Question

When isAuthorized = false the user is redirected to ‘/’ is there a way to change this. I want to redirect to the user dashboard (/users/dashboard) with a flash message saying ‘Access prohibited’ or something like that.

Cheers!

public function isAuthorized($user) {
    if (isset($user['role']) && $user['role'] === 'admin') {
        return true; //Admin can access every action
    }
    return false; // The rest don't
}

Answer 1

If your isAuthorised variable is being evaluated in your controller.

You can call the redirect function.

$this->redirect(array('controller' => 'users', 'action' => 'dashboard'));

If you are actually inside the users controller allready, just call

$this->redirect(array('action' => 'dashboard'));

If not, where are you checking the isAuthorised value?

This is not an ideal solution. However it seems that there is no way to do this with the current built in AuthComponent

Edit: Added code as an example.

public function isAuthorized($user) {
if (parent::isAuthorized($user)) {
    return true;
}
// Authorised actions
if (in_array($this->action, array('dashboard'))) {
    return true;
}
// Will break out on this call
$this->redirect(array('controller' => 'users', 'action' => 'dashboard'));
return false;
}