diff --git a/docs/general-concepts/acl/_assets/managerPermissionAccess.jpg b/docs/general-concepts/acl/_assets/managerPermissionAccess.jpg new file mode 100644 index 00000000..2af94369 Binary files /dev/null and b/docs/general-concepts/acl/_assets/managerPermissionAccess.jpg differ diff --git a/docs/general-concepts/acl/_assets/managerUserOptions.jpg b/docs/general-concepts/acl/_assets/managerUserOptions.jpg new file mode 100644 index 00000000..97e1ab50 Binary files /dev/null and b/docs/general-concepts/acl/_assets/managerUserOptions.jpg differ diff --git a/docs/general-concepts/acl/_assets/permissionsAccess.jpg b/docs/general-concepts/acl/_assets/permissionsAccess.jpg new file mode 100644 index 00000000..a1882397 Binary files /dev/null and b/docs/general-concepts/acl/_assets/permissionsAccess.jpg differ diff --git a/docs/general-concepts/acl/acl-component-prefs.md b/docs/general-concepts/acl/acl-component-prefs.md new file mode 100644 index 00000000..98a031c9 --- /dev/null +++ b/docs/general-concepts/acl/acl-component-prefs.md @@ -0,0 +1,32 @@ +Control Access to Component Preferences +======================================= + +If you have more than a few component preferences you have probably already organised them into tabs, each tab holding related preferences. If those tabs represent very different parts of your component you may want to control access to each tabs individually. + +All-or-nothing control is generally effected by granting or withholding the permission "core.options.permissions". This permission is part of the basic ACL set so there is no need to add it into your component's own access.xml file. It is accessed in the admin panel, for example for the users component, here. + +![Joomla Access Component Permissions](_assets/permissionsAccess.jpg "Joomla Access Component Permissions") + +You can further refine access by creating permissions for individual tabs within your component's permission set. + +Take the options of the core component users as an example. It currently contains seven tabs apart from the permissions tab itself. A separate access permission that could be used for each these seven tabs could be created by adding the following lines to its /administrator/components/com_users/access.xml file. + +```xml + + + + + + + +``` + +Then these extra options will appear in the permissions tab and can be controlled just the same as any others. Let's take as an example the ACL settings for managers. Setting them as + +![Manager Access to User Preferences](_assets/managerPermissionAccess.jpg "Manager Access to User Preferences") + +will result in managers only having access to four of the total user component preference tabs, as + +![Manager User Preferences](_assets/managerUserOptions.jpg "Manager User Preferences") + +the other preference tabs do not appear, preventing managers from being able to set their preferences. diff --git a/docs/general-concepts/acl/index.md b/docs/general-concepts/acl/index.md index aa30e19c..d49d0fcc 100644 --- a/docs/general-concepts/acl/index.md +++ b/docs/general-concepts/acl/index.md @@ -6,3 +6,5 @@ ACL stands for Access Control List. Joomla ACL Access relates to what users can *view*. Joomla ACL Permissions relate to what users can *do*. + +Joomla ACL Can control access to component preferences.