Prototype access control model. There's much left to do, but it's a

working implementation.

1 files changed, 3 insertions, 5 deletions

diff --git a/modules/user/helpers/group.php b/modules/user/helpers/group.php
index 2e6a3962..12118432 100644
--- a/modules/user/helpers/group.php
+++ b/modules/user/helpers/group.php
@@ -24,6 +24,7 @@
  * Note: by design, this class does not do any permission checking.
  */
 class group_Core {
+  const EVERYBODY = 0;
   const REGISTERED_USERS = 1;
 
   /**
@@ -41,9 +42,7 @@ class group_Core {
     $group->name = $name;
     $group->save();
 
-    // Create the view column for this group in the items table.
-    Database::instance()->query("ALTER TABLE `items` ADD `view_{$group->id}` BOOLEAN DEFAULT 0");
-
+    module::event("group_created", $group);
     return $group;
   }
 
@@ -56,8 +55,7 @@ class group_Core {
     $group = ORM::factory("group", $id);
 
     if ($group->loaded) {
-      // Drop the view column for this group in the items table.
-      Database::instance()->query("ALTER TABLE `items` DROP `view_{$group->id}`");
+      module::event("group_before_delete", $group);
       $group->delete();
     }
   }