Thursday, September 8, 2011

Re: Issues With Auth Component

> > Auth is NOT Access Control, It is simply authentication.
>
> No need to go rushing towards ACL.
>
> http://book.cakephp.org/view/1275/authorize
>
> $this->Auth->authorize = 'controller'; is a very acceptable
> configuration for authorisation, hence why it is probably the most
> commonly used.
>
> I find ACL overkill for most situations and many other people at
> CakeFest felt the same, although in the interests of fairness, a lot
> of people also confirmed they use ACL all the time.
I agree with Paul, I actually don't use ACL on any of my projects as
the authorize by controller action is sufficient for my projects and
easier to maintain. I should have been clearer on my comment of "if
you don't really need full ACL". Thanks for pointing out the book ref.

Morgan

--
Our newest site for the community: CakePHP Video Tutorials http://tv.cakephp.org
Check out the new CakePHP Questions site http://ask.cakephp.org and help others with their CakePHP related questions.


To unsubscribe from this group, send email to
cake-php+unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php

No comments: