if that code gose to controller then this should go to view but the
other users will see this link
<?php echo $html->link(__('Delete', true), array('action'=>'delete',
$comment['Comment']['id']), null, sprintf(__('Are you sure you want to
delete # %s?', true), $comment['Comment']['id'])); ?>
On Oct 9, 8:01 am, FrederickD <[email protected]> wrote:
> Understood. Simple is good.
>
> Yes... you would put the code in your controller and not the view.
> Here is a suggestion that you would need to customize to your own
> needs:
>
> /* Execute this code before filtering */
> function beforeFilter() {
> /* Initialize Auth component first from parent */
> parent::beforeFilter();
> if (in_array($this->action, array('view')) or
> in_array($this->action, array('edit')) or
> in_array($this->action, array('delete'))) {
> $distributor_id = $this->Distributor->field(
> 'id', array('user_id' => $this->user['id']));
> if(!$this->Dealer->find(
> 'first',
> array(
> 'conditions' => array(
> 'distributor_id' => $distributor_id,
> 'id' => $dealer_id
> ),
> 'recursive' => -1
> )
> )
> )
> {
> $this->Session->setFlash('You are not authorized for that
> information.', true);
> }
> }
>
> Something like that. I am doing the initial find on Distributor to an
> array because my results could have one that one distributor that is
> authorized to view the requested dealer. Your specifications will
> vary.
>
> I'm sure this code can be improved on, but it may get you started in
> the right direction.
>
> On Oct 9, 9:36 am, Simon <[email protected]> wrote:
>
>
>
> > yep i looked at that its pretty good i'm going to use it but for now i
> > need a simple sloution like miles j's
> > whats the good place for this code i tried in view but no luck maybe
> > controller
> > if ($comment['Comment']['user_id'] == $this->Auth->user('id')) {
> > $this->Comment->delete();
>
> > }
>
> > On Oct 9, 7:29 am, FrederickD <[email protected]> wrote:
>
> > > I believe the article has a portion of code that goes in the
> > > applicable model, or even app_model to be available system wide. Then
> > > other code goes in the applicable controller, not the view.
>
> > > If you implement this, be sure to follow all the instructions. You
> > > need both the Auth and Security components for the controller, or
> > > system wide, for the way the tutorial is written. I forgot the
> > > Security component at first and it didn't work at all.
>
> > > There are other options on how to accomplish the same task. It is good
> > > to experiment and see what works best for your application.
>
> > > On Oct 9, 9:03 am, Simon <[email protected]> wrote:
>
> > > > is this for view or controller if its for view i get error i changed
> > > > to my model but this is the error
>
> > > > Fatal error: Call to a member function User() on a non-object in
>
> > > > On Oct 9, 6:02 am, FrederickD <[email protected]> wrote:
>
> > > > > There is an interesting article about row-level access here that may
> > > > > help too:
>
> > > > >http://teknoid.wordpress.com/2009/04/22/simplistic-example-of-row-lev...
>
> > > > > It may generate some other ideas for you too.
>
> > > > > On Oct 8, 5:59 pm, Miles J <[email protected]> wrote:
>
> > > > > > Check that the logged in user matches the owner of the post.
>
> > > > > > if ($post['Comment']['user_id'] == $this->Auth->user('id')) {
> > > > > > $this->Comment->delete();
>
> > > > > > }
>
> > > > > > On Oct 8, 2:33 pm, Simon <[email protected]> wrote:
>
> > > > > > > is there any way for the users delete their own comment's not the
> > > > > > > others how can i do that ?- Hide quoted text -
>
> > > > > - Show quoted text -- Hide quoted text -
>
> > > - Show quoted text -- Hide quoted text -
>
> - Show quoted text -
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"CakePHP" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---
