(Quick Reference)

7 ACL Management

ACL management should be done using the API exposed by AclService and AclUtilService. Both services have a much more intuitive and convenient high-level approach to managing ACLs, ACEs, etc. The functionality in this plugin is to provide a CRUD interface for fine-grained ACL management.

The ACL menu is only available if the ACL plugin is installed.

7.1 AclClass Management

The default action for the AclClass controller is search. The className field has an Ajax autocomplete to assist in finding instances. Leave the className field empty to return all instances.

Results are shown paginated in groups of 10. The class name column header is clickable and will sort the results by that field:

AclClass Edit

After clicking through an instance you get to the edit page (there are no view pages):

You can update the name, and delete the instance if there aren't any associated AclObjectIdentity or AclEntry instances - by default there is no support for cascading.

You can also see the associated AclObjectIdentity instances (OIDs) or AclEntry instances.

AclClass Create

You can create new instances by going to /aclClass/create or by clicking the Create action in the Class menu under ACL.

7.2 AclSid Management

The default action for the AclSid controller is search. The sid field has an Ajax autocomplete to assist in finding instances. Leave the sid field empty and principal set to Either to return all instances.

Results are shown paginated in groups of 10. The column headers are clickable and will sort the results by that field:

AclSid Edit

After clicking through to a sid you get to the edit page (there are no view pages):

You can update the name and whether it's a Principal sid or a Role sid, and delete the instance if there aren't any associated AclObjectIdentity or AclEntry instances - by default there is no support for cascading.

You can also see the associated AclObjectIdentity instances (OIDs) or AclEntry instances.

AclSid Create

You can create new instances by going to /aclSid/create or by clicking the Create action in the SID menu under ACL.

7.3 AclObjectIdentity Management

The default action for the AclObjectIdentity controller is search. Leave all fields at their default values to return all instances.

Results are shown paginated in groups of 10. The column headers are clickable and will sort the results by that field:

AclObjectIdentity Edit

After clicking through to an instance you get to the edit page (there are no view pages):

You can update the values and delete the instance if there aren't any associated AclEntry instances - by default there is no support for cascading.

You can also see the associated AclEntry instances.

AclObjectIdentity Create

You can create new instances by going to /aclObjectIdentity/create or by clicking the Create action in the OID menu under ACL.

7.4 AclEntry Management

The default action for the AclEntry controller is search. Leave all fields at their default values to return all instances.

Results are shown paginated in groups of 10. The column headers are clickable and will sort the results by that field:

AclEntry Edit

After clicking through to an instance you get to the edit page (there are no view pages):

You can update the values and delete the instance if there aren't any associated AclEntry instances - by default there is no support for cascading.

AclEntry Create

You can create new instances by going to /aclEntry/create or by clicking the Create action in the Entry menu under ACL.