Difference between
#2 and
#3 of
ACL and RBAC
Changes
Title
unchanged
ACL and RBAC
Category
unchanged
How-tos
Yii version
unchanged
Tags
unchanged
ACL, rbac, Tree structure, authorization, security, scalability
Content
changed
[...]
How the objects fit together
------------------
What the ACL-Extension does is basically to put the ACL-Objects (Aros, Aco) in two tree-hierarchies (in each tree are only objects of one type).
This implies that ACL-Objects can have parents and children, while chil
dren inherit the permissions of their parents.
Note that hierarchies are _explicitly_ supported for both Aros _and_ Acos. Also, each Aro and Aco can have _multiple_ parents. The depth of the hierarchy is unlimited, the lookup is non-recursive.
Permission Lookup Layers
------------------[...]