Questions tagged [zend-acl]

Zend ACL is an Access Control List class in the Zend Framework, an open source, object-oriented web application framework implemented in PHP 5 and licensed under the New BSD License.

Zend_Acl provides a lightweight and flexible access control list (ACL) implementation for privileges management. In general, an application may utilize such ACL's to control access to certain protected objects by other requesting objects.

For the purposes of this documentation:

a resource is an object to which access is controlled.
a role is an object that may request access to a Resource.

Put simply, roles request access to resources. For example, if a parking attendant requests access to a car, then the parking attendant is the requesting role, and the car is the resource, since access to the car may not be granted to everyone.

Through the specification and use of an ACL, an application may control how roles are granted access to resources.

Questions tagged with zend-acl should show they are implementing the Zend_Acl class from the Zend Framework.

To read more visit:
http://framework.zend.com/manual/en/zend.acl.introduction.html

144 questions
0
votes
1 answer

Does caching(APC) of an instance of Zend_Acl affect security?

It wouldnt make it easier to do something nasty, would it?
krzysiek
  • 465
  • 5
  • 16
0
votes
2 answers

ACL Ressource (Controller)

i just implemented ACL in my Zend Framework which already uses Zend Auth. I want to give access to some controllers and tried it this way: $roleGuest = new Zend_Acl_Role('guest'); $this->addRole($roleGuest); $this->addRole(new…
frgtv10
  • 5,300
  • 4
  • 30
  • 46
0
votes
1 answer

Zend_Auth chaining adapters and ownership role acl

I set up a Zend_Acl and Zend_Auth scheme where user is authenticated using Zend_Auth_Adapter_Ldap and stored in session. I use a controller plugin to check if $auth->hasIdentity() and $acl->isAllowed() to display login form if needed. What I want to…
Jon Skarpeteig
  • 4,118
  • 7
  • 34
  • 53
0
votes
1 answer

Laminas acl navigation with multiple roles

I have question about laminas navigation and acl. In my application, a user can have multiple roles non hierarchicals. But in the documentation, I have read that only one role should be passed to it via setAcl('myacl')->setRole('roleUder'). Because…
Samuel N.
  • 13
  • 5
0
votes
2 answers

How to detect specific deny on a role?

Zend_Acl by default disallow every role to every resource on every privilege untill or unless they are specifically allowed. In my system a user can have many roles and permission are assinged to these roles. I simply get all user roles iterate over…
Mr Coder
  • 8,169
  • 5
  • 45
  • 74
0
votes
2 answers

Zend Navigation & recursive Zend Acl

I would like to make navigation with Zend_Navigation based on Zend_Acl below is a piece of my navigation.xml file located in /application/configs dir
0
votes
1 answer

Could not create navigation based on Zend_Acl

I am trying to learn to create navigation with Zend_Acl. But the navigation only displays for admin and no one else. I have read through my code and I tried to trace the code that comes with ZendFramework. But I am stuck and I can't figure out what…
ryy705
  • 627
  • 1
  • 5
  • 11
0
votes
1 answer

How to handle Exception when Zend_Acl is On? it gives Resource 'default::error::error' not found'

i've implemeted the Zend_Acl and its seems to be working.my resources are links : module_name . "::" . controller_name . "::" . action_name; i've added something in my code that's breaking and it seems that's i'm redirected to the usual error page…
black sensei
  • 6,528
  • 22
  • 109
  • 188
0
votes
1 answer

Zend_Auth, Zend_Acl and Cron Jobs/Scheduled Tasks

I have implemented Zend_Auth & Zend_Acl into a project here at work and its working great. However, previously I had sceduled tasks running at various times of the day which now no longer work correctly due to the login process. These are called via…
Alistair
  • 17
  • 3
0
votes
0 answers

Zend framework ACL fails for the first time to switch the server

Hi guys! I'm not native to English, so I'll appreciate if you correct my sentence! To explain my issue, here is our development environment. language : PHP7.3.11 framework : Zend framework v3.3.11 server : aws ec2×4 server OS : Amazonlinux 2 redis…
0
votes
1 answer

Bootstrapping Zend Layout and include navigation resource

I have a problem with rendering navigation menu when I use the following bootstrap: public function _initViewHelpers() { $this->bootstrap('layout'); $layout = $this->getResource('layout'); $view = $layout->getView(); // Never inits…
Jon Skarpeteig
  • 4,118
  • 7
  • 34
  • 53
0
votes
1 answer

Problem defining what to do with 'guest' user in Zend_Acl

I'm getting the following error on every view available for the 'guest' user: Notice: Trying to get property of non-object in /home/fiodorovich/public_html/gisele/library/Federico/Plugin/Acl.php on line 35 the line it's referring to is '$role =…
la_f0ka
  • 1,773
  • 3
  • 23
  • 44
0
votes
1 answer

Zend_ACL : How to design Role based ACL for multiple small teams?

How role based ACL should be designed for : Multiple teams, each team consisting of one manager and multiple members and working from one location. Each location could have multiple teams and there are multiple locations. Manager of each team could…
understack
  • 11,212
  • 24
  • 77
  • 100
0
votes
2 answers

How to retrieve the current page from Zend_Navigation within a Controller Plugin

I am working on an Authentication Plugin using a Controller Plugin. I define my navigation config within the application.ini file, and then use that and the Database user records to dynamically load the ACL and apply it to Zend_Navigation. This bit…
Stephen RC
  • 1,494
  • 2
  • 19
  • 34
0
votes
4 answers

How to resolve Zend_Acl permission conflict for user with multiple roles?

I'm trying to create an RBAC with Zend_Acl. The question I have is that I want users to be able to have multiple roles, but I'm not sure how to solve permission conflicts between the various roles? In cases where there is a both an allow and deny,…
blacktie24
  • 4,985
  • 6
  • 41
  • 52