私はこれに何日も取り組んできましたが、役に立ちませんでした。
ZF Boilerplate を使用して、モジュールを含む ACL をセットアップしようとしています (私のアーキテクチャには同じ名前のコントローラーがあり、これは変更できないため)。私はこれがうまく機能していると思っていましたが、アクセスが処理されていないことに気付きました。
これが私のセットアップです：
library/App/Action/Helpers/PrivilegesManage.php のヘルパー
<?php
class App_Action_Helpers_PrivilegesManage extends Zend_Controller_Action_Helper_Abstract
{
//the acl object
public $acl;
//the constructor of the our ACL
public function __construct()
{
$this->acl = new Zend_Acl();
}
//function that sets roles for the people
public function setRoles()
{
$this->acl->addRole(new Zend_Acl_Role('guest'));
$this->acl->addRole(new Zend_Acl_Role('crew'));
$this->acl->addRole(new Zend_Acl_Role('client'));
$this->acl->addRole(new Zend_Acl_Role('admin'));
}
//function that set the resources to be accessed on the site
public function setResources()
{
$this->acl->add(new Zend_Acl_Resource('site:error'));
$this->acl->add(new Zend_Acl_Resource('site:index'));
//me
$this->acl->add(new Zend_Acl_Resource('me:clients'));
$this->acl->add(new Zend_Acl_Resource('me:crew'));
$this->acl->add(new Zend_Acl_Resource('me:error'));
$this->acl->add(new Zend_Acl_Resource('me:index'));
$this->acl->add(new Zend_Acl_Resource('me:jobs'));
$this->acl->add(new Zend_Acl_Resource('me:people'));
$this->acl->add(new Zend_Acl_Resource('me:system'));
//admin
$this->acl->add(new Zend_Acl_Resource('admin:clients'));
$this->acl->add(new Zend_Acl_Resource('admin:crew'));
$this->acl->add(new Zend_Acl_Resource('admin:error'));
$this->acl->add(new Zend_Acl_Resource('admin:index'));
$this->acl->add(new Zend_Acl_Resource('admin:jobs'));
$this->acl->add(new Zend_Acl_Resource('admin:people'));
$this->acl->add(new Zend_Acl_Resource('admin:system'));
}
//function that sets the privileges for the different roles
public function setPrivileges()
{
$this->acl->allow('guest', 'site:error', 'index');
$this->acl->deny('guest', 'site:index', 'index');
$this->acl->allow('crew', 'site:index');
$this->acl->allow('crew', 'site:error');
$this->acl->allow('crew', 'me:crew');
$this->acl->allow('client', 'me:clients');
$this->acl->allow('client', 'site:index', array('logout'));
$this->acl->deny('client', 'me:crew');
$this->acl->deny('guest', 'admin:crew', array('add'));
}
public function setAcl()
{
Zend_Registry::set('acl', $this->acl);
}
?>
次に、App/Plugin/Acl.php [編集済み]にもプラグインがあります。
<?php
class App_Plugin_Acl extends Zend_Controller_Plugin_Abstract
{
/**
*
* @var Zend_Auth
*/
protected $_auth; //Zend_Auth instance for user access
protected $_acl; //Zend_Acl instance for user privileges
protected $_module;
protected $_action;
protected $_controller;
protected $_currentRole;
protected $_resource;
public function __construct(Zend_Acl $acl, array $options = array()) {
$this->_auth = Zend_Auth::getInstance();
$this->_acl = $acl;
}
public function preDispatch(Zend_Controller_Request_Abstract $request) {
$this->_init($request);
if ($this->_acl->has($this->_resource)) {
// if the current user role is not allowed to do something
if (!$this->_acl->isAllowed($this->_currentRole, $this->_resource, $this->_action)) {
if ('guest' == $this->_currentRole) {
$request->setModuleName('site');
$request->setControllerName('index');
$request->setActionName('login');
}
else {
$request->setModuleName('site');
$request->setControllerName('error');
$request->setActionName('denied');
}
}
}
}
protected function _init($request)
{
$this->_module = $request->getModuleName();
$this->_action = $request->getActionName();
$this->_controller = $request->getControllerName();
$this->_currentRole = $this->_getCurrentUserRole();
$this->_resource = $this->_module . ':' . $this->_controller;
}
protected function _getCurrentUserRole()
{
if($this->_auth->hasIdentity()) {
$authData = $this->_auth->getIdentity();
//$role = isset($authData->myType())?strtolower($authData->property->privilage): 'guest';
//retrieving the UserType
$authTypeCheck = $authData->myType();
if(isset($authTypeCheck)){
$role = strtolower($authData->myType());
}
} else {
$role = 'guest';
}
return $role;
}
}
?>
ここでは、$acl の内容を印刷するとリソースが得られるように、$acl にはリソースがないように見えます。
最後にブートストラップで私は持っています:
protected function _initAclControllerPlugin() {
$this->bootstrap('frontcontroller');
$front = Zend_Controller_Front::getInstance();
$aclhelper= new App_Action_Helpers_PrivilegesManage();
$aclhelper->setRoles();
$aclhelper->setResources();
$aclhelper->setPrivileges();
$aclhelper->setAcl();
$aclPlugin = new App_Plugin_Acl($aclhelper->acl);
$front->registerPlugin($aclPlugin);
}
私は Zend と特に ACL を初めて使用するので、アドバイスやヘルプがあれば大歓迎です。