如何通过直接在zend框架中输入url来限制学生和教师访问每个页面？

Question

localhost.test/teacher/marklist - teacher is controller and marklist is view page.

A student logging in and typing the above url will display the page. How to prevent this?

Answer 1

There are many ways to prevent it but the suggested way in Zend is to use Zend_Acl and make roles: Student, Teacher and resources.

You can read more about Zend Access Control List here.

From Zend Page:

Zend_Acl provides a lightweight and flexible access control list (ACL) implementation for privileges management. In general, an application may utilize such ACL's to control access to certain protected objects by other requesting objects.

For the purposes of this documentation:

• a resource is an object to which access is controlled.

• a role is an object that may request access to a Resource

So basicly you need to make:

1. Autentication - simple login form and keeping data in session
2. Authorization - Zend_Acl may be useful.