Adding an ACL to our component
As extension developers, we are aware of the situations faced by web administrators when configuring extensions. For instance, in our Simple Project Manager extension, we do not want the customer role to be able to edit invoices or organize our projects. Nor do we want not logged-in users to download our invoices.
We need to set up some permissions and stipulate the actions a user can do in our extension. So, let’s start our example by creating some basic user groups in our Joomla! site to accommodate these permissions.
Setting up Joomla! user groups and viewing access levels
It’s beyond the scope of this book to get into the details of the Joomla! user groups system and its configuration, but if you do need further details, please check the relevant link given in the Further reading section at the end of this chapter.
We are going to create the following user groups on our Joomla! site:
- Customer
- Project Manager ...