Khaos :: KhACL

[eluser]sophistry[/eluser]
Here are observations and sample code...

1) The code example in the first post (by Neophyte) is misleading because you can't just copy and paste. It is not sample code, just documentation as it defines the objects in the wrong order. see my sample code below for the proper order.

2) There are several differences from the php gACL code referenced in the first post:

a) you cannot add AROs (Requesting Objects) to multiple groups - see PDF manual linked from first post and example about Chewie in two groups see this post for details. The KhACL requires unique names for each ARO so you can't define them more than once.

b) KhACL does not DENY by default - you must DENY your root node up front if that is the sort of permission model you want.

c) KhACL treats AXOs differently (and per Neophyte, more logically) see these posts on the thread for explanation.

3) this is not an Auth system it is an access control list that uses cascading access permissions. you could build auth with it.

see next post for code...