Questions tagged [zend-acl]

Zend ACL is an Access Control List class in the Zend Framework, an open source, object-oriented web application framework implemented in PHP 5 and licensed under the New BSD License.

Zend_Acl provides a lightweight and flexible access control list (ACL) implementation for privileges management. In general, an application may utilize such ACL's to control access to certain protected objects by other requesting objects.

For the purposes of this documentation:

a resource is an object to which access is controlled.
a role is an object that may request access to a Resource.

Put simply, roles request access to resources. For example, if a parking attendant requests access to a car, then the parking attendant is the requesting role, and the car is the resource, since access to the car may not be granted to everyone.

Through the specification and use of an ACL, an application may control how roles are granted access to resources.

Questions tagged with zend-acl should show they are implementing the Zend_Acl class from the Zend Framework.

To read more visit:
http://framework.zend.com/manual/en/zend.acl.introduction.html

144 questions
0
votes
2 answers

Zend framework ACL question

I'm new to Zend framework and currently looking at Zend_Acl . There are multiple examples online. In a lot of these example you would see code like this one: class My_Acl extends Zend_Acl { public function __construct() { //Add a new role…
Stann
  • 13,518
  • 19
  • 65
  • 73
0
votes
1 answer

Separate of frontend and backend authentication and ACL

I'm about to start work a small, modular application in Zend Framework. Just want to get some input on where to put my authentication and ACL code. Regular users can register and login through the frontend, but there is an admin section with login…
Cobby
  • 5,273
  • 4
  • 28
  • 41
0
votes
2 answers

Zend ACL - unusual errors in log file

This is a bit weird because I am seeing these bunch of errors in my log files and none of them correspond to any resources that I have. Infact I dont even recognize any of these resources that show up in the error files 2010-12-26T12:19:46+00:00…
Gublooo
  • 2,550
  • 8
  • 54
  • 91
0
votes
2 answers

Need suggestings setting up Zend_Acl

Suppose I have the classes/models Projects (has many lists) Lists I want to allow only users that are collaborators of a project to be able to add lists. How do I do that. I know I should use Zend_Acl_Assert but what do I pass as the resource.…
Jiew Meng
  • 84,767
  • 185
  • 495
  • 805
0
votes
2 answers

Zend_Navigation, Zend_ACL + Roles not filtering correctly through an AJAX request

I have been using zend_acl and Zend_Navigation together on my project currently and it seems to work correctly. I am how ever using a lot of AJAX in my site and have made a login with jqModal and jQuery which logs in users without reloading the…
user530361
  • 33
  • 1
  • 7
0
votes
1 answer

How to merge few ACLs in Zend Framework?

I have few instances of Zend_Acl objects, like this one (one for each module): class My_Acl_Module1 extends My_Base_Acl { public function __construct() { parent::__construct(); $this->addResource('News_Model_Entry'); …
takeshin
  • 49,108
  • 32
  • 120
  • 164
0
votes
2 answers

Zend_ACL how to get role?

after reading the Zend documentation and some posts here I could not figure out how to get my user role out of a user table. At the moment I use Zend_Auth like this in an AuthController: // Set authentication adapter and map ID and Cre. // only…
lony
  • 6,733
  • 11
  • 60
  • 92
0
votes
1 answer

Zend ACL - how to handle request via ajax/jquery to pages that are protected

I'm kind of stuck here - I can write a hack to work around this but was wondering if there is a proper way to do this. I am using Zend ACL to specify which pages are protected and require authentication. For example if the "UploadVideo.php" is a…
Gublooo
  • 2,550
  • 8
  • 54
  • 91
0
votes
3 answers

Zend-Framework how to detect not extisting action with zend_acl

$this->add ( new Zend_Acl_Resource ( 'index' ) ); $this->addRole ( new Zend_Acl_Role ( 'guest' ) ); $this->allow('guest', 'index','view'); and i have problem in this condition if (! $this->_acl->isAllowed ( $role, $resource, $action )){ ...…
Tom
  • 83
  • 1
  • 1
  • 9
0
votes
1 answer

ZF2 ACL check link in view

I have set up my roles, resources and permissions in my bootstrap, and in my layout have set up a navigation menu based on this, and this works. What I am attempting to do now is create an admin panel with edit / delete links IF the current logged…
Richard Parnaby-King
  • 14,703
  • 11
  • 69
  • 129
0
votes
0 answers

How to manage users' access to items of other users in ZF2?

I use a simple ACL inspired by this video tutorial. The acl.global.php has a structure like return [ 'acl' => [ 'roles' => [ 'guest' => null, 'member' => 'guest', 'admin' => 'member' ], …
automatix
  • 14,018
  • 26
  • 105
  • 230
0
votes
2 answers

PHP, ZF: Zend_Acl for module-controller-action

I need some examples (URLs) for adding Zend_Acl (roles and rules, allowing to visit or deny actions). I've googled but didn't find exactly that I need - step by step guide to provide such operations with module, not just controller-action. BTW,…
eXp
  • 1
0
votes
2 answers

Zend Framework: What exception to use for "Access denied"/"unauthorized access" from ACL?

i am using Zend Framework Zend_Acl i am wanting to throw an exception when the user is denied access to a resource. which exception class do i use?
Jiew Meng
  • 84,767
  • 185
  • 495
  • 805
0
votes
1 answer

How is ACL implemented

i am using Zend_Acl, PHP and is wondering how shld ACLs be implemented. shld every page be a resource and i always query the acl to see if a user is authorized? i guess i must use this if i want to use a controller plugin (can be setup to run on…
Jiew Meng
  • 84,767
  • 185
  • 495
  • 805
0
votes
1 answer

Second navigation not injecting ACL

I have an application with an admin area which requires a separate navigation menu from the main site, I also need to inject the ACL to prevent the admin user from seeing certain menu items. I have created an admin navigation factory. namespace…
Garry
  • 1,455
  • 1
  • 15
  • 34