cakephp-1.3 > AuthComponent :: isAuthorized()
A AclBase AclBehavior AclComponent AclNode AclShell Aco AcoAction AjaxHelper ApcEngine ApiShell App AppController AppController AppHelper AppHelper AppModel AppModel Aro AuthComponent B BakeShell BakeTask BehaviorCollection C Cache CacheEngine CacheHelper CakeErrorController CakeLog CakeRoute CakeSchema CakeSession CakeSocket ClassRegistry Component Configure ConnectionManager ConsoleShell ContainableBehavior Controller ControllerTask CookieComponent D DataSource DbAcl DbAclSchema DbConfigTask DboMssql DboMysql DboMysqlBase DboMysqli DboOracle DboPostgres DboSource DboSqlite Debugger Dispatcher E EmailComponent ErrorHandler ErrorHandler ExtractTask F File FileEngine FileLog FixtureTask Folder FormHelper H Helper HtmlHelper HttpSocket I I18n I18nModel i18nSchema I18nShell Inflector IniAcl J JavascriptHelper JqueryEngineHelper JsBaseEngineHelper JsHelper L L10n M MagicDb MagicFileResource MediaView MemcacheEngine Model ModelBehavior ModelTask MootoolsEngineHelper Multibyte N NumberHelper O Object Overloadable Overloadable Overloadable2 Overloadable2 P PagesController PagesController PaginatorHelper Permission PluginShortRoute PluginTask ProjectTask PrototypeEngineHelper R RequestHandlerComponent Router RssHelper S Sanitize Scaffold ScaffoldView SchemaShell Security SecurityComponent SessionComponent SessionHelper SessionsSchema Set Shell ShellDispatcher String T TemplateTask TestSuiteShell TestTask TextHelper ThemeView TimeHelper TranslateBehavior TreeBehavior V Validation View ViewTask X XcacheEngine Xml XmlElement XmlHelper XmlManager XmlNode XmlTextNode

isAuthorized

line:509 at /cake/libs/controller/components/auth.php
Determines whether the given user is authorized to perform an action. The type of authorization used is based on the value of AuthComponent::$authorize or the passed $type param.

Method

(boolean) isAuthorized ($type = null, $object = null, $user = null)

Parameters

ParameterTypeCommentDefault
$type string optional Type of authorization null
$object mixed optional object, model object, or model name null
$user mixed optional The user to check the authorization of null

Return

boolean

Comment

Determines whether the given user is authorized to perform an action. The type of
authorization used is based on the value of AuthComponent::$authorize or the
passed $type param.

Types:
'controller' will validate against Controller::isAuthorized() if controller instance is
passed in $object
'actions' will validate Controller::action against an AclComponent::check()
'crud' will validate mapActions against an AclComponent::check()
array('model'=> 'name'); will validate mapActions against model
$name::isAuthorized(user, controller, mapAction)
'object' will validate Controller::action against
object::isAuthorized(user, controller, action)

@param string $type Type of authorization
@param mixed $object object, model object, or model name
@param mixed $user The user to check the authorization of
@return boolean True if $user is authorized, otherwise false
@access public