Hi, 

you don't need assertion to check if a role has certain permission to a 
resource, 

just deny it.

The official documentation explains the use of ACL pretty well with examples



http://framework.zend.com/manual/en/zend.acl.refining.html


Bye


Sergio 








> Date: Wed, 22 Dec 2010 02:59:49 -0800
> From: [email protected]
> To: [email protected]
> Subject: [fw-general] Seeking guidance on implementing ACL
> 
> 
> Suppose I have the following models/resources
> 
> - Projects (has many Lists)
> - Lists
> 
> I want only owners of the project to be able to add lists. How can I
> implement that in Zend_Acl? I think Assertion are the the way to go. But how
> does 
> 
>     $acl->allow($user, $project, 'add', $assertion); // for add list make
> sense, I must somehow get the project object from what I will normally use
> to test if user is allowed?
>     $acl->isAllowed($user, 'lists', 'add')
> -- 
> View this message in context: 
> http://zend-framework-community.634137.n4.nabble.com/Seeking-guidance-on-implementing-ACL-tp3160455p3160455.html
> Sent from the Zend Framework mailing list archive at Nabble.com.
                                          

Reply via email to