1.
Joomla ACL
Sander Potjer - @sanderpotjer
www.sanderpotjer.nl
JUG Breda - 29 september 2015

2.
Sander Potjer

3.
- Draag graag bij aan Joomla

4.
- Draag graag bij aan Joomla
- Bedrijf: Perfect Web Team

5.
- Draag graag bij aan Joomla
- Bedrijf: Perfect Web Team
- Extensie: ACL Manager

6.
Sander Potjer
- Draag graag bij aan Joomla
- Bedrijf: Perfect Web Team
- Extensie: ACL Manager
- sander@sanderpotjer.nl
- Slides: sanderpotjer.nl

7.
Photo by: Mark Fischer
Joomla ACL

8.
ACL?!?!
ACL = Access Control List

9.
ACL?!?!
ACL = Access Control List
1) Visibility of content

10.
ACL?!?!
ACL = Access Control List
1) Visibility of content
2) Actions on objects

11.
Photo by: Chris Smith
Overview

12.
user

13.
user permissions

14.
user permissionspermissions
Site Login
Admin Login
Offline Access
Super Admin / Configure
Access Admin. Interface
Create
Delete
Edit
Edit State
Edit Own

15.
user permissions
group

16.
user permissions
access level
group

17.
user permissions
access level
group

18.
user permissions
access level
group

19.
user permissions
access level
group

20.
user permissions
access level
group

21.
user permissions
access level
group

22.
user permissions
access level
role

23.
user permissions
Site Login
Admin Login
Offline Access
Super Admin / Configure
Access Admin. Interface
Create
Delete
Edit
Edit State
Edit Own
access level
group

24.
ACL levels
Photo by: Ian Sane

25.
Global Configuration permissions
Component permissions
Category / Module permissions
Article permissions

26.
Photo by: Andreas
Inheritance

27.
Global Configuration permissions
Component permissions
Category / Module permissions
Article permissions

28.
Global Configuration permissions
Component permissions
Category / Module permissions
Article permissions

29.
Global Configuration permissions
Component permissions
Category / Module permissions
Article permissions
not set
inherited
inherited
inherited

30.
Global Configuration permissions
Component permissions
Category / Module permissions
Article permissions
allowed
inherited
inherited
inherited

31.
Global Configuration permissions
Component permissions
Category / Module permissions
Article permissions
allowed
inherited
denied
locked

32.
Global Configuration permissions
Component permissions
Category / Module permissions
Article permissions
not set
allowed
inherited
inherited

33.
Global Configuration permissions
Component permissions
Category / Module permissions
Article permissions
not set
inherited
allowed
inherited

34.
Global Configuration permissions
Component permissions
Category / Module permissions
Article permissions
denied
allowed
locked
locked

35.
Global Configuration permissions
Component permissions
Category / Module permissions
Article permissions
denied
allowed
locked
locked
CONFLICT

36.
Photo by: Andreas
Inheritance #2

37.
Inheriting example for ‘Create’
Level 1
Level 2
Level 3
Level 4

38.
Inheriting example for ‘Create’
Level 1
Level 2
Level 3
Level 4

39.
Inheriting example for ‘Create’
Level 1
Level 2
Level 3
Level 4

40.
Inheriting example for ‘Create’
Level 1
Level 2
Level 3
Level 4

41.
Photo by: Chris Smith
Overview?????

42.
Action: Edit State
• Global configuration
– default permissions for each action and group
• Component options (permissions)
– can override the default permissions for a component
• Category
– can override the default permissions and component options
– applies to components with categories (Articles, Banners, etc...)
• Object
– can override all permissions above for an object
– only applies to articles in Joomla 1.6 core

43.
Many permission screens....
• Global configuration
– default permissions for each action and group
• Component options (permissions)
– can override the default permissions for a component
• Category
– can override the default permissions and component options
– applies to components with categories (Articles, Banners, etc...)
• Object
– can override all permissions above for an object
– only applies to articles in Joomla 1.6 core

44.
Many permission screens....
• Global configuration
– default permissions for each action and group
• Component options (permissions)
– can override the default permissions for a component
• Category
– can override the default permissions and component options
– applies to components with categories (Articles, Banners, etc...)
• Object
– can override all permissions above for an object
– only applies to articles in Joomla 1.6 core

45.
Many permission screens....
• Global configuration
– default permissions for each action and group
• Component options (permissions)
– can override the default permissions for a component
• Category
– can override the default permissions and component options
– applies to components with categories (Articles, Banners, etc...)
• Object
– can override all permissions above for an object
– only applies to articles in Joomla 1.6 core

46.
Many permission screens....
• Global configuration
– default permissions for each action and group
• Component options (permissions)
– can override the default permissions for a component
• Category
– can override the default permissions and component options
– applies to components with categories (Articles, Banners, etc...)
• Object
– can override all permissions above for an object
– only applies to articles in Joomla 1.6 core

47.
Idea?!

48.
Action: Edit State
• Global configuration
– default permissions for each action and group
• Component options (permissions)
– can override the default permissions for a component
• Category
– can override the default permissions and component options
– applies to components with categories (Articles, Banners, etc...)
• Object
– can override all permissions above for an object
– only applies to articles in Joomla 1.6 core
ACL Manager for Joomla! 1.6

49.
ACL Manager for Joomla! 1.6
• USA group
– Allow on edit ‘USA’ category
– Deny on edit ‘Europe’ category
• Europe group
– Allow on edit ‘Europe’ category
– Deny on edit ‘USA’ category
• User in USA & Europe group
– Deny on edit ‘Europe’ category
– Deny on edit ‘USA’ category
– Deny always win
www.aclmanager.net

50.
Resources
Photo by: Schub@

51.
Is your extension really Joomla 1.7 ready?
http://www.aclmanager.net/news/general/28-is-your-extension-really-joomla-17-ready
How to add basic ACL support to your extension
http://www.aclmanager.net/news/general/31-how-to-add-basic-acl-support-to-your-
extension
Developing a MVC Component/Adding ACL
http://docs.joomla.org/J2.5:Developing_a_MVC_Component/Adding_ACL
Adding ACL rules to your component
http://docs.joomla.org/Adding_ACL_rules_to_your_component
Access Control List Tutorial
http://docs.joomla.org/J2.5:Access_Control_List_Tutorial
Support for ACL permissions per module in com_modules
https://github.com/joomla/joomla-cms/pull/1930/files
JHelperContent::getActions() improvements
https://github.com/joomla/joomla-cms/pull/2728
This presentation
http://slideshare.net/sanderpotjer/