Access control to user data

17 years 10 months ago #14367 by mikko
Access control to user data was created by mikko
I just figured out a way to make rudimentary field level access control as plugin.

The plugin would work as like this:

Administrator defines a group of privacy settings in the database. Each entry would consist of id, name, fields to hide and condition.

Each user can choose which privacy settings (database entries) are used on a deidcated profile tab.

Before user A vies profile of user B, the privacy options of user B are fetched and the chosen privacy settigns are enforced.

Enforcing a privacy entry would start by evaluating a conditions. This would be one or a combination of the following:
-is connected
-shares a field

After the conditions are evaluated, each row with a matching condition would have those fields that are listed in the entry hidden.

Any opinions?

mikko

Please Log in to join the conversation.

17 years 10 months ago #14375 by irgendwer
Replied by irgendwer on topic Re:Access control to user data
Did I understand that right?
Users could define who can view their profil content (everybody, registrated, connections)

This would be great!

South Korea's got Seoul

Please Log in to join the conversation.

17 years 10 months ago #14426 by mikko
Ok. I coded a plugin that can hide any tab.

There is a demo at hondchan.dy.fi. The administrator applies privacy policy and hides a list of his cats-tab so that no-one can see it. All other users have this tab visible.

There is also a development build available at hondchan.dy.fi/downloads. I recommend not installing it, though since there is no read me and it is quite hard to understand how to configure it without any instructions. The way I coded it, though might be really interesting to see.

mikko

Please Log in to join the conversation.

17 years 10 months ago #14495 by beat
mikko wrote:

Ok. I coded a plugin that can hide any tab.

There is a demo at hondchan.dy.fi. The administrator applies privacy policy and hides a list of his cats-tab so that no-one can see it. All other users have this tab visible.

There is also a development build available at hondchan.dy.fi/downloads. I recommend not installing it, though since there is no read me and it is quite hard to understand how to configure it without any instructions. The way I coded it, though might be really interesting to see.

mikko


Indeed very interesting way. Congrats and thanks for sharing. I'm amazed how you could simply do it using the API without hacking the core :), just hacking automatically a little the tables on install ;) !

Should proabably warn users to not change any tabs after plugin installed... ;) ?

Beat - Community Builder Team Member

Before posting on forums: Read FAQ thoroughly -- Help us spend more time coding by helping others in this forum, many thanks :)
CB links: Our membership - CBSubs - Templates - Hosting - Forge - Send me a Private Message (PM) only for private/confidential info

Please Log in to join the conversation.

17 years 10 months ago #14530 by mikko
beat wrote:
Should proabably warn users to not change any tabs after plugin installed... ;) ?[/quote]

Certainly. But you would not expect a full documentation from an aplha release ;)

mikko

Please Log in to join the conversation.

17 years 10 months ago #14877 by mephistophele
Replied by mephistophele on topic Re:Access control to user data -first demo online
Uhm... i installed the plugin.. but i cannot go into its setting... because i have this error:

Parse error: parse error, expecting `T_OLD_FUNCTION' or `T_FUNCTION' or `T_VAR' or `'}'' in d:\programmi\easyphp1-8\www\joomla_108_stabile_ita\components\com_comprofiler\plugin\user\plug_privacypolicy\privacypolicy.php on line 14

Please Log in to join the conversation.

Moderators: beatnantkrileon
Time to create page: 0.299 seconds

Facebook Twitter LinkedIn