<ac:macro ac:name="unmigrated-inline-wiki-markup"><ac:plain-text-body><![CDATA[

<ac:macro ac:name="unmigrated-inline-wiki-markup"><ac:plain-text-body><![CDATA[

Zend Framework: Zend_Application_Resource_Acl Component Proposal

Table of Contents

1. Overview

Zend_Application_Resource_Acl is a resource plugin.

2. References

• #ZF-8501
• Zend_Acl

3. Component Requirements, Constraints, and Acceptance Criteria

• This component will allow to define roles, resources, and rules from configuration file.
• This component will allow to define a custom class for ACL.

4. Dependencies on Other Framework Components

• Zend_Application_Resource_ResourceAbstract
• Zend_Application_Resource_Exception
• Zend_Acl

5. Theory of Operation

The component will work like other resource plugins.

6. Milestones / Tasks

• Milestone 1: design notes will be published here
• Milestone 2: Working prototype checked into the incubator supporting use cases #1, #2, ...
• Milestone 3: Working prototype checked into the incubator supporting use cases #3 and #4.
• Milestone 4: Unit tests exist, work, and are checked into SVN.
• Milestone 5: Initial documentation exists.

7. Class Index

• Zend_Application_Resource_Acl

8. Use Cases

Define roles, resources, and rules in the application configuration
 
resources.acl.storage.registry.enabled = true

resources.acl.roles.guest.id = "guest"
resources.acl.roles.member.id = "member"
resources.acl.roles.member.parents[] = "guest"

resources.acl.resources.post.id = "post"
resources.acl.resources.subject.id = "subject"
resources.acl.resources.subject.parent = "post"
resources.acl.resources.foo.id = "mvc:index.index"

resources.acl.resources.post.allow.read.roles = "guest"
resources.acl.resources.post.allow.create.roles = "member"
resources.acl.resources.post.allow.edit.roles = "member"
resources.acl.resources.subject.denied.delete.roles = "member"

Use your own class to define ACL

 
resources.acl.storage.registry.enabled = true
resources.acl.class = "MyCustomAcl"

9. Class Skeletons