1 Topic by apmuthu (edited by apmuthu 09/24/2014 06:43:00 pm)

  • From: Singapore, India, Chennai
  • Registered: 05/02/2009
  • Posts: 6,160

Topic: Same Security Identifies issue

The list of security identifiers for the current official extensions are:

define ('SS_DASHBOARD', 150<<8);
        $security_areas['SA_DASHBOARDSETUP'] = array(SS_DASHBOARD|100, _("Setup Dashboard"));
        $security_areas['SA_DASHBOARDREMINDERS'] = array(SS_DASHBOARD|101, _("Reminder Setup"));

define ('SS_IMPORTCSVITEMS', 105<<8);
        $security_areas['SA_CSVIMPORT'] = array(SS_IMPORTCSVITEMS|105, _("Import CSV Items"));

define ('SS_IMPORTMULTIJOURNAL', 101<<8);
        $security_areas['SA_CSVMULTIJOURNALIMPORT'] = array(SS_IMPORTMULTIJOURNAL|101, _("Import Multiple Journal Entries"));

define('SS_ASSETREGISTER', 101<<8);
        $security_areas['SA_ASSETTYPE'] = array(SS_ASSETREGISTER|1, _("Asset Type Entries"));
        $security_areas['SA_ASSETS'] = array(SS_ASSETREGISTER|2, _("Assets Entries"));
        $security_areas['SA_AMORTISATION'] = array(SS_ASSETREGISTER|3, _("Amortisation Posting"));

define('SS_REQUISITIONS', 101<<8); 
        $security_areas['SA_REQUISITIONS'] = array(SS_REQUISITIONS|1, _("Requisitions Entries"));
        $security_areas['SA_REQUISITION_ALLOCATIONS'] = array(SS_REQUISITIONS|1, _("Requisitions Allocations"));

define('SS_REPORT_GENERATOR',    130<<8);
        $security_areas['SA_REPORT_GENERATOR'] = array(SS_REPORT_GENERATOR|130, _("Report Generator"));
        $security_areas['SA_REPORT_GENERATOR'] = array(SS_SPEC|155, _("Report Generator"));

define ('SS_IMPORTPAYPALITEMS', 107<<8);
        $security_areas['SA_PAYPALIMPORT'] = array(SS_IMPORTPAYPALITEMS|107, _("Import Paypal Items"));
        $security_areas['SA_PAYPALSETUP'] = array(SS_IMPORTPAYPALITEMS|108, _("Setup Paypal Import"));

define ('SS_OSCORDERS', 106<<8);
        $security_areas['SA_OSCORDERS'] = array(SS_OSCORDERS|106, _("osCommerce Order Import"));

define ('SS_TAXREPCASH', 101<<8);
        $security_areas['SA_TAXREPCASH'] = array(SS_TAXREPCASH|101, _("Tax Inquiry (Cash Basis)"));

define ('SS_ZENORDERS', 101<<8);
        $security_areas['SA_ZENIMPORT'] = array(SS_ZENORDERS|101, _("Import Zen Cart Orders"));

The 3rd, 4th, 5th and the last 2 extensions - ImportMultiJournal, ZenOrders and TaxRepCash have the same security identifier viz., 101<<8

The $security_areas assigned array has single digit entries for the 4th and 5th extensions above.

apmuthu's Website

2 Reply by apmuthu (edited by apmuthu 09/25/2014 04:02:36 am)

  • From: Singapore, India, Chennai
  • Registered: 05/02/2009
  • Posts: 6,160

Re: Same Security Identifies issue

The wiki has been updated with how FA handles such issues by either assigning unique Security Areas (>=100) or overriding core functionality (when < 100).

Hence extension developers are advised not to hardcode any logic based on Security Area Code (number) but rather on their names.

apmuthu's Website