8000 Some ACL documentation to get started by schmittjoh · Pull Request #62 · symfony/symfony-docs · GitHub
[go: up one dir, main page]
Skip to content

Some ACL documentation to get started #62

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 4 commits into from
Closed

Some ACL documentation to get started #62

Changes from 1 commit
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
f265007
added some ACL documentation
schmittjoh Dec 12, 2010
9b424e0
updated to method signature change
schmittjoh Dec 20, 2010
a0756d1
split documentation into an advanced, and an introduction chapter
schmittjoh Dec 22, 2010
7dadc95
added advanced chapter
schmittjoh Dec 22, 2010
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
updated to method signature change
  • Loading branch information
@schmittjoh
schmittjoh committed Dec 20, 2010
commit 9b424e0de110b0cc6dd7625001b62933530e3d83
29 changes: 14 additions & 15 deletions guides/security/acl.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -109,7 +109,6 @@ Coming back to our small example from the beginning, let's implement ACL for it.
.. code-block:: php

// BlogController.php
...
public function addCommentAction(Post $post)
{
$comment = new Comment();
Expand All @@ -133,27 +132,27 @@ Coming back to our small example from the beginning, let's implement ACL for it.
$securityIdentity = new UserSecurityIdentity($user);

// grant owner access
$acl->insertObjectAce(0, MaskBuilder::MASK_OWNER, $securityIdentity, true);
$acl->insertObjectAce($securityIdentity, MaskBuilder::MASK_OWNER);
$aclProvider->updateAcl($acl);
}
}

There are a couple of important implementation decisions in this code snippet.

There are a couple of important implementation decisions in this code snippet. For now,
I only want to highlight two:

First, you may have noticed that ``->createAcl()`` does not accept domain objects
directly, but only implementations of the ``ObjectIdentityInterface``. This
additional step of indirection allows you to work with ACLs even when you have
no actual domain object instance at hand.

The other interesting part is the ``->insertObjectAce()`` call. The first
argument indicates the position at which the ACE is inserted (0-based). If
there is already an ACE at this position it will be shifted, not replaced. The
second argument is a bitmask representing the permissions that you want to
grant. You do not have to worry about the bitmasking, we have a builder which
abstracts most of that away for you. But in short, this allows us to save many
different permissions in one database row. The third argument represents
the entity that you grant access two, and finally the forth argument tells the
system whether the entry is granting, or denying access.
no actual domain object instance at hand. This will be extremely helpful if you
want to check permissions for a large number of objects without actually hydrating
these objects.

The other interesting part is the ``->insertObjectAce()`` call. In our example,
we are granting the user who is currently logged in owner access to the comment.
The ``MaskBuilder::MASK_OWNER`` is a pre-defined integer bitmask; don't worry
the mask builder will abstract away most of the technical details, but using
this technique we can store many different permissions in one database row
which gives us a considerable boost in performance.


2. Checking Access
Expand Down
0