Gordon Stewart wrote:
Does anyone know where in the catalyst code it contacts the database to
check if a user has the rights in question?

It should be calling $c->user->roles, and this gets the list of roles for the user in question.

How this lookup is performed will vary depending on which authentication store you're using, how it's configured etc.

  I have looked into the catalyst
code (Catalyst/Plugin/Authorization/ACL/Engine.pm )and found out that the
function in question is returning "Denied" without contacting the database.
I know it is not contacting the database because I have turn on the Mysql
logs and see no sql query.

I am running the most up to date version of the catalyst code (5.8004). Has any one got roles and ACL working in Catalyst 5.8004

There have been a few people having problems with this.

I know that I fixed ACL to work with Catalyst 5.80 specifically, in that I had to do some work to make it pass all of it's tests. However, obviously, as people are having issues - the tests may not be comprehensive enough..

So I guess we need to produce a minimal TestApp demonstrating the issue, and then we can either fix ACL, or fix core Catalyst as appropriate to sort the issue out.

This minimal test app would use the minimal authentication store (so no DB needed), and just demonstrate the issue (i.e. t/01app.t fails).

If you can produce such a TestApp, then I'll be more than happy to take a look, or beat someone else into doing so ;)

Cheers
t0m


_______________________________________________
List: [email protected]
Listinfo: http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/catalyst
Searchable archive: http://www.mail-archive.com/[email protected]/
Dev site: http://dev.catalyst.perl.org/

Reply via email to