Skip to content

Instantly share code, notes, and snippets.

@visay

visay/Policy.yaml

Created December 14, 2012 08:12
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save visay/4283570 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save visay/4283570 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
Policy.yaml
resources:
entities:
'Acme\MyPackage\Domain\Model\User':
Acme_MyPackage_User_Admin: 'ANY'
Acme_MyPackage_User_Me: 'current.securityContext.account.user == this.user && this.user != NULL'
roles:
SimpleUser: []
Administrator: [SimpleUser]
acls:
SimpleUser:
entities:
'Acme\MyPackage\Domain\Model\User':
Acme_MyPackage_User_Me: GRANT
Administrator:
entities:
'Acme\MyPackage\Domain\Model\User':
Acme_MyPackage_User_Admin: GRANT
@kdambekalns
Copy link

kdambekalns commented Dec 14, 2012

The acls section needs to use the "Acme_MyPackage_User_Me" names

@kdambekalns
Copy link

kdambekalns commented Dec 14, 2012 

acls:
  SimpleUser:
    entities:
      Acme_MyPackage_User_Me: GRANT

@visay
Copy link
Author

visay commented Dec 14, 2012

So it should be:

resources:
entities:
'Acme\MyPackage\Domain\Model\User':
Acme_MyPackage_User_Admin: 'ANY'
Acme_MyPackage_User_Me: 'current.securityContext.account.user == this.user && this.user != NULL'

roles:
SimpleUser: []
Administrator: [SimpleUser]

acls:
SimpleUser:
entities:
Acme_MyPackage_User_Me: GRANT
Administrator:
entities:
Acme_MyPackage_User_Admin: GRANT

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment