Monday, May 3, 2010

ACL with routes

Hi all,

I have a question regarding the usage of ACL with routes.

A long time ago (when ACL was only based on the INI file...) I wrote a
component that allows me to easily grant/block access to actions
depending on roles the authenticated users are linked to. Its
configuration allows to check for distinct action names or by granting/
blocking access on whole routes.

This allows me to say for instance that all admin_xxx actions can be
accessed only by users linked to an ADMIN role, and manage_xxx actions
can only be accessed by users linked to a MANAGER role.

But today I'm really considering to replace my custom Component by the
ACL + Auth core components, as it has become fully usable over time. I
have read the ACL doc and made the ACL tutorial, and I didn't see
anything about using routes as ACOs.

So my question is simple, is the ACL configurable in a way that routes
can be considered as ACOs ? Or do we have to manage ACL rights each
time a new action is added in a controller if we want a user/group to
be able to access the new action ?

Thanks,
Nicolas

Check out the new CakePHP Questions site http://cakeqs.org and help others with their CakePHP related questions.

You received this message because you are subscribed to the Google Groups "CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to
cake-php+unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php?hl=en

No comments: