Even though sfGuardPlugin is a great ACL plug-in; it unfortunately cannot handle Row Level Access. In most of my personal projects I require such a level of control and the solutions chosen always feel a bit ..hackish..
For those of you who do not know what Row Level Access is:
Usually you grant access to a part of your application based on User permissions, for example a module ‘Customer’. But what happens if you want to grant a particular User view rights on just one, or a few, of the customers listed in that table? That is where Row Level Access comes into play.
It would seem that CakePHP has some out of the box solutions (or at least, easily applied) but I have not yet come upon one for symfony. For your and my own reference is here a URL about a Row Level Access article with Cake: http://aidanlister.com/2009/05/implementing-row-level-access-control-in-cakephp/
I’d love to create a plug-in for this but I am somewhat limited on time ( I have more projects currently than I can finish in a reasonable amount of time) so I was hoping that maybe someone out there knows a plug-in which offers this functionality?
If you happen to read this post and know of one, please comment on this post where it is! Thanks!
Comments
2 responses to “Row level ACL on symfony”
I would REALLY love such a thing also.
There actually is by now! After writing this blog post and not finding anything I just had to write a plugin for that, see: http://www.naenius.com/2009/10/released-a-new-version-of-sfpropelrowlevelaccessbehaviorplugin/
A Doctrine port has been made but I can’t seem to find it right now. If you browse on the plugins pages of symfony you will probably find it.