ACL + adding rules/assets

am going to add assets/rules in JEM 3.0.8 but doing so there will be a problem. The thing is that there is an option to use Joomla groups. Did add a global setting in settings-view to choose if you want to allow an action by JEM/Joomla Group.

In case of a Joomla group it will check the assets set in that category/event or venue. But the problem is that for earlier items there wasn't a asset set. So if you want to allow the Joomla users to be able to do things you need to alter the table. Ofcourse you could run a script that will insert default values but you can understand that that will be complicated.

maybe i'm doing something totally wrong but it will be start

Did i already mention that i'm not certain how to modify things the permission is just a pain and complicated

am having not a really good clue of how to modify things so will try out how Joomla is doing things at this point to get an idea.

one other thing to think of: default rules in case if new events.

we do have a config.xml with a section component. that section appears when pressing the preferences button within main-view.

guess we can use it as a base. but we can also keep things empty.

one other thing is that we're having 3 views: event, venue, category with the rules and maybe we like to alter the default for 1 of them.

did notice that when creating a new event the default rules are taken from the root assetId "1" so if it needs to change we have to override some code but can say that i'm not up to that for a while and think it's fine to leave it as it is for now.

I must think deeper about this but some minds (not fully verified against code).

• For my understanding assets are derived, meaning if an event has no own assets set the rules from category or component or root are used. Yes, the difficult part are the categories.
• You're right, the ACL thing is complicated.
• On multiple categories I would say if at least one category gives user permission it's anough to allow the action. But not sure how to integrate the explicit "forbid". Maybe this should consequently take precedence on multicat too...
• I'm not happy with your Settings page to decide between JEM groups and Joomla ACL. Both methods do nearly the same so theoretically only one of both is enough. But as long as both co-exist they should always respected together. Currently I try this for JEM 2.1 and yes, it's complicated.
• The thing with the views I don't understand. For my understanding assets are for objects, not for views.

(...interrupted by 1st life...)

as said it's complicated

For my understanding assets are derived, meaning if an event has no own assets set the rules from category or component or root are used. Yes, the difficult part are the categories.

at the moment they are taken from root (assetid=1)

I'm not happy with your Settings page to decide between JEM groups and Joomla ACL. Both methods do nearly the same so theoretically only one of both is enough. But as long as both co-exist they should always respected together. Currently I try this for JEM 2.1 and yes, it's complicated.

there is indeed a global setting in the settings-view but am considering to remove it.. It was meant as an global overrule option. It can be that you have a lot of events with permissions set but that at a given moment you don't want to deny permissions for 1 group. You can alter all the events but a global option is maybe better, Or am i thinking to difficult in that case. And yep it's possible to select usergroups and not specific JEM groups..

The thing with the views I don't understand. For my understanding assets are for objects, not for views.

they are indeed objects