Apr 21st, 2008, 10:44 AM
Acls & Roles
I have a business requirement where a user (i.e accountant) with a role (i.e ROLE_ACCOUNT) creates an account. At creation (ROLE_ACCOUNTs can create) I create a permission (BasePermission.ADMINISTRATION) for this accountant username.
On the system I also have a user (i.e admin) with a role (i.e ROLE_ADMINISTRATOR) who needs FULL access to whatever accountants create.
What is the best way of doing this with acls? One way would be to create another admin permission for this ROLE. Is there a better, cleaner way? Maybe use some kind of inheriting?
Thank you for the help,
Apr 22nd, 2008, 02:16 PM
Apr 22nd, 2008, 02:20 PM
Thanks tkelley353. I already have implemented hierarchal roles.
Though this is not my problem. My question is is there any way for the ACLS for object with id 1 to be overridden by an administrator who didn't create object 1?
Apr 29th, 2008, 02:42 PM
104 replies and no answer? Please guys, help me out
Would a custom AccessDecisionVoter do the job for this?
May 20th, 2008, 03:12 AM