The m_acl model gives access the id of the currently logged in user, and provides a mechanism to do basic access control checks.
The following m_acl model properties are available in templates:
Property | Description |
---|---|
user | Returns the current user id. If not logged in, this returns undefined. |
is_admin | Check if the current user isa lowed to access the admin. Internally, this checks the use, mod_admin_config ACL. |
use, admin, view, delete, update, insert | These properties are shortcuts to check if the current user is allowed to do some action. |
is_allowed | Perform custom ACL checks which are different from the ones mentioned. |
This example prints a greeting to the currently logged in user, if logged in:
{% if m.acl.user %}
Hello, {{ m.rsc[m.acl.user].title }}!
{% else %}
Not logged in yet
{% endif %}
This example checks if the user can access the admin pages:
{% if m.acl.is_admin %} You are an admin {% endif %}
This example performs a custom check:
{% if m.acl.is_allowed.use.mod_admin_config %}
User has rights to edit the admin config
{% endif %}