Thursday, September 3, 2009

Re: Auth/ACL -> using auth->Authorize='crud' and non-standard actions

That was exactly what I was looking for!

Thanks a lot!


delocalizer wrote:
>
>
> Hi;
> as long as you're happy to allow 'moveUp' in same group as one of
> c,r,u,d, you can use Auth->mapActions to do what you want:
> http://book.cakephp.org/view/813/mapActions
> Otherwise you will have to use Auth->authorize='actions' and recreate
> your acos and aros_acos.
>
>
> On Sep 3, 1:02 pm, mig_akira <mig_ak...@hotmail.com> wrote:
>> OOOPS!!!
>> where I said
>> $this->Auth->actionPath = 'controllers/'
>>
>> I really meant
>> auth->Authorize='crud'
>>
>> sorry for the confusion!!!
>>
>>
>>
>> mig_akira wrote:
>>
>> > Hello everyone.
>>
>> > I'm using auth and acl in my website, and I'm using the 'crud' way to
>> > grant or deny access. Everything is fine, except that I don't know how
>> to
>> > grant or deny access to a non-standard action in a controller.
>>
>> > For example, in my postsController, I have the actions add, read,
>> index,
>> > view, etc. All of those are standard, so I just type in the command
>> line:
>>
>> > cake acl grant Admin Posts '*'  
>>
>> > And I have access for all those actions, because aros_acos table will
>> be
>> > changed accordingly.
>>
>> > But what if I have an action there called "moveUp", for example? How
>> can I
>> > grant or deny access to this action?
>>
>> > FOr now I'm using
>>
>> > Function beforeFilter {
>> >    $this->Auth->allowedActions = array('moveUp');
>> > }
>>
>> > But this isn't safe, as you can imagine =P
>>
>> > Thanks guys! I hope I made myself clear, this ACL/Auth stuff is still a
>> > bit confusing to me!
>>
>> --
>> View this message in
>> context:http://www.nabble.com/Auth-ACL--%3E-using-actionPath-%3E%27controller...
>> Sent from the CakePHP mailing list archive at Nabble.com.
> >
>
>

--
View this message in context: http://www.nabble.com/Auth-ACL--%3E-using-actionPath-%3E%27controllers%27-and-non-standard-actions-tp25269069p25285465.html
Sent from the CakePHP mailing list archive at Nabble.com.


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to cake-php+unsubscribe@googlegroups.com
For more options, visit this group at http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---

No comments: