Changes between Version 33 and Version 34 of S3/S3AAA

Timestamp:

01/18/11 00:45:07 (14 years ago)

Author:

Dominic König

Comment:

--

S3/S3AAA

@@ -143 +143 @@
   - the controller uses auth.s3_has_permission() and/or auth.s3_accessible_query() to check permissions before exposing any data to the user
 
-=== s3_has_permission ===
-
+=== Checking Permissions ===
+
+To check permissions to access a table (or a particular record) with a certain method, use the {{{auth.s3_has_permission()}}} method:
+
+{{{
+authorised = auth.s3_has_permission("read", db.my_table)
+if authorised:
+    # User may read in the db.my_table
+}}}
+
+{{{
+authorised = auth.s3_has_permission("read", db.my_table, record_id=x)
+if authorised:
+    # User may read record x in db.my_table
+}}}
+
+The access method can be one of these strings:
+
+    - "create": create new records in this table
+    - "read": read in this table (or this particular record, if specified)
+    - "update": update existing records in this table (or this particular record, if specified)
+    - "delete": delete records from this table (or this particular record, if specified)
 === s3_accessible_query ===