ZF2 BjyAuthorize access control from database?

Question

Hi i set up zend framework 2 + BjyAuthorize + ZfcUser running, now i need some help.

Where to customize user register to chose roles?
Make all controllers under / route public and /admin for authenticated users?
How to configure access control for controller / action under /admin route on database?

Mayfly Mayfly · Accepted Answer · 2013-09-09T10:52:10

I don't understand what you want to do.
Looking at the examples for the Route Guard at https://github.com/bjyoungblood/BjyAuthorize it does not seem like you can use wildcards. I'd use the Controller Guard and set permissions so that guests, users and admins can access everything apart from whatever controller(s) are used in the admin section.
```
'guards' => array(
    'BjyAuthorize\Guard\Controller' => array(
    array('controller' => 'admin', 'roles' => array('admin')),
    array(
        'controller' => array('index', 'anothercontroller', 'yetanothercontroller', ...),
        'roles' => array('guest','user')),
)
```

Instead of array('controller' => 'admin', 'roles' => array('admin')),, set rules for each action. For example, assuming "founder" and "moderator" are sub-roles of "admin":

array(
    'controller' => 'admin', 
    'action' => array('addUser', 'deleteUser'),
    'roles' => array('founder')),

array(
    'controller' => 'admin', 
    'action' => array('deleteComment'),
    'roles' => array('moderator')),

ZF2 BjyAuthorize access control from database?

1 Answers