[TYPO3-mvc] Set priviliges
Fernando Arconada
falcifer2001 at yahoo.es
Mon Feb 7 12:55:29 CET 2011
In the same way (permissions related) but quite different
That viewhelpers checks if there is any login or if the user have a role
doesnt verify user ACLs. ACLs are much more granular than traditional
user/groups permissions
El Mon, 07 Feb 2011 11:51:51 +0100, Søren Malling escribió:
> Have a look at the f:security viewhelpers?
>
> http://git.typo3.org/TYPO3v4/CoreProjects/MVC/fluid.git?
a=tree;f=Classes/ViewHelpers/
Security;h=1ae87ce6a5aed95cd669d28ccb33a72c2b3d584b;hb=HEAD
>
> Søren Malling
>
> TYPO3 Brugergruppe Danmark: www.typo3danmark.dk Twitter:
> twitter.com/sorenmalling
>
>
>
> On Mon, Feb 7, 2011 at 10:07 AM, Fernando Arconada
> <falcifer2001 at yahoo.es> wrote:
>> Michael version is based on DB records My version of RBAC is based con
>> Zend_Acl TypoScript, you only need TypoScript to configure roles, also
>> you could have more than one rule per object
>>
>>
>> El Mon, 07 Feb 2011 09:41:37 +0100, Marc Bastian Heinrichs escribió:
>>
>>> Hey,
>>>
>>>> I`m wondering how to set some priviliges ?
>>>>
>>>> For example I would like to enable edit or add action only for logged
>>>> users or for users from some usergroup ?
>>>>
>>>> I can set a bool flag in controller and pass it to fluid. But when
>>>> user will invoke the url with action name manualy he will be able to
>>>> add new record. How can I block it ?
>>>
>>> Extbase and Fluid have no build in access control. Normally you have
>>> to implement this on your own.
>>> You can also have a look at an extension for an general approach for
>>> role based access control system implemented by Michael Knoll and
>>> Daniel Lienert at http://forge.typo3.org/projects/extension-rbac
>>>
>>> Best
>>> Marc Bastian
>>
>> _______________________________________________
>> TYPO3-project-typo3v4mvc mailing list
>> TYPO3-project-typo3v4mvc at lists.typo3.org
>> http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-project-
typo3v4mvc
More information about the TYPO3-project-typo3v4mvc
mailing list