joomla 2.5 access control lists (acl)

Joomla 2.5 Access Control Lists (ACL)

Jen Kramer4Web, Inc.Joomla Day GuatemalaMarch 2012

Agenda

• Understanding ACL terms• Understanding ACL hierarchy• ACL example configurations

What is ACL?

• Most people think of “who sees what”

• It’s also who creates, edits, and configures what

• Joomla separates viewing from all other permissions in a separate system (access levels)

Just because you can…

• ACL is NOT for newbies• ACL gets very complicated very

quickly• There is nothing wrong with using

the default settings, which approximate Joomla 1.5 ACL

Joomla 1.5 ACL: Review

• 7 user groups, plus public. Groups cannot be expanded

• Any user in any group can do anything the group can do

• Groups are hierarchical: inherit permissions

• 3 access levels: Public, Registered, Special

Joomla 2.5 ACL

• 7 user groups by default• Any user in any group can do

anything the group can do• Groups inherit permissions

• 3 access levels by default• Permissions NOT inherited

Users (Users – User Manager – Add New User)

Core Permissions (Site – Global Configuration – Permissions)

Access Administration Interface

User Groups (Users – Groups – Add New Group)

• User groups inherit core permissions from parents

• If you want to keep it (more) simple, keep parent as public and add required permissions

• “Flat is better than nested.” (Zen of Python)

Access Levels (Users – Access Levels – Add New Access Level)

• Access levels do NOT inherit permissions from other groups

• Possible for SU to not see certain content on front end

Now you know the terms…

• On to the planning!

Planning for ACL

• Describe the problem you are trying to solve. Example…• The general public can visit that site and

see most content. However, there is content behind the scenes for students and teachers.

• A teacher can see content specifically for teachers, all student content, and the public content.

• Students can only see student content (not teacher content) and the public content.

Planning for ACL

• Is your problem a reading problem? Or does it have to do with creating/editing/deleting content? Or both?• If it’s a reading problem, you

need to think about access levels.• If it’s an editing problem, you

might not need to think about access levels at all.

Planning for ACL

• Think about maintenance.• It’s easier to allow all content

within a category be editable or readable by a group, rather than setting individual articles.

Planning for ACL

• Think about inheritance.• Do users belong to more than

one user group? If so, how does that affect their permission to do things?• User group permissions ARE

inherited• Access levels are NOT inherited

Joomla 2.5 ACL demo

Questions?

Jen Kramer4Web, Inc.www.4webinc.comwww.joomla4web.comjen@4webinc.comTwitter: jen4web