NAME

Data::ACL - Perl extension for simple ACL lists

SYNOPSIS

     use Data::ACL;
     use Set::NestedGroups;  #   See Set::NestedGroups documentation

     my $groups = Set::NestedGroups->new;
     $groups->add( 'root', 'wheel' );
     $groups->add( 'wheel', 'staff' );
     $groups->add( 'webmaster', 'staff' );

     my $acl = Data::ACL->new( $groups );
     my $web = $acl->Realm( 'web' );
     $web->Deny( 'all' );
     $web->Allow( 'staff' );

     &DenyAccess unless $acl->IsAuthorized( $user, 'web' );

DESCRIPTION

This module implements a series of allowed and denied access control lists for permissive controls. The Set::NestedGroups module is used to define users and nested permissive groups.

METHODS

The following methods are available through this module for use in the creation and manipulation of access control lists. No methods of this module may be exported into the calling namespace.

new

my $acl = Data::ACL->new( $groups );

        The method creates a new access control list module and requires the
        Set::NestedGroups object of defined users and nested permissive
        groups to be passed to this object constructor.

Realm

my $realm = $acl->Realm( $name );

        This method creates a new authentication realm to which users and
        groups can be assigned access rights via the Allow and Deny methods.

Allow

$realm->Allow( $group );

        This method grants access rights to the user or group passed as an
        argument to this method within the authentication realm object
        defined previously by the $acl->Realm method.

Deny

$realm->Deny( $group );

        This method denies access rights to the user or group passed as an
        argument to this method within the authentication realm object
        defined previously by the $acl->Realm method.

IsAuthorized

if ( $acl->IsAuthorized( $user, $name ) ) { ... }

        This method is used to test the access rights of a user or group to
        the authentication realm defined by $name.

SEE ALSO

Set::NestedGroups

VERSION

0.02

AUTHOR

Ariel Brosh, schop@cpan.org (Inactive); Rob Casey, robau@cpan.org