Wiktor: Created page with '{{CKFinder_2.x_SSI_Warning}} == ACL – Access Control List == CKFinder comes with a powerful ACL feature, which makes it possible to define ACL settings at any level in the rep…'

2010-05-14T20:09:58Z

Created page with '{{CKFinder_2.x_SSI_Warning}} == ACL – Access Control List == CKFinder comes with a powerful ACL feature, which makes it possible to define ACL settings at any level in the rep…'

New page

{{CKFinder_2.x_SSI_Warning}}
== ACL – Access Control List ==

CKFinder comes with a powerful ACL feature, which makes it possible to define ACL settings at any level in the repository directories and subfolders. It implements also a simple role system for ACLs. <br>

In the configuration file, many <AccessControl /> nodes can be created to define ACLs. All attributes defined in AccessControl nodes are optional, and each one overrides ACLs defined for parent folders.

For example, suppose the following ACLs are defined:
<pre><AccessControl
role = "*"
resourceType = "*"
folder = "/"
folderView = "true"
folderCreate = "true"
fileUpload = "true"
/>
<AccessControl
role = "*"
resourceType = "Images"
folder = "/My Test/Other Folder/"
fileUpload = "false"
/></pre>
The above should then reflect in the connector execution by returning the following values for FileUpload:

* Type = Files - / : true
* Type = Files - /My Test/ : true
* Type = Files - /My Test/Other Folder/ : true
* Type = Images - /My Test/ : true
* Type = Images - /My Test/Other Folder/ : false
* Type = Images - /My Test/Other Folder/Folder 3/ : false

<br>The “*” wildcard may be used for “role” and “resurceType” to include all.

=== Roles ===

By setting the '''roleSessionVar''' attribute, the end developer can point the connector to a session variable which contains the name of the role of the session user. This name would then be used to calculate the ACL.''''

=== ACL Representation ===

When sending ACL information to CKFinder, the connector sends a “bit mask” represented by an integer value. Each folder contains a computed aggregated ACL bit mask.

The following is the representation of all used bits in the mask:
<pre>enum AccessControlRules
{
FolderView = 1,
FolderCreate = 2,
FolderRename = 4,
FolderDelete = 8,
FileView = 16,
FileUpload = 32,
FileRename = 64,
FileDelete = 128
}</pre>

CKFinder 2.x/Server Side Integration/Access Control List - Revision history

Wiktor: Created page with '{{CKFinder_2.x_SSI_Warning}} == ACL – Access Control List == CKFinder comes with a powerful ACL feature, which makes it possible to define ACL settings at any level in the rep…'