#                                                                        #
# Security policy definition                                             #
#                                                                        #
# This file contains the security policy configuration for the           #
# Blog package                                                           #


resources:
  methods:
    F3_Blog_PostEditorMethods: 'method(F3\Blog\Controller\PostController->(new|create|edit|update|delete)Action())'
    F3_Blog_CommentEditorMethods: 'method(F3\Blog\Controller\CommentController->(edit|update|delete)Action())'
    F3_Blog_RestrictedControllers: 'class(F3\Blog\Controller\(Blog|Admin|Account|Category)Controller)'
    F3_Blog_CreatePostCalledFLOW3: 'method(F3\Blog\Controller\PostController->createAction(newPost.title == "FLOW3"))'
  entities:
    F3_Blog_Domain_Model_Post:
      F3_Blog_Domain_Model_Post_PostsCalledFLOW3: this.title == 'FLOW3'

roles:
  Editor: []


acls:
  Editor:
    methods:
      F3_Blog_PostEditorMethods: GRANT
      F3_Blog_RestrictedControllers: GRANT
      F3_Blog_CommentEditorMethods: GRANT
      F3_Blog_CreatePostCalledFLOW3: DENY
    entities:
      F3_Blog_Domain_Model_Post_PostsCalledFLOW3: DENY