BTW, i was thinking the other day at solutions around this and thought to duplicate the aro of a user for each group the user is in, and mark this in the alias somehow. Then retrieve all the rights for all the AROs of the user and try to solve conflicts between them. Since the user is usually in few groups i think this is doable. I could even write a new ACL behavior to do the duplication job for me. What do you guys think? Does it worth trying?
On Feb 12, 2:21 am, "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote: > Interesting what you're saying. It's true that by carefully nesting > groups you can solve a lot of cases but this leads to creating many > groups that their only purpose is to nest other groups. I know that > It's also true that solving conflicts in a "user in many groups" > system would probably require as much effort, but even so... i wish i > would know what nate's referring to, when he's saying that "This is > technically possible with the new 1.2 ACL system" (in > here:https://trac.cakephp.org/ticket/2191) > > On Feb 12, 1:35 am, aranworld <[EMAIL PROTECTED]> wrote: > > > You are right. A user can only have one parent. But that user does > > not necessarily have to have the exact same permissions as it's > > parent. > > > If you have a user in the "car mechanic" group, but this person also > > has experience fixing bicycle tires, you could give that person -- and > > that person only -- access to the BicycleTire controller, which is > > otherwise only available to those in the "bike mechanic" group. > > > You can, of course, also nest groups. So if you want to give bike > > mechanics access to only bikes, but car mechanics access to bikes and > > cars, you could make bike mechanics the parent of car mechanics. In > > this case, car mechanics will inherit all from bikes (their parent), > > but then you can assign whatever extra permissions you want to the car > > mechanics without having those permissions applied to bike mechanics. > > However, if you have a car mechanic who knows nothing about bikes, you > > can then revoke all his permissions to bicycles, but keep him in the > > car mechanic group. > > > On Feb 10, 10:35 pm, "[EMAIL PROTECTED]" > > > <[EMAIL PROTECTED]> wrote: > > > Can the current ACL system be used for this situation: the requester > > > (user) can have multiple parents (groups) ? From what i see the > > > inheritance in aros is 1:1 for now. What do you guys use? --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Cake PHP" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/cake-php?hl=en -~----------~----~----~----~------~----~------~--~---
