Simple Invoices - Forum

hey VeGaTrOn

if you want somethign NOW

read up on zend ACL and then review
http://code.google.com/p/simpleinvoices/source/browse/trunk/include/check_permission.php
http://code.google.com/p/simpleinvoices/source/browse/trunk/include/acl.php

using zend acl you can say that user type X can only go to certain sections of Simple Invoices

acl is only started in SImple Invoices - not done completely yet but you can expand it

re acl.php
below is an example to allow a customer to view the customer details page
// first section 'customer' is the user type
// second is the simple invoices 'module' - refer the url to find this info
// third is the specific page within that module - refer the '&view=' section of the url for this
$acl->allow('customer', 'customers', 'view');

let us know if you need any help and also how you go

cheers

justin

this means that zendACL is already integrated with simpleinvoices

thanks a lot justin , thats really helpful .
I'll start working on it, and tell you how it goes.

I have another question by the way, the configuration data for the script is installed inside the config.ini
which is a text file that can be viewed directly from the outside( internet), I think we can use htscript to protect it,
but still I'm not comfortable with the configuration being stored in a text file

I think it should be moved to a php file, what do you think?

re config.ini
- Simple Invoices come with a .htaccess file in the root directory which blocks access to the .ini
- but you need AllowOverride enabled in Apache for it to work
-- note i need to add this into the documentation

Cheers

Justin

re config
- have a read up on zend_config - http://framework.zend.com/manual/en/zend.config.introduction.html
- see if you like the config_array option
- note: reason why we went with .ini is so it can be easily written to using zend_config_writer
-- this would be useful when we add config options into the installer
- if config_array works just as well i don;t mind swapping over

cheers

justin