not allowing a particular role to view/update some attributes of an object

2 views
Skip to first unread message

epoch

unread,
May 27, 2009, 11:51:55 AM5/27/09
to declarative_authorization
Hi,

I'm new to DA, just a quick question. I have 2 roles, admin and user.
On a particular object the admin will have full crud access, but I
want to hide some attributes of this object so normal users can't see
and edit it. Is this possible with DA?

Thanks.
Daniel

Steffen Bartsch

unread,
May 27, 2009, 1:19:24 PM5/27/09
to declarative_...@googlegroups.com, epoch

decl_auth doesn't deny access on the attribute level. You could separate the
attributes through STI or put those attributes in a separate model with a
has_one relationship.

Steffen

Reply all
Reply to author
Forward
0 new messages