Did you already implemented support for Joomla ACL in your extension? No? Join this session to learn all about making your extension more powerful by implementing support for Joomla ACL. In an attempt to keep Joomla user friendly many site builders would like to be able to set customized access for the end users of the website. For example by proving access to a specific page of a specific extension in the backend. Many extensions still don't offer the possibility to configure ACL permissions. I will explain why it is important for the customers of your extension to implement Joomla ACL support and how easily this can be implemented.

1. Make your extension
more powerful by
implementing
Joomla ACL
Sander Potjer - @sanderpotjer
www.aclmanager.net
J and Beyond 2014

3. Sander Potjer
Extension: ACL Manager
Joomla Agency: Perfect Web Team
I love Joomla

4. Sander Potjer
Extension: ACL Manager
Joomla Agency: Perfect Web Team
I love Joomla
Slides: slideshare.net/sanderpotjer

7. Photo by: Mark Fischer
Joomla ACL

8. ACL?!?!
ACL = Access Control List
!
!
!
!
!
!
!

9. ACL?!?!
ACL = Access Control List
!
1) Visibility of content
!
!
!
!
!

10. ACL?!?!
ACL = Access Control List
!
1) Visibility of content
!
!
!
!
2) Actions on objects

12. Photo by: Chris Smith
Overview

13. user

14. user permissions

15. user permissionspermissions
!
Site Login
Admin Login
Offline Access
Super Admin / Configure
Access Admin. Interface
Create
Delete
Edit
Edit State
Edit Own

16. user permissions
group

17. user permissions
access level
group

18. user permissions
access level
group

19. user permissions
access level
group

20. user permissions
access level
group

21. user permissions
access level
group

22. user permissions
access level
group

23. user permissions
access level
role

24. ACL levels
Photo by: Ian Sane

25. Global Configuration permissions
Component permissions
Category / Module permissions
Article permissions

26. Photo by: Andreas
Inheritance

27. Global Configuration permissions
Component permissions
Category / Module permissions
Article permissions

28. Global Configuration permissions
Component permissions
Category / Module permissions
Article permissions

29. Global Configuration permissions
Component permissions
Category / Module permissions
Article permissions
not set
inherited
inherited
inherited

30. Global Configuration permissions
Component permissions
Category / Module permissions
Article permissions
allowed
inherited
inherited
inherited

31. Global Configuration permissions
Component permissions
Category / Module permissions
Article permissions
allowed
inherited
denied
locked

32. Global Configuration permissions
Component permissions
Category / Module permissions
Article permissions
not set
allowed
inherited
inherited

33. Global Configuration permissions
Component permissions
Category / Module permissions
Article permissions
not set
inherited
allowed
inherited

34. Global Configuration permissions
Component permissions
Category / Module permissions
Article permissions
denied
allowed
locked
locked

35. Global Configuration permissions
Component permissions
Category / Module permissions
Article permissions
denied
allowed
locked
locked
CONFLICT

37. Why?
Photo by: jon jordan

38. Why not!
Photo by: Peter Reed

39. Usability
Photo by: Rick Dolishny

40. Don’t
make
me
think
Photo by: Alper Çuğun

43. Basic ACL
implementation
Photo by: Daniel Kulinski

45. Configure
To configure the access settings via the 'Options'
toolbar button
!
Access Administration Interface
To define which group is able to access/manage the
component
2 actions required

46. 4 steps
18 lines of code
couple minutes

47. Add actions
1

48. File: administrator/components/com_foobar/config.xml

49. Access check
2

50. File: administrator/components/com_foobar/foobar.php

51. ‘Options’
toolbar button
3

52. File: administrator/components/com_foobar/views/foobars/view.html.php

53. File: administrator/components/com_foobar/views/foobars/view.html.php

54. Add language
string
4

55. File: administrator/language/en-GB/en-GB.com_foobar.ini

56. Done!

57. Basic ACL support is
not optional, it is a
requirement for any
Joomla extension!

58. Advanced ACL
implementationPhoto by: Patrick Lauke

59. Database

61. Rules - JSON encoded
{"core.login.site":{"6":1,"2":1}

62. com_content.article.24
[extension].[section].[object id]
Action name format (database)

64. JTable

66. Access.xml

67. File: administrator/components/com_foobar/config.xml

68. File: administrator/components/com_content/access.xml

69. File: administrator/components/com_content/access.xml

70. File: administrator/components/com_content/access.xml

71. File: administrator/components/com_content/access.xml

72. File: administrator/components/com_content/access.xml

73. File: administrator/components/com_content/access.xml
Component permissions
Category / Module permissions
Article permissions

74. File: administrator/components/com_content/access.xml

75. Site Login: core.login.site
Admin Login: core.login.admin
Offline Access: core.login.offline
Super Admin / Configure: core.admin
Access Administration Interface: core.manager
Create: core.create
Delete: core.delete
Edit: core.edit
Edit State: core.edit.state
Edit Own: core.edit.own
Title vs Name

76. File: administrator/components/com_content/access.xml

77. File: administrator/components/com_content/access.xml
Component permissions
Category / Module permissions
Article permissions
allowed
inherited
inherited

79. Custom Actions

81. File: administrator/components/com_akeeba/access.xml

82. File: administrator/components/com_akeeba/access.xml

83. File: administrator/components/com_akeeba/access.xml

84. File: administrator/components/com_akeeba/access.xml

85. File: administrator/components/com_akeeba/access.xml

86. Action name format (xml)
akeeba.backup
[name extension].[name action]

87. Keep it structured

89. Interface

91. File: administrator/components/com_foobar/views/foobar/tmpl/edit.php

92. getActions helper

93. File: libraries/cms/helper/content.php

94. File: can be used anywhere

95. File: can be used anywhere

96. addToolbar

97. File: administrator/components/com_foobar/views/foobars/view.html.php

98. File: administrator/components/com_foobar/views/foobars/view.html.php

99. Resources
Photo by: Schub@

100. Is your extension really Joomla 1.7 ready?
http://www.aclmanager.net/news/general/28-is-your-extension-really-joomla-17-ready
!
How to add basic ACL support to your extension
http://www.aclmanager.net/news/general/31-how-to-add-basic-acl-support-to-your-
extension
Developing a MVC Component/Adding ACL
http://docs.joomla.org/J2.5:Developing_a_MVC_Component/Adding_ACL
Adding ACL rules to your component
http://docs.joomla.org/Adding_ACL_rules_to_your_component
!
Access Control List Tutorial
http://docs.joomla.org/J2.5:Access_Control_List_Tutorial
!
Support for ACL permissions per module in com_modules
https://github.com/joomla/joomla-cms/pull/1930/files
!
JHelperContent::getActions() improvements
https://github.com/joomla/joomla-cms/pull/2728
!
This presentation
http://slideshare.net/sanderpotjer/