Hi,

I made my modifications on auth.php:

        function action($action) {
            $actionModifier = null;
            if( isset($this->params['pass'][0] ) ){
                    $id = $this->params['pass'][0];
                    $model = Inflector::camelize(Inflector::singularize($this-
>params['controller']));

                    return array('model' => $model, 'foreign_key' => $id);
                }
            else
            {
            return Inflector::camelize($this->params['controller']);
            }
        }

It now checks permissions at record level by model and foreign_key
instead of alias, so there are no alias naming conventions etc. You
dont have to deny all users on acos. I think now its working as it
should.
The only rule is that you have to pass id first in the url when
calling an action.

How's that working for you? Any more improvement suggestions?

Zoltan Balint

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to