Zend FR

[lang=php]
public function init(ModuleManager $moduleManager)
    {
        $events = $moduleManager->getEventManager();
        $sharedEvents = $events->getSharedManager();
        // Attache l'évènement d'ACL
        $sharedEvents->attach('Zend\Mvc\Controller\ActionController', MvcEvent::EVENT_DISPATCH, function(MvcEvent $e)                                                                        {
            $serviceManager = $e->getApplication()->getServiceManager();
            $acl = $serviceManager->get('GbataAcl');
            $acl->dispatch($e);
        }, 100);
    }

[lang=php]
'GbataAcl' => function($sm) {
                $authenticationService = $sm->get('Zend\Authentication\AuthenticationService');
                $acl = new Gbata\Acl\Acl($sm, $authenticationService);
                return $acl;
            },

[lang=php]
<?php
/**
 * Created by PhpStorm.
 * User: mahamadou
 * Date: 27/07/16
 * Time: 10:21
 */

namespace Gbata\Acl;

use Zend\Acl\Acl as BaseAcl,
    Zend\Authentication\AuthenticationService,
    Zend\Mvc\MvcEvent,
    Zend\Mvc\Router\RouteMatch,
    Zend\ServiceManager\ServiceManager;

class Acl extends BaseAcl
{
    /**
     * Rôle par défaut
     */
    const DEFAULT_ROLE = 'guest';

    /**
     * @var \Zend\ServiceManager\ServiceManager
     */
    protected $serviceManager;

    /**
     * @var \Zend\Authentication\AuthenticationService
     */
    protected $authenticationService;

    /**
     * Route vers laquelle on redirige si les accès ne sont pas valides
     *
     * @var string
     */
    protected $redirectTo = 'home';


    /**
     * @param \Zend\ServiceManager\ServiceManager $serviceManager
     * @param \Zend\Authentication\AuthenticationService $authenticationService
     */
    public function __construct(ServiceManager $serviceManager, AuthenticationService $authenticationService = null)
    {
        $this->serviceManager = $serviceManager;
        $this->authenticationService = $authenticationService;

        $this->initRoles();
    }

    /**
     * @param \Zend\Mvc\MvcEvent $e
     */
    public function dispatch(MvcEvent $e)
    {
        $this->build($e->getRouteMatch());

        // Récupération de l'utilisateur courant
        $role = $this->authenticationService->getIdentity();
        if ($role == null) {
            $role = self::DEFAULT_ROLE;
        }

        // Si l'utilisateur n'est pas autorisé, on le redirige vers la page par défaut, ou une autre page si elle a été spécifiée
        // dans le fichier de configuration
        $matchedRouteName = $e->getRouteMatch()->getMatchedRouteName();

        if (!$this->isAllowed($role, $matchedRouteName)) {
            $this->redirect($e, $this->redirectTo);
        }
    }

    /**
     * @param \Zend\ServiceManager\ServiceManager $serviceManager
     * @return Acl
     */
    public function setServiceManager(ServiceManager $serviceManager)
    {
        $this->serviceManager = $serviceManager;

        return $this;
    }

    /**
     * Initialise les rôles à partir du fichier de configuration
     */
    private function initRoles()
    {
        $configuration = $this->serviceManager->get('Configuration');

        if (isset($configuration['acl']['roles'])) {
            $roles = $configuration['acl']['roles'];
            foreach($roles as $role => $parents) {
                $this->addRole($role, $parents);
            }
        }
    }

    /**
     * @param \Zend\Mvc\Router\RouteMatch $routeMatch
     * @return mixed
     */
    private function build(RouteMatch $routeMatch)
    {
        // Récupération de la configuration
        $configuration = $this->serviceManager->get('Configuration');
        $matchedRouteName = $routeMatch->getMatchedRouteName();

        if (isset($configuration['acl']['resources'])) {
            $resources = $configuration['acl']['resources'];
            $routeParts = explode('/', $routeMatch->getMatchedRouteName());
            $parentPart = null;

            foreach($routeParts as $routePart) {
                $this->addResource($routePart, $parentPart);

                // Par défaut, on interdit l'accès à toute ressource dont l'ACL n'a pas été défini
                if (!isset($resources[$routePart])) {
                    $this->deny(self::DEFAULT_ROLE, $routePart);

                    return;
                }

                $resources = $resources[$routePart];

                if (isset($resources['allow'])) {
                    $allow = $resources['allow'];
                    $assertion = $this->buildAssertion($allow);

                    $this->allow($allow['roles'], $routePart, null, $assertion);
                }

                if (isset($resources['deny'])) {
                    $deny = $resources['deny'];
                    $assertion = $this->buildAssertion($deny);

                    $this->deny($deny['roles'], $routePart, null, $assertion);
                }

                if (isset($resources['redirect_to'])) {
                    $this->redirectTo = $resources['redirect_to'];
                }

                // Y a-t-il des enfants ?
                if (!isset($resources['child_resources'])) {
                    break;
                }

                $resources = $resources['child_resources'];
                $parentPart = $routePart;
            }

            // On définit la route "complète" comme enfant de la dernière ressource afin d'hériter de ses autorisations
            if (count($routeParts) > 1) {
                $this->addResource($matchedRouteName, end($routeParts));
            }
        }
    }

    /**
     * @param array $resourcePart
     * @return null
     */
    private function buildAssertion(array $resourcePart)
    {
        if (isset($resourcePart['assertion'])) {
            return new $resourcePart['assertion']();
        }

        return null;
    }

    /**
     * @param \Zend\Mvc\MvcEvent $e
     * @param string $route
     */
    private function redirect(MvcEvent $e, $route)
    {
        $url = $e->getRouter()->assemble(array(), array('name' => $route));
        $response = $e->getResponse();
        $response->headers()->addHeaderLine('Location', $url);
        $response->setStatusCode(302);
        $response->sendHeaders();

        exit;
    }
}