Atm there are only options to use single "OR" and "AND" operations for multiple access conditions. Would be very nice to have UI that allows to combine conditions using multiple different logics operators, e.g. like it's done in Rules module.
Example: let's say we have "foo" content, with 2 permissions: "view own foo", "view foo". I would like to be able to make following check:
(current user has "view foo" permission) OR (current user has "view own foo" permission" AND current user == "foo" author). It seems like currently I'm forced to write my own access plugin, which seems like overkill because CTools has all conditions already, and only needs another way to combine them. This can be ofcourse fixed using PHP code access check, but it's not very user friendly.

Comments

crea’s picture

crea CreditAttribution: crea commented

"foo" content was just example: I understand that with nodes it's possible to use simple "user can access content". Lets say "foo" is not node but some unknown object for example.

merlinofchaos’s picture

merlinofchaos CreditAttribution: merlinofchaos commented

Well. For the one you describe you can do that with the basic node_access plugin. =)

I take your point but being able to do that adds significant complexity to the UI that I am not comfortable with.

crea’s picture

crea CreditAttribution: crea commented

UI needs some work anyway: with current state, if one adds several access conditions those drop-downs become too long and actually not very user-friendly. I was going to suggest to move access condition to separate button anyway.

merlinofchaos’s picture

merlinofchaos CreditAttribution: merlinofchaos commented
Status: Active » Closed (won't fix)

For now I am not going to do this. I realize that something more complex would be valuable, but difficult. With exportable access rules we can also layer up combinations, which is hard but this is a rarely used condition.