can i define different zend_acl resource in a php file?

rockdeaf · #1 (**permalink**) 02-27-2008, 02:34 AM

in a file, i want to define different resources for diffrent roles , can i use zend_acl?
does zend_acl can only be used in the directories or different files?

notrub225 · #2 (**permalink**) 02-27-2008, 03:43 AM

you can access different ACLs at differant parts of your site; just have them pointing to different configuration files.

rockdeaf · #3 (**permalink**) 02-27-2008, 04:55 AM

but i want to point diffrent sources to diffrent codes in a file, not several files. can i?

notrub225 · #4 (**permalink**) 02-27-2008, 05:34 AM

I am not sure what you mean. A Resource is an object to which access is controlled. A Role is an object that may request access to a Resource. You can have as many roles and resources as you like on one ACL. You don't need to make seperate lists.

If you save the ACL as a variable in Zend_Registry, it can be accessed ANYWHERE on your site. This is from my bootstrap file:

Code:

// setup Access Control List
$acl = new Zend_Acl();

$roleGuest = new Zend_Acl_Role('guest');
$acl->addRole($roleGuest);
$acl->addRole(new Zend_Acl_Role('staff'), $roleGuest);
$acl->addRole(new Zend_Acl_Role('editor'), 'staff');
$acl->addRole(new Zend_Acl_Role('administrator'));

$acl->allow('guest', null, 'view');
$acl->allow('staff', null, array('edit', 'submit', 'revise'));
$acl->allow('editor', null, array('publish', 'archive', 'delete'));
$acl->allow('administrator');

Zend_Registry::set('acl', $acl);

To get this variable from the registry:

Code:

$registry = Zend_Registry::getInstance();
$this->acl = $registry['acl'];

rockdeaf · #5 (**permalink**) 02-27-2008, 05:54 AM

for example
in a php file

Code:

echo (part A-only be viewed by role A);//i want to define this part as resource A
echo (part B-only be viewed by role B);//i want to define this part as resource B

can i?

and how i do this?

notrub225 · #6 (**permalink**) 02-27-2008, 07:35 PM

Quote:

Originally Posted by rockdeaf

for example
in a php file

Code:

echo (part A-only be viewed by role A);//i want to define this part as resource A
echo (part B-only be viewed by role B);//i want to define this part as resource B

can i?

and how i do this?

Once you have created the access control list, you use the isAllowed() method of Zend_Acl to check if a resource is allowed given the role specified. This function will return a boolean true or false:

Code:

if($acl->isAllowed('roleA', null, 'resourceA')) {
    echo $outputAllowedForRoleA;
}

if($acl->isAllowed('roleB', null, 'resourceB')) {
    echo $outputAllowedForRoleB;
}

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode