Book Image

Magento PHP Developer's Guide

By : Allan MacGregor
Book Image

Magento PHP Developer's Guide

By: Allan MacGregor

Overview of this book

<p>Magento has completely reshaped the face of e-commerce since its launch in 2008. Its revolutionary focus on object oriented and EAV design patterns has allowed it to become the preferred tool for developers and retailers alike.</p> <p>"Magento PHP Developer’s Guide" is a complete reference to Magento, allowing developers to understand its fundamental concepts, and get them developing and testing Magento code.</p> <p>The book starts by building the reader’s knowledge of Magento, providing them with the information, techniques, and tools that they require to start their first Magento development.</p> <p>After building this knowledge, the book will then look at more advanced topics: how to test your code, how to extend the frontend and backend, and deploying and distributing custom modules.</p> <p>"Magento PHP Developer’s Guide" will help you navigate your way around your first Magento developments, helping you to avoid all of the most common headaches new developers face when first getting started.</p>
Table of Contents (16 chapters)
Magento PHP Developer's Guide
Credits
About the Author
About the Reviewers
www.PacktPub.com
Preface
Index

Securing the API


Securing our API is already a part of the process of creating our module and it is also handled by the configuration. The way Magento restricts access to its API is by using ACL.

As we learned before, these ACL allow us to set up roles with access to different parts of the API. Now, what we have to do is make our new custom functions available to the ACL:

  1. Open the api.xml file.

  2. Add the following code after the </v2> node:

    The file location is app/code/local/Mdg/Giftregistry/etc/api.xml.

    <acl>
        <resources>
            <giftregistry translate="title" module="mdg_giftregistry">
                <title>MDG Gift Registry</title>
                <sort_order>1</sort_order>
                <registry translate="title" module="mdg_giftregistry">
                    <title>MDG Gift Registry</title>
                    <list translate="title" module="mdg_giftregistry">
                        <title>List Available Registries</title&gt...