I am starting to implement security through ACL, and I have a
problem... perhaps I have structured things improperly, but I don't
think so.

I have an ARO for each user (and for each group).  The
aros.foreign_key corresponds with users.id and aros.alias corresponds
to user.username.  When I need to do a check(), I check based on the
alias, since that is known through the current session as ['User']
['username'].

So. What happens when a user's username changes?  The new username
does not appear as a valid alias in the ARO table.  If I do a
check('newusername', 'someAco') it will return false.  I can't seem to
find a method to update the alias of an ARO object, or to copy the
permissions of one ARO to another.


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Cake 
PHP" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to