Zend FR

[lang=php]
    'service_manager' => [
        'invokables' => [
            'Zend\Authentication\AuthenticationService' => 'Zend\Authentication\AuthenticationService',
        ]
    ],
    'zfc_rbac' => [
        'guard_manager' => [],
        'role_provider_manager' => [],
        'assertion_manager' => [],
        'assertion_map' => [
            'manageAllEnv' => 'KmbDomain\Assertion\MustBeRoot',
            'manageEnv' => 'KmbDomain\Assertion\MustBeAdminAssignedToAncestor',
            'manageChildrenEnv' => 'KmbDomain\Assertion\MustBeAdminAssignedToEnvironment',
        ],
        'protection_policy' => 'deny',
        'role_provider' => [
            'ZfcRbac\Role\InMemoryRoleProvider' => [
                'root' => [
                    'children' => ['admin'],
                ],
                'admin' => [
                    'children' => ['user'],
                ],
                'user' => [
                ],
            ],
        ],
        'guards' => [
            'ZfcRbac\Guard\ControllerGuard' => [
                [
                    'controller' => 'KmbPuppet\Controller\Reports',
                    'actions' => ['index'],
                    'roles' => ['user']
                ],
                [
                    'controller' => 'KmbPuppet\Controller\Environments',
                    'actions' => ['index', 'create', 'remove', 'update', 'users', 'available-users', 'remove-user'],
                    'roles' => ['admin']
                ],
            ],
        ],
    ]

[lang=phtml]<?php if ($this->isGranted('manageEnv', $environment)): ?>