// Do things for ldap here.
}
}
Authorize objects should return false if the user is denied access, or if the object is unable to perform a
check. If the object is able to verify the user’s access, true should be returned. It’s not required that you
extend BaseAuthorize, only that your authorize object implements an authorize() method. The
BaseAuthorize class provides a number of helpful methods that are commonly used.
Using custom authorize objects Once you’ve created your custom authorize object, you can use them by
including them in your AuthComponent’s authorize array:
$this->Auth->authorize = array(
’Ldap’, // app authorize object.
’AuthBag.Combo’, // plugin authorize object.
);
Using no authorization If you’d like to not use any of the built-in authorization objects, and want to handle
things entirely outside of AuthComponent you can set $this->Auth->authorize = false;.
By default AuthComponent starts off with authorize = false. If you don’t use an authorization
scheme, make sure to check authorization yourself in your controller’s beforeFilter, or with another component.
Making actions public There are often times controller actions that you wish to remain entirely public,
or that don’t require users to be logged in. AuthComponent is pessimistic, and defaults to denying access.
You can mark actions as public actions by using AuthComponent::allow(). By marking actions as
public, AuthComponent, will not check for a logged in user, nor will authorize objects be checked:
// Allow all actions. CakePHP 2.0
$this->Auth->allow(’*’);
// Allow all actions. CakePHP 2.1
$this->Auth->allow();
// Allow only the view and index actions.
$this->Auth->allow(’view’, ’index’);
// Allow only the view and index actions.
$this->Auth->allow(array(’view’, ’index’));
You can provide as many action names as you need to allow(). You can also supply an array containing
all the action names.
Making actions require authorization If after making actions public, you want to revoke the public
access. You can do so using AuthComponent::deny():
// remove one action
$this->Auth->deny(’add’);