Message at the end

On Mon, Sep 14, 2009 at 5:41 PM, Mihai RUSOAIE <mi...@rusoaie.com> wrote:

>  Hello!
>
> I am trying to restrict access based on user login to the modules 'clients'
> and 'contracts' and allow free access to 'static' module which has action
> 'index' and content 'about' and 'clients'.
>
> From the documentation of sfGuard I can see that I can restrict acces to an
> action with credentials:
>
> index:
>   is_secure:  on
>   credentials:  selling_team
>
> My users are ordered by groups in my application.
>
> I would like to restrict access like this:
>
> module static: do not require login
> modules clients and contracts: require login and the user must be in the
> group selling_team
>
> Also, can I restrict module actions to certain groups of users ? Like the
> selling team to be able to edit customer's infromation, and production team
> to be able only to view it?
>
> Could someone point me in the documentation where user group access to
> modules is explained?
>
> Thank you!
>
> Mihai Rusoaie
> e-Business Consultant
> Mobile: +40 72 RUSOAIE
> Web: http://mihai.rusoaie.com
>
> >
>

HI!
You can make something like:

set global security.yml
is_secure: offf
and then in your modules/<Nume modul>/config create a new security.yml file
where you add

all:
  is_secure: on
  credentials: [admin, selling_team , or what ever you want to set in ]

to enable action level restriction it would be:
all:
  is_secure: on
  credentials: [admin, selling_team , or what ever you want to set in ]
your_action:
  is_secure: on
  credentials: [ whatever you want ]

assuming that you are using symfony 1.2

read this : http://www.symfony-project.org/reference/1_2/en/08-Security it
will answer your question.

Alecs


-- 
As programmers create bigger & better idiot proof programs, so the universe
creates bigger & better idiots!
I am on web:  http://www.alecslupu.ro/
I am on twitter: http://twitter.com/alecslupu
I am on linkedIn: http://www.linkedin.com/in/alecslupu
Tel: (+4)0748.543.798

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"symfony users" group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to