Solved thread

This post is marked as solved. If you think the information contained on this thread must be part of the official documentation, please contribute submitting a pull request to its repository.

ACL and AJAX

If I use ACL to deny access to an action called ajaxAction for anonymous users, it only will deny it when I type it in the URL or also when using AJAX?



53.6k
Accepted
answer

Both. As far as the server is concerned, an AJAX request is the same as a regular browser request (well, there may be some extra headers sent, but they're relatively inconsequential)



19.6k
edited Jul '14

Yeah, I thinked the same, but I wanted to ask before for a minimun of hope to not waste time xD. Thanks.