CakePHP ACO based on each entry

Question

I'm trying to make a blogging system but obviously certain users in certain groups should only be able to edit/delete their own posts/comments. How would I go about doing this in CakePHP? I followed the manual's basic Acl guide to setup my current Auth system.

Answer 1

Assuming you have a Post and Comment model and the user_id is present via the $this->Auth->... object, you could define a generic method in your model:

function allowUserPost($user_id, $post_id) {

// Then check if this $user_id owns the $post_id
// if true, return true, if false, return false

}

In your controller:

function deletePost($post_id) {

if($this->Post->allowUserPost($user_id, $post_id) {

// Go ahead, delete

} else {

// Deny

}