Fraggle: Änderung 7897 von Fraggle (Diskussion) rückgängig gemacht.

2024-05-13T19:31:57Z

Änderung 7897 von Fraggle (Diskussion) rückgängig gemacht.

← Nächstältere Version		Version vom 13. Mai 2024, 19:31 Uhr
Zeile 42:		Zeile 42:
	{% endif %}</nowiki>		{% endif %}</nowiki>

	[[Kategorie:Entwicklung~~\|Entwicklung/Role hierarchy~~]]		[[Kategorie:Entwicklung]]
	[[Kategorie:English pages]]		[[Kategorie:English pages]]

Fraggle: Kategorie bearbeitet

2024-05-13T19:31:27Z

Kategorie bearbeitet

← Nächstältere Version		Version vom 13. Mai 2024, 19:31 Uhr
Zeile 42:		Zeile 42:
	{% endif %}</nowiki>		{% endif %}</nowiki>

	[[Kategorie:Entwicklung]]		[[Kategorie:Entwicklung\|Entwicklung/Role hierarchy]]
	[[Kategorie:English pages]]		[[Kategorie:English pages]]

Fraggle: Erstentwurf

2024-05-06T16:58:58Z

Erstentwurf

Neue Seite

The fundament of our security is a customizable role hierarchy. One or multiple roles can be applied to a user. Every role itself is linked to different permissions which allow to view, edit or delete resources like geocaches, logs or users. If no permission is present it defaults to disallowing the action.

== Role hierarchy ==
https://app.conceptboard.com/board/9qra-r8bs-bpy2-cuf2-0ikx

[[Image:Testumgebung Rollen 01.png|500px]]

This diagram must be read bottom to top. Every role inherits roles above them. Example: ROLE_SOCIAL_HEAD contains ROLE_SOCIAL, ROLE_SOCIAL_TRAINEE, ROLE_TEAM and ROLE_USER. Every logged in user has ROLE_USER.

== Permissions ==
Permissions are linked to different roles which can be seen as a permission group.

== Database ==
<gallery>
Image:Testumgebung Rollen 02.png|table security_roles|alt=table security_roles
Image:Testumgebung Rollen 03.png|table security_roles_hierarchy|alt=table security_roles_hierarchy
Image:Testumgebung Rollen 04.png|example for table user_roles|alt=example for table user_roles
</gallery>

== Code examples ==
Annotations, to secure complete functions or classes:
<nowiki>/**
* @Security("is_granted('ROLE_SOCIAL')")
*/</nowiki>

PHP, to secure parts of the code:
<nowiki>if ($this->isGranted('ROLE_SOCIAL')) {
..
}</nowiki>

Twig, to secure parts of the code from being displayed or executed.
But pay attention: as long as the @routes are not secured (see above) they still can be called via URL!
<nowiki>
{% if is_granted('ROLE_SOCIAL') %}
{{ 'You have access.' }}
{% else %}
{{ 'Sorry. You don\'t have access.' }}
{% endif %}</nowiki>

[[Kategorie:Entwicklung]]
[[Kategorie:English pages]]

Role hierarchy - Versionsgeschichte

Fraggle: Änderung 7897 von Fraggle (Diskussion) rückgängig gemacht.

Fraggle: Kategorie bearbeitet

Fraggle: Erstentwurf