CKFinder 1.x/Developers Guide/ASP.NET/Configuration/Access Control - Revision history

Admin: moved CKFinder/Developers Guide/ASP.NET/Configuration/Access Control to CKFinder 1.x/Developers Guide/ASP.NET/Configuration/Access Control

2010-05-28T06:46:31Z

moved CKFinder/Developers Guide/ASP.NET/Configuration/Access Control to CKFinder 1.x/Developers Guide/ASP.NET/Configuration/Access Control

Fredck at 11:58, 11 January 2008

2008-01-11T11:58:02Z

Fredck at 11:57, 11 January 2008

2008-01-11T11:57:44Z

Fredck at 11:56, 11 January 2008

2008-01-11T11:56:23Z

Show changes

W.olchawa at 14:11, 28 December 2007

2007-12-28T14:11:45Z

W.olchawa at 13:32, 28 December 2007

2007-12-28T13:32:31Z

W.olchawa at 13:00, 28 December 2007

2007-12-28T13:00:59Z

W.olchawa: CKFinder/Developers Guide/CKFinder Configuration/ASP.NET/Access Control moved to CKFinder/Developers Guide/ASP.NET/Configuration/Access Control

2007-12-28T12:02:02Z

CKFinder/Developers Guide/CKFinder Configuration/ASP.NET/Access Control moved to CKFinder/Developers Guide/ASP.NET/Configuration/Access Control

W.olchawa: New page: Access control is a way you to give your users different permissions while working on folders and files. The default setting in the config.php files gives permission to every user and perm...

2007-12-27T10:02:53Z

New page: Access control is a way you to give your users different permissions while working on folders and files. The default setting in the config.php files gives permission to every user and perm...

New page

Access control is a way you to give your users different permissions while working on folders and files. The default setting in the config.php files gives permission to every user and permits all the options. In order to change this configuration you must firstly know the basic of the '''AccessControl''' function placed in the ckfinder.config file. 

The syntax of the function:
<pre><AccessControl
role = "*"
resourceType = "*"
folder = "/"
folderView = "true"
folderCreate = "true"
folderRename = "true"
folderDelete = "true"
fileView = "true"
fileUpload = "true"
fileRename = "true"
fileDelete = "true"
/>
</pre>
The three most important parameters of the "'''Access Control'''" function are:

=== role ===

The '''role''' is an attribute which sets the type of the user. It is set to "*" as default and you may treat as "every user". You may set this parameter to other name like: "user or "limited_functions". The name of the user type will be directly connected to the function the user may use.

=== resourceType ===

The '''resourceType''' defines the resources handled in CKFinder. A resource type is nothing more than a way to group files under different paths, each one having different configuration settings. E.g. Images, Flash, Files.It is set to "*" as default and means that all of the resources are available.

=== folder ===

'''Folder''' determines where your limitations will be used. By placing the folders name you specify the place you want to put your restrictions in. It is set to '/' as default so no folder is set.

=== folder and file options ===

The rest of the variables are bool type and can be set as '''true''' or '''false'''. True of course enables an option, false disables it. Example: If you want to restrict the upload, rename or delete of files in the "Logos" folder of the resource type "Images":
<pre><AccessControl
role = "*"
resourceType = "Images"
folder = "/Logos"

fileUpload = "false"
fileRename = "false"
fileDelete = "false"
/>
</pre>
The above example only refers to file operations in the folder '/Logos' itself. It doesn't restrict operations on the folder so the user can delete or rename the folder. In order to limit users ability to modify the folder (not its context) you should change permissions in the parent folder. Example:
<pre><AccessControl
role = "*"
resourceType = "Images"
folder = "/"

folderView = "true"
folderCreate = "true"
folderRename = "false"
folderDelete = "false"
/></pre>
Now a user can view and create a folder, but he will be unable to rename or delete it. This is the best way to secure your folders from unauthorized access.

sessions In order to enable the access control options for different users you should initialize the session data by uncommenting the "session_start()" call:
<pre>$config['RoleSessionVar'] = 'CKFinder_UserRole';
//session_start();</pre>
The session is a mechanism which will allow you to give different permissions to different users. Example: In your config.php file you create three different roles:

First role '''admin''' '''(*)''':
<pre>$config['AccessControl'][] = Array(
'role' => '*',
'resourceType' => '*',
'folder' => '/',
'folderView' => false,
'folderCreate' => false,
'folderRename' => false,
'folderDelete' => false,

'fileView' => false,
'fileUpload' => false,
'fileRename' => false,
'fileDelete' => false);</pre>
Second role '''user''':
<pre>$config['AccessControl'][] = Array(
'role' => 'user',
'resourceType' => '*',
'folder' => '/',
'folderView' => true,
'folderCreate' => true,
'folderRename' => false,
'folderDelete' => false,

'fileView' => true,
'fileUpload' => true,
'fileRename' => false,
'fileDelete' => false); </pre>
Third role '''guest''':
<pre>$config['AccessControl'][] = Array(
'role' => 'guest',
'resourceType' => '*',
'folder' => '/',
'folderView' => true,
'folderCreate' => false,
'folderRename' => false,
'folderDelete' => false,

'fileView' => true,
'fileUpload' => false,
'fileRename' => false,
'fileDelete' => false);  </pre>
You've created three different users permissions.

'''Important:''' Note that when the role is set to '''*''' the user always has administrative privileges even though all the options are set to '''false'''.

Now you must create a place where you will point out the role you want to use e.g. a file. In this file you put initialize the session by writing '''session_start();''' and write the command which will access you pre-defined role:
<pre>$_SESSION['CKFinder_UserRole'] ='*' - if you want to use the admin role.
$_SESSION['CKFinder_UserRole'] ='user' - if you want to use the user role.
$_SESSION['CKFinder_UserRole'] = 'guest' - if you want to use the guest role</pre>

@@ Line 25: / Line 25: @@
 == Role<br> ==
-The '''Role''' property sets the type of user defined by the ACL. If set to asterisk (*) it is treated as "all users". You may set this parameter to other names like "Admin" or "Redator". The name of the user type will be directly connected to the function the user are allowed to use. See [[RoleSessionVar]] for more information.<br>
+The '''Role''' property sets the type of user defined by the ACL. If set to asterisk (*) it is treated as "all users". You may set this parameter to other names like "Admin" or "Redator". The name of the user type will be directly connected to the function the user are allowed to use. See [[#RoleSessionVar|RoleSessionVar]] for more information.<br>
 == ResourceType ==

@@ Line 74: / Line 74: @@
 <pre>RoleSessionVar = "CKFinder_UserRole";
 </pre>
-In the above example, the "CKFinder_UserRole" session variable value will be used to match the ACL entries defined previously. See [[Role]], above in this page.
+In the above example, the "CKFinder_UserRole" session variable value will be used to match the ACL entries defined previously. See [[#Role|Role]], above in this page.
 For example, in the config.ascx file you may the following three different roles:

← Older revision		Revision as of 14:11, 28 December 2007
Line 1:		Line 1:
		+	__TOC__
		+
	Access control is a way you to give your users different permissions while working on folders and files. The default setting in the ckfinder.config file gives permission to every user and permits all the options. In order to change this configuration you must firstly know the basic of the '''AccessControl''' function placed in the ckfinder.config file.		Access control is a way you to give your users different permissions while working on folders and files. The default setting in the ckfinder.config file gives permission to every user and permits all the options. In order to change this configuration you must firstly know the basic of the '''AccessControl''' function placed in the ckfinder.config file.

← Older revision		Revision as of 13:32, 28 December 2007
Line 1:		Line 1:
−	Access control is a way you to give your users different permissions while working on folders and files. The default setting in the config~~.php files~~ gives permission to every user and permits all the options. In order to change this configuration you must firstly know the basic of the '''AccessControl''' function placed in the ckfinder.config file.	+	Access control is a way you to give your users different permissions while working on folders and files. The default setting in the ckfinder.config file gives permission to every user and permits all the options. In order to change this configuration you must firstly know the basic of the '''AccessControl''' function placed in the ckfinder.config file.

	The syntax of the function:		The syntax of the function:

@@ Line 56: / Line 56: @@
 Now a user can view and create a folder, but he will be unable to rename or delete it. This is the best way to secure your folders from unauthorized access.
-sessions <br>In order to enable the access control options for different users you should initialize the session data by uncommenting the "session_start()" call:
+=== sessions ===
-<pre>$config['RoleSessionVar'] = 'CKFinder_UserRole';
-//session_start();</pre>
+In order to enable the access control options for different users you should initialize a session.
 The session is a mechanism which will allow you to give different permissions to different users. <br>Example:<br>In your config.php file you create three different roles:
@@ Line 106: / Line 108: @@
 '''Important:''' Note that when the role is set to '''*''' the user always has administrative privileges even though all the options are set to '''false'''.

← Older revision	Revision as of 06:46, 28 May 2010
(No difference)

← Older revision	Revision as of 12:02, 28 December 2007
(No difference)