Question

I have a website with 3 different user roles: guest(unregistered), member and admin.

I would like to restrict access to controllers as follows.

AuthController -> guest, member, admin

AdminController -> admin

MemberController -> member

Is there a simple way to do it without using Zend_Acl? I don’t really understand how to actually use Zend_Acl.

Answer 1

I found this tutorial very useful for implementing a simple Auth & ACL scheme.

It invoves creating a Front Controller Plugin & custom Zend_ACL class.

EDIT: To answer the question in your comment

You can define the resources without the action part

    // Add some resources in the form controller
    $this->add(new Zend_Acl_Resource('error'));
    $this->add(new Zend_Acl_Resource('auth'));

    // Allow guests to see the error, login and index pages
    $this->allow('guest', 'error');
    $this->allow('guest', 'auth');

and don’t check for action in front plugin

if(!$acl->isAllowed($user->role, $request->getControllerName())) {

I didn’t tested it but it should work.