Zend Framework 2 ACL setup in 5 minutes – tutorial

March 13, 2013

In this tutorial you will learn how to setup zend framework 2 acl and check if user has access for current route.

If you don`t have testing project , download one from here.

Add file module.acl.roles in application/config/

Tip: In fact role resources may be zend framework 2 routes.

return array(
	'guest'=> array(
	'admin'=> array(

Code in application/module.php

public function onBootstrap(MvcEvent $e) {
	$this -> initAcl($e);
	$e -> getApplication() -> getEventManager() -> attach('route', array($this, 'checkAcl'));

public function initAcl(MvcEvent $e) {

	$acl = new \Zend\Permissions\Acl\Acl();
	$roles = include __DIR__ . '/config/module.acl.roles.php';
	$allResources = array();
	foreach ($roles as $role => $resources) {

		$role = new \Zend\Permissions\Acl\Role\GenericRole($role);
		$acl -> addRole($role);

		$allResources = array_merge($resources, $allResources);

		//adding resources
		foreach ($resources as $resource) {
             // Edit 4
             if(!$acl ->hasResource($resource))
			    $acl -> addResource(new \Zend\Permissions\Acl\Resource\GenericResource($resource));
		//adding restrictions
		foreach ($allResources as $resource) {
			$acl -> allow($role, $resource);

	//setting to view
	$e -> getViewModel() -> acl = $acl;


public function checkAcl(MvcEvent $e) {
	$route = $e -> getRouteMatch() -> getMatchedRouteName();
	//you set your role
	$userRole = 'guest';

	if (!$e -> getViewModel() -> acl -> isAllowed($userRole, $route)) {
		$response = $e -> getResponse();
		//location to page or what ever
		$response -> getHeaders() -> addHeaderLine('Location', $e -> getRequest() -> getBaseUrl() . '/404');
		$response -> setStatusCode(404);


Edit 1

I am assuming that all the routes that are accessed in the app are already added to the acl config file.

If not replace :

if (!$e -> getViewModel() -> acl -> isAllowed($userRole, $route)) {


if ($e -> getViewModel() -> acl ->hasResource($route) && !$e -> getViewModel() -> acl -> isAllowed($userRole, $route)) {


Edit 2

If access inheritance is not needed just replace this :

//$allResources = array_merge($resources, $allResources);
foreach ($allResources as $resource) {
// with
foreach ($resources as $resource) {


Edit 3

But what about acl from the database someone will say ?

In the zend framework 2 startup tutorial they say – “Don`t go heavy in onBootstrap”

With that said , I think that an array file will work for most of the cases.

Add this method where acl check is

    public function getDbRoles(MvcEvent $e){
        // I take it that your adapter is already configured
        $dbAdapter = $e->getApplication()->getServiceManager()->get('Zend\Db\Adapter\Adapter');
        $results = $dbAdapter->query('SELECT * FROM acl');
        // making the roles array
        $roles = array();
        foreach($results as $result){
            $roles[$result['user_role']][] = $result['resource'];
        return $roles;

Then replace in initAcl

// this
$roles = include __DIR__ . '/config/module.acl.roles.php';
// with
$roles = $this->getDbRoles($e);

Simple as that.
Suggestions or problems ? Write a comment.

tags: , , ,
posted in Guides, how to ?, php, Zend Framework 2 by Ivan Gospodinow

Follow comments via the RSS Feed | Leave a comment | Trackback URL

89 Comments to "Zend Framework 2 ACL setup in 5 minutes – tutorial"

  1. user1 wrote:

    Hi, great tutorial!

    Everything works fine, but when i go to route, that guest role does not have, i get an exception:

    Fatal error: Uncaught exception ‘Zend\Permissions\Acl\Exception\InvalidArgumentException’ with message ‘Resource ‘success’ not found’ in

    Acl\Acl->isAllowed(‘guest’, ‘success’) #2 [internal function]: Application\Module->checkAcl(Object(Zend\Mvc\MvcEvent))

    Something is not good about this line:

    if (!$e -> getViewModel() -> acl -> isAllowed($userRole, $route)) {

  2. user1 wrote:

    Oh, i just found solution πŸ™‚

    Replace line

    if (!$e -> getViewModel() -> acl -> isAllowed($userRole, $route)) {


    if (!$e -> getViewModel() -> acl ->hasResource($route) || !$e -> getViewModel() -> acl -> isAllowed($userRole, $route)) {

  3. Ivan Gospodinow wrote:

    Hello and thank you user1 ,

    yes you are right.The code from tutorial assumes that you have all the routes inserted in the acl (which is a good thing).That means you are controlling all the routes with roles.

  4. Andrey wrote:

    Thank you for great tutorial, but what about roles with different permissions?
    Looks like in your code each role is allowed also for resource listed in all previous roles in array.

  5. Ivan Gospodinow wrote:

    Hello Andrey ,

    thank you for your question.

    I created an Edit 2 for your case.
    By replacing those 2 lines of code , the roles will not inherit resources from one another.

  6. Dominic Watson wrote:

    Ctrl + F

    “-> ”

    ” ->”

    NO! Naughty! Bad Ivan! πŸ˜›

    Nice and easy tutorial though πŸ™‚ makes me feel silly for thinking anything is difficult. I guess it’s getting used to the EventManager

  7. sandeep wrote:


    It,s working fine.
    but the function form controller is accessable by ajax , this only prents the view rendering.

  8. Ivan Gospodinow wrote:

    Hello sandeep,

    it dont matter if the request is ajax.
    You should specify resouce(route) and user to access it in the acl.
    Module.php is executed every time.

  9. Tahmina Khatoon wrote:

    Thanks for nice tutorial, It is working fine everywhere except pagination with search. Would you please help me to set permission for following route.

    ‘people’ => array(
    ‘type’ => ‘segment’,
    ‘options’ => array(
    ‘route’ => ‘/people[/:action][/:id][/page/:page][/order_by/:order_by][/:order][/search_by/:search_by]’,
    ‘constraints’ => array(
    ‘action’ => ‘(?!\bpage\b)(?!\border_by\b)(?!\bsearch_by\b)[a-zA-Z][a-zA-Z0-9_-]*’,
    ‘id’ => ‘[0-9]+’,
    ‘page’ => ‘[0-9]+’,
    ‘order_by’ => ‘[a-zA-Z][a-zA-Z0-9_-]*’,
    ‘order’ => ‘ASC|DESC’,
    ‘defaults’ => array(
    ‘controller’ => ‘WebApp\Controller\People’,
    ‘action’ => ‘index’,

    I have allowed ‘people’ for guest but it is not working with order_by and search_by parameters.

    Please help me.

    Thanks in advance

  10. Ivan Gospodinow wrote:

    Hello Tahmina ,

    in my example I am using route name as an acl resource.
    In your case you can do the following :

    $routeName = $e->getRouteMatch()->getMatchedRouteName();
    $routeParams = $e->getRouteMatch()-getParams();

    where route params are you root constraints – for example :
    $customResource = $routeName . $routeParams[‘controller’] . $routeParams[‘action’];

    Than you check like this :
    $acl -> isAllowed($userRole, $customResource);

    Simple as that.

  11. mhor wrote:

    (Noob question here) Just want to ask, how do you pass the role (line 39)?

    Tried it already but it always gives me a 404. But when I specify the //, it works normally

  12. Ivan Gospodinow wrote:

    Hello mhor ,

    two reasons to give you 404
    1. Resource is not added to the acl
    2. User is not allowed to access the resource.

    To your other question, you can easy access the session at that point and get the user credentials.If session does not exist you can assume that user is guest.

  13. Prakash wrote:


    Thanks for this great tutorial.

    What in case, if i have to implement Zend2 ACL using Database define roles and access.

    Can you please help to implement acl using database. i search many links on google but no success on it.


  14. Ivan Gospodinow wrote:

    Hello Prakash ,

    thank you for your question. I added edit3 to the article to give some idea of how to do it with a database.

  15. S.G. wrote:

    Hi Ivan,
    thanks for your sharing.

    I am confused about the “function checkAcl()” above.
    I had try to set myself file “module.acl.roles.php”, but my ACL seems not work.
    Would you explain the function checkAcl() more detail, and the purpose of line 39, “$userRole = ‘guest’;” ?


  16. Ivan Gospodinow wrote:

    Hello S.G. ,

    basically checkAcl is called when route is initialised. We need this because acl roles are based on routes/resources (in other word – links).Then what we do is : get the current route name (you can add up action , controller and/or parameters) as a string and ask the acl class if user with role (exp. guest) can access this string (exp. login).

    Simple enought for you?

  17. Kathiravan wrote:

    Hello Ivan,

    i have three types of users admin, guest and user, have a page like login and register. here the three users will access the above pages
    return array(
    ‘guest’=> array(
    ‘admin’=> array(
    ‘user’=> array(

    but it shows the error Uncaught exception ‘Zend\Permissions\Acl\Exception\InvalidArgumentException’ with message ‘Resource id ‘login’ already exists in the ACL’ everything works fine except this plz help.

  18. Ivan Gospodinow wrote:

    Hello Kathiravan ,

    please take a look at Edit 4. Made it for you.

  19. Kathiravan wrote:

    Hi Ivan,

    There is no edit 4 displayed here.

  20. Kathiravan wrote:

    Hello Ivan,

    Sorry by mistake i posted the above comment Thanks its working now.

  21. Kumar wrote:

    Hi Ivan,

    Nice Tutorial.
    As I am a Beginner,
    Can You tell me the use of get Application() and get EventManager()?
    Thank You

  22. Ivan Gospodinow wrote:

    Hello Kumar ,

    getApplication return the Zend Mvc Application object, which is instantiated in index.php. It is basically the whole application.
    getEventManager is the object which can store and trigger events. See EventManager::attach() and EventManager::trigger();

  23. Kumar wrote:

    Thanks Ivan

  24. Kumar wrote:

    Can I know about get ServiceLocator(), viewhelpermanager ?

  25. Ivan Gospodinow wrote:

    Hello Kumar,

    you should not know about getServiceLocator in any view or view helper!

  26. Grisou wrote:

    To handle also allow and deny permissions I change this:

    Configs acl:
    // true to allow, false to deny
    return array(
    ‘guest’=> array(
    ‘home’ => true,
    ‘login’ => true,
    ‘register’ => true
    ‘admin’=> array(
    ‘admin’ => true,
    ‘add-user’ => true,
    ‘delete-user’ => true,
    ‘login’ => false,
    ‘register’ => false

    And into Module.php:
    public function initAcl(MvcEvent $e)
    $acl = new Acl();
    $roles = include __DIR__ . ‘/config/module.acl.roles.php’;
    $allResources = array();
    foreach ($roles as $role => $resources) {

    $role = new \Zend\Permissions\Acl\Role\GenericRole($role);

    $allResources = array_merge($allResources, $resources);

    //adding resources
    foreach ($resources as $resourceName => $resourceAllowed ) {
    if(!$acl->hasResource($resourceName)) {
    $acl->addResource(new \Zend\Permissions\Acl\Resource\GenericResource($resourceName));

    //adding restrictions
    foreach ($allResources as $resourceName => $isResourceAllowed ) {

    if ( $isResourceAllowed ) {
    $acl->allow($role, $resourceName);
    } else {
    $acl->deny($role, $resourceName);

    //setting to view
    $e->getViewModel()->acl = $acl;


  27. bartek wrote:

    Hi, can it be done without redirection? I am developing restful application, and there are no restrictions available.

  28. Ivan Gospodinow wrote:

    Hello Bartek ,
    you can change the layout with one that dispatches json/xml to tell the page that user do not have permissions to access it.

  29. Pragnesh Karia wrote:

    Hey ,

    Thanks for sharing a wonderful script.

    Can you please explain more in terms of ,

    “SELECT * FROM acl ORDER BY role_privileges DESC”

    what will be ACL table schema?

    what is the use of setstatuscode = 303 ?

    i want to redirect the to 403 access forbidden page (403.phtml)

    $response -> getHeaders() -> addHeaderLine(‘Location’, $e -> getRequest() -> getBaseUrl() . ‘/404’);
    $response -> setStatusCode(303);

    Any help would be appreciated.

  30. Ivan Gospodinow wrote:

    Hello Pragnesh Karia,

    you are right , we do not need role_privileges.I will fix that.
    For your database schema , you need at least user_role and resource. See the config array in the post.
    I will update the code to 404. I agree that its the right way!

    Thank you for you appinion.

  31. Pragnesh Karia wrote:

    Hello Ivan,

    Any more updates on the above , your help is highly appreciated.

  32. Dennis wrote:

    The “redirect on error” logic is missing the following part:

    Otherwise, the restricted controller/action is still called.

  33. Matteo wrote:

    I need to print some links in the view, according to the user’s permissions. How can I do it? I tried using $acl = $this->acl but in the view I get a null. How can I do it? There is another method of verifying user permissions in the view?

  34. kourosh wrote:

    Hello Ivan.

    Thanks for nice article, i have a little problem, the application dont redirect to route after granted permission, it just stop and look at me 😐

  35. Ivan Gospodinow wrote:

    Hello Matteo,
    the best way will be to create navigation for the links.
    If you prefer the lazy way, you can add the links as resources in the acl and then check from the view (not a good way to do it) with $this->layout()->acl->isAllowed(‘user_role’, $linkl);

    you can add an menu item in your current navigation and add sub pages. Then you can render only the sub pages of this item, and the acl will work by default.

  36. Ivan Gospodinow wrote:

    Hello kourosh,

    can you paste some code? The acl tutorial, only redirects if person does not have permission to access the current page. The opposite, why to redirect if he can see the page? Right ?

  37. Matteo wrote:

    I thought about the navigation, but I need to add many links scattered around the page, and it seemed too complex. I think I’ll try the dirty way πŸ™‚

    thank you very much

  38. Matteo wrote:

    another question:
    If I wrote this:
    echo $this->layout()->acl->isAllowed($user->role,$this->url(‘user’, array(‘action’=>’index’)));

    I get an error: Resource ‘/user’ not found

    where am I doing wrong?

  39. Ivan Gospodinow wrote:

    Hello Matteo,

    quote from above ‘add the links as resources’.
    So you should add the link as resource and add the user role permission.
    Is it clear to you ?

  40. Matteo wrote:

    sorry, is not so clear.
    We have just add a resource to use it with side menu. Is not enought? I need to add in some other way?

  41. Ivan Gospodinow wrote:

    Hello Matteo,

    in your code you are asking the acl object, if the user with role(some role) have access to url (for example /user) but to this moment you never told the acl object, that resource ‘/user’ exists and that user role has access to it.

    $acl -> addResource(new \Zend\Permissions\Acl\Resource\GenericResource(‘/user’));
    $acl -> allow(‘user_role’ , ‘/user’);

    Is it now more clear?

  42. Matteo wrote:

    I’m sorry, but in module.acl.roles I’ve just added this role

    $admin = array(‘/’,’homes’,’auth’,’success’,’user’);

    return array(‘user’=>$user,’admin’=>$admin,’guest’=>$guest);

    I need to repeat it?

  43. Ivan Gospodinow wrote:

    Hello Matteo,

    you do not have to repeat it.
    If you want user to have access to url ‘/user’, then from your example:
    add to $user = [‘/user’];

    Then check the in the view:
    $this->layout()->acl ->hasResource($url) && $this->layout()->acl-> isAllowed(‘user’, $url)

  44. Matteo wrote:

    Dear Ivan,
    thanks for your patience.

    Sorry but, I haven’t shown all the file module.acl.roles.php.
    This file contains:

    $guest = array(‘homes’,’auth’);
    $utente = array(‘homes’,’auth’,’success’,’DownloadFile’,’utente:show’,’utente:upload’);
    $admin = array(‘homes’,’auth’,’success’,’compagnia’,’utente’,’DownloadFile’);
    $superadmin = array(‘homes’,’auth’,’success’,’compagnia’,’utente’,’DownloadFile’);

    return array(‘superadmin’=>$superadmin,’utente’=>$utente,’admin’=>$admin,’guest’=>$guest);

    The menu display pages correctly according to the role.
    When I try to call the link from view with this syntax:

    if($this->layout()->acl->isAllowed($dato[“ruolo”],$this->url(‘utente’, array(‘action’=>’index’))))

    I get the error:

    Resource ‘/utente’ not found

    If I duplicate “/utente” with the slash in the permits, it works. How so? Can I avoid duplicate all the permits? If I leave only “/utente” do not work the action

    thank you very much

  45. Ivan Gospodinow wrote:

    Hello Matteo,

    in this case I understand what you need to ask.
    Then your check will be with the route name, not the whole url.

    Just do:
    if($this->layout()->acl->isAllowed($dato[“ruolo”], ‘utente’)) {
    echo $this->url(β€˜utente’); // assuming that index action is by default.
    // or whatever here.

    And dont forget to test if the resource is existing like I posted before:
    $this->layout()->acl ->hasResource(‘utente’)

  46. Matteo wrote:

    thank you a lot! now it work! πŸ™‚

  47. Andy wrote:


    This is a excellent, crisp and really good understandable tutorial, thank you for that !!

    I am just on the search how to enhance this to be able to ask for certain privileges in a view without moving the whole part again into a View Helper or similar.

    So, somehow centralize the functionality for checkACL and let this be accessible from other locations as well.

    Any idea for that ?

  48. Ivan Gospodinow wrote:

    Hello Andy,

    the way I am showing it in the post is: $e -> getViewModel() -> acl = $acl;
    This means that you can access it in any view.
    The right way to do this is: create ACL factory via the service manager and then use it to check wherever needed.

  49. lodi wrote:

    Hi I get the following error

    Fatal error: Uncaught exception ‘Zend\Permissions\Acl\Exception\InvalidArgumentException’ with message ‘Resource ‘users’ not found’ in /home/lodi/git/reporting/vendor/zendframework/zendframework/library/Zend/Permissions/Acl/Acl.php on line 292

    any pointers ?


  50. Ivan Gospodinow wrote:

    Dear lodi,
    check Edit 1 from the post above.

  51. lodi wrote:

    Hi Ivan thanks for the reply.

    I changed the code as per edit 1 and still get the same error.

    For my clarity the module.acl.roles file do I put it in the module/Application folder or in the top level config folder ?

    Also you mention the acl config file? not sure if I need to create the file or if it is the file that comes with the framework.

    Really trying to get this to work.



  52. Ivan Gospodinow wrote:

    Hello lodi,

    can you paste some code?

  53. Alexander wrote:

    This is the best tutorial on Zend Framework ACL ever. Put up a bitcoin address and I will literally pay you. Shame on the rest for not writing a tutorial that adequately explained it all out like this.

  54. Jimmy wrote:


    First, thanks for this awesome tutorial! :).

    My question is that if I use a db for the acl roles, do I still need to use the checkAcl method and attach it in the onBootstrap() method or would checkAcl be taken out in favor of dbRoles()?


  55. Ivan Gospodinow wrote:

    Hello Jimmy and thank you,

    to your question – yes, you should still follow the rest of the code πŸ™‚
    the db only replaces the array of roles coming from the file.

  56. Jimmy wrote:

    So I wouldn’t need the module.acl.roles.php file anymore?

  57. Ivan Gospodinow wrote:


    Then replace in initAcl

    // this
    $roles = include __DIR__ . ‘/config/module.acl.roles.php’;
    // with
    $roles = $this->getDbRoles($e);

  58. Jimmy wrote:

    My main question is how would I not have to hard code a value into $user_role in favor of something that is dynamically generated. Does that make sense?

  59. Ivan Gospodinow wrote:

    Sure you can use Zend\Session or $_SESSION
    For example
    if (isset($_SESSION[‘logged_user_role’])) {
    $user_role = $_SESSION[‘logged_user_role’];
    } else {
    $user_role = ‘guest’;

    is it clear for you ?

  60. Jimmy wrote:

    yes, thanks πŸ™‚

  61. Jimmy wrote:

    One more question, although it may be outside the scope of this tutorial, but I’m using Zend\Authentication to determine if the identity is valid and if it isn’t, redirect but I cannot get it to redirect to the login page. Here is my code for it:

    public function checkAcl(MvcEvent $e)
    $route = $e->getRouteMatch()->getMatchedRouteName();

    $auth = new AuthenticationService();

    $user_role = $auth->hasIdentity() ? $auth->getIdentity() : null;

    if (!$e->getViewModel()->acl- >isAllowed($user_role->username, $route)) {
    $response = $e->getResponse();

    $response->getHeaders()->addHeaderLine(‘Location’, $e->getRequest()->getBaseUrl() . ‘/login/log’);

    but it’s only giving me a 500 server error.. how would this be fixed so it would redirect in a right way?

    Thanks again

  62. Ivan Gospodinow wrote:

    Try to add $e->stopPropagation();
    I think you can have an error in the controller because it is still executed.

  63. Jimmy wrote:

    So like this?

    $response = $e->getResponse();

    $response->getHeaders()->addHeaderLine(‘Location’, $e->getRequest()->getBaseUrl() . ‘/login/log’);

  64. Jimmy wrote:

    public function indexAction()

    if (!$user = $this->identity()) {
    return $this->redirect()->toUrl(‘/login/log’);

    $user = $this->identity();

    $main_layout = $this->layout();

    $main_layout->setVariable(‘user1’, $user->username);

    return new ViewModel(array(‘user1’ => $user->username));

    I am assuming that this in the application controller is causing the issue. Clueless though on how to make this work in both the module.php and the controller πŸ™

  65. Ivan Gospodinow wrote:

    So your mistake is: you put header to redirect in the module.php and then in the controller you again request to redirect which is not possible.

  66. Jimmy wrote:

    does addHeaderLine() handle redirecting?

  67. Ivan Gospodinow wrote:

    When you add Location : $url – Yes

  68. King wrote:

    What if I just want to control the root route for an entire module and have all the sub routes inherited? Can I just control access to one route and the rest is good?

    Example: http://ipaddress/products
    I give access to /products and then


    are all allowed to access because I gave access to the root route.

  69. Ivan Gospodinow wrote:

    You add resource = ‘products’ in all menu items that are sub to products.
    Then add in checkAcl

    if (strpos($route, ‘/’) !== false) {
    $route = explode(‘/’, $route)[0];

    this way you will get only the main route.

  70. King wrote:

    Thank you for the help so far. I only have menu items for the main route. All the child routes dont have menu items. What do I do then?

  71. Ivan Gospodinow wrote:

    You have to have resource = ‘products’ on all items that you want to be accesable thrue products ACL rule

  72. King wrote:

    What file do you put resource=’products’ in? That is the part I am confused on. module.config.php? In the router?

  73. Ivan Gospodinow wrote:

    resource parameter is part of the navigation config.

    if (strpos($route, β€˜/’) !== false) {
    $route = explode(β€˜/’, $route)[0];

    route patch is for the access control.

  74. Jaouad wrote:

    Hi ivan, thank you for your helpful tutorial.
    I have 3 roles : guest, member, admin.
    I have also a menu in the layout that is controlled by the acl.
    My question is how could I display only the permitted links using the navigation.
    It would be very appreciated if you could give me a step by step tutorial.

  75. Ivan Gospodinow wrote:

    Hello Jaiuad,

    the tutorial already exists: http://ivangospodinow.com/zend-framework-2-navigation-with-acl/

  76. Vipul wrote:


    How to manage if I have session from two roles. How would I be able to set

    //you set your role
    $userRole = ‘guest’;

    and if I have three modules, one users module, sponsors module and admin module. Then do I have to copy onbootstrap initalization of initAcl() for each module separately. Is it possible that I can specify $userRole statically inside each module’s onbootstrap. How will it work.


  77. Ivan Gospodinow wrote:

    Hello Vipul,

    this is bad idea. Just make another role that combines the two of them.

  78. Vipul wrote:

    Hi Ivan,

    Yes I have defined three different roles, my concern is that if guest user will access sponsor module’s actions then it must redirect to sponsor’s login page otherwise if some one is accessing some other module like users module then it should redirect it to user’s login page. How would I be able to do that. Different redirection according to different modules and different roles?


  79. Vipul wrote:

    I think I need to redirect it according to the sessions (like sponsor for sponosr module and users for users module) , session will contain the role and these functions (initAcl(), checkACL()) will be defined in one of the three modules only once and that will make it possible for other modules to work automatically.

  80. Vipul wrote:

    Hi Ivan,

    Please check http://pastebin.com/xjdjZjGp

    When I set $userRole = ‘guest’; and when I call route sponsor_login, I was able to see login page. But when I changed $userRole = ‘sponsor’ and called same sponsor_login page, page says The page isn’t redirecting properly. What’s wrong here. As per my requirement. It should be redirected to sponsor_home page if role is set to sponsor. Could you please suggest something.


  81. Bas wrote:

    I am getting e 404 page?
    What do i do wrong?

    A 404 error occurred
    Page not found.
    The requested controller was unable to dispatch the request.

    No Exception available

  82. Ivan Gospodinow wrote:

    First, dump this $e->getViewModel()->acl->isAllowed($userRole, $route) and see if your user role is allowed to the route.
    If not check your routes to see if you have the correct one.

  83. Jimmy wrote:

    Awesome tutorial! Thanks for the writeup. Only made some minor changes using `use` instead of full path inline since my company has line length restrictions.


  84. Jimmy wrote:

    Sorry for the dupe, but thought might be useful. I also changed the hard coded role setting $userRole = ‘guest’; to values pulled from db:

    `$userRole = $this->person->admin ? ‘admin’ : ‘guest’;`

    At any rate, thanks for the tutorial.

  85. Armando Guerra wrote:

    Dear Friend,

    I need your help , I need to create a ViewHelper where I am trying to call the method isAllowed () but I have this error.

    if ( $ this-> acl- > isAllowed ( ‘ role’ , ‘ permission ‘)) {

    Notice: Undefined variable: acl in puedo.php on line 13

    Fatal error: Call to a member function isAllowed() on a non-object in puedo.php on line 13

    Can you help me.

    Armando .

  86. Ivan Gospodinow wrote:

    Hello Armando,

    in view helper try: $this->getView()->layout()->acl

  87. Indrasinh wrote:

    Thanks man!!

    You have done awesome job!!

    Exactly what I am looking for..

  88. malino wrote:

    I dont understand for first step.

    -> Add file module.acl.roles in application/config/
    – what u mean for this step?

    Anyone have tutorial for this for noob?

  89. Ivan Gospodinow wrote:

    You can skip this step, just add your roles in the main config and it will be just fine.

Leave Your Comment

Warning: Use of undefined constant XML - assumed 'XML' (this will throw an Error in a future version of PHP) in /home/c2kblate/sites/ivangospodinow.com/wp-content/plugins/wp-syntaxhighlighter/wp-syntaxhighlighter.php on line 1048
Powered by Wordpress and MySQL. Theme by Shlomi Noach, openark.org