The Zend Framework in Practice

This post deals with the last piece of the access control/authentication jigsaw: the Access Control plugin. It shows how an application can makes use of the Zend Framework’s controller plugin mechanism to apply the access control list to a user request. (more…)

In a previous post, I discussed the creation of an Authentication class. In the following post, I discussed the creation of an Identity class. In this post I shall look at the creation of an Access Control List class. (more…)

One of the most common, but often complex to implement, features of websites is the facility for users to log in and out of the site, thus allowing them to view content and perform actions that would otherwise be denied to them. The Zend Framework does not provide a single all-in-one component, since the possible approaches are so diverse, but rather provides separate components for authentication (Zend_Auth) and access control (Zend_Acl), and a mechanism for incorporating them into the dispatch process (controller plugins). (more…)