hsp wrote:
Let's supose I need to store in a useraccess propertie of myapp:user
node type two values: itemId and kindRight (concatenated..., maybe).
Will I get success using the propertie associating it with mixin
(multiple values)? So the user Node Helio, has the propertie
useraccess with the values: '1234,read', '1235,write', ... I must
store the multi values into the useracess propertie like a row in a
table, and when test access rights in a node, first I have got to
find if the id of that node is stored in any value of the propertie
(useraccess) and in the string that contains the nodeid has the
proper right too (read, write,...), ok?? I can do this with a query
by xpath, searching in the node with the id for that user, if
contains a string in that propertie...Am I right?
>
So, this way I can do my security verifications, before any
operations, ok?
using a query in this case is technically possible, but I doubt that
executing a query on each item access will perform reasonably.
I rather recommend to re-arrange your access control structure in a way
that allows you to address them directly. e.g. use the item id as a
property name that contains the access right value?
regards
marcel
