tmaiaroto/minerva — Issue #17: Cleanup Access Rules with Controller Changes
Author: tmaiaroto
Created: 2012-02-16 17:04:15+00:00
State: open

The controllers will have admin_ methods....This makes things more organized, but also allows us to apply a filter to the Dispatcher so that we can inspect each request and say if it's an admin_ action, restrict access to just administrators or content editors, etc.

Anyway, the non-prefixed actions will be publicly accessible...If a site needs one to not be, then another filter on the Dispatcher could be added. OR...someone could drop in their own ACL using li3_access or any other solution. So all of the, default and basic, access control should be able to be switched on/off (if it isn't already possible).

Clean up the controller stuff. There's a LOT in there under _init() etc.

Then, we still need to check document access. This will still be done in a similar fashion, but likely will only need to be done on public actions. So this task is really a cleanup for access when the controller actions (and routing) changes.