Great addition. Thanks for sharing.

p.s. I’ve made corrections per your request.

Just a quick tip for anyone out there who require your user authentication as well as admin and want to deny access to any user trying to use any admin prefixed link.

1) You need to create a field in your users table called ‘role’. Then either make a user an ‘admin’ or ‘user’ (Or use whatever you prefer.).

2) In your AppController::beforeFilter() add this bit of code at the bottom

$admin = Configure::read(‘Routing.admin’);
if (isset($this->params[$admin]) && $this->params[$admin] && $this->Auth->user(‘role’) != ‘admin’)
{
$this->Session->setFlash(‘You are not authorized.’, ‘default’, array(‘class’ => ‘error’));
$this->redirect(‘/’);
}

Basically what this does is check to see if the users role is admin and redirects to the home page if they are not. For added security remove the flash message and redirect and serve up a 404 error so the user doesn’t know they found an admin link.

I had hoped to construct my app. so that I had one login form /users/login/ and then to use logic in the login action to decide if the user was an administrator and redirect them to /admin/users/whatever/.

Is there a way to do this? All my attempts came to nought so for now I’ve used your method of having a separate admin login /admin/users/login/

Everything is disallowed by default.

can we dissallow /admin/ prefix automatically?

The approach would be the same, you simply need to check the role of the currently logged-in user.

I went through your tutorial. I had a query on using auth component for Registered users as well as Admin users. You replied that its possible if your user table has the role field.

I am using table structure which has Many to Many relations with User and Role and maintained into separate table called users_roles. Typically I have followed the structure posted here : http://www.studiocanaria.com/articles/cakephp_auth_component_users_gro

can you suggest in brief what should be the approach, or some code example.

But, Can i use admin prefix and language code together? How?

When i add ‘language’ to my url (eg. in form action) i can’t loggin to admin area, why?
I use app_helper to add language, it’t very simple…

You certainly can use it in App Controller.
Usually this happens when you try to login/logout and leads you back to the page you came from, which creates a infinite loop.

That being said, it’s best to specify which actions you are “allowing” in the specific controller.