ePortal::ThePersistent::ACL - Access Control Lists base class for persistent objects.
ePortal::ThePersistent::ACL implements Access Control Lists (ACL functions) for ThePersistent classes.
Overloaded method. Adds ACL specific attributes properties to the object.
By default Admin may SELECT everything from database. If this is not desired then pass this parameter.
drop_admin_priv => 1
Base ACL checking function. Omit using it in end packages, use xacl_check_xxx() for specific ACL processing.
read access. This method is not used inside of
ACL but may be used in overloaded packages.
ExtendedACL read access is restricted with SQL WHERE clause.
delete current object right.
xacl_delete attribute if exists or
Owner of the object always may delete the object. This is addition to
modify current object right.
Owner of the object always may modify the object. This is addition to
change ACL on current object right.
xacl_admin attribute if exists or
Owner of the object always may change ACL if xacl field eq 'owner'. Author of the object does not get xacl_admin rights automatically.
Actually checks parent with
The object is obligatory to have a parent or overwrite this method.
ACL check for inserting children objects. Default to xacl_check_update().
This method is called from
xacl_check_insert() of a children object.
Installs default ACL values for the object during insert(). The default behavior is to take most of ACL attributes from parent object. Other ACL attributes initialized to 'owner'
This method updates
uid if not defined.
This method does not updates the object.
insert() does it.
Copy all ACL attributes from
This method does not updates the object. Call
Recursively copy ACL attributes from this object to all childrens
Sergey Rusakov, <email@example.com>