Zend FR

[lang=php]$acl_ini = '../config/acl.ini' ;  
$acl     = new My_Acl_Ini($acl_ini) ;
$front->registerPlugin(new My_Controller_Plugin_Auth($acl)) ;

[lang=php]
Zend_Loader_Autoloader::getInstance()->registerNamespace('MY')
                                                          ->getRegisteredNamespaces();

[lang=php]
protected function _initAcl()
    {
        // plugin Acl/Auth
        $acl_ini = APPLICATION_PATH . '/configs/acl.ini' ;
        $acl     = new MY_Acl_Ini($acl_ini);
        Zend_Controller_Front::getInstance()->registerPlugin(new MY_Controller_Plugins_Auth($acl));
        Zend_Registry::set('Zend_Acl', $acl);
    }

test_acl
    application
        controllers
        layouts
        models
        views
        acl.ini
        bootstrap.php
        config.ini
        
    library
        My
            Acl
                Ini.php
            Controller
                Plugin
                    Auth.php
        Zend
    public
        css
        js
        images
        index.php
        .htaccess

[lang=php]

<?php

error_reporting(E_ALL|E_STRICT);
ini_set('display_errors', 1);
date_default_timezone_set('Europe/London');

// directory setup and class loading
set_include_path('.' . PATH_SEPARATOR . '../library/'
//     . PATH_SEPARATOR . '../application/models'
     . PATH_SEPARATOR . get_include_path());

$appPath  = dirname(__FILE__);
$rootPath = dirname($appPath);

set_include_path(get_include_path() . PATH_SEPARATOR .
                 $rootPath . '/application/models/' . PATH_SEPARATOR
                 );

// Define path to application directory
defined('APPLICATION_PATH')
    || define('APPLICATION_PATH', realpath(dirname(__FILE__) . '/../application'));

// Define application environment
defined('APPLICATION_ENV')
    || define('APPLICATION_ENV', (getenv('APPLICATION_ENV') ? getenv('APPLICATION_ENV') : 'general'));

// Ensure library/ is on include_path
set_include_path(implode(PATH_SEPARATOR, array(
    realpath(APPLICATION_PATH . '/../library'),
    get_include_path(),
)));

/** Zend_Application */
require_once 'Zend/Application.php';

// Create application, bootstrap, and run
$application = new Zend_Application(
    APPLICATION_ENV,
    APPLICATION_PATH . '/config.ini'
);

$application->bootstrap()
            ->run();

[lang=php]
<?php
class Bootstrap extends Zend_Application_Bootstrap_Bootstrap
{

    protected function _initAutoload()
    {
        $moduleLoader = new Zend_Application_Module_Autoloader(array(
            'namespace' => '',
            'basePath' => APPLICATION_PATH));
            
        return $moduleLoader;
        Zend_Loader_Autoloader::getInstance()->registerNamespace('MY')

    }

    protected function _initAcl()
    {
        // plugin Acl/Auth
        $acl_ini = APPLICATION_PATH . 'acl.ini' ;
        $acl     = new MY_Acl_Ini($acl_ini);
        Zend_Controller_Front::getInstance()->registerPlugin(new MY_Controller_Plugins_Auth($acl));
        Zend_Registry::set('Zend_Acl', $acl);
    }


    protected function _initViewHelpers()
    {
    $this->bootstrap('layout');
    $layout = $this->getResource('layout');
    $view = $layout->getView();
    $view->doctype('XHTML1_STRICT');
    $view->headMeta()->appendHttpEquiv('Content-Type', 'text/html;charset=utf-8');
    $view->headTitle()->setSeparator(' - ');
    $view->headTitle('Application CDG Gestion de Stock');
    }
}

[lang=php]
<?php
/**
 * Plugin d'authentification
 * 
 * Largement inspiré de :
 * http://julien-pauli.developpez.com/tutoriels/zend-framework/atelier/auth-http/?page=modele-MVC
**/

class My_Controller_Plugin_Auth extends Zend_Controller_Plugin_Abstract    {
    /**
     * @var Zend_Auth instance 
     */
    private $_auth;
    
    /**
     * @var Zend_Acl instance 
     */
    private $_acl;
    
    /**
     * Chemin de redirection lors de l'échec d'authentification
     */
    const FAIL_AUTH_MODULE     = 'default';
    const FAIL_AUTH_ACTION     = 'index';
    const FAIL_AUTH_CONTROLLER = 'account';
    
    /**
     * Chemin de redirection lors de l'échec de contrôle des privilèges
     */
    const FAIL_ACL_MODULE     = 'default';
    const FAIL_ACL_ACTION     = 'privileges';
    const FAIL_ACL_CONTROLLER = 'error';
    
    /**
     * Constructeur
     */
    public function __construct(Zend_Acl $acl)    {

        $this->_acl  = $acl ;
        $this->_auth = Zend_Auth::getInstance() ;
    }
    
    /**
     * Vérifie les autorisations
     * Utilise _request et _response hérités et injectés par le FC
     */
    public function preDispatch(Zend_Controller_Request_Abstract $request)    {
        // is the user authenticated
        if ($this->_auth->hasIdentity()) {
          // yes ! we get his role
          $user = $this->_auth->getStorage()->read() ;
          $role = $user['role'] ;
        } else {
          // no = guest user
          $role = 'guest';
        }
        
        $module     = $request->getModuleName() ;
        $controller = $request->getControllerName() ;
        $action     = $request->getActionName() ;
        
        $front = Zend_Controller_Front::getInstance() ;
        $default = $front->getDefaultModule() ;
        
        // compose le nom de la ressource
        if ($module == $default)    {
            $resource = $controller ;
        } else {
            $resource = $module.'_'.$controller ;
        }
    
        // est-ce que la ressource existe ?
        if (!$this->_acl->has($resource)) {
          $resource = null;
        }
        
        // contrôle si l'utilisateur est autorisé
        if (!$this->_acl->isAllowed($role, $resource, $action)) {
            // l'utilisateur n'est pas autorisé à accéder à cette ressource
            // on va le rediriger
            if (!$this->_auth->hasIdentity()) {
                // il n'est pas identifié -> module de login
                $module = self::FAIL_AUTH_MODULE ;
                $controller = self::FAIL_AUTH_CONTROLLER ;
                $action = self::FAIL_AUTH_ACTION ;
            } else {
                // il est identifié -> error de privilèges
                $module = self::FAIL_ACL_MODULE ;
                $controller = self::FAIL_ACL_CONTROLLER ;
                $action = self::FAIL_ACL_ACTION ;
            }
        }

        $request->setModuleName($module) ;
        $request->setControllerName($controller) ;
        $request->setActionName($action) ;
    }
}

[lang=php]
<?php
/**
 * Classe de création des ACL via un fichier de configuration INI
**/

class My_Acl_Ini extends Zend_Acl    {
    public function __construct($file)    {
        $roles = new Zend_Config_Ini($file, 'roles') ;
        $this->_setRoles($roles) ;
        
        $ressources = new Zend_Config_Ini($file, 'ressources') ;
        $this->_setRessources($ressources) ;
        
        foreach ($roles->toArray() as $role => $parents)    {
            $privileges = new Zend_Config_Ini($file, $role) ;
            $this->_setPrivileges($role, $privileges) ;
        }
    }
    
    protected function _setRoles($roles)    {
        foreach ($roles as $role => $parents)    {
            if (empty($parents))    {
                $parents = null ;
            } else {
                $parents = explode(',', $parents) ;
            }

            $this->addRole(new Zend_Acl_Role($role), $parents);
        }
        
        return $this ;
    }

    protected function _setRessources($ressources)    {
        foreach ($ressources as $ressource => $parents)    {
            if (empty($parents))    {
                $parents = null ;
            } else {
                $parents = explode(',', $parents) ;
            }

            $this->add(new Zend_Acl_Resource($ressource), $parents);
        }
        
        return $this ;
    }

    protected function _setPrivileges($role, $privileges)    {
        foreach ($privileges as $do => $ressources)    {
            foreach ($ressources as $ressource => $actions)    {
                if (empty($actions))    {
                    $actions = null ;
                } else {
                    $actions = explode(',', $actions) ;
                }
                
                $this->{$do}($role, $ressource, $actions);
            }
        }
        
        return $this ;
    }
}