Welcome, Guest. Register Now!
   
Mark Forums Read Mark Forums Read Mark Forums Read

Zend Framework Forum » Zend Framework Components » Authentication & Authorization » "subclassing" the resources in ACL

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 01-21-2008, 05:01 PM
Junior Member
  
Join Date: Jan 2008
Posts: 1
Default "subclassing" the resources in ACL
Sorry if the topic is misleading, I can't figure out a better way to describe it.

§ 2.2.1 in the ZF docs talk about setting up resources in a way that I can't quote see the benefit of.

PHP Code:
<?php
$acl->add(new Zend_Acl_Resource('news'));                 // news
$acl->add(new Zend_Acl_Resource('latest'), 'news');       // latest news
You would check if a user could view latest news with something like
PHP Code:
isAllowed('staff', 'latest', 'view') 
The thing I don't understand here is what is gained using this method compared to setting up the resource with
PHP Code:
$acl->add(new Zend_Acl_Resource('latest news'));       // latest news 
If I was to several different feeds, say 'news' and 'notices', and wanted to set up a 'latest' for both of those, checking isAllowed('staff', 'latest', 'view') wouldn't cut it anymore.

This wouldn't work:
PHP Code:
$acl->add(new Zend_Acl_Resource('news'));                 // news
$acl->add(new Zend_Acl_Resource('notices'));              // notices
$acl->add(new Zend_Acl_Resource('latest'), 'news');       // latest news
$acl->add(new Zend_Acl_Resource('latest'), 'notices');    // latest notices

isAllowed('staff', 'latest', 'view'); 
Is there a way to do something like "is allowed to view latest that subclass news"?

If not, why should you set up your resources like that?

I'm hoping I've made *some* sense... evaluating the framework, so I'm pretty new to it still...

//Magnus
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #2 (permalink)  
Old 01-23-2008, 08:35 PM
Junior Member
  
Join Date: May 2007
Posts: 25
Default apply permissions based on controller or action
the key there is that you can apply permissions based on either all of the actions in one controller, or specifiy which actions which person can access.

you might let everyone view the latest news, but you could restrict one action like news->memberOnly to members.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply

« Previous Thread | Next Thread »

Thread Tools
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 05:35 PM.

Contact Us - Zend Framework Forum - Archive - Top
Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Friendly URLs by vBSEO 3.1.0
Forum skin by ForumMonkeys.