Re: [PHP-DB] Role Based Access Control and Role Based Security

[email protected] (Bastien Koert)
Newsgroups php.db
Message-ID <[email protected]>
I developed an implementation that combines roles with fine grained
access. Each role is given a set of permissions ( the current set is
global to the app, the next will be per application) in it, I specify
a db field ( varchar 255) that holds a binary permission scheme. I.E.
10011110100001111 etc where each value is an on / off 1/0 permission
set. This is mapped to a constant for each position so that each
module can have a set of permissions like ADD, DELETE etc.

This scheme then controls the menu / buttons to produce a workflow for
the application.

Bastien

On Monday, January 25, 2010, Abah Joseph <[email protected]> wrote:
> Hi list, thank to the wonderful people on this list.
>
> I am planning a system that require access to the system based on
> Role, i love the implementation in SMF(www.simplemachines.org) that
> every modules can define there own role and but i don`t know how.
>
> Users will be in group like Administrator, Editor, Manager etc (i have
> seen such on Joomla) and each module can define the action each group
> can perform e.g
> An advertisement module will define something like 'Can add', 'Can
> edit own', 'can edit any',  etc.. i am wondering what the database
> structure/PHP Class will look like.
>
> I found a database Schema on Access Control at
> http://www.databaseanswers.org/data_models/access_control/index.htm
> but i can`t figure out the implementation in PHP.
> Any idea will help.
>
> --
> Share with free mind!
> Join the world largest open forum for hackers and programmers.
> http://www.tuwana.com
>
> --
> PHP Database Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>

-- 

Bastien

Cat, the other other white meat
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.