Khaos :: KhACL

[eluser]adamp1[/eluser]

But what is the purpose of the ACO then? Would “Forums” and “Articles” be the ACOs?

ACO's are control objects, so basically they could be as you said forums and articles, or you could have control objects for each forum post/article. Depends how much control you want.

You can nest control objects, so say you have the following:

Code:

Site
| - Forum
    | - Birds
    | - Mammals
    ` - Other
` - Articles
    | - Category 1
    ` - Category 2

Second, how would this apply to individual sections, such as forum categories? Let’s say Bob can only Edit and Delete posts in the “Birds” Forum category, while “Joe” can only moderate the “Mammals” forum?

You can create a rule allow('Bob','Birds','Edit') & allow('Bob','Birds','Edit'), same goes for joe but with a different control object.

Third, how do IDs play into this? Do I just replace the groups and names in the above examples with their appropriate MySQL UIDs instead?

The names used are for your benefit, if you look in the database tables you can provide a 'link' ID, this means you don't need to go and play around with the table but can add all your custom fields in a new table but still link the records.

The actual way the system runs is very simple and easy to understand, what's hard is a way to manage it. This is what I'm currently doing for my administration system. I would go have a look maybe at my screenshots of my ACL administration system to get a feel of it. Backend Pro

This is a very powerful solution which can be made to meet any problem, you just have to find the way you need to use it.