Am 04.07.2007 um 11:01 schrieb Van Daele, Koen: >> You can also do this by extending AgaviRbacSecurityUser and, >> in your overriding loadDefinitions, load user's credentials >> to edit/delete records (for example store all record ids the >> user can edit as 'record.edit.[id]' credentials. >> >> >> -veikko >> > > I can see this working as long as the number of records is rather > small, but in the case where I might need to implement this I'm > talking about some 50.000-100.000 records where one user might have > 'record.edit.[id]' for some 10.000-20.000 records, so loading all > that data as rbac permissions seems a bit much. > > Koen
That's exactly right, it quickly gets out of hand with many records. As for the suggestion to implement such a thing as the default, I will look into this as the exact same requirement has come up here at the company where I'm currently doing consulting. Cheers, David _______________________________________________ users mailing list [email protected] http://lists.agavi.org/mailman/listinfo/users
