user access

programController.php

public function getProgramStats()
    { 
    	$user = $this->Auth->user();
    	if(isset($this->params['url']['program'])){
    		$programUrls = $this->Program->find('authorized', array(
    			'specific_program_access' => 'true',
    			'user_id' => $user['id'],
    			'conditions' => array('url'=> $this->params['url']['program'])));
    		foreach($programUrls as $programUrl)
    			$programDatabase = $programUrl['Program']['database'];
    		$programStats = $this->Stats->getProgramStats($programDatabase);
    		$result = array('status' =>'ok', 'programURL' => $programUrl['Program']['url'], 'programStats' => $programStats);
    		$this->set(compact('result'));
        }
    }

$.ajax({
     type: "GET",
     dataType: "json",
     url: "/programs/getProgramStats.json",
     data: {"program": programUrl},                  #cleaner to have the parameter of the url separate from the url
     success: function(data){
            $("#"+data['programURL']+" .ttc-program-stats").empty().append(generateHtmlProgramStats(data['programStats']))
     },
     timeout: 100,
     error: function(ajaxRequest){
            alert(ajaxRequest.data['program']);
     })