Hi Sliv > The issue is that permissions will need to go beyond simply base > controller actions (add,edit,delete,view,etc.) and actually take into > account elements of the data in question.
I use dAuth and CakePHP's ACL to do this sort of thing. I am currently working on a manufacturing management system that requires control over action and action preformed on instances of data. This means that for instance I can specify that User A can view but not edit Data B, but has no access to Data C, and that User A can view and edit Data D. From what you have said, I think this would cover all of your requirements. There is enough functionality in CakePHP's ACL system to do what you want, you just need to spend a bit of time getting to know it, and learn some of its API. Then apply some creative thinking :-) > One last question: I'm wondering if anyone would have any interesting > solutions regarding what I perceive to be the 'maintenance workload' > regarding ACL. In following the above example, let's say the Client > wants to change their Regional naming conventions at some point. If > I'm using ACL which hard-codes 'ontario', my ACL would break without > some way of catching those changes. I could use ID field values, but > then if a region is deleted and then recreated, the ID number would > change (assuming autonumber ID values in the db).... This is a problem that I have had to deal with as well. My solution is to update the ACL alias when the dependent data changes, or vice versa. It hasn't been too difficult (and could be even easier with Cake 1.2 Behaviors I expect). It hasn't proved itself to be a problem yet. The only thing you need to watch out for is collisions in the naming. Regards, Langdon --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Cake PHP" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/cake-php?hl=en -~----------~----~----~----~------~----~------~--~---
