[TYPO3-mvc] Set priviliges

[Marc Bastian Heinrichs]

Hey,

>   I`m wondering how to set some priviliges ?
> 
> For example I would like to enable edit or add action only for logged 
> users or for users from some usergroup ?
> 
> I can set a bool flag in controller and pass it to fluid. But when user 
> will invoke the url with action name manualy he will be able to add new 
> record. How can I block it ?

Extbase and Fluid have no build in access control. Normally you have to
implement this on your own.
You can also have a look at an extension for an general approach for
role based access control system implemented by Michael Knoll and Daniel
Lienert at http://forge.typo3.org/projects/extension-rbac

Best
Marc Bastian