The acl module is somewhat long in the tooth and invites to duplicate logic [and code].
The acl is imported by:
The auth module to check whether a user is blocked in the checkParamToken method.
The register module to check whether a user exists but is blocked.
The getUser method in the fromACL module used by the default login to check whether a user is blocked, verified, expired, etc.
The key module/method to check whether a user is verified, approved, or blocked.
The cookie module/method to check whether a user is blocked.
The most elegant method will merge the fromACL module with the acl module to export methods that retrieve and check a user returning the user or an appropriate error.
The acl module is somewhat long in the tooth and invites to duplicate logic [and code].
The acl is imported by:
The auth module to check whether a user is blocked in the checkParamToken method.
The register module to check whether a user exists but is blocked.
The getUser method in the fromACL module used by the default login to check whether a user is blocked, verified, expired, etc.
The key module/method to check whether a user is verified, approved, or blocked.
The cookie module/method to check whether a user is blocked.
The most elegant method will merge the fromACL module with the acl module to export methods that retrieve and check a user returning the user or an appropriate error.