minerva icon indicating copy to clipboard operation
minerva copied to clipboard

Cleanup Access Rules with Controller Changes

Open tmaiaroto opened this issue 13 years ago • 0 comments

The controllers will have admin_ methods....This makes things more organized, but also allows us to apply a filter to the Dispatcher so that we can inspect each request and say if it's an admin_ action, restrict access to just administrators or content editors, etc.

Anyway, the non-prefixed actions will be publicly accessible...If a site needs one to not be, then another filter on the Dispatcher could be added. OR...someone could drop in their own ACL using li3_access or any other solution. So all of the, default and basic, access control should be able to be switched on/off (if it isn't already possible).

Clean up the controller stuff. There's a LOT in there under _init() etc.

Then, we still need to check document access. This will still be done in a similar fashion, but likely will only need to be done on public actions. So this task is really a cleanup for access when the controller actions (and routing) changes.

tmaiaroto avatar Feb 16 '12 17:02 tmaiaroto