getAuthUser(); if (!$au) { $this->jerr("Not authenticated", array('authFailure' => true)); } if ($au->company()->comptype != 'OWNER') { $this->jerr("Permission Denied" ); } $this->authUser = $au; return true; } function get() { $this->post(); } function post() { if (!$this->hasPerm( 'Core.Groups','E')) { // editing groups.. $this->jerr("PERMISSION DENIED"); } print_r($_REQUEST); } }