Home Backend Development PHP Tutorial phpGACL汉语手册(九)扩展权限对象

phpGACL汉语手册(九)扩展权限对象

Jun 13, 2016 pm 01:01 PM
aco check linux

phpGACL中文手册(九)扩展权限对象

扩展权限对象

phpGACL 中可以通过配置扩展权限对象( AXO 对象)为第三方添加权限。我们已经知道了 phpGACL 是如何将 ARO 对象和 ACO 对象组成一个访问控制策略指令的,这主要用于简单的权限要求如:

Luke ARO 对象)要求访问"武器室"( ACO 对象)的权限

如果这是你所需要的,那么 AXO 对象就完全是可选的了!

但是由于所有的 ACO 对象都是相同的,因此如果它们存在很多的话那管理起来将是困难的。如果是这样情况的话,我们可以通过改变思考权限对象方式来使其管理起来更加容易。

AXO 对象在许多方面同 ARO 对象是一样的。这有一个 AXO 树(是从 ARO 树中分离出来的)有着自己的组和 AXO 对象。在处理 AXO 对象时,以看待 ACO 对象的方式来看待 AXO 对象(即"需要权限控制的事物"),而改变看待 ACO 对象的方式,从"需要权限控制的事物"变成"被要求的运作"。

看待只有 ARO ACO 对象的方式:

  • ARO 对象:要求权限的事物
  • ACO 对象:需要权限控制的事物

看待 ARO ACO AXO 对象的方式:

  • ARO 对象:要求权限的事物
  • ACO 对象:被要求的动作
  • AXO 对象:需要权限控制的事物

例如:

一个网站管理员想要管理访问该网站中项目的权限。一个由所有用户组成的 ARO 树如下所示: Website (网站)
├─Administrators
(管理者)
│ ├─Alice
│ └─Carol
└─Users
(用户)
├─Bob
└─Alan

AXO 树中通过操作系统分类项目被组织成: Projects (项目)
├─Linux
│ ├─SpamFilter2
│ └─AutoLinusWorshipper
└─Windows
├─PaperclipKiller
└─PopupStopper

对于每个项目而言,动作是"观看"和"编辑"。这些是 ACO 对象。

现在我们想要 Bob 对所有的 Linux 项目有"观看"的权限,因此可以添加一个 ADP Bob ARO 对象与观看的 ACO 对象和 Linux AXO 对象连接在一起。于是我们可以问一个问题:

Bob ARO 对象)要求对一个叫 Linux 的项目( AXO 对象)有"观看"( ACO 对象)的权限

记住 AXO 是可选的,如果你在调用 acl_check() 函数时没有指明 AXO 对象或匹配到一个没有 AXO 对象的 ADP ,这是允许的。然而如果只有 AXO 对象的 APD 而你却调用没有 AXO 对象的 acl_check() 函数,那么系统将失败。

所以一旦你在调用 acl_check() 函数时指定了 AXO 对象的话, acl_check() 函数就只搜索含有 AXO 对象的 ACL 列表。如果 AXO 对象没有被指定,那么只有不含有 AXO 对象的列表才会被搜索。基于上述理论也使系统在性能上有所提升。

Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn

Hot AI Tools

Undresser.AI Undress

Undresser.AI Undress

AI-powered app for creating realistic nude photos

AI Clothes Remover

AI Clothes Remover

Online AI tool for removing clothes from photos.

Undress AI Tool

Undress AI Tool

Undress images for free

Clothoff.io

Clothoff.io

AI clothes remover

AI Hentai Generator

AI Hentai Generator

Generate AI Hentai for free.

Hot Article

R.E.P.O. Energy Crystals Explained and What They Do (Yellow Crystal)
2 weeks ago By 尊渡假赌尊渡假赌尊渡假赌
Repo: How To Revive Teammates
4 weeks ago By 尊渡假赌尊渡假赌尊渡假赌
Hello Kitty Island Adventure: How To Get Giant Seeds
3 weeks ago By 尊渡假赌尊渡假赌尊渡假赌

Hot Tools

Notepad++7.3.1

Notepad++7.3.1

Easy-to-use and free code editor

SublimeText3 Chinese version

SublimeText3 Chinese version

Chinese version, very easy to use

Zend Studio 13.0.1

Zend Studio 13.0.1

Powerful PHP integrated development environment

Dreamweaver CS6

Dreamweaver CS6

Visual web development tools

SublimeText3 Mac version

SublimeText3 Mac version

God-level code editing software (SublimeText3)

Android TV Box gets unofficial Ubuntu 24.04 upgrade Android TV Box gets unofficial Ubuntu 24.04 upgrade Sep 05, 2024 am 06:33 AM

For many users, hacking an Android TV box sounds daunting. However, developer Murray R. Van Luyn faced the challenge of looking for suitable alternatives to the Raspberry Pi during the Broadcom chip shortage. His collaborative efforts with the Armbia

deepseek web version entrance deepseek official website entrance deepseek web version entrance deepseek official website entrance Feb 19, 2025 pm 04:54 PM

DeepSeek is a powerful intelligent search and analysis tool that provides two access methods: web version and official website. The web version is convenient and efficient, and can be used without installation; the official website provides comprehensive product information, download resources and support services. Whether individuals or corporate users, they can easily obtain and analyze massive data through DeepSeek to improve work efficiency, assist decision-making and promote innovation.

How to install deepseek How to install deepseek Feb 19, 2025 pm 05:48 PM

There are many ways to install DeepSeek, including: compile from source (for experienced developers) using precompiled packages (for Windows users) using Docker containers (for most convenient, no need to worry about compatibility) No matter which method you choose, Please read the official documents carefully and prepare them fully to avoid unnecessary trouble.

BitPie Bitpie wallet app download address BitPie Bitpie wallet app download address Sep 10, 2024 pm 12:10 PM

How to download BitPie Bitpie Wallet App? The steps are as follows: Search for "BitPie Bitpie Wallet" in the AppStore (Apple devices) or Google Play Store (Android devices). Click the "Get" or "Install" button to download the app. For the computer version, visit the official BitPie wallet website and download the corresponding software package.

BITGet official website installation (2025 beginner's guide) BITGet official website installation (2025 beginner's guide) Feb 21, 2025 pm 08:42 PM

BITGet is a cryptocurrency exchange that provides a variety of trading services including spot trading, contract trading and derivatives. Founded in 2018, the exchange is headquartered in Singapore and is committed to providing users with a safe and reliable trading platform. BITGet offers a variety of trading pairs, including BTC/USDT, ETH/USDT and XRP/USDT. Additionally, the exchange has a reputation for security and liquidity and offers a variety of features such as premium order types, leveraged trading and 24/7 customer support.

Detailed explanation: Shell script variable judgment parameter command Detailed explanation: Shell script variable judgment parameter command Sep 02, 2024 pm 03:25 PM

The system variable $n is the parameter passed to the script or function. n is a number indicating the number of parameters. For example, the first parameter is $1, and the second parameter is $2$? The exit status of the previous command, or the return value of the function. Returns 0 on success, 1 on failure $#Number of parameters passed to the script or function $* All these parameters are enclosed in double quotes. If a script receives two parameters, $* is equal to $1$2$0The name of the command being executed. For shell scripts, this is the path to the activated command. When $@ is enclosed in double quotes (""), it is slightly different from $*. If a script receives two parameters, $@ is equivalent to $1$2$$the process number of the current shell. For a shell script, this is the process I when it is executing

Zabbix 3.4 Source code compilation installation Zabbix 3.4 Source code compilation installation Sep 04, 2024 am 07:32 AM

1. Installation environment (Hyper-V virtual machine): $hostnamectlStatichostname:localhost.localdomainIconname:computer-vmChassis:vmMachineID:renwoles1d8743989a40cb81db696400BootID:renwoles272f4aa59935dcdd0d456501Virtualization:microsoftOperatingSystem:CentOS Linux7(Core)CPEOSName:cpe:

Ouyi okx installation package is directly included Ouyi okx installation package is directly included Feb 21, 2025 pm 08:00 PM

Ouyi OKX, the world's leading digital asset exchange, has now launched an official installation package to provide a safe and convenient trading experience. The OKX installation package of Ouyi does not need to be accessed through a browser. It can directly install independent applications on the device, creating a stable and efficient trading platform for users. The installation process is simple and easy to understand. Users only need to download the latest version of the installation package and follow the prompts to complete the installation step by step.

See all articles