Ok is this for the user Block? On 10/17/2008, WebbedIT <[EMAIL PROTECTED]> wrote: > > Hi, > > I have applied Acl and Auth as instructed in the example tutorial of > the book. The first user I created is a member of user_group => 1 > which has access to all controllers using: > > $group->id = 1; > $this->Acl->allow($group, 'controllers'); > > But when I login and try to access anything I keep getting the "You > are not authorized to access that location." error message. Looking > at the queries ran I can see that when fetching the associated AROs it > is only fetching the users ARO id (3) instead of the user's id (3) and > user's group id (1). > > SELECT `Aro`.`id`, `Aro`.`parent_id`, `Aro`.`model`, > `Aro`.`foreign_key`, `Aro`.`alias` FROM `aros` AS `Aro` LEFT JOIN > `aros` AS `Aro0` ON (`Aro`.`lft` <= `Aro0`.`lft` AND `Aro`.`rght` >= > `Aro0`.`rght`) WHERE `Aro0`.`model` = 'User' AND `Aro0`.`foreign_key` > = 1 ORDER BY `Aro`.`lft` DESC > > As such when it carries out the full permissions check it fails as I > have allowed access at controller level for the group so there are no > permissions for the user. > > SELECT `Permission`.`id`, `Permission`.`aro_id`, > `Permission`.`aco_id`, `Permission`.`_create`, `Permission`.`_read`, > `Permission`.`_update`, `Permission`.`_delete`, `Aro`.`id`, > `Aro`.`parent_id`, `Aro`.`model`, `Aro`.`foreign_key`, `Aro`.`alias`, > `Aro`.`lft`, `Aro`.`rght`, `Aco`.`id`, `Aco`.`parent_id`, > `Aco`.`model`, `Aco`.`foreign_key`, `Aco`.`alias`, `Aco`.`lft`, > `Aco`.`rght` FROM `aros_acos` AS `Permission` LEFT JOIN `aros` AS > `Aro` ON (`Permission`.`aro_id` = `Aro`.`id`) LEFT JOIN `acos` AS > `Aco` ON (`Permission`.`aco_id` = `Aco`.`id`) WHERE > `Permission`.`aro_id` = 3 AND `Permission`.`aco_id` IN (23, 22, 1) > ORDER BY `Aco`.`lft` desc > > Anyone got any ideas? > > P.S. I self-resolved the issue I posted last night, tried to add a > reply to say that was closed, but my reply has not appeared for some > reason, said it was posted but ain't shown up. > > > >
-- Xavier A. Mathews Student/Developer/Web-Master GG Client Based Tech Support Specialist Hazel Crest Illinois [EMAIL PROTECTED] "Fear of a name, only increases fear of the thing itself." --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "CakePHP" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/cake-php?hl=en -~----------~----~----~----~------~----~------~--~---
