If you check in your controller on the session and the Auth.User.id in there you can easily restrict /profile and /edit etc to the logged in user.
mark Am Dienstag, 9. September 2014 15:18:47 UTC+2 schrieb Daniel Casani Delgado: > > Hi all, how I could restrict users to access methods from others > controllers in my cakephp 2.0 app. For instance, if the current user in > /myapp/users/profile he (or she) could > write in the browser /myapp/photos/edit. I would like to avoid it and > redirecting the user to some default error message or to his the current > page. > On the other hand, how to do the same with any other wrong route? > (/myapp/somethingbad) > > Thanks a lot in advance! > > > > > -- Like Us on FaceBook https://www.facebook.com/CakePHP Find us on Twitter http://twitter.com/CakePHP --- You received this message because you are subscribed to the Google Groups "CakePHP" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/cake-php. For more options, visit https://groups.google.com/d/optout.
