Hi all, I have a question regarding the usage of ACL with routes.
A long time ago (when ACL was only based on the INI file...) I wrote a component that allows me to easily grant/block access to actions depending on roles the authenticated users are linked to. Its configuration allows to check for distinct action names or by granting/ blocking access on whole routes. This allows me to say for instance that all admin_xxx actions can be accessed only by users linked to an ADMIN role, and manage_xxx actions can only be accessed by users linked to a MANAGER role. But today I'm really considering to replace my custom Component by the ACL + Auth core components, as it has become fully usable over time. I have read the ACL doc and made the ACL tutorial, and I didn't see anything about using routes as ACOs. So my question is simple, is the ACL configurable in a way that routes can be considered as ACOs ? Or do we have to manage ACL rights each time a new action is added in a controller if we want a user/group to be able to access the new action ? Thanks, Nicolas Check out the new CakePHP Questions site http://cakeqs.org and help others with their CakePHP related questions. You received this message because you are subscribed to the Google Groups "CakePHP" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/cake-php?hl=en
