JasonEisen Open Source

in predispatch method you have $request parameter. In the body of the method you use $this->getRequest().
I think it`s unnecessarilly because you already have a request object.

Thanks for sharing your approach.

Hi,That post is great.
And the thing that freaks me out is efficiency.
how about overhead of code?If there are too many roles in database,and load them every time when every page is requested.

kometo:

You could store this information serialized and update it whenever it’s changed and use that.

See: http://framework.zend.com/manual/en/zend.acl.advanced.html#zend.acl.advanced.storing

Dado:

Groups would be your role table in your case. You would just need to set up the module/resource/privilege part.

This example does not try to tackle inheritance or assertions. I promise I will tackle this in an upcoming post (using Doctrine now, though) at some point.

After converting to doctrine (I will post the code here soon) and running nearly the same query, I did some basic benchmarks with the profiler.

Time Connecting: .00348
Query Execution: .00329

Total Time: .00677

This is for retrieving 201 records. The time just connecting to the db takes more than half of the entire time spent, and even still that is massively small. 6.7ms?

As a side note, I don’t agree with pulling ACL only related to the current user role. Using inner joins, entire modules and controllers could be missing in the ACL and may need querying for other reasons. Also, that’s n more queries your db has to cache rather than just a single one that works for all roles.

Great finaly a uptodate howto on ZF acl!

I’m missing something obvious. As every example out there, yours doesn’t at all address as to where insert the code you hand us.

What extending a class is i understand very well, but i wouldn’t know for god where to put the extended file, and where to include or require it!

Please address this as i’ve seen the question asked to many times and none answered yet. Thank you!

Hi!
I’m new to the Zend_Acl, so can you post and example of filled database tables in order to understand better how it should work?

Thanks.

Also, if your resource isn’t in the ACL and you call isAllowed anyways, you get an Exception.

The fix is

if (!isset($error) && !$acl->isAllowed($session->roleid, $request->getModuleName().’_’.$request->getControllerName(), $request->getActionName())) {

Hey, guys!

Can anybody post and example of populated database? I’m getting only exceptions like “‘Zend_Acl_Exception’ with message ‘Resource ‘default_index’ not found’”.

And for sure it is because I didn’t fill the DB correctly.

Here are my sqldumb:
– ——————————————————–

–
– Table structure for table `acl_module`
–

CREATE TABLE `acl_module` (
`acl_module_id` tinyint(3) unsigned NOT NULL auto_increment COMMENT ‘Module ID’,
`acl_module_name` varchar(32) NOT NULL COMMENT ‘Module Name’,
PRIMARY KEY (`acl_module_id`)
) ENGINE=MyISAM AUTO_INCREMENT=3 DEFAULT CHARSET=utf8 COMMENT=’ACL Modules’ AUTO_INCREMENT=3 ;

–
– Dumping data for table `acl_module`
–

INSERT INTO `acl_module` VALUES (1, ‘default’);
INSERT INTO `acl_module` VALUES (2, ‘index’);

– ——————————————————–

–
– Table structure for table `acl_privilege`
–

CREATE TABLE `acl_privilege` (
`acl_privilege_id` smallint(5) unsigned NOT NULL auto_increment COMMENT ‘Privilege ID’,
`acl_resource_id` tinyint(3) unsigned NOT NULL COMMENT ‘Resource ID’,
`acl_privilege_name` varchar(32) NOT NULL COMMENT ‘Privilege Name’,
PRIMARY KEY (`acl_privilege_id`),
UNIQUE KEY `acl_resource_id_2` (`acl_resource_id`,`acl_privilege_name`),
KEY `acl_resource_id` (`acl_resource_id`),
KEY `acl_privilege_name` (`acl_privilege_name`)
) ENGINE=MyISAM AUTO_INCREMENT=14 DEFAULT CHARSET=utf8 COMMENT=’ACL Privileges’ AUTO_INCREMENT=14 ;

–
– Dumping data for table `acl_privilege`
–

INSERT INTO `acl_privilege` VALUES (1, 1, ‘index’);
INSERT INTO `acl_privilege` VALUES (2, 1, ‘add’);
INSERT INTO `acl_privilege` VALUES (3, 1, ‘delete’);
INSERT INTO `acl_privilege` VALUES (4, 1, ‘edit’);
INSERT INTO `acl_privilege` VALUES (5, 2, ‘index’);
INSERT INTO `acl_privilege` VALUES (6, 2, ‘add’);
INSERT INTO `acl_privilege` VALUES (7, 2, ‘delete’);
INSERT INTO `acl_privilege` VALUES (8, 2, ‘edit’);
INSERT INTO `acl_privilege` VALUES (9, 3, ‘index’);
INSERT INTO `acl_privilege` VALUES (10, 3, ‘add’);
INSERT INTO `acl_privilege` VALUES (11, 3, ‘delete’);
INSERT INTO `acl_privilege` VALUES (12, 3, ‘edit’);
INSERT INTO `acl_privilege` VALUES (13, 7, ‘index’);

– ——————————————————–

–
– Table structure for table `acl_resource`
–

CREATE TABLE `acl_resource` (
`acl_resource_id` tinyint(3) unsigned NOT NULL auto_increment COMMENT ‘Resource ID’,
`acl_module_id` tinyint(3) unsigned NOT NULL COMMENT ‘Module ID’,
`acl_resource_name` varchar(32) NOT NULL COMMENT ‘Resource Name’,
PRIMARY KEY (`acl_resource_id`),
KEY `acl_module_id` (`acl_module_id`)
) ENGINE=MyISAM AUTO_INCREMENT=8 DEFAULT CHARSET=utf8 COMMENT=’ACL Resources’ AUTO_INCREMENT=8 ;

–
– Dumping data for table `acl_resource`
–

INSERT INTO `acl_resource` VALUES (1, 1, ‘game’);
INSERT INTO `acl_resource` VALUES (2, 1, ‘user’);
INSERT INTO `acl_resource` VALUES (3, 1, ’stat’);
INSERT INTO `acl_resource` VALUES (4, 1, ‘auth’);
INSERT INTO `acl_resource` VALUES (5, 1, ‘index’);
INSERT INTO `acl_resource` VALUES (6, 1, ‘error’);
INSERT INTO `acl_resource` VALUES (7, 1, ‘uStats’);

– ——————————————————–

–
– Table structure for table `acl_role`
–

CREATE TABLE `acl_role` (
`acl_role_id` tinyint(3) unsigned NOT NULL auto_increment COMMENT ‘ACL Role ID’,
`acl_role_name` varchar(32) collate utf8_unicode_ci NOT NULL COMMENT ‘Role Name’,
PRIMARY KEY (`acl_role_id`),
KEY `acl_role_name` (`acl_role_name`)
) ENGINE=MyISAM AUTO_INCREMENT=5 DEFAULT CHARSET=utf8 COLLATE=utf8_unicode_ci COMMENT=’ACL Roles’ AUTO_INCREMENT=5 ;

–
– Dumping data for table `acl_role`
–

INSERT INTO `acl_role` VALUES (1, ‘Admin’);
INSERT INTO `acl_role` VALUES (2, ‘User’);
INSERT INTO `acl_role` VALUES (3, ‘Manager’);
INSERT INTO `acl_role` VALUES (4, ‘Visitor’);

– ——————————————————–

–
– Table structure for table `acl_role_privilege`
–

CREATE TABLE `acl_role_privilege` (
`acl_role_id` tinyint(3) unsigned NOT NULL COMMENT ‘Role ID’,
`acl_privilege_id` smallint(5) unsigned NOT NULL COMMENT ‘Privilege ID’,
PRIMARY KEY (`acl_role_id`,`acl_privilege_id`),
KEY `acl_role_id` (`acl_role_id`),
KEY `acl_privilege_id` (`acl_privilege_id`)
) ENGINE=MyISAM DEFAULT CHARSET=utf8 COMMENT=’ACL Role Privileges’;

–
– Dumping data for table `acl_role_privilege`
–

INSERT INTO `acl_role_privilege` VALUES (1, 1);
INSERT INTO `acl_role_privilege` VALUES (1, 2);
INSERT INTO `acl_role_privilege` VALUES (1, 3);
INSERT INTO `acl_role_privilege` VALUES (1, 4);
INSERT INTO `acl_role_privilege` VALUES (1, 5);
INSERT INTO `acl_role_privilege` VALUES (1, 6);
INSERT INTO `acl_role_privilege` VALUES (1, 7);
INSERT INTO `acl_role_privilege` VALUES (1, 8);
INSERT INTO `acl_role_privilege` VALUES (1, 9);
INSERT INTO `acl_role_privilege` VALUES (1, 10);
INSERT INTO `acl_role_privilege` VALUES (1, 11);
INSERT INTO `acl_role_privilege` VALUES (1, 12);
INSERT INTO `acl_role_privilege` VALUES (1, 13);
INSERT INTO `acl_role_privilege` VALUES (2, 1);
INSERT INTO `acl_role_privilege` VALUES (2, 2);
INSERT INTO `acl_role_privilege` VALUES (2, 3);
INSERT INTO `acl_role_privilege` VALUES (2, 4);
INSERT INTO `acl_role_privilege` VALUES (2, 9);
INSERT INTO `acl_role_privilege` VALUES (2, 10);
INSERT INTO `acl_role_privilege` VALUES (2, 11);
INSERT INTO `acl_role_privilege` VALUES (2, 12);
INSERT INTO `acl_role_privilege` VALUES (2, 13);
INSERT INTO `acl_role_privilege` VALUES (3, 13);
INSERT INTO `acl_role_privilege` VALUES (4, 1);
INSERT INTO `acl_role_privilege` VALUES (4, 5);
INSERT INTO `acl_role_privilege` VALUES (4, 9);
INSERT INTO `acl_role_privilege` VALUES (4, 13);

* end sql **************************************************

Thanks in advance.

Having the same problem as KullDox. Could anyone post the database table structure ?

i am gonna show this to my friend, dude

I too am getting the same errors as : KullDox and Chris, are there any suggestions as to what we are doing wrong?

Thanks.