Access control to user data

I just figured out a way to make rudimentary field level access control as plugin.

The plugin would work as like this:

Administrator defines a group of privacy settings in the database. Each entry would consist of id, name, fields to hide and condition.

Each user can choose which privacy settings (database entries) are used on a deidcated profile tab.

Before user A vies profile of user B, the privacy options of user B are fetched and the chosen privacy settigns are enforced.

Enforcing a privacy entry would start by evaluating a conditions. This would be one or a combination of the following:
-is connected
-shares a field

After the conditions are evaluated, each row with a matching condition would have those fields that are listed in the entry hidden.

Any opinions?

mikko

Did I understand that right?
Users could define who can view their profil content (everybody, registrated, connections)

This would be great!

Ok. I coded a plugin that can hide any tab.

There is a demo at hondchan.dy.fi . The administrator applies privacy policy and hides a list of his cats-tab so that no-one can see it. All other users have this tab visible.

There is also a development build available at hondchan.dy.fi/downloads . I recommend not installing it, though since there is no read me and it is quite hard to understand how to configure it without any instructions. The way I coded it, though might be really interesting to see.

mikko

mikko wrote:

Ok. I coded a plugin that can hide any tab.

There is a demo at hondchan.dy.fi . The administrator applies privacy policy and hides a list of his cats-tab so that no-one can see it. All other users have this tab visible.

There is also a development build available at hondchan.dy.fi/downloads . I recommend not installing it, though since there is no read me and it is quite hard to understand how to configure it without any instructions. The way I coded it, though might be really interesting to see.

mikko

Indeed very interesting way. Congrats and thanks for sharing. I'm amazed how you could simply do it using the API without hacking the core , just hacking automatically a little the tables on install !

Should proabably warn users to not change any tabs after plugin installed... ?

beat wrote:
Should proabably warn users to not change any tabs after plugin installed... ?[/quote]

Certainly. But you would not expect a full documentation from an aplha release

mikko

Uhm... i installed the plugin.. but i cannot go into its setting... because i have this error:

Parse error: parse error, expecting `T_OLD_FUNCTION' or `T_FUNCTION' or `T_VAR' or `'}'' in d:\programmi\easyphp1-8\www\joomla_108_stabile_ita\components\com_comprofiler\plugin\user\plug_privacypolicy\privacypolicy.php on line 14