Will be a better access control in Joomla RC* ?

Locked
petoroth
Joomla! Apprentice
Joomla! Apprentice
Posts: 36
Joined: Mon May 07, 2007 8:53 am
Location: Slovakia, Europe

Will be a better access control in Joomla RC* ?

Post by petoroth » Thu Sep 13, 2007 12:36 pm

For 4 months I wrote in: http://forum.joomla.org/index.php/topic ... #msg807735
I don't like user managment in Joomla.
I thought that is normal, that the administrator (in any CMS) can make so many user groups, he will  - to make some content items vissible only for specific users. I don't mind registred users in Joomla, but registred users they should belong to a specific group, for them is specific content visible.
So I propose to solve this problem in Joomla team.


Now the Joomla 1.5RC2 is avaible and this problem is still actual. How many months should I wait fot better acces control in Joomla. I think it should be a change in the CORE of Joomla system. I think it is not a work for any component or plugin.

User avatar
MuffinDCC
Joomla! Explorer
Joomla! Explorer
Posts: 347
Joined: Wed Nov 22, 2006 9:07 am
Location: UK
Contact:

Re: Will be a better access control in Joomla RC* ?

Post by MuffinDCC » Thu Sep 13, 2007 8:33 pm

According to some posts I have read, Andrew Eddie has developed RokACL which is a powerful ACL component for 1.5 and should be fully incorporated into Joomla 1.6

User avatar
masterchief
Joomla! Hero
Joomla! Hero
Posts: 2316
Joined: Fri Aug 12, 2005 2:45 am
Location: Brisbane, Australia
Contact:

Re: Will be a better access control in Joomla RC* ?

Post by masterchief » Thu Sep 13, 2007 10:10 pm

Yep, that's the plan anyway.
Andrew Eddie - Tweet @AndrewEddie
<><
http://eddify.me
http://www.kiva.org/team/joomla - Got Joomla for free? Pay it forward and help fight poverty.

Asphyx
Joomla! Hero
Joomla! Hero
Posts: 2454
Joined: Sun Aug 28, 2005 5:03 pm

Re: Will be a better access control in Joomla RC* ?

Post by Asphyx » Sun Sep 16, 2007 3:31 pm

Glad I found this thread...saves me from making a new topic! LOL

Andrew I have a question (consider it a suggestion if the answer is no LOL)

Does any of the planned ACL (I suppose ROK is what is planned) have a system to limit or ban users from specific domains?
I have a site that is getting a lot of spam user regs from mail.ru
In VBull I can ban certain email accounts from registering and it notifies the user the email is not valid.
Now I know Joomla wisely allows you to send a confirmation email they must use to activate the account, and even though that stops the spammers from activating (in most cases) it still clutters up the userlist with a bunch of unactivated accounts.
will the new ACL system have a few good banning parameters we could set?

petoroth
Joomla! Apprentice
Joomla! Apprentice
Posts: 36
Joined: Mon May 07, 2007 8:53 am
Location: Slovakia, Europe

Re: Will be a better access control in Joomla RC* ?

Post by petoroth » Sun Sep 16, 2007 5:26 pm

Thanks for answers
I have 2 questions:
Is RokACL anywhere possible to use it, or test?
How long do I have to wait for Joomla 1.6 with a correct ACL build in CORE system of Joomla?

User avatar
masterchief
Joomla! Hero
Joomla! Hero
Posts: 2316
Joined: Fri Aug 12, 2005 2:45 am
Location: Brisbane, Australia
Contact:

Re: Will be a better access control in Joomla RC* ?

Post by masterchief » Sun Sep 16, 2007 9:31 pm

@Asphyx

Not in ACL but I've flagged that sort of thing for consideration in 1.6.  You could possibly get a combination of user plugins to work this way.

@petoroth

RokACL is available as a proof-of-concept on the RocketWerx project on Joomlacode.
http://joomlacode.org/gf/project/rocketwerx/scmsvn/

It's not really in the form I'd like it for the general masses to use and only the admin interface is done at present.  However, it will be available for 1.5 but will probably require a few manual hacks to allow it to integrate with com_content.  Availability is subject to a few me winning a few commercial projects that will help fund this.  My hope is then that this proof testing in 1.5 land means that the whole shebang can be just dropped into 1.6 in a very mature state early in the development cycle.
Andrew Eddie - Tweet @AndrewEddie
<><
http://eddify.me
http://www.kiva.org/team/joomla - Got Joomla for free? Pay it forward and help fight poverty.

Asphyx
Joomla! Hero
Joomla! Hero
Posts: 2454
Joined: Sun Aug 28, 2005 5:03 pm

Re: Will be a better access control in Joomla RC* ?

Post by Asphyx » Sun Sep 16, 2007 11:42 pm

Thanks Andrew....

Now that I think about it...what I want would probably be better done in the registration component anyway....
ACL is tough enough to try and tackle that in there as well...
Look forward to your first beta on Rok...

petoroth
Joomla! Apprentice
Joomla! Apprentice
Posts: 36
Joined: Mon May 07, 2007 8:53 am
Location: Slovakia, Europe

Re: Will be a better access control in Joomla RC* ?

Post by petoroth » Mon Sep 17, 2007 5:33 pm

To masterchief:

When I good understand, you are the author of the project ROKACL.
In your reply I didn´t find, how long should I wait for minimally test version of ROKACL?
In the site you mentioned the are only codes of these files.

User avatar
masterchief
Joomla! Hero
Joomla! Hero
Posts: 2316
Joined: Fri Aug 12, 2005 2:45 am
Location: Brisbane, Australia
Contact:

Re: Will be a better access control in Joomla RC* ?

Post by masterchief » Mon Sep 17, 2007 9:03 pm

Hi petoroth

I don't have a date yet unfortunately.  It depends on my workloads (which are pretty high at the moment).
Andrew Eddie - Tweet @AndrewEddie
<><
http://eddify.me
http://www.kiva.org/team/joomla - Got Joomla for free? Pay it forward and help fight poverty.

petoroth
Joomla! Apprentice
Joomla! Apprentice
Posts: 36
Joined: Mon May 07, 2007 8:53 am
Location: Slovakia, Europe

Re: Will be a better access control in Joomla RC* ?

Post by petoroth » Tue Sep 18, 2007 3:39 pm

To: masterchief

Ok, I will wait...

Btw.: What do you think about another components or plugins to improve the ACL in Joomla?
For example:  JUGA, iACLMinus and another (http://extensions.joomla.org/index.php? ... &Itemid=35)

User avatar
masterchief
Joomla! Hero
Joomla! Hero
Posts: 2316
Joined: Fri Aug 12, 2005 2:45 am
Location: Brisbane, Australia
Contact:

Re: Will be a better access control in Joomla RC* ?

Post by masterchief » Tue Sep 18, 2007 8:58 pm

I haven't looked at them, sorry.
Andrew Eddie - Tweet @AndrewEddie
<><
http://eddify.me
http://www.kiva.org/team/joomla - Got Joomla for free? Pay it forward and help fight poverty.

pacovell
Joomla! Apprentice
Joomla! Apprentice
Posts: 6
Joined: Sat Jan 26, 2008 2:51 am

Re: Will be a better access control in Joomla RC* ?

Post by pacovell » Mon Jan 28, 2008 4:47 pm

Andrew, I've been referred to you by another reader on a thread I started about ACL:
(http://forum.joomla.org/index.php/topic ... msg1174975)

It looks like you've written the back-end and I've written much of the front-end of this.  I'd be happy to put it together if you're up for it.  Don't think it would really take much of your time except to review with your more experienced PHP/Joomla eyes. 

I need to have this for a project, so either way I'm planning to finish it for my own use.  Let me know how I can help get it into the larger project if that's of use.

Cheers,
-Paul

reikimaster
Joomla! Apprentice
Joomla! Apprentice
Posts: 41
Joined: Sun Aug 21, 2005 10:11 pm

Re: Will be a better access control in Joomla RC* ?

Post by reikimaster » Sun Feb 10, 2008 1:57 pm

Where is RokACL at this point in time?
It was my understanding for a very long time that we'd see better ACL in 1.5. I've been a Joomla since the beginning. I now have a project that will REQUIRE better and more granular access control and sadly, my beloved Joomla is simply not up to the task. In fact I am getting better access control for communication and files distribution from Simple Machines Forum than I am from Joomla. That doesn't work well for web content though... only files.

I am anxious to get this back on Joomla. In its current state as a CMS, Joomla has this one sticky point. the only thing you can actually MANAGE is who is able to WRITE or submit content. You have VERY little control over to whom you DELIVER or display content. (Public and Registered are simply not enough)

I am hopeful that RokACL will solve this and I look forward to seeing it. Right now the JXtended site appears to be place holder.

thank you, Andrew, for working on this. I am certain that when ready, it will blow peoples' socks off. :) It will surely fill a need that has been promised for quite a while and YOUR involvement just gives me a much higher level of confidence as to HOW it will be done.

petoroth
Joomla! Apprentice
Joomla! Apprentice
Posts: 36
Joined: Mon May 07, 2007 8:53 am
Location: Slovakia, Europe

Re: Will be a better access control in Joomla RC* ?

Post by petoroth » Sun Feb 10, 2008 2:26 pm

I agree with reikimaster. I´ve expected an improve of ACL in Joomla 1.5.
MuffinDCC wrote: According to some posts I have read, Andrew Eddie has developed RokACL which is a powerful ACL component for 1.5 and should be fully incorporated into Joomla 1.6
A question to Andrew Eddie:
When we can expect Joomla 1.6 with better ACL or RokACL?
When starts the project  http://www.jxtended.com ?

User avatar
masterchief
Joomla! Hero
Joomla! Hero
Posts: 2316
Joined: Fri Aug 12, 2005 2:45 am
Location: Brisbane, Australia
Contact:

Re: Will be a better access control in Joomla RC* ?

Post by masterchief » Sun Feb 10, 2008 11:10 pm

petoroth wrote: When we can expect Joomla 1.6 with better ACL or RokACL?
That's completely up to the community now.  There's some Joomla! News coming about this at the end of this week.

As for Control (was RokACL) I've got it working in principle but only for my own components.  I won't be doing hacks for core components because this will almost without a doubt be done in 1.6.  There are a few of us with different ideas and we'll be asking the community for theirs as well.

The jXtended site is "nearly" there :)  I've been a bit busy.
Andrew Eddie - Tweet @AndrewEddie
<><
http://eddify.me
http://www.kiva.org/team/joomla - Got Joomla for free? Pay it forward and help fight poverty.

oliverp
Joomla! Apprentice
Joomla! Apprentice
Posts: 40
Joined: Tue Oct 16, 2007 5:55 am

Re: Will be a better access control in Joomla RC* ?

Post by oliverp » Mon Feb 11, 2008 12:47 am

As above, I am also glad I found this post as not to post the same message again.
I 2nd the having Joomla group management available so we can create groups and deliver access and content to specific users and groups.
BUT I just popped in to say that My team has written a group security component that addresses this in 1.5 that we are using corporately with an expected 500 users each with their own group, with tiered access within the group. This also works alongside the existing Joomla groups so instead of:

--backend
frontend {
-----Pub
-------Author
----------Editor
-------------Reg
-----------------User
}

You can now have
----backend
---frontend {
Group [ $x ]                   
----Pub
-------Au
------------Edit
---------------Reg
}
With access (in respective tiers) to certain shared or private content.  This way we section off each of our $x customers to create edit and view as well as distribute to the public their own content.  My point being, nvm so much if the adds to J1.6 aren't as flexible as you may need, for some of us  group management is a necessity and steps have already been taken to mod Joomla to work the way every other CMS/Forum/etc works.  Look out for com_groupsec hitting the beta area soon ;)

I should add that this component does also deliver group permissioning to custom group delivered menus with these tiers applied as well.
Last edited by oliverp on Mon Feb 11, 2008 12:58 am, edited 1 time in total.

adrianlewis
Joomla! Apprentice
Joomla! Apprentice
Posts: 26
Joined: Fri May 04, 2007 12:10 am
Location: London, UK

Re: Will be a better access control in Joomla RC* ?

Post by adrianlewis » Mon Feb 11, 2008 6:53 pm

I might be going slightly off topic here but one idea that I'd love to see which might be feasible with the new phpGACL framework is the ability to have 3 modes of being authenticated. Instead of simply anonymous or authenticated, having a cookie based semi-logged in status would be great. This is what you get with amazon where even though you've not logged in, it recognises you and gives you personal content. As soon as you need to do anything that requires more security, you have to log in fully.

Could anyone say whether this is something that could be done or am I just dreaming here?


Locked

Return to “Wishlists and Feature Requests - Archive”