Acl

As of commit 32b945eab9a8d9af11d8c11a2bad86270d2682cd Access Control Lists are used to manage access rights in the main site and in the admin interface.

Aro

Current implementation is very simple. The Aros are:

• users
  • admins

A normal enabled user belongs to the users group, while in the admins groups there are the admins. It isn’t that strange ;-)

Aco

The Acos are:

• admin
  • site

Acl

And finally the grants are:

1. admin has grants on admin
2. users has grants on site

Check

Checks are done in accounts/checkuser (checks if the user has site grant) and the the AppController/checkSession if the user is requesting an admin page.