARO and the aros_acos continues as usual - the special part that
you will have program in your beforeFilter would be how the ACO alias
gets computed before being checked using the ACL component....

> I would like to know if some one had this situation and could give some
> advise.

Just an idea... hope you find it useful

Cheers
Tarique

--
=============================================================
PHP Applications for E-Biz: http://www.sanisoft.com
Coppermine Picture Gallery: http://coppermine.sf.net
============================================================

--~--~---------~--~----~------------~-------~--~----~
 You received this message because you are subscribed to the Google Groups 
"Cake PHP" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to