Roles , Privileges and ACl

Rules :

• Each user can have different roles
• Each role has different privileges
• Super Admin role can do anything

Privileges are defined explicitly for each module , and stored in config/modules.php . In roles->privileges form ( /admin/users/roles/<role_id>/privileges ) , you can assign each role privilege by checking or unchecking the checkboxes

In each controller , in the construct method , you can assign the privilege you need before accessing the whole controller , or you can assign it for each function . See example here