Hi all,

Just wondering if anyone out there has used Doctrine in a multi-tenancy
application?  That is, you have a single MySQL database, but many users and
want to isolate the user data in a (programmer and injection) safe way.

How have you achieved it and did Doctrine play a big role in facilitating
this (other than just being an ORM)?

Thanks in advance,
Cheers,
Chris

In an app I'm developing I use an RBAC structure based on roles strictly
connected to specific accessible records, and Doctrine 2 made almost all the
job.
The problem is that I had to rewrite all my customRepositories and avoid any
access to base functionalities of repositories, like findBy and similar
methods ($em->find($entity, $id) can't be used in my app, or at least ist
strongly discouraged!).
It's not completely safe, but I build up all my queries joining with ACL
tables.
Another solution I didn't test is using AST and hints, but I had to run
while I was in the first stages of development, and avoided this kind of
approach...

Here's some example of a custom repository:*
<?php
namespace Deneb\EntityRepository;

/**
 *
 * @author Ocramius
 */
class Location extends \Deneb\AuthConstrainedRepository {

    public function createConstrainedQueryBuilder() {
        $qb = parent::createConstrainedQueryBuilder();
        if($this->_auth->hasIdentity()) {
            $identity = $this->_auth->getIdentity();
            if($identity instanceof \Deneb\Entity\User\Referrer) {
                $customerAlias = \uniqid('cu');
                $companyAlias = \uniqid('c');
                $companyParamAlias = \uniqid('cp');
                $qb
                    ->join($qb->getRootAlias() . '.customer',
$customerAlias)
                    ->join(
                        $customerAlias . '.company',
                        $companyAlias,
                        \Doctrine\ORM\Query\Expr\Join::WITH,
                        $qb->expr()->eq($companyAlias, ':' .
$companyParamAlias)
                    )
                    ->setParameter(
                        $companyParamAlias,
                        $identity->company
                    );
            }else if($identity instanceof \Deneb\Entity\User\Supplier) {
                $qb->where('1 = 0');
                /**
                 * @todo rules for suppliers
                 */
            }
        }
        return $qb;
    }

Marco Pivetta
http://twitter.com/Ocramius
http://marco-pivetta.com

On 8 June 2011 11:58, Christopher Brind <bri...@brindy.org.uk> wrote:

 On Wed, 8 Jun 2011 12:17:01 +0200, Marco Pivetta wrote:

Yep, I know...  But I'm too far forward right now to switch back to another
technique :(

Marco Pivetta
http://twitter.com/Ocramius
http://marco-pivetta.com

On 8 June 2011 13:57, Benjamin Eberlei <kont...@beberlei.de> wrote: