3,035
edits
| Line 13: | Line 13: | ||
// Grants access to all Users and Groups controller actions. | // Grants access to all Users and Groups controller actions. | ||
Users:*,Groups:* | Users:*,Groups:* | ||
// Grants access to all possible controllers and actions. | // Grants access to all possible controllers and actions. | ||
*:* | *:* | ||
// Grants access to only Editor actions. | // Grants access to only Editor actions. | ||
Reviewers:* | Reviewers:* | ||
// Grants access to only review adding. | // Grants access to only review adding. | ||
Reviews:add | Reviews:add | ||
Our implementation deviates from the 33 lines of magic approach in two ways: | |||
* aclException checks | |||
* user->group map is a many-to-many relationship using a map table instead of a simple group_id injected into the users table | |||
== Using Permissions in Controllers == | == Using Permissions in Controllers == | ||
edits