The Ninja Space Goat wrote:Jcart wrote:The Ninja Space Goat wrote:nope it's right just where it is
Not always.. I like to create a map of my application mixed in with user permissions and implement it either using the init() function in controller parent class automatically, or even through a plugin which could redirect if their session permission did not meet the requested action.
yea I've seen something sort of similar to that before... where privileges to controllers / actions were mapped back to a database table that was checked in my application controller and if the user doesn't have access, they never even make it to the controller/action. That is something I may implement for a system I'm working on right now, but for right now, this method is fine.
Yup, nothing wrong with the method you've used. I would say it's simply a matter of the needs of the application.
