Will J1.6 version use ACL

[sutivnn]

Hi momentis

You cannot restrict access by user group. Currently you have 3 options which can been seen in your screenshot:

1. Access: Restrict access by Access Level
2. Access Rights: Restrict access by user
3. Upload Rights: Restrict upload by user

What confuses ME is that the upload restriction is not working as I would expect. I created a category "Test" and chose upload rights "- Nobody -".http://www.noithat-fami.net http://www.noithat190.net.vn http://www.noithat-fami.net http://www.noithat190.net.vn After that I logged into the backend with an administrator (no super user). I could create a file and put it into the category "Test". Is this a bug?

Thomas

Yes! Bug ...

[der-holgi]

As Jan already wrote Access, Access rights and Upload rights are for the front end only. What is really missing, is the permission control (permissions for create, delete, edit, edit state, edit own) for the back end. Jan, when will this feature be added?

Great work, Jan

Holgi

[Jan]

Hi, it should work, the code checks for the permissions?

I will do some tests there, see e.g.

Code: Select all

if ($canDo->get('core.edit')) {
			JToolBarHelper::editList('phocadownloadcat.edit','JTOOLBAR_EDIT');
		}

[der-holgi]

How can I set the permissions for a download category in the back end then? When I edit an article for example I can change the permissions at the bottom of the article page. But if I edit a download category I don't see anything like this. Where do I configure permissions in the backend?

Thanks
Holgi

[Jan]

Hi,

Components - Phoca Download - Control Panel - Options - in options go to "Permissions" folder. There you can set permissions for different groups.

If you set "denied" e.g. for administrator, then administrator will be not able to create category of file, etc.

Jan

[der-holgi]

Hi Jan

oh sorry, I know that you can set general permissions for create, edit, etc. What I meant are permissions for (single) download categories. I would like to configure phoca download that way that there are "administrators" for different categories. Each admin should only be able to edit those categories he has permissions for. With normal (article) categories this is possible. There you can to set permissions below each category when you edit it. Will this feature be added in phoca download, too?

Holgi

[Jan]

Hi, I think this is not good for your server and users. Then there will be combination of standard ACL with ACL directly to the categories - this can slow down the administration and maybe this will be very confusing (+ different rights for frontend - category, link, site, ...). For now I get info from users, that current ACL is very confusing and not understandable for common users.

I will take a look at it, if there can be some easy way to do it. But for now I cannot say if I will find some way and when I will find time for seeing it

Jan

[momentis]

Thanks Holgi, that is EXACTLY what I was referring to in my original post. Joomla 1.6 gives us the ability to define custom user groups. I am not a developer, but I cannot see how giving us the ability to restrict access to a PD category could substantially increase server load. That's what Joomla itself is doing with the core ACL in the core extensions.

While going to the granular level of assigning rights to a specific user may be beneficial to some, a and more flexible approach would seem to be (particularly when dealing with J1.6) to assign access to Joomla user groups. Leave Access levels to the menu items, but give us the ability to assign category access to Joomla user groups. Just let PD follow the path laid out by J1.6 ACL.

[Jan]

Hi, as I wrote many time, first the Phoca Download must be finished to be stable, then I can work on new features and make all possible tests with all possible combination of the rights and find some solution which will be not confused and not memory demanding.

Jan

[momentis]

Jan,

Any idea when (or if) we can expect to see PD implement front-end Upload restrictions based on Joomla user group? I love the component, but having to choose actual users to restrict upload rights is counterproductive.

Thanks!
Rick