[Tikiwiki-devel] Re: Permissions: Could Tiki use phpGACL?

[James C. <ja...@sw...>]

Gustavo Muslera wrote:
> Dennis Heltzel wrote:
>> The decision to move to adodb was helped tremendously by Flo and Ross 
>> investigating the amount of effort and describing the costs and 
>> benefits. If someone who understands the Tiki perm system could 
>> investigate and report back on the amount of effort to implement, it 
>> would be most helpful. I'd especially like to know if it would be like 
>> Smarty and ADODB, where future releases of those programs can be 
>> "dropped in" and tested without a major re-write of our stuff.
> 
> 
> Could be implemented my suggestion of having a master "IsEnabled" 
> function or something like that, that instead of checking one by one the 
> permission that could be relevant hides them from the actual module? I 
> put something about it in 
> http://tikiwiki.org/tiki-index.php?page=TikiContextAwareness_gmuslera
> If details on how security and permissions are implemented are hidden 
> from modules, migrating to another way to do it could have a not so big 
> effect in the system.

Sounds like a good idea if there are lots of permissions checks to do, 
and they can all be put in one place.

I like the idea of abstracting this stuff away, and that should be easy 
enough to do. The unfortunate thing is that, as I see it, a lot of the 
real work will be in writing the admin UI.

Anyway, I've summarised my thoughts to date here:

http://tikiwiki.org/phpGACLDev

James