CKFinder 1.x/Developers Guide/PHP/Configuration/Access Control - Revision history

Admin: moved CKFinder/Developers Guide/PHP/Configuration/Access Control to CKFinder 1.x/Developers Guide/PHP/Configuration/Access Control

2010-05-28T06:46:33Z

2010-01-18T12:11:05Z

2009-03-12T10:01:37Z

‎Example 1

2009-03-12T09:30:47Z

‎Example 3

2009-03-12T09:29:47Z

‎Example 2

2009-03-12T09:29:08Z

‎The syntax of the ACL Items

2009-03-12T09:27:50Z

‎Example 1

2008-02-16T08:01:11Z

‎Sessions

2008-01-11T09:26:01Z

2008-01-11T09:22:16Z

@@ Line 42: / Line 42: @@
 'fileDelete' =&gt; false);
 </pre>
-The above example only refers to file operations in the folder '/Logos' itself. It doesn't restrict operations on the folder so the user can delete or rename the folder. In order to limit users ability to modify the folder (not its context) you should change permissions in the parent folder.
+The above example only refers to file operations in the folder '/Logos' itself. It doesn't restrict operations on the folder so the user can delete or rename the folder. In order to limit users ability to modify the folder (not its contents) you should change permissions in the parent folder.
 ==== Example 2 ====

@@ Line 78: / Line 78: @@
 'resourceType' =&gt; '*',
 'folder' =&gt; '/',
 'folderView' =&gt; true,
 'folderCreate' =&gt; false,
@@ Line 92: / Line 93: @@
 'resourceType' =&gt; '*',
 'folder' =&gt; '/',
 'folderView' =&gt; true,
 'folderCreate' =&gt; true,
@@ Line 106: / Line 108: @@
 'resourceType' =&gt; '*',
 'folder' =&gt; '/',
 'folderView' =&gt; true,
 'folderCreate' =&gt; true,

@@ Line 49: / Line 49: @@
 'resourceType' =&gt; 'Images',
 'folder' =&gt; '/',
 'folderView' =&gt; true,
 'folderCreate' =&gt; true,
 'folderRename' =&gt; false,
-'folderDelete' =&gt; false);</pre>
+'folderDelete' =&gt; false
 Now a user can view and create a folder, but he will be unable to rename or delete it.&nbsp;<br>

@@ Line 9: / Line 9: @@
 'role' =&gt; '*',
 'resourceType' =&gt; '*',
 'folder' =&gt; '/',
 'folderView' =&gt; true,
 'folderCreate' =&gt; true,

@@ Line 30: / Line 30: @@
 'resourceType' =&gt; 'Images',
 'folder' =&gt; '/Logos',
 'fileUpload' =&gt; false,
 'fileRename' =&gt; false,
-'fileDelete' =&gt; false);</pre>
+'fileDelete' =&gt; false);
 The above example only refers to file operations in the folder '/Logos' itself. It doesn't restrict operations on the folder so the user can delete or rename the folder. In order to limit users ability to modify the folder (not its context) you should change permissions in the parent folder.

← Older revision	Revision as of 06:46, 28 May 2010
(No difference)

@@ Line 48: / Line 48: @@
 === Sessions ===
 The roleSessionVar is a session variable name that CKFinder must use to retrieve the "role" of the current user.
 <pre>$config['RoleSessionVar'] = 'CKFinder_UserRole';</pre>
@@ Line 55: / Line 53: @@
 <pre>$_SESSION['CKFinder_UserRole'] = "admin";
 </pre>
 ==== Example 3 ====

@@ Line 3: / Line 3: @@
 Access control is a way you to give your users different permissions while working on folders and files. The default setting in the config.php file gives permission to every user and permits all the options. In order to change this configuration you must firstly know the basic of the '''$config['AccessControl']''' settings placed in the config.php file.&nbsp;
-=== The syntax of the ACL Items<br> ===
+=== The syntax of the ACL Items ===
 The syntax of the ACL entries is as followed:
@@ Line 19: / Line 19: @@
 'fileRename' =&gt; true,
 'fileDelete' =&gt; true);</pre>
-* '''role'''<br>The role is an attribute which sets the type of the user. It is set to "*" as default and you may treat as 'everybody'. You may set this parameter to other name like: 'user' or 'limited_functions'. The name of the user type will be directly connected to the function the user may use.<br>
+{{ckfinder_acl_explanation}}
 <br>

@@ Line 109: / Line 109: @@
 'fileRename' =&gt; true,
 'fileDelete' =&gt; true); &nbsp;</pre>
-You've created three different users permissions. The default user (guest) is allowed to browse all files and folders. Registered user has also the ability to upload files and create folders. The administrator has full permissions.<br>
+You've created three different users permissions. The default user (everybody) is allowed to browse all files and folders. Registered user has also the ability to upload files and create folders. The administrator has full permissions.<br>
 '''''<br>'''''