What I don’t like about any Zend solution is that the Zend Framework appears to be writen for PHP5 only. I still have clients using PHP 4.x and MySQL 4.x and need to keep my code compliant.

Exactly.. that’s my main concern as well. Isn’t there any other ACL available?

Zend Framework isn’t really a solution for me because:

a) As mentioned above it would load it’s own libraries, which means more resources/time overhead.

b) Requires php5.1.x at least and I would like my app to be php4 compatible. On the other hand, frankly enough, my own host is using 5.0.5.

Valdemar - 13 November 2007 10:01 PM

a) As mentioned above it would load it’s own libraries, which means more resources/time overhead.

Zend Framework components were designed to be isolated from one another. The acl component doesn’t rely on any other framework component (except the zend_exception class which can be changed to the native exception with a search/replace).

If using Adodb for database abstraction is not a problem, you can use phpGACL. If you go that route, use the updated Adodb integration instructions at CiForge rather than the wiki instructions. It should be possible to convert phpGACL to use the CI DBAL with a bit of work.

There is a RBAC solution on sqlrecipes.com. Download instructions are mentioned in the comments on the article that discusses the solution.

Of all the Access Control Libs/Models for CI, has anyone determined which one(s) are close to an RBAC implementation? as described here: http://en.wikipedia.org/wiki/Role-Based_Access_Control

And this RBAC system http://www.sqlrecipes.com/database_design/fine_grained_role_based_access_control_rbac_system-3/

Someone mentioned porting it to CodeIgniter, does anyone know of it’s success?

http://www.sqlrecipes.com/database_design/fine_grained_role_based_access_control_rbac_system-3/#post284

George

glemigh, thanks for the link to that article. Based on the following quote, I think the Zend Framework ACL is a RBAC:

RBAC differs from access control lists (ACLs) used in traditional discretionary access control systems in that it assigns permissions to specific operations with meaning in the organization, rather than to low level data objects. For example, an access control list could be used to grant or deny write access to a particular system file, but it would not say in what ways that file could be changed.

With the Zend ACL you can assign roles to resources, but you can also add privileges into the mix. Take the file system example above. With the Zend ACL you can grant or deny privileges (write and/or read etc.) to a resource (the file system or a file) for a role.

Your welcome for the link, and I downloaded the Zend FrameWork to have a look.

George