Codeigniter - SQL Permission Checks

[Danny620]

Hi I am developing a web application I am using ionauth as my user login, my problem is I have many to many relation database, what is the best way to check if the user is editing his own record I.e

 

User ID 5

Owns a pub (pub is linked to user id)

The pub has many rooms which is linked to the pub id

 

Checking if the user owns a pub is easy as I can you say update pub where user I'd is equal to session

But as for the room how can I do that as I don't want to put user id in rooms table

[sKunKbad]

Standard DB design would say that your rooms table needs a pub ID. Then you would just do a query with three joins.

SELECT u.*, p.*, r.*
FROM users u 
LEFT JOIN pubs p 
ON u.user_id = p.user_id 
LEFT JOIN rooms r 
ON p.pub_id = r.pub_id
WHERE monkeys eat bananas .....

Edited January 18, 2014 by sKunKbad