Access control

Sometimes for different reasons you may want to restrict access to the specific actions and allow it only for pecificoles.In the Seotoaster plugin you can do that very quick and easy! You just need to specify secured actions list. Here an example how to do that:

Example: we will close ‘settings’ action for everyone except the superadmin role

/**
     * List of action that should be allowed to specific roles
     *
     * By default all actions of your plugin are available to the guest user
     * @var array
     */
    protected $_securedActions = array(
        Tools_Security_Acl::ROLE_SUPERADMIN => array(
            'settings'
        )
    );

So, $_securedActions list is an associative array where a key is a role, registered in the Seotoaster and a value is an array of plugin’s actions, allowed to this role

DevNews