amosfolz / ufexcel Goto Github PK

Right now there are two permissions controlling access to ufexcel features. import_data and export_data.
These are "high level" permissions and are probably too broad for most situations. To align with the concept of least-privilege (users should only have the highest level of permissions to complete their tasks), there needs to be better access control.

Two possible access control options :

1. Allow specific table columns to be restricted. (right now every column in the table is accessible)
2. Per-user access control to specific tables.

Right now ufexcel requires a custom data-* attribute to be set on tables. To allow easier integration with default uf tables this could possibly be handled by using a custom default.php config file: with $key => $value being the table 'id' attribute => actual db table
This would be used to allow ufexcel to identify what table id corresponds to what table in the db without the need to set data-* attributes.

$('.js-ufexcel-export').click(function() {
//grab nearest table id
  var table = $("table:first").attr('id');

  $("body").ufModal({
  sourceUrl: site.uri.public + "/modals/ufexcel/export",
  ajaxParams: {
        table : table_name
     },
  msgTarget: $("#alerts-page")
      });
      attachForm();
    });

return
['site' => [
  'ufexcel_tables' => [
      'table-users'       => 'users',
      'table-groups'      => 'groups',
      'table-permissions' => 'permissions',
      'table-roles'       => 'roles',
      'table-activities'  => 'activities']]];

Ideally the sprinkle would:

1. Allow users to easily set what tables should have what features.
2. Add (or allow to be added easily) the additional table-tool-menu options to all default UF tables.

While:

• Avoid change to any of the core UF Controller code.

I'm not sure how this can be implemented without modifying the base UF code.