ACL's per user and per group.

Thanks Wiktor,

I was able to get the userid into the path variable. We set the base directory to the path above the users directory, then in the ResourceType set the name to the user's name and the URL and Directory to their userID. Here's the resource:

  
     $config['ResourceType'][] = Array(
      'name' => $auth['username'], 
      'url' => $baseUrl . $auth['user_id'],
      'directory' => $baseDir . $auth['user_id'],    
      'maxSize' => "50M",
      'allowedExtensions' => 'bmp,gif,jpeg,jpg,pdf,png,sxc,svg,ai,tif,tiff,',
      'deniedExtensions' => '');

We have run into a very strange problem though with ACL's. Whenever we set the role to "user" which is what the session variable is we get a "resource type" not found. Even though we're putting the $auth['username'] the same as in the resource. For example:

$config['AccessControl'][] = Array(
      'role' => 'user',
      'resourceType' => '*',
      'folder' => '/',

      'folderView' => true,
      'folderCreate' => true,
      'folderRename' => true,
      'folderDelete' => true,

      'fileView' => true,
      'fileUpload' => true,
      'fileRename' => true,
      'fileDelete' => true);

Part of what we're trying to do is setup config.php so that we can have one ACL which has rights to multiple resources. Then we can create them dynamically in a loop. So for each group_admin, they can see the resources of each user in their group, but not all resources for everybody. I hope that makes sense. I've tried putting the ACL's and resources in an "if" and "switch" statement and gotten nowhere. I think I just don't understand the relationship between the ACL's "role/resourceType/folder" and the Resources "name/url/directory". Any suggestions?