[Typo3-dev] backend ACLs

[Kasper Skårhøj]

Hi Sebastian,

I don't know what ACLs are and how that translates to the TYPO3
scenario. Maybe you could shortly describe how that technology would
work in TYPO3 as you see it?

Recently I discussed an extended permission system with Sune Vestergaard
from a danish TYPo3 company and I concluded that it might be a good idea
to implement a "permission handler". Basically that would be an API that
is always called in addition to checking the native TYPO3 permissions
when access to any element (also other than tables) is asked for. Then
you/Sune/Anyone could develop alternative permission schemes which would
use the API (and could disable the native system if you need that).

- kasper


On Thu, 2005-03-10 at 15:44, Sebastian Kurfuerst wrote:
> Hello,
> I want to implement Access Control Lists for pages. This will make it 
> possible to assign more BE users/groups with individually defineable 
> permissions to a page.
> 
> At the moment, I want to make the ACLs backwards compatible, introducing 
> a new database field perms_acl for storing these. Another option would 
> be to write a certain "converter" to convert the old permissions into 
> the ACL, and remove the fields perms_userid, perms_groupid, perms_user 
> and perms_group. What do you think makes more sense? In linux, the ACLs 
> can be used additionally to the normal user-group-world permissions, 
> this is why I would do it that way, but I am open to suggestions.
> 
> For storing the ACLs in the database field I think there are two 
> possibilitys- either using XML or using a serialized array. Is there any 
> preferred way for this?
> 
> I'm not sure yet if I should do that as a core patch or an extension. I 
> think the feature would be very useful for TYPO3 in general and it would 
> make sense to include that functionality in a future TYPO3 version.
> 
> Greets,
> Sebastian
> _______________________________________________
> Typo3-dev mailing list
> Typo3-dev at lists.netfielders.de
> http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev
-- 
- kasper

*******************
Happy new year! - My email address is now: 

		kasper2005 at typo3.com