I have a directory layout like this:

apps/default/views
/controllers
/news/views
/controllers
/products/views
/controllers
/supports
lib/Zend

www/css
/images
/js

I want to use zend_acl and zend_auth check validation and role of user each time they logon to website.

•guest (not authenticated) - Guests can access 'default', 'news' and 'supports' only. Guests attempting to access member-only content will be asked to authenticate.

•member (authenticated) - Access all top-level controllers. Can update forum posts but only those authored by themselves. Not allowed access to admin section. Access to 'admin' will result in 'privileges' error message.

•admin (authenticated) - Unrestricted access.


This is mysql file:

-- ----------------------------
-- Table structure for tbl_roles
-- ----------------------------
CREATE TABLE `tbl_roles` (
`roleid` int(4) NOT NULL auto_increment,
`rolename` varchar(255) default NULL,
PRIMARY KEY (`roleid`)
)

-- ----------------------------
-- Table structure for tbl_users
-- ----------------------------
CREATE TABLE `tbl_users` (
`uid` int(4) NOT NULL auto_increment,
`roleid` int(4) NOT NULL,
`firstname` varchar(255) NOT NULL,
`lastname` varchar(255) NOT NULL,
`email` varchar(255) NOT NULL,
`username` varchar(255) NOT NULL,
`password` varchar(255) NOT NULL,
PRIMARY KEY (`uid`)
)

Can you give me a clear example about this problem. I am a new bie with php and zend framework. Thanks you

I didn't used those components , but there are some tutorials (even a new one) related to use of Auth and ACL

Check:

Zend Auth Tutorials
Zend ACL Tutorials

__________________
Zend Framework Tutorials | Zend Framework Forums | Zend Framework IRC Channel |
| Zend Framework Resources | CoreShifter
| Microsoft Forums | Microsoft Links | Microsoft Books

That should be a simple setup, I will be using Zend_Acl and Zend_Auth (already implemented) in by the next week, so I'll tell you how it goes

__________________
Zym Framework - A Zend Framework extension library w/ demo app

SpotSec Blog:
http://spotsec.com/blog

thank you very munch

I am interested myself...

I didn't used Auth and ACL, seems a nice thing but without a db with users and roles (as quannm0410l asked) can't find this very usefull...

Btw, this could be even a new ZF component... I got tons of ideas, but not much time for implementing myself

__________________
Zend Framework Tutorials | Zend Framework Forums | Zend Framework IRC Channel |
| Zend Framework Resources | CoreShifter
| Microsoft Forums | Microsoft Links | Microsoft Books

actually it doesnt require you to use a db to store users and roles. It is actually up to the programmer to decide how to store the roles and users. Zend_Auth needs to be extended with adapters and roles can be stored to a file be serializing the acl object and writing to the file.

__________________
Zym Framework - A Zend Framework extension library w/ demo app

SpotSec Blog:
http://spotsec.com/blog