Archived

Difference between revisions of "Access Control System In Joomla 1.6"

From Joomla! Documentation

 
(16 intermediate revisions by 6 users not shown)
Line 1: Line 1:
{{RightTOC}}
+
{{version|1.6}}{{archived|34362|Access Control List|reason=This page has not been maintained in some time and no longer contains information relevant or current. Joomla! 1.6 is no longer supported.|cat=Joomla! 1.6}}
==Overview==
 
===Sections===
 
Sections are used to group rules, actions, assets and assetgroups for each extension using the table jos_access_sections. This allows us to have completely separate ACL systems for different extensions.
 
 
 
===Users===
 
These are users stored in jos_users table. Please note that gid and usertype fields are only there for legacy purposes and are not used in the current ACL system.
 
Users can be mapped to rules via jos_user_rule_map table.
 
In phpGACL, users were called AROs (Access Request Object).
 
 
 
===User Groups===
 
These are user groups that are held in table jos_usergroups. You can have nested user groups. Each group obviously can hold an unlimited number of users and each user can be assigned to an unlimited number of user groups. These relations are held in the table jos_user_usergroup_map.
 
User groups can be mapped to rules via the jos_usergroup_rule_map table.
 
 
 
===Actions===
 
Actions are things your users will perform such as logging in to backend
 
 
 
===Assets===
 
Assets are items that you need to set access control on. For example each article on your site can be an asset and you can set edit permission for them. Currently these are not used in core.
 
===Asset Groups===
 
These are used for creating different view permissions for a combination of usergroups. (???)
 
How this is achieved:
 
* First a view action is created with access type 3. (eg. core.view)
 
* Then an asset group is created with some user groups in it.
 
* A rule is set with the name convention {action_name}.{asset_group_id} (eg. core.view.1 for Public)
 
* Both action, assetgroup and user groups are mapped to this rule.
 
*When three of them maps to the same rule JUser::getAuthorisedLevels() will also return the new asset group id.
 
===Rules===
 
Rules are combinations of actions and usergroups (or users) and optionally assets
 
There are three types of rules:
 
* Type 1: These are rules that allow a user or user group to do an action. For example user group X can log in to backend.
 
* Type 2: These are rules that allow a user or user group to do an action on an asset. For example user group X can edit an article with the id of Y.
 
* Type 3: These are rules that allow a user or user group to do an action (mostly view) on an asset group. For example user group X can view articles with the asset group of Y. (???)
 
==Library==
 
TODO
 
==Examples==
 
===Core Access Levels===
 
There are three access levels in core by default Public, Registered, Special. These are access levels. For them we use the action ''core.view''. Let's use '''Special''' for our example:
 
First of all there is an asset group named Special. We need to tie some user groups to it and selecting Manager is enough. Because the system will automatically include its child groups (being Administrator and Super Administrator by default) The rule needed for this level is ''core.view.3''. As you remember naming convention is action_name.asset_group_id and here our id is 3.
 
 
 
==Database tables==
 
 
 
It seems that this diagram has been deprecated in favor of much simpler structure.
 
 
 
* jos_assets: id, parent_id, lft, rgt, level, name, title, rules
 
* jos_usergroups: id, parent_id, lft, rgt, title
 
* jos_user_usergroup_map: user_id, group_id
 
* jos_viewlevels: id, title, ordering, rules
 
 
 
* jos_categories and jos_content contain foreign key asset_id
 
* Rules field is JSON encoded string with content like this: '{"core.admin":{"7":1},"core.manage":{"6":1}}'
 
 
 
-- Matias 7-Mar-2010
 
 
 
[[Image:Dia_acl_base.png]]
 
 
 
[[Category:Joomla! 1.6]]
 

Latest revision as of 08:49, 27 May 2013

This page has been archived. This page contains information for an unsupported Joomla! version or is no longer relevant. It exists only as a historical reference, it will not be improved and its content may be incomplete and/or contain broken links.