Mam taki problem.
Mam 2 moduły: default i admin.
I teraz mam swój ACL, w którym chciałbym zablokować "guestowi" wszystkie zasoby modułu "admin" poza kontrollerem auth

[PHP] pobierz, plaintext 
<?php
 
class My_Plugin_Acl extends Zend_Controller_Plugin_Abstract {
 
    public function preDispatch(Zend_Controller_Request_Abstract $request) {
        $acl = new Zend_Acl;
        // dodajemy role
        $acl->addRole(new Zend_Acl_Role('guest'));
        $acl->addRole(new Zend_Acl_Role('admin'));
        // dodajemy zasoby
        $acl->add(new Zend_Acl_Resource('index'));
        $acl->add(new Zend_Acl_Resource('post'));
        $acl->add(new Zend_Acl_Resource('error'));
        $acl->add(new Zend_Acl_Resource('admin'));
        $acl->add(new Zend_Acl_Resource('admin:index'));
        $acl->add(new Zend_Acl_Resource('admin:post'));
        $acl->add(new Zend_Acl_Resource('admin:user'));
        $acl->add(new Zend_Acl_Resource('admin:error'));
        $acl->add(new Zend_Acl_Resource('admin:auth'));
 
 
        // przydzielamy prawa
        $acl->allow('guest', 'index');
        $acl->allow('guest', 'post');
        $acl->allow('guest', 'error');
        $acl->allow('guest', 'admin');
        $acl->deny('guest', 'admin:index');
        $acl->allow('guest', 'admin:auth');
 
        $acl->allow('admin', null); // admin ma nieograniczone uprawnienia
        // rozpoczynamy sprawdzanie uprawnień
        $auth = Zend_Auth::getInstance();
        if ($auth->hasIdentity()) {
            $identity = $auth->getIdentity()->role;
            $role = $identity;
        } else {
            $role = 'guest';
        }
        $controller = $request->controller;
        $action = $request->action;
 
        if (!$acl->isAllowed($role, $controller, $action)) {
            if ($role == 'guest') {
                $request->setModuleName('admin');
                $request->setControllerName('auth');
                $request->setActionName('login');
            } else {
                $request->setControllerName('error');
                $request->setActionName('error');
            }
        }
    }
 
}
 
[PHP] pobierz, plaintext 

To jest moja klasa, wszystko spięte i działa, poza tym że nie mogę zmusić do zablokowania zasobów modułu admin.
Ktoś ma jakiś pomysł?

poczytaj o dziedziczeniu ról i resursów
przyjrzyj sie temu :

[PHP] pobierz, plaintext 
 <?php
 
class My_Acl extends Zend_Acl {
 
 
    public function __construct() {
 
        $this->addResource(new Zend_Acl_Resource('default'))
                ->addResource(new Zend_Acl_Resource('default:index'), 'default')
                ->addResource(new Zend_Acl_Resource('default:error'), 'default');
 
        $this->addResource(new Zend_Acl_Resource('auth'))
                ->addResource(new Zend_Acl_Resource('auth:auth'), 'auth');
 
        $this->addResource(new Zend_Acl_Resource('lang'),'default')
                ->addResource(new Zend_Acl_Resource('lang:switch'),'lang');
 
        $this->addResource(new Zend_Acl_Resource('thumb'), 'default')
                ->addResource(new Zend_Acl_Resource('thumb:index'),'thumb');
 
        $this->addResource(new Zend_Acl_Resource('blog'),'default')
                ->addResource(new Zend_Acl_Resource('blog:index'),'blog');
 
        $this->addResource(new Zend_Acl_Resource('admin'))
                ->addResource(new Zend_Acl_Resource('admin:index'), 'admin')
                ->addResource(new Zend_Acl_Resource('admin:error'), 'admin')
                ->addResource(new Zend_Acl_Resource('admin:news'), 'admin')
                ->addResource(new Zend_Acl_Resource('admin:channel'), 'admin');
 
 
 
        $this->addRole(new Zend_Acl_Role('guests'));
        $this->addRole(new Zend_Acl_Role('users'), 'guests');
        $this->addRole(new Zend_Acl_Role('admins'), 'users');
 
        $this->allow('guests','default');
        $this->allow('admins');
    }
 
 
}
[PHP] pobierz, plaintext 

Zmodyfikowałem moją klasę

[PHP] pobierz, plaintext 
class My_Plugin_Acl extends Zend_Controller_Plugin_Abstract {
 
    public function preDispatch(Zend_Controller_Request_Abstract $request) {
        $acl = new Zend_Acl;
        // dodajemy role
        $acl->addRole(new Zend_Acl_Role('guest'));
        $acl->addRole(new Zend_Acl_Role('admin'));
        // dodajemy zasoby
        $acl->addResource(new Zend_Acl_Resource('index'))
                ->addResource(new Zend_Acl_Resource('post'))
                ->addResource(new Zend_Acl_Resource('error'));
 
        $acl->addResource(new Zend_Acl_Resource('admin'))
                ->addResource(new Zend_Acl_Resource('admin:index','admin'))
                ->addResource(new Zend_Acl_Resource('admin:post','admin'))
                ->addResource(new Zend_Acl_Resource('admin:panel','admin'))
                ->addResource(new Zend_Acl_Resource('admin:auth','admin'))
                ->addResource(new Zend_Acl_Resource('admin:user','admin'));
        // przydzielamy prawa
        $acl->allow('guest', 'index');
        $acl->allow('guest', 'admin:auth');
        $acl->allow('guest', 'post');
 
        $acl->allow('admin'); // admin ma nieograniczone uprawnienia
        // rozpoczynamy sprawdzanie uprawnień
        $auth = Zend_Auth::getInstance();
        if ($auth->hasIdentity()) {
            $identity = $auth->getIdentity()->role;
            $role = $identity;
        } else {
            $role = 'guest';
        }
        $controller = $request->controller;
        $action = $request->action;
 
        if (!$acl->isAllowed($role, $controller, $action)) {
            if ($role == 'guest') {
                $request->setModuleName('admin');
                $request->setControllerName('auth');
                $request->setActionName('login');
            } else {
                $request->setControllerName('error');
                $request->setActionName('error');
            }
        }
    }
 
}
[PHP] pobierz, plaintext 

I wciąż nie mogę otrzymać porządanego efektu.
Gdy jest 'guestem' wchodząc na /admin/panel spodziewam się że przekieruje mnie do admin/auth/login.
Zamiast tego dostaje błąd:Resource 'panel' not found.
Załączam application.ini, może tu coś jest nie tak.
[production]
phpSettings.display_startup_errors = 0
phpSettings.display_errors = 0
includePaths.library = APPLICATION_PATH "/../library"
bootstrap.path = APPLICATION_PATH "/Bootstrap.php"
bootstrap.class = "Bootstrap"
appnamespace = "Application"
resources.frontController.controllerDirectory = APPLICATION_PATH "/controllers"
resources.frontController.params.displayExceptions = 0
resources.frontController.plugins.acl = "My_Plugin_Acl"
resources.frontController.moduleDirectory = APPLICATION_PATH "/modules"

Nie działa ponieważ sprawdzasz dostęp dla kontrolera, czyli np dla index a nie admin:index. Musisz dokleić na początku $controller nazwę modułu jeśli jest inny niż default.