sry for the echo. i don't know how i missed your last post. i usually just read from my mail client and with so many mails it can be a mess.
anyway. why can't define exceptions? any allow/deny for a user should overwrite any group setting. so should look like: UserGroup (Users) -> allow -> editMyProfile User ( X ) that belongs to UserGroup(User) -> deny -> editMyProfile (or allow edit all profiles) the last one should overwrite the first one in this case should work, but maybe you're thinking at a different situation. what is it? On Nov 9, 1:27 pm, AD7six <[EMAIL PROTECTED]> wrote: > On Nov 9, 11:55 am, "[EMAIL PROTECTED]" > > > > <[EMAIL PROTECTED]> wrote: > > Hey, > > I'm new to cake so i might be mistaken but i think we can solve this > > situation by keeping the acl system as is and having just 2 rules in > > the db. > > > So we can have 2 actions for the user controller: > > editProfile($profileID) - allows you to edit a generic profile AND > > editMyProfile() - allows to edit your own profile - basically the call > > of editProfile with your own profileID as parameter. > > > In ACL, we declare 2 rules at controller action level (not per > > record). So: users might access the action editMyProfile and admins > > might access both actions. > > Further (per record) rules might be added without affecting this > > system. > > > I haven't tested this and might be a break of cake's conventions but > > my logic tells me that this should do fine. What do you think? > > There's a strange echo... > > Isn't this what you replied > to?http://groups.google.com/group/cake-php/msg/ce66b87ba139f9d6 > > BTW if you define action level ACL checks and use what cake provides > by default, you can't then add any exceptions (as the rules wont be > automatically checked), unless you code in duplicate ACL checks. > > AD --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Cake PHP" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/cake-php?hl=en -~----------~----~----~----~------~----~------~--~---
