Skip to content

Commit a73bc77

Browse files
Michael Kleinweaverryan
Michael Klein
authored andcommitted
make the advantage and disadvantage of the ACL more clear
For me as a SF2 developer to handle data manipulation was pretty new to me. So I asked in the irc and searched the web and finally landed on this documentation page. So it looked like this is the way to go and it is a usual thing like using bundles in SF2. But it isnt, it is a far more complex permission handler which will work upfront and is not that much flexible. I would highly recommend to add at least some notes, so that other developers getting a note on that and can maybe save some days of work as the opposite of me.
1 parent f38b4ad commit a73bc77

File tree

1 file changed

+13
-0
lines changed

1 file changed

+13
-0
lines changed

cookbook/security/acl.rst

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -216,3 +216,16 @@ added above:
216216
The user is now allowed to view, edit, delete, and un-delete objects.
217217

218218
.. _`MongoDBAclBundle`: https://github.com/IamPersistent/MongoDBAclBundle
219+
220+
Looking for alternatives
221+
------------------------
222+
223+
For more simple use cases this seems to be an overhead for many developer.
224+
As a downside there is that in case you change the permissions in any way,
225+
you need to change all the existing granted permissions as well. As well
226+
when you want to change a specific part of the ACL you need to understand
227+
the structure and process of this complex voter. So you should consider if
228+
a classical and simple conditional permission check would fit for you.
229+
Some do it with the existing voter structure as well, or custom build solutions.
230+
231+
.. _`Voters`: http://symfony.com/doc/current/cookbook/security/voters.html

0 commit comments

Comments
 (0)