Actually it's more simple, in this sample a group as got a "role". So
a user Aro has a parent Aro wich is a role (that can have another role
Aro as parent, role inheritance)... The permissions are given on roles
- controller/action, not on user. But when checking a User Aro, it
finds it's parents (the role) and then check the permissions =>
aros_acos (Role.id - Controller/action alias).
Simple isn'it ?
On May 25, 5:19 pm, "Jan Bracker" <[EMAIL PROTECTED]> wrote:
> Thanks for the tutorial. That seems to handle hirarchical user/group
> managment pretty well. I'll work my way through it and ask my
> questions within tutorial.
>
> But i have one last question on the AclBehavior. How does it determine
> which ACL belongs to which User/Group? It can't be the ids because
> they are autocreated, it now knows what parent it has to look at, but
> the role_id doesn't allway match the acl id does it? So i think it
> matches aliases, but from where does it know the aliases it has to
> check ('User.username' / 'Role.name')? I'm quite confused about the
> way it knows everything magically...
>
> Greetings, Prophet
>
> 2008/5/25 francky06l <[EMAIL PROTECTED]>:
>
>
>
> > There a quite many articles about having groups and group inheriting
> > from groups.
> > There is one here :
> >http://www.cakephpforum.net/index.php?showtopic=27&st=45&#entry2736
> > but many others
> > hth
>
> > On May 24, 1:09 pm, Prophet <[EMAIL PROTECTED]> wrote:
> >> How is it easy when my users/groups are ordered hirarchical? As
> >> written above i thought of that but it seemed the AclBehaviour is to
> >> limited to realize something like that. Or where you thinking of
> >> writing your own behaviour?
>
> >> On 23 Mai, 23:43, francky06l <[EMAIL PROTECTED]> wrote:
>
> >> > If your group are hierarchical it's easy, otherwise maybe an ACL
> >> > linked to a join HABTM model user_groups can be the solution ... I
> >> > have done something like this, but not for managing user/group, so
> >> > just a hint ..
> >> > hth
>
> >> > On May 23, 6:24 pm, mcjustin <[EMAIL PROTECTED]> wrote:
>
> >> > > I've found that I can have multiple instances of an ARO leaf across
> >> > > the tree (a user in many groups), but that non-leaf ARO's will not fxn
> >> > > properly if there's more than one instance of them...
>
> >> > > (hoping that someone else while comment as well!)
>
> >> > > On May 23, 6:18 am, Prophet <[EMAIL PROTECTED]> wrote:
>
> >> > > > Hello,
>
> >> > > > I want to create a User/Group permission system with help of ACL. But
> >> > > > i have a few problems realizing that.
>
> >> > > > Can an ARO have multiple parents or does it depend on a tree
> >> > > > sturcture
> >> > > > with one possible path for each ARO? For example if i say
> >> > > > UserAro.parent belongs to Group1Aro, Group2Aro and Group3Aro? How
> >> > > > does
> >> > > > check then work? If this behaviour is enabled there are multiple
> >> > > > paths, is something allowed when one of the paths is allowed or only
> >> > > > when all of them are (i wouldn't suspect that...)? How can i show a
> >> > > > User HABTM Group relationship with AROs if only tree structure is
> >> > > > allowed?
>
> >> > > > Does AclBehavior depend on the fact that the id of my model matches
> >> > > > the id of the ARO or does it work with aliases to? How can i realize
> >> > > > a
> >> > > > User/Group system if it depends on id? Aro 1 can't be connected with
> >> > > > Group and User 1 (the same problem occures when using aliases for ARO
> >> > > > matching...). I as human would know that top level AROs (aro.parent =
> >> > > > null) are groups and second level elements (aro.parent.parent = null)
> >> > > > are users, can i tell that to my AclBehavior in combination to using
> >> > > > ARO aliases for matching? In that case double aliases would work
> >> > > > again. Or do i have to create my own behavior, based on AclBehavior?
>
> >> > > > Do i have to create a parentNode method within my model when i want
> >> > > > to
> >> > > > use AclBehavior and it shall create subnodes of a ARO? What does the
> >> > > > parentNode function return? Ids or aliases?
>
> >> > > > Am i going the wrong way to realize this?
>
> >> > > > Greetings, Prophet
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"CakePHP" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at
http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---
