Re: General ACL Question

2008-11-21 Thread eMarcus
Mark, Aran, Is there a way to access the Acl component from within a model? Models don't have a $uses attribute, do they? Can I somehow else access the Acl component in a model (ie. creating an instance with new() ? The beforeSave() callback method would be a perfect place to check if a user

Re: General ACL Question

2008-11-21 Thread mark_story
Aran, then my apologies to you as well. The internet is a terrible place to decipher intonation. Its easy to misconstrue a question as complaining, and it doesn't help that I've been asked that question 10+ times. I think that only in complicated systems should row level permissions be impleme

Re: General ACL Question

2008-11-20 Thread aranworld
Sorry for writing something that looked like griping! I was absolutely NOT complaining about how the Auth Component works -- even though a year ago, I did once make this complaint. On the other hand, it is nice to have such a nicely worded explanation of why this "feature" is not in the core cod

Re: General ACL Question

2008-11-20 Thread mark_story
On Nov 20, 4:23 am, eMarcus <[EMAIL PROTECTED]> wrote: > Hi Mark, > > Thanks for your answer! > > When you follow the conversation right from the beginning, you will > see, that I definitly KNOW that controller/actions/id access does not > help me and that I therefore want to use your proposed sch

Re: General ACL Question

2008-11-20 Thread eMarcus
Hi Mark, Thanks for your answer! When you follow the conversation right from the beginning, you will see, that I definitly KNOW that controller/actions/id access does not help me and that I therefore want to use your proposed schema of models/records to protect my content. However, what confuse

Re: General ACL Question

2008-11-19 Thread mark_story
This can be done with the ACL but you need to do the check manually. It may seem like a good idea to have an ACL tree that looks like controller/action/id but that is setting yourself up for an epic fail. If you ever need to add an action you need to copy all the record nodes and set new perms

Re: General ACL Question

2008-11-19 Thread aranworld
s, when you plan on also using Auth > > > Anja > > > -Ursprüngliche Nachricht- > > Von: cake-php@googlegroups.com [mailto:[EMAIL PROTECTED] Im Auftrag von > > eMarcus > > Gesendet: Mittwoch, 19. November 2008 15:55 > > An: CakePHP > > Betreff

Re: General ACL Question

2008-11-19 Thread eMarcus
an on also using Auth > > Anja > > -Ursprüngliche Nachricht- > Von: cake-php@googlegroups.com [mailto:[EMAIL PROTECTED] Im Auftrag von > eMarcus > Gesendet: Mittwoch, 19. November 2008 15:55 > An: CakePHP > Betreff: General ACL Question > > Hi, > >

AW: General ACL Question

2008-11-19 Thread Liebermann, Anja Carolin
Anja -Ursprüngliche Nachricht- Von: cake-php@googlegroups.com [mailto:[EMAIL PROTECTED] Im Auftrag von eMarcus Gesendet: Mittwoch, 19. November 2008 15:55 An: CakePHP Betreff: General ACL Question Hi, I want to use the ACL component to control access of users to model data. I built up

General ACL Question

2008-11-19 Thread eMarcus
Hi, I want to use the ACL component to control access of users to model data. I built up AROs, ACOs and permissions so far. 1.) does the ACL component automatically check if a user has an UPDATE right on save operations? 2.) if not, where would be the best place to perform that check? (in a cal