Re: ACL for users in multiple groups

2008-02-13 Thread boyracerr
I just looked up the tantalising post which Christian referred to at: https://trac.cakephp.org/ticket/2191 'Examples will be forthcoming' Did anything ever come of this? Ben --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google

Re: ACL for users in multiple groups

2008-02-13 Thread boyracerr
I'm also running into this problem and trying to come up with workarounds. I posted one idea at http://groups.google.com/group/cake-php/browse_thread/thread/b91681a12ecf35ee This is I think similar to your idea Christian in that it attempts to make the parentID more dynamic. My thought was that

Re: ACL for users in multiple groups

2008-02-12 Thread [EMAIL PROTECTED]
OK, so it doesn't seem to work. I added several AROs with the same alias ('User:1' for example) but with different parents, then I set the rights on these parent (user groups) to contradictory rights over an ACO. I then checked for the user's rights on the aco. I noticed that there are queries per

Re: ACL for users in multiple groups

2008-02-11 Thread francky06l
I did face this scenario and came up with a solution using "profile". A profile HABTM groups "with" ProfileGroup, and a user has one profile. The trick is to create an aro on each ProfileGroup and link them (ie: by associating them using the parent_id). Then a user Aro pointing to the first aro of

Re: ACL for users in multiple groups

2008-02-11 Thread aranworld
Have you tried to just add one user to two groups in the console app and see what happens? I have just been reading through the check() function in cake\libs \controller\components\acl.php [DB_ACL]. I'm not 100% sure, but based on Nate's response above, I have a feeling that this is setup to act

Re: ACL for users in multiple groups

2008-02-11 Thread [EMAIL PROTECTED]
BTW, i was thinking the other day at solutions around this and thought to duplicate the aro of a user for each group the user is in, and mark this in the alias somehow. Then retrieve all the rights for all the AROs of the user and try to solve conflicts between them. Since the user is usually in f

Re: ACL for users in multiple groups

2008-02-11 Thread [EMAIL PROTECTED]
Interesting what you're saying. It's true that by carefully nesting groups you can solve a lot of cases but this leads to creating many groups that their only purpose is to nest other groups. I know that It's also true that solving conflicts in a "user in many groups" system would probably require

Re: ACL for users in multiple groups

2008-02-11 Thread aranworld
You are right. A user can only have one parent. But that user does not necessarily have to have the exact same permissions as it's parent. If you have a user in the "car mechanic" group, but this person also has experience fixing bicycle tires, you could give that person -- and that person only

ACL for users in multiple groups

2008-02-10 Thread [EMAIL PROTECTED]
Can the current ACL system be used for this situation: the requester (user) can have multiple parents (groups) ? From what i see the inheritance in aros is 1:1 for now. What do you guys use? --~--~-~--~~~---~--~~ You received this message because you are subscribed