Content Driven ACL in the Model Layer (ZF)

Jeroen Keppens (Jun 12, 2010 at 13:30)
Talk at Dutch PHP Conference 2010 (English - UK)

Rating: 4 of 5

Most people use Zend_Acl to control access to certain controllers/actions. While this is good for most use cases, sometimes you need to go further. For example you can specify that a user has access to article/view, but you might also want to limit access to certain articles for certain roles.

Only a 15 min talk, so if you like more info please take a look at my blog : blog.amazium.com

Comments

Rating: 4 of 5

Jun 12, 2010, 12:05 by neorey

Very good 'first' ever talk! Direct useful code!

Rating: 3 of 5

Jun 12, 2010, 12:10 by Anonymous

I think it was nice to get started on doing something with ACL and model data. but I hoped for a more eleborate solution (as we implemented ourselves). Not ment as a rant to you and your solution, but I kinda hoped to learned for a different approach to a problem I tackled myself on a complete different manner.

For example, if I understood it right, you first load data from the database and then check if one is allowed to access that ID. That is not really bound to the model.
You had a picture of a lock on the first slide: I think the way you make it work is that you first stick in your key, then turn the key - which works - and then hold back the door when it seems the ID behind it is not accessible by you.

If you ever want to know more on the following: when having a tree structure with articles in chapters in other chapters, and want to have ACL on different levels which inherit their ACL, you should get in touch :)
@birdbook

Rating: 4 of 5

Jun 12, 2010, 18:03 by rickmb

Perfect short talk. Clear examples, good presentation, enough information for anyone to get started using Zend_Acl with Model-bound asserts.

Rating: 3 of 5

Jun 13, 2010, 09:59 by mooij

Good talk, clearly presented.

Rating: 4 of 5

Jun 13, 2010, 20:08 by Anonymous

[ + ] The speaker gave a short but interesting, hands-on talk. The code examples were clear. The 15m talk was supported with a full article on his blog, so if interested you could get more info there.

[ - ] The speaker was clearly nervous, but I guess that's normal with a first talk. Next time take a deep breath and slow down a bit.

@birdbook you have to keep in mind this was only a 15 minute talk, which is not much to explain a system as you suggested in a hands-on way.

Rating: 4 of 5

Jun 15, 2010, 06:33 by jonas

Nice one Jeroen, very clear AND interesting..

Rating: 4 of 5

Jun 16, 2010, 05:26 by mbaerten

For a 15 minutes presentation, you had covered pretty much concerning ACL. The example made it interesting to follow. For a first time talk, you did it very well.

Rating: 4 of 5

Jun 16, 2010, 18:05 by hansstevens

Good and clear talk! Too bad it was only 15 minutes...

Want to comment on this talk? Log in or create a new account or comment anonymously

Write a comment

 
Please note: you are not logged in and will be posting anonymously!
© Joind.in 2010