Question about ACL

2010-09-03 Thread Roland Pish
Hi there.

I'm starting with a project which will need the use of ACL to control
permissions.

These are the tables involved in permissions:

Users (a user always will belong to a group)
Groups
Operations

Permissions will be established only between Groups and Operations
like: Group 1 are granted access for the Operation 1, Operation 2, and
Operation 3. Group 2 are granted access only for Operation 2, and so
on.
New groups can be added.

I just created the db schema for cake acl tables, and I'm noticing
that aros_acos table has the fields: _create, _read, _update, _delete
which I believe are used for permissions on controllers actions, is
this correct?

So in my scenario, as I won't establish permissions based on
controllers actions, these fields wouldn't be used right?

Or am I designing permissions in a wrong way?

Thanks in advance

Check out the new CakePHP Questions site http://cakeqs.org and help others with 
their CakePHP related questions.

You received this message because you are subscribed to the Google Groups 
"CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to
cake-php+unsubscr...@googlegroups.com For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en


Question about ACL and Groups, TREE groups and user in these group

2009-05-19 Thread Aziz

Hello everyone,

First of all, excuse my english, i will make all effort for being
clear.

I have a question about ACL and/or Groups.

I created an application with CakePHP with "Users" and "Groups".
Groups are managed by a classic TREE behavior and everything is
working fine.
Users are attached to one Group, Groups have all one parent (except
for the ROOT node of course).

So now my question is :
With the ACL and/or Auth component, is it possible to give CRUD rights
(for any controller in the application or at least one controller) for
ONE user regards all users in this group and in his sub-group ?

Juste a little example for a better comprehension : let's imagine that
we have 4 groups :

G1
_G2
__G4
_G3

G1 is the root, G2 is in G1, G4 is in G2 (and of course also in G1)
and G3 is in G1.

Smith is the responsible (admin) of G2.
Bob is a simple user of G2.
Adam is the responsible (admin) of G4.
John is a simple user of G3.

Smith have CRUD rights for all people in his group G2 : Bob and Adam.
He can delete them, create other users in G2 etc... and when he use an
action from a controller (for example a "index()"), he can only view
users from his group/sub-group
Smith can't do anything on John because he's not in his group or sub-
group.

I have already implemented the Auth part : login/logout is ok. But now
i have no idea if what i want to do is possible with CakePHP.
Thanks a lot for any help for my problem, it's been several days that
i try to implement that whithout success...

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
"CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to 
cake-php+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~--~~~~--~~--~--~---



Re: Question about ACL

2008-10-23 Thread Penfold

Have a look at

http://www.cakephpforum.net/index.php?showtopic=745


On 23 Oct, 08:34, "[EMAIL PROTECTED]"
<[EMAIL PROTECTED]> wrote:
> HI
> I have a complex system to manage.
> My system is this:
> I have many users organized in groups and teams.
> A users can belong to many groups  and  It can belong to many teams.
> A team belongs to a group.
> Then  there are many services. A user has many services , these
> services are the services that the user has but also the service that
> teams and groups (that the users belongs to)  have.
> Every service is made by some action/controller and a service can
> access only to the action/controller that are its component.
>
> I would manage all with ACL in CAKEPHP.
> Can someone give me help about this?
> Many Thanks
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
"CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~--~~~~--~~--~--~---



Question about ACL

2008-10-23 Thread [EMAIL PROTECTED]

HI
I have a complex system to manage.
My system is this:
I have many users organized in groups and teams.
A users can belong to many groups  and  It can belong to many teams.
A team belongs to a group.
Then  there are many services. A user has many services , these
services are the services that the user has but also the service that
teams and groups (that the users belongs to)  have.
Every service is made by some action/controller and a service can
access only to the action/controller that are its component.

I would manage all with ACL in CAKEPHP.
Can someone give me help about this?
Many Thanks

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
"CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~--~~~~--~~--~--~---