[TYPO3-mvc] How to implement access control for actions?

[Sebastian Schreiber]

Hi Roland,
i guess you speak german.
So have a look at my recent blog post 
http://blog.schreibersebastian.de/2012/06/erweiterung-der-fe_users-mittels-extbase-1-3/
Maybe this post gives you a push for the second approach recommended by 
Jost Baron.

Sebastian


Am 12.07.2012 09:26, schrieb Jost Baron:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi Roland,
>
> Two ideas:
> 1) Create two plugins, one of these allowed to use the restricted
> actions, and one only allowed to use the non-restricted actions. Put
> the first on an access-restricted page, the second one on a public page.
>
> 2) Create a Service which provides functions to check the current
> access level by querying the currently logged in user and its groups
> via TSFE and the Extbase User-Model and use it in your controller to
> restrict actions.
>
> The first solution might be quicker to implement, the second one
> should give much more flexibility, and the service could be used in
> ViewHelpers, other services etc. as well.
>
> Greetings,
> Jost
>
> On 07/12/2012 09:00 AM, Roland wrote:
>> hi everybody,
>>
>> i would like to add access control to my delete actions and
>> unfortunatelly only found "TODO access protection" comments in the
>> blog example.
>>
>> how do you add access control to actions?
>>
>> kind regards.
>>
>> roland _______________________________________________
>> TYPO3-project-typo3v4mvc mailing list
>> TYPO3-project-typo3v4mvc at lists.typo3.org
>> http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-project-typo3v4mvc
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.11 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iQIcBAEBAgAGBQJP/nwMAAoJEG6HPMAgWtVz2EAP/AyoG07UOMblZBg/tXkAFM6g
> 34Pan9mtOD2tJEw95sPqQWKXXwKT+qP8KSBM7OGF7uczoR0KOGoCTQ63BS8TIcuS
> Ls2YU8WFB7ijlTZSapxubThGyYT873CvdfHT3Dkg1lyCHlZfYLOLCPwCZahym4QI
> CwHtd+Mpez42dGZQ3kJmkelyK1cmAZznE1hd+nkE6MXorWefs4w9wsXjIsjf41Ol
> AUZSFCTE9Et/GTHJDo8THP5fSIm0G3vzaFlmikGZN9hJPL34k/Gm8ueQXeb+xw7N
> XUumvpJkTI1bbCuHtT4lx4eP1FxmroHijajj8PDe7KuRAS0DG9tFNQUDQSzuMZEV
> thKSiQWIsGuCsVW7slRXNEClaJLygcwMF4e1hQczSWFRxvKbBINX8VqcXK3DgbFi
> 9gzygESuIz9OS/tJd4p0PjFqM/x7NoB4AdAN4Sifl3EGCfvEB4Q2WNnVrvoIyps9
> kakLQ/WAUzopSpouLXzkAYnlQ6k7+jsot1qbUGT2t8orLk4vErOi501taljrsSLs
> hHk9ZGCwYB+40pSXG3cFjHJDX++ij+S7KSSECdWcBgpcZdYMRCK15kQhK/MlUOq8
> sl6Ns0njBK393wRX9PABVD07XO5SiFo4dDOP3czdPwrSiVjjt6tfkBof2UmNeUS+
> wwhE7h+GCxrCsu7dJyWy
> =N9WB
> -----END PGP SIGNATURE-----
> _______________________________________________
> TYPO3-project-typo3v4mvc mailing list
> TYPO3-project-typo3v4mvc at lists.typo3.org
> http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-project-typo3v4mvc


-- 
Sebastian Schreiber
(Medieninformatiker B.Sc.)
(TYPO3 Certified Integrator)

Schanzenstraße 27, Schlosserei 4
D-51063 Köln

T  0221 677 88 541
M  0176 431 05 790

Skype schreibersebastian.de

me at schreibersebastian.de
www.schreibersebastian.de

Steuernummer: 217 / 5269 / 4675