I am about to implement access control in my ZF2 project. I am checking both RBAC and ACL.
Which one would be best suited over the other? and why?
And which one would be supported well by Zend in the future?
I googled it, but couldn’t get answers.
Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
If you use ZF2 ACL probably you have to do a few other things like put in place firewalls, load ACL configuration and setup rules etc.
I was quite happy with ZF1 ACL but a bit pain was to setup and keep up-to-date resources (in our case model/controller/action).
In ZF2 you should use routes – routeMatch or Controller match. I found quite useful ZfcRbac which is quite similar to RBAC but it does extra few bits.
It might be easier to start there.
ZfcRbac