Today I’ve got a new solution about data level authorization. Let me start with the problem case the topic is about.
Users Jack and Andy has a Policy records in the database. One record belongs to Jack and another to Andy. System should allow Jack to make CRUD only on his records, and behave the same way for Andy. This means Andy do not see and is not able to modify Jacks’ records in the database.
Read the rest of this entry »

Posted by Rostislav Palivoda, filed under PHP. Date: April 4, 2008, 3:20 pm | No Comments »