Questions tagged [zend-acl]

Zend ACL is an Access Control List class in the Zend Framework, an open source, object-oriented web application framework implemented in PHP 5 and licensed under the New BSD License.

Zend_Acl provides a lightweight and flexible access control list (ACL) implementation for privileges management. In general, an application may utilize such ACL's to control access to certain protected objects by other requesting objects.

For the purposes of this documentation:

a resource is an object to which access is controlled.
a role is an object that may request access to a Resource.

Put simply, roles request access to resources. For example, if a parking attendant requests access to a car, then the parking attendant is the requesting role, and the car is the resource, since access to the car may not be granted to everyone.

Through the specification and use of an ACL, an application may control how roles are granted access to resources.

Questions tagged with zend-acl should show they are implementing the Zend_Acl class from the Zend Framework.

To read more visit:
http://framework.zend.com/manual/en/zend.acl.introduction.html

144 questions
42
votes
1 answer

Practical Zend_ACL + Zend_Auth implementation and best practices

Context: My questions pertain to a forum I'm developing pretty much exactly like SO, where there are: guests who have access to view threads but can't reply or vote members who, with enough rep, can edit/vote others threads, and by default they can…
meder omuraliev
  • 183,342
  • 71
  • 393
  • 434
16
votes
2 answers

Zend Framework: need typical example of ACL

Can some one guide me for typical implementation example of ACL. Like 'admin' can access 'admin' module, 'user' can access 'user module', and guest can access 'open' pages.
Simpanoz
  • 2,729
  • 10
  • 43
  • 64
10
votes
2 answers

PHP Unit Testing with Zend Auth and Zend ACL

I have an application that is behind a login and utilizes zend_acl and zend_auth. During pre-dispatch I have an ACL plugin that creates all the rules out for the ACL. I also have an Auth plugin that checks if you're logged in or not and if so if you…
Stephen Maher
  • 228
  • 5
  • 11
9
votes
1 answer

Does Zend ACL suit my needs?

I have based my application upon the Zend Framework. I am using Zend_Auth for authentication, but I'm not sure if Zend_Acl will work for me because, frankly, the examples I've seen are either too simplistic for my needs or confuse me. I'm thinking…
Sonny
  • 8,204
  • 7
  • 63
  • 134
6
votes
0 answers

How do I inject access control into a service layer of mvc application?

I'm coding a zend framework application using the the standard mvc paradigm with an added service layer to take care of application/business logic. It seems quite popular to put your access control into your services, rather than your…
clarkstachio
  • 613
  • 4
  • 8
6
votes
1 answer

Zend_Acl, How to check a user with multiple roles for resource access

i am implementing RBAC for my app, and everything is managed from database. for example i am storing all resources/permissions in a table called permission , all roles in role table, and another table called role_permission to define which role…
Ibrahim Azhar Armar
  • 25,288
  • 35
  • 131
  • 207
5
votes
4 answers

Zend navigation and Zend ACL

I am working with Zend Acl and Zend Navigation. I am setting up the navigation in the bootstrap. I am trying to have links not show if the user doesn't have access to the resource. I have read several tutorials, gone through the zend reference…
JoeyD473
  • 2,890
  • 2
  • 21
  • 25
5
votes
1 answer

Zend_Acl find all inherited roles

I got chain of roles: acl.roles.guest = null acl.roles.member = "guest" acl.roles.admin = "member" acl.roles.owner = "admin" in .....Controller/Action/Helper/Acl.php I have stored _acl object Is it a way to get list of my role and parents…
bensiu
  • 24,660
  • 56
  • 77
  • 117
5
votes
1 answer

Whats the way to use Zend_Acl in View to show/hide parts of view

I am wondering whats the way to use Zend_Acl to show/hide parts of view? I am thinking I will Create a Controller Plugin that passes the logged in user + acl to view $this->view->loggedInUser = Zend_Auth::getIdentity(); $this->view->acl =…
Jiew Meng
  • 84,767
  • 185
  • 495
  • 805
5
votes
2 answers

Zend_Acl, with roles and permissions stored in database

i want to build an ACL system for my application which have the following requirement. Users will be assigned single or multiple role. (Admin, Staff) etc. Role will have permissions.(Send_Invoices, Send_mail, Delete_Invoices, Send_Estimate)…
Ibrahim Azhar Armar
  • 25,288
  • 35
  • 131
  • 207
4
votes
2 answers

How should I structure my tree of resources in an ACL?

Using PHP and Zend_ACL, I want to create an extremely flexible permissions system. I want to be able to assign permissions to all objects of a certain type, as well as to instances of those objects. If a specific instance of an object is queried and…
Harry
4
votes
2 answers

How to debug a "Maximum execution time" fatal error?

I'm trying to use Zend_acl in my application. I followed the "Zend Framework in action" book. I added this helper:
FredRoger
  • 1,545
  • 1
  • 12
  • 17
4
votes
4 answers

Access Control List Best Practices - ACL - Setting Negative Roles for Users who Attack a Site

CONTEXT I have just been reading about Zend ACL http://framework.zend.com/manual/en/zend.acl.html QUESTION I'm running three Zend applications on one server. My Front End App My Front End-Members App My Back End App (Site Owner's Admin) Within the…
JW.
  • 4,821
  • 5
  • 43
  • 60
4
votes
1 answer

Zend Framework 2 - Authentication / ACL

Hi i am new to ZF2 and i am trying to understand the main concepts by creating an extended application to learn all about ZF2 and test my knowledge. Please forgive me if my questions sound stupid or if i didnt get some things along the way when…
3
votes
2 answers

Zend Navigation: Where should I load the ACL 'Role' in a private application

I am working on a 'private' application, you must be logged in to do anything at all. This gives me a bit of a an issue loading the role for Zend Navigation. Currently I am 'init'ing Zend Navigation in my bootstrap; that was fine until I added ACL…
rhaag71
  • 519
  • 7
  • 22
1
2 3
9 10