Hi all,

I'm not sure I understand how to effectively use the ACL system. Say,
for example, I have a list of user submitted posts. When a user views
the list, for each post in the list I would use the ACL system to
determine if the user has the right to edit the post. If they do, I
show the edit button. However, this requires that the list of posts be
hydrated as objects AND requires multiple calls to the ACL system for
each post to determine whether or not to show the edit button. That
means that for every user and every post in the list there are many DB
queries. This doesn't seem very efficient, is there a better way to
accomplish this?

I've looked through many of the bundles, however none of them (that
I've seen at least) really use the ACL system or the HttpCache/
Doctrine Cache. Even the comments bundle doesn't use the ACL system to
determine if a user can edit or delete a post.

I feel like this is a typical use case, any guidance would be much
appreciated.

Thanks,
Marc

-- 
If you want to report a vulnerability issue on symfony, please send it to 
security at symfony-project.com

You received this message because you are subscribed to the Google
Groups "symfony users" group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/symfony-users?hl=en

Reply via email to