Hi Sliv

> The issue is that permissions will need to go beyond simply base
> controller actions (add,edit,delete,view,etc.) and actually take into
> account elements of the data in question.  

I use dAuth and CakePHP's ACL to do this sort of thing.  I am currently 
working on a manufacturing management system that requires control over 
action and action preformed on instances of data.

This means that for instance I can specify that User A can view but not 
edit Data B, but has no access to Data C, and that User A can view and 
edit Data D.

 From what you have said, I think this would cover all of your requirements.

There is enough functionality in CakePHP's ACL system to do what you 
want, you just need to spend a bit of time getting to know it, and learn 
some of its API.  Then apply some creative thinking :-)


> One last question:  I'm wondering if anyone would have any interesting
> solutions regarding what I perceive to be the 'maintenance workload'
> regarding ACL.  In following the above example, let's say the Client
> wants to change their Regional naming conventions at some point.  If
> I'm using ACL which hard-codes 'ontario', my ACL would break without
> some way of catching those changes.  I could use ID field values, but
> then if a region is deleted and then recreated, the ID number would
> change (assuming autonumber ID values in the db)....

This is a problem that I have had to deal with as well.  My solution is 
to update the ACL alias when the dependent data changes, or vice versa. 
  It hasn't been too difficult (and could be even easier with Cake 1.2 
Behaviors I expect).  It hasn't proved itself to be a problem yet.  The 
only thing you need to watch out for is collisions in the naming.

Regards,
Langdon

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Cake 
PHP" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to