华为路由器-求问关于acl中deny的使用问题—

ensp中路由器端口无法启用acl策略问题

[Core-RT-GigabitEthernet0/0/1]traffic-filter outbound acl 2000 ^ Error: Unrecognized command found at '^' position. 求解这是什么原因不知为何报错，下面是拓扑结构以及路由器信息 ![图片说明](https://img-ask.csdn.net/upload/201801/01/1514794099_381820.png) [Core-RT-GigabitEthernet0/0/1]display current # sysname Core-RT # acl number 2000 rule 5 deny source 192.168.3.0 0.0.0.255 rule 10 permit # acl number 2001 rule 1 deny source 192.168.3.0 0.0.0.255 rule 2 permit # aaa authentication-scheme default authorization-scheme default accounting-scheme default domain default domain default_admin local-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw# local-user admin service-type http # firewall zone Local priority 16 # interface Ethernet0/0/0 # interface Ethernet0/0/1 # interface Serial0/0/0 link-protocol ppp # interface Serial0/0/1 link-protocol ppp # interface Serial0/0/2 link-protocol ppp # interface Serial0/0/3 link-protocol ppp # interface GigabitEthernet0/0/0 ip address 192.168.4.2 255.255.255.0 # interface GigabitEthernet0/0/1 ip address 220.220.220.1 255.255.255.0 #

思科标准ACL不是只过滤源地址吗，为什么设置之后同样ping不通ACL中的源地址？

在R1上配置了标准ACL：access-list 10 deny host 192.168.11.10 在R1的Se2/0接口：ip access-group 10 out 现在主机192.168.11.10 ping不通其他主机，但是为什么其他主机也ping不通主机192.168.11.10 ，不是过滤源地址吗，要是用其他主机ping主机192.168.11.10 ，那主机192.168.11.10 应该是目的地址，不在ACL的过滤范围内啊，为什么ping不通呢？![图片说明](https://img-ask.csdn.net/upload/201612/06/1481037917_626935.png)

华为S6502交换机端口绑定acl 总是提示资源不足

华为S6502交换机端口绑定acl 最后一条acl 为rule deny ip 端口绑定时总是提示资源不足，![图片说明](https://img-ask.csdn.net/upload/201507/07/1436236121_159537.jpg) 有看到说可能是mask满了的原因，![图片说明](https://img-ask.csdn.net/upload/201507/07/1436236146_774743.png)![图片说明](https://img-ask.csdn.net/upload/201507/06/1436166825_233709.png)，预留的mask可以用么，求高手支招告知！

拒绝访问私人区域Phalcon PHP ACL

<div class="post-text" itemprop="text"> I would like to deny access to the private areas on my website. But I don't know what I am doing wrong. I don't want to use <code>Acl::DENY</code> as the default rule. Instead I am using <code>Acl::ALLOW</code> as the global rule and denying access to the private resources. Here is my code: <pre><code><?php use Phalcon\Acl; use Phalcon\Acl\Role; use Phalcon\Acl\Resource; use Phalcon\Events\Event; use Phalcon\Mvc\User\Plugin; use Phalcon\Mvc\Dispatcher; use Phalcon\Acl\Adapter\Memory as AclList; class SecurityPlugin extends Plugin { public function getAcl() { if (!isset($this->persistent->acl)) { $acl = new AclList(); $acl->setDefaultAction(Acl::ALLOW); $roles = array( 'admin' => new Role('Administrators'), 'guests' => new Role('Guests') ); foreach ($roles as $role) { $acl->addRole($role); } //Private area resources $privateResources = array( 'admin' => array('index'), 'products' => array('index', 'search', 'new'); foreach ($privateResources as $resource => $actions) { $acl->addResource(new Resource($resource), $actions); } foreach ($privateResources as $resource => $actions) { foreach ($actions as $action) { $acl->deny('Guests', $resource, $action); } } } return $this->persistent->acl; } public function beforeDispatch(Event $event, Dispatcher $dispatcher) { $auth = $this->session->get('auth'); if (!$auth) { $role = 'Guests'; } else { $role = 'Admin'; } $controller = $dispatcher->getControllerName(); $action = $dispatcher->getActionName(); $acl = $this->getAcl(); $allowed = $acl->isAllowed($role, $controller, $action); if ($allowed != Acl::ALLOW) { $dispatcher->forward(array( 'controller' => 'errors', 'action' => 'show401' )); $this->session->destroy(); return false; } } } </code></pre> Thank you, for trying to help me. </div>

cisco ACL ip access-group 1 (in/out)不明白

转自链接：https://blog.csdn.net/seaship/article/details/86224999 １.access-list 与ip access-list的区别 access-list 是用数字来定义----acl(标准或扩展ACL,用数字定义) ip access-list 是用名字来定义acl(命名ACL 命名前面要加 standard or extended ２.应用在端口上的访问控制列表 1、如果在路由器R1上配置标准的访问控制列表，阻止PC1访问PC3，如配置的ACL为access-list 1 deny 192.168.1.254 0.0.0.0 access-list 1 permit any。如果将此访问列表应用到f0/1接口int f0/1 ip access-group 1 (in/out)不管此处是in还是out PC1都将无法访问PC2，但是这两种情况下，数据包被阻止的情况不一样,如果应用的是 ip access-group 1 out，那么从PC1传送出来的数据包，只能传到f0/1接口，但不能通过此接口，因为此时访问列表将PC1发送的数据包给阻止了。但是如果应用的是 ip access-group 1 in应用到f0/1接口的，那么从PC1传输的数据包可以通过f0/1接口到达PC2，但是，此时从PC2返回给PC1的流量将无法通过f0/1，因为此时f0/1的的访问列表应用的是in（即入口访问方式）,所以进入该接口的数据包将会被阻止。 ———————————————— 看了这个我有个疑问，标准ACL不是按照源地址来选择是否转发或接受吗，那 ip access-group 1 out，那么从PC1传送出来的数据包，源地址是PC1的IP号，不应该可以通过吗

带模块和控制器访问问题的Zend ACL

<div class="post-text" itemprop="text"> I have been working on this for days to no avail. Using ZF Boilerplate, I am trying to set up an ACL which would include modules (as there is some controller with identical name in my architecture and this cannot be changed). I thought I had this working nicely and just realised that the access are never processed, I guess I lack something but I am not sure what. Here is my set up: a helper in library/App/Action/Helpers/PrivilegesManage.php <pre><code><?php class App_Action_Helpers_PrivilegesManage extends Zend_Controller_Action_Helper_Abstract { //the acl object public $acl; //the constructor of the our ACL public function __construct() { $this->acl = new Zend_Acl(); } //function that sets roles for the people public function setRoles() { $this->acl->addRole(new Zend_Acl_Role('guest')); $this->acl->addRole(new Zend_Acl_Role('crew')); $this->acl->addRole(new Zend_Acl_Role('client')); $this->acl->addRole(new Zend_Acl_Role('admin')); } //function that set the resources to be accessed on the site public function setResources() { $this->acl->add(new Zend_Acl_Resource('site:error')); $this->acl->add(new Zend_Acl_Resource('site:index')); //me $this->acl->add(new Zend_Acl_Resource('me:clients')); $this->acl->add(new Zend_Acl_Resource('me:crew')); $this->acl->add(new Zend_Acl_Resource('me:error')); $this->acl->add(new Zend_Acl_Resource('me:index')); $this->acl->add(new Zend_Acl_Resource('me:jobs')); $this->acl->add(new Zend_Acl_Resource('me:people')); $this->acl->add(new Zend_Acl_Resource('me:system')); //admin $this->acl->add(new Zend_Acl_Resource('admin:clients')); $this->acl->add(new Zend_Acl_Resource('admin:crew')); $this->acl->add(new Zend_Acl_Resource('admin:error')); $this->acl->add(new Zend_Acl_Resource('admin:index')); $this->acl->add(new Zend_Acl_Resource('admin:jobs')); $this->acl->add(new Zend_Acl_Resource('admin:people')); $this->acl->add(new Zend_Acl_Resource('admin:system')); } //function that sets the privileges for the different roles public function setPrivileges() { $this->acl->allow('guest', 'site:error', 'index'); $this->acl->deny('guest', 'site:index', 'index'); $this->acl->allow('crew', 'site:index'); $this->acl->allow('crew', 'site:error'); $this->acl->allow('crew', 'me:crew'); $this->acl->allow('client', 'me:clients'); $this->acl->allow('client', 'site:index', array('logout')); $this->acl->deny('client', 'me:crew'); $this->acl->deny('guest', 'admin:crew', array('add')); } public function setAcl() { Zend_Registry::set('acl', $this->acl); } ?> </code></pre> Then I also have a plugin in App/Plugin/Acl.php [EDITED] <pre><code><?php class App_Plugin_Acl extends Zend_Controller_Plugin_Abstract { /** * * @var Zend_Auth */ protected $_auth; //Zend_Auth instance for user access protected $_acl; //Zend_Acl instance for user privileges protected $_module; protected $_action; protected $_controller; protected $_currentRole; protected $_resource; public function __construct(Zend_Acl $acl, array $options = array()) { $this->_auth = Zend_Auth::getInstance(); $this->_acl = $acl; } public function preDispatch(Zend_Controller_Request_Abstract $request) { $this->_init($request); if ($this->_acl->has($this->_resource)) { // if the current user role is not allowed to do something if (!$this->_acl->isAllowed($this->_currentRole, $this->_resource, $this->_action)) { if ('guest' == $this->_currentRole) { $request->setModuleName('site'); $request->setControllerName('index'); $request->setActionName('login'); } else { $request->setModuleName('site'); $request->setControllerName('error'); $request->setActionName('denied'); } } } } protected function _init($request) { $this->_module = $request->getModuleName(); $this->_action = $request->getActionName(); $this->_controller = $request->getControllerName(); $this->_currentRole = $this->_getCurrentUserRole(); $this->_resource = $this->_module . ':' . $this->_controller; } protected function _getCurrentUserRole() { if($this->_auth->hasIdentity()) { $authData = $this->_auth->getIdentity(); //$role = isset($authData->myType())?strtolower($authData->property->privilage): 'guest'; //retrieving the UserType $authTypeCheck = $authData->myType(); if(isset($authTypeCheck)){ $role = strtolower($authData->myType()); } } else { $role = 'guest'; } return $role; } } ?> </code></pre> Now in here it seems that $acl never has any resources where when I print out the content of $acl I do get some resources. FInally in bootstrap I have: <pre><code> protected function _initAclControllerPlugin() { $this->bootstrap('frontcontroller'); $front = Zend_Controller_Front::getInstance(); $aclhelper= new App_Action_Helpers_PrivilegesManage(); $aclhelper->setRoles(); $aclhelper->setResources(); $aclhelper->setPrivileges(); $aclhelper->setAcl(); $aclPlugin = new App_Plugin_Acl($aclhelper->acl); $front->registerPlugin($aclPlugin); } </code></pre> I am quite new to Zend and especially ACL so any advice and help would be very welcome. </div>

CakePHP 2.x ACL - 在所有者级别进行控制

<div class="post-text" itemprop="text"> I am able to control my application using <code>ACL</code>, everything done perfectly and application is working smooth with <code>ACL</code> and <code>Auth</code>. Now the problem is: I have two tables, <code>users</code> and <code>posts</code>. there is no <code>RBAC</code> (role based access control). I am setting <code>deny</code> and <code>allow</code> for each user like follow. <pre><code>//allow User1 to do everything $user->id=1; $this->ACL->allow($user,'controllers'); //allow User2 to add, edit and view the posts $user->id=2; $this->Acl->deny($user, 'controllers'); $this->Acl->allow($user, 'controllers/Posts'); </code></pre> but here I am getting one problem: <code>user2</code> is getting access to <code>edit</code> the <code>posts</code> of <code>user1</code>. example: <code>User1</code> created a <code>post1</code>. now <code>User2</code> logged in now he can edit the <code>User1</code>'s post (i.e. <code>post1- /localhost/myApp/posts/edit/1</code>) Question: How can I set ACL permission to this problem, The owner of the post can only edit the post and others can not. I can achieve this in controller level simply checking <pre><code>if($_SESSION['Auth']['User']['id'] == $Post['Post']['user_id']){ // you're the owner, so u can edit }else{ //u cant edit, this is not ur post } </code></pre> but I need <code>ACL</code> to work here, Is it possible?, Please help Thanks </div>

动态断言Zend_ACL - 在isAllowed上创建不需要的对象

<div class="post-text" itemprop="text"> I have tried to add dynamic Zend_Acl assertions to my project following this article: <a href="http://www.amazium.com/blog/content-driven-access-control-with-zend-acl" rel="nofollow">http://www.amazium.com/blog/content-driven-access-control-with-zend-acl</a> After days of thinking I still can't put it to work properly. It throws an error: "Catchable fatal error: Argument 1 passed to Application_Model_User::populate() must be an array, object given, called in C:\Program Files\Zend\Apache2\htdocs\guardian\application\models\User.php on line 14 and defined in C:\Program Files\Zend\Apache2\htdocs\guardian\application\models\User.php on line 92". Through debugging I found out the line in ClientController <pre><code>$subsidiary->setAllowed($this->_acl->isAllowed($user, $subsidiary)); </code></pre> caused the problem. But I cannot get how to make it work. It seems that isAllowed creates an instance of User though I pass it there directly. My code is the following: <pre><code>class My_Controller_Helper_Acl extends Zend_Acl{ public function __construct(){ $this->add(new Zend_Acl_Resource('index')); $this->add(new Zend_Acl_Resource('client')); $this->add(new Zend_Acl_Resource('search')); $this->add(new Zend_Acl_Resource('subsidiary')); $this->add(new Zend_Acl_Resource('user')); $this->add(new Zend_Acl_Resource('error')); $this->add(new Zend_Acl_Resource('subs')); $guest = My_Role::ROLE_GUEST; $client = My_Role::ROLE_CLIENT; $technician = My_Role::ROLE_TECHNICIAN; $coordinator = My_Role::ROLE_COORDINATOR; $admin = My_Role::ROLE_ADMIN; $this->addRole(new Zend_Acl_Role($guest)); $this->addRole(new Zend_Acl_Role($client)); $this->addRole(new Zend_Acl_Role($technician), $client); $this->addRole(new Zend_Acl_Role($coordinator), $technician); $this->addRole(new Zend_Acl_Role($admin)); $this->allow($guest, array('user', 'error')); $this->deny($guest, 'user', array('register', 'rights', 'delete')); $this->allow($client); $this->deny($client, 'client', 'new'); $this->deny($client, 'client', 'delete'); $this->deny($client, 'user', array('register', 'rights', 'delete')); $this->allow($client, 'subs', null, new My_Controller_Helper_UserOwned()); $this->allow($coordinator, 'client', array('new', 'delete')); $this->allow($admin); } } class My_Controller_Helper_UserOwned implements Zend_Acl_Assert_Interface{ /** * @param Zend_Acl $acl * @param Zend_Acl_Role_Interface $role * @param Zend_Acl_Resource_Interface $resource * @param unknown_type $privilege */ public function assert(Zend_Acl $acl, Zend_Acl_Role_Interface $role = null, Zend_Acl_Resource_Interface $resource = null, $privilege = null) { if (!$resource instanceof Application_Model_UserOwnedInterface){ throw new Exception('UserOwnedInterface not implemented'); } $auth = Zend_Auth::getInstance(); if(!$auth->hasIdentity()){ return false; } $user = new Application_Model_User($auth->getIdentity()); return $resource->isOwnedByUser($user); } } </code></pre> ClientController.php / listAction <pre><code>$subsidiariesDb = new Application_Model_DbTable_Subsidiary (); $subsidiaries = $subsidiariesDb->getByTown (); $users = new Application_Model_DbTable_User(); $user = $users->getByUsername($this->_username); foreach($subsidiaries as $subsidiary){ $subsidiary->setAllowed($this->_acl->isAllowed($user, $subsidiary)); } $this->view->subsidiaries = $subsidiaries; $this->renderScript ( 'client/town.phtml' ); </code></pre> town.phtml <pre><code><?php foreach ($this->subsidiaries as $subsidiary) : if($subsidiary->getAllowed()){ if ($town != $subsidiary->getSubsidiaryTown()){?> </ul> <?php echo $subsidiary->getSubsidiaryTown(); ?> <?php $town = $subsidiary->getSubsidiaryTown(); ?> <ul> <?php } if ($subsidiary->getHq()) {?> <li class="bold"><a href="<?php echo $this->url(array('clientId' => $subsidiary->getClientId()), 'clientIndex');?>"> <?php echo $subsidiary->getSubsidiaryName() . ' (centrála)'?> </a></li> <?php } else {?> <li><?php echo '<a href="' . $this->url(array('clientId' => $subsidiary->getClientId(), 'subsidiary' => $subsidiary->getIdSubsidiary()), 'subsidiaryIndex') . '">' . $subsidiary->getSubsidiaryName() . '</a>'?></li> <?php } } endforeach; ?> </code></pre> User model (parts) <pre><code>class Application_Model_User implements Zend_Acl_Role_Interface{ private $idUser; private $username; private $password; private $salt; private $role; private $userSubsidiaries; public function __construct ($options = array()){ if (!empty($options)){ $this->populate($options); //see what the options are in debug below } } public function getRoleId(){ return $this->getRole(); } public function populate(array $data){ $this->idUser = isSet($data['id_user']) ? $data['id_user'] : null; $this->username = isSet($data['username']) ? $data['username'] : null; $this->password = isSet($data['password']) ? $data['password'] : null; $this->salt = isSet($data['salt']) ? $data['salt'] : null; $this->role = isSet($data['role']) ? $data['role'] : null; $this->userSubsidiaries = array(); $subsidiaries = isSet($data['user_subsidiaries']) ? $data['user_subsidiaries'] : null; $this->addSubsidiaryToUser($subsidiaries); return $this; } public function toArray($toUpdate = false, $withSubsidiaries = true){ if (!$toUpdate){ $data['id_user'] = $this->idUser; } $data['username'] = $this->username; $data['password'] = $this->password; $data['salt'] = $this->salt; $data['role'] = $this->role; if($withSubsidiaries){ $data['user_subsidiaries'] = $this->userSubsidiaries; } return $data; } public function hasSubsidiary($subsidiary){ if($subsidiary instanceOf Application_Model_Subsidiary){ $subsidiary = $subsidiary->getIdSubsidiary(); } return in_array($subsidiary, $this->getUserSubsidiaries()); } public function getUserSubsidiaries(){ return $this->userSubsidiaries; } public function addSubsidiaryToUser($subsidiary){ if(is_array($subsidiary)){ foreach($subsidiary as $sub){ $this->addSubsidiaryToUser($sub); } } elseif ($subsidiary instanceof Application_Model_Subsidiary){ $this->userSubsidiaries[] = $subsidiary->getIdSubsidiary(); } elseif (is_numeric($subsidiary)){ $this->userSubsidiaries[] = $subsidiary; } else{ throw new Exception('Invalid subsidiary provided.'); } return $this; } } </code></pre> When I put debug on the $options param in User in populate function, I get the result (1) when the user is created in ClientController [user = $users->getByUsername($this->_username);], which is correct. On the line with isAllowed, I mentioned in the beginning, I get the result (2). But I don't get why the User object is even created on that line. I'm desperate. Would you know, where the mistake is? Result (1): <pre><code>object(Application_Model_User)#169 (6) { ["idUser":"Application_Model_User":private] => string(1) "6" ["username":"Application_Model_User":private] => string(6) "klient" ["password":"Application_Model_User":private] => string(64) "82a78c724f3242148990897a3b754e1f57442311fab5cde74c2a238d8c8858fc" ["salt":"Application_Model_User":private] => string(88) "Ewxm5Pa7t0MHn9GtROi8Rg5bis0hUhXF/QnnaRmiwgOUqz1elGj/AzYcaVlHa+J6vTpdyvy3mtlmXfmoQlAswg==" ["role":"Application_Model_User":private] => string(1) "4" ["userSubsidiaries":"Application_Model_User":private] => array(1) { [0] => string(1) "2" } } </code></pre> Result (2): <pre><code>object(stdClass)#18 (5) { ["id_user"] => string(1) "6" ["username"] => string(6) "klient" ["password"] => string(64) "82a78c724f3242148990897a3b754e1f57442311fab5cde74c2a238d8c8858fc" ["salt"] => string(88) "Ewxm5Pa7t0MHn9GtROi8Rg5bis0hUhXF/QnnaRmiwgOUqz1elGj/AzYcaVlHa+J6vTpdyvy3mtlmXfmoQlAswg==" ["role"] => string(1) "4" } </code></pre> </div>

带有额外url参数的zend acl

<div class="post-text" itemprop="text"> Ok, I am working on a basic blog concept as some practice with Zend Framework. I am using Zend 1.11 <pre><code><?php class App_Controller_Plugin_Acl extends Zend_Controller_Plugin_Abstract { public function preDispatch(Zend_Controller_Request_Abstract $request) { // resources $acl = new Zend_Acl(); $acl->addRole(new Zend_Acl_Role('guest')); $acl->addRole(new Zend_Acl_Role('free'), 'guest'); $acl->addRole(new Zend_Acl_Role('paid'), 'free'); $acl->addRole(new Zend_Acl_Role('admin'), 'paid'); $acl->add(new Zend_Acl_Resource('index')); $acl->add(new Zend_Acl_Resource('auth')); $acl->add(new Zend_Acl_Resource('error')); $acl->add(new Zend_Acl_Resource('user')); $acl->add(new Zend_Acl_Resource('page')); $acl->add(new Zend_Acl_Resource('blog')); $acl->add(new Zend_Acl_Resource('admin')); // set up the access rules // everyone has full access to index, error and auth $acl->allow(null, array('index', 'error', 'auth', 'blog', 'page')); $acl->allow('guest', array('index', 'error', 'auth', 'blog', 'page')); $acl->allow('admin', null); // a guest can only read content and login // $acl->deny('guest', 'blog', 'comment'); // free users can access the user panel $acl->allow('free', 'user'); // cms users can also work with content //$acl->allow('user', 'page', array('list', 'create', 'edit', 'delete')); // administrators can do anything $acl->allow('admin', null); // load the auth instance $auth = Zend_Auth::getInstance(); // set a default role of guest if ($auth->hasIdentity()) { $identity = $auth->getIdentity(); $role = strtolower($identity->role); } else{ $role = 'guest'; } // check the request $controller = $request->controller; $action = $request->action; // verify they have permission if (!$acl->isAllowed($role, $controller, $action)) { if ($role == 'guest') { $request->setControllerName('auth'); $request->setActionName('login'); } else { $request->setControllerName('error'); $request->setActionName('noauth'); } } } } </code></pre> And so, I want to have a URL to access posts similar to <code>whatever.com/blog/post/DATE/TITLE/</code> I am logged in as an admin, and I can view <code>whatever.com/blog/post/</code> with no problems, but if I put in any other parameters, it redirects me to the index/index... What is going wrong?!! I have no idea where the error could be, so idk what code I should post to show you where I may have made an error.... EDIT my application.ini <pre><code>; ------------------------------------------------------ [production] ; ------------------------------------------------------ phpSettings.display_startup_errors = 0 phpSettings.display_errors = 0 includePaths.library = APPLICATION_PATH "/../library" bootstrap.path = APPLICATION_PATH "/Bootstrap.php" bootstrap.class = "Bootstrap" appnamespace = "Application" resources.frontController.controllerDirectory = APPLICATION_PATH "/controllers" resources.frontController.params.displayExceptions = 0 resources.layout.layoutPath = APPLICATION_PATH "/layouts/scripts" resources.frontController.plugins.acl = "App_Controller_Plugin_Acl" resources.view.helperPath.App_View_Helper_ = "App/View/Helper/" resources.db.adapter = PDO_MYSQL resources.db.params.host = localhost resources.db.params.username = root resources.db.params.password = resources.db.params.dbname = zendcasts autoloaderNamespaces.app = App_ </code></pre> My Auth is ok, I can log in ok, and my identity stores the correct info.... </div>

CakePHP ACL教程initDB函数警告

<div class="post-text" itemprop="text"> I am following <a href="http://book.cakephp.org/2.0/en/tutorials-and-examples/simple-acl-controlled-application/part-two.html" rel="nofollow">http://book.cakephp.org/2.0/en/tutorials-and-examples/simple-acl-controlled-application/part-two.html</a> tutorial and I got a bit slightly different groups (group 4 and 5) 4 is visitors and 5 is admins <pre><code> function initDB() { 10 $group = $this->User->Group; 11 //Allow admins to everything 12 $group->id = 5; 13 $this->Acl->allow($group, 'controllers'); 14 //^doesnt work 15 //$this->Acl->allow(array( 'model' => 'Group', 'foreign_key' => 5), 'controllers'); 16 17 18 $group->id = 4; 19 $this->Acl->deny($group, 'controllers'); 20 $this->Acl->allow($group, 'controllers/User/login'); 21 $this->Acl->allow($group, 'controllers/User/logout'); 22 /* 23 $this->Acl->deny(array( 'model' => 'Group', 'foreign_key' => 4), 'controllers'); 24 $this->Acl->allow(array( 'model' => 'Group', 'foreign_key' => 4), 'controllers/User/login'); 25 $this->Acl->allow(array( 'model' => 'Group', 'foreign_key' => 4), 'controllers/User/logout'); 26 */ 27 28 29 echo "all done"; 30 exit(); 31 } </code></pre> but when I run this function I get the following errors <pre><code>Warning (512): DbAcl::allow() - Invalid node [CORE/Cake/Controller/Component/AclComponent.php, line 387] Warning (512): DbAcl::allow() - Invalid node [CORE/Cake/Controller/Component/AclComponent.php, line 387]all done </code></pre> what gives?! edit - my App Controller looks like this <pre><code><?php class AppController extends Controller { public $components = array( 'Acl', 'Auth' => array( 'authorize' => array( 'Actions' => array('actionPath' => 'controllers') ) ), 'Session' ); public $helpers = array('Html', 'Form', 'Session'); public function beforeFilter() { $this->Auth->actionPath = 'controllers/'; //Configure AuthComponent $this->Auth->loginAction = array('controller' => 'users', 'action' => 'login'); $this->Auth->logoutRedirect = array('controller' => 'users', 'action' => 'login'); $this->Auth->loginRedirect = array('controller' => 'images', 'action' => 'index'); $this->Auth->allow('display'); } } ?> </code></pre> EDIT 2: Full Warning looks like this <pre><code>Warning (512): DbAcl::allow() - Invalid node [CORE/Cake/Controller/Component/AclComponent.php, line 387] Code Context DbAcl::allow() - CORE/Cake/Controller/Component/AclComponent.php, line 387 AclComponent::allow() - CORE/Cake/Controller/Component/AclComponent.php, line 128 UsersController::initDB() - APP/Controller/UsersController.php, line 20 ReflectionMethod::invokeArgs() - [internal], line ?? Controller::invokeAction() - CORE/Cake/Controller/Controller.php, line 473 Dispatcher::_invoke() - CORE/Cake/Routing/Dispatcher.php, line 107 Dispatcher::dispatch() - CORE/Cake/Routing/Dispatcher.php, line 89 [main] - APP/webroot/index.php, line 96 </code></pre> Let me know if you want me to post up any other code. </div>

CakePHP ACL不起作用

<div class="post-text" itemprop="text"> Hi I'm using the ACL and Auth Component. The Auth Component works fine but if I deny some Controllers for a User it seems that it has no Effect. The User can still visit the Page. Should CakePHP automatically hide the Page from the User? </div>

PHP，ZF：用于模块控制器动作的Zend_Acl

<div class="post-text" itemprop="text"> I need some examples (URLs) for adding Zend_Acl (roles and rules, allowing to visit or deny actions). I've googled but didn't find exactly that I need - step by step guide to provide such operations with module, not just controller-action. BTW, it's good if in example will be used Zend_Config. Thx in advance! </div>

Zend_Acl白名单VS黑名单？

<div class="post-text" itemprop="text"> Should i use a whitelist or blacklist approach to Zend_Acl? By that i mean deny any and all resources to everyone and write each single allow case for each role [blacklist] or allow all resources and write each deny care for each role [whitelist] </div>

Zend Navigation＆递归Zend Acl

<div class="post-text" itemprop="text"> I would like to make navigation with Zend_Navigation based on Zend_Acl below is a piece of my navigation.xml file located in /application/configs dir <pre><code><?xml version="1.0" encoding="UTF-8"?> <config> <nav> <menu1> <label>solidData</label> <uri>#</uri> <pages> <service> <label>menuLabel1</label> <controller>service</controller> <action>index</action> <resource>service</resource> <privilege>index</privilege> </service> <attendance> <label>menuLabel2</label> <controller>attendance</controller> <action>index</action> <resource>attendance</resource> <privilege>index</privilege> </attendance> </pages> </menu1> <menu2> <label>systemData</label> <uri>#</uri> <pages> <users> <label>users</label> <controller>users</controller> <action>index</action> <resource>users</resource> <privilege>index</privilege> </users> <profile> <label>profiles</label> <controller>profile</controller> <action>index</action> <resource>profile</resource> <privilege>index</privilege> </profile> <dictionary> <label>dictionary</label> <controller>dictionary</controller> <action>index</action> <resource>dictionary</resource> <privilege>index</privilege> </dictionary> <language> <label>languages</label> <controller>language</controller> <action>index</action> <resource>language</resource> <privilege>index</privilege> </language> </pages> </menu2> </nav> </config> </code></pre> I dont want to show section which all pages are deny in ACL. For example if there is user which has TYPE_DENY in ACL for all pages resource and privilege of <code><menu1></code> I dont want to create and display label "solidData" The main problem is structure of my menu, because as you see I have various resources in one menu section. I've try with my own Navigation class extending Zend_Navigation with function isVisible()" and "isActive()" but I cant find solution. I'll be grateful for any help [edit] Look at this fragment structure of my menu: <pre><code><menu2> <label>systemData</label> <uri>#</uri> <pages> <users> <label>users</label> <controller>users</controller> <action>index</action> <resource>users</resource> <privilege>index</privilege> </users> <profile> <label>profiles</label> <controller>profile</controller> <action>index</action> <resource>profile</resource> <privilege>index</privilege> </profile> </pages> </menu2> </code></pre> I cant <code><resource></code> to <code><menu2></code> because <code><menu2></code> include pages with different resources f.e. 'users' and 'profile'. maybe there is some possibility to add many resources to one menu. I try something like that: <pre><code><menu2> <label>systemData</label> <uri>#</uri> <resource>users</resource> <resource>profile</resource> <pages> ... </pages> </menu2> </code></pre> but i get <pre><code>Invalid argument: $resource must be null, a string, or an instance of Zend_Acl_Resource_Interface </code></pre> EDIT Ok, but if I change a structure of menu I also have to change ACL. In my ACL resource is Controller the privilege is Action in contoller. </div>

允许操作资源发挥作用

<div class="post-text" itemprop="text"> I want to allow resource to role using ACL in Zend framework I have modules privileges and account. privileges module has users and privilege controllers. each controller has index, view and edit actions. How can I grant action aresource to role? The problem I face that I can grant access to whole module but I can't give access to specific action in controller.. <pre><code> $this->addRole(new Zend_Acl_Role('admin')); $this->add(new Zend_Acl_Resource('privileges')) ->add(new Zend_Acl_Resource('privileges-privilege')) ->add(new Zend_Acl_Resource('privileges-users')) ->add(new Zend_Acl_Resource('account')) ->add(new Zend_Acl_Resource('default')); $this->deny('admin'); //deny every thing $this->allow('admin', 'account'); $this->allow('admin', 'privileges-privilege' , array('index','view','edit')); </code></pre> and also I make another way <pre><code> $this->add(new Zend_Acl_Resource('privileges')) ->add(new Zend_Acl_Resource('privilege'), 'privileges') ->add(new Zend_Acl_Resource('Privilege'),array('index','view','edit')) ->add(new Zend_Acl_Resource('users', 'privileges')) ->add(new Zend_Acl_Resource('account')) ->add(new Zend_Acl_Resource('account:account'), 'account') ->add(new Zend_Acl_Resource('default')); $this->deny('admin'); //deny every thing $this->allow('admin', 'account'); $this->allow('admin', 'Privilege', array('index','view','edit')); </code></pre> but it doesn't work, making both ways cause the same problem, which not granting any access to privilege module! and just allow account module.. </div>

squid:ERROR:Could not send signal 0 to process 11472:(3) no such process

在配置squid的时候出现 squid:ERROR:Could not send signal 0 to process 11472:(3) no such process错误配置信息如下： # Create the external ACL session handler. Avoid editing this line, if possible. # If you have a high-load environment you may increase the children= setting, but I found 10 to be fine in most cases. external_acl_type session ttl=1 negative_ttl=0 children=10 concurrency=0 %SRC %PROTO %DST %PORT %PATH /etc/iac/squid_handler.php acl session external session # If the handler says no-access, this is where you block them. http_access deny !session # But instead of a boring squid error page, redirect to the IAC WebGUI deny_info http://192.168.0.1/iac/denied.php?url=%s&from=acl session # The allow-everything rule. This should be the semi-last ACL in the config. 注释掉上面三条配置信息后squid能够正常运行。我是按照一个软件的安装要求来配置squid的，之前并没有接触过squid，我想问这个问题出现的原因在哪里？还有就是在错误提示中process后面的数字一直在增大，提示一次错误增长一次，从原来的2000多一直增长到现在的10000多了，这是什么原因呢？请求大神指点！

.NET如何获取文件所有权（GetAccessControl权限不足）

比如现在有个文件，所有者是SYSTEM，权限为Everyone:deny禁止访问现在我用administrator账户执行代码可以用IO.FileInfo获取文件信息，但是无法用GetAccessControl的方式打开ACL列表（试图执行未经授权的操作）在windows资源管理器的安全选项卡，我可以先获取文件所有权为administrator，再设置访问权在命令行，我可以用windows自带的takeown获取所有权，再用icacls设置访问权在.net编程谁知道怎么处理，求解

cvs 设置用户问题 cvs [server aborted]:"passwd" requires write access to the repository

出现错误：cvs [server aborted]:"passwd" requires write access to the repository. 配置如下：操作系统：window xp 安装目录:E:\CVSNT 版本：cvsnt-2.5.03.2382.msi repository目录：e:\cvsroot server settings如图: [img]http://img58.ph.126.net/q0hP60oEAZ6kcRhyaDIFdw==/1834935373177860347.jpg[/img] .#config配置： # Set this to 'no' if pserver shouldn't check system users/passwords SystemAuth=no admin文件配置： test huang mym passwd 文件配置： mym::test huang::test checkoutlist 文件配置：注：admin 前面有个空格 # comment lines begin with '#' admin error fileattr.xml文件配置： [code="xml"] <?xml version="1.0" encoding="UTF-8"?> <fileattr> <directory> <owner>test</owner> <acl user="test"> <all/> </acl> <acl user="huang"> <all/> </acl> <acl user="mym"> <all/> </acl> <acl> <all deny="1" /> </acl> </directory> </fileattr> [/code] 操作： 1.cmd 2.输入命令：set cvsroot=:pserver:test@localhost/cvsroot 3.输入命令：cvs login 4.输入密码：****** 5.输入命令想要建立新用户，此时出错：命令一：cvs passwd -a zdm 出现提示：Adding user zdm@localhost New Password: 输入密码：123456 出现提示：Verify Password: 输入确认密码：123456 之后就出现错误的信息： cvs [server aborted]:"passwd" requires write access to the repository. 注：用mym 这个用户密码为空登录后，想要添加用户，也出现： cvs [server aborted]:"passwd" requires write access to the repository. 寻求解决方法..

Laravel的Eloquent表与父母“继承”

<div class="post-text" itemprop="text"> I have a Laravel model <code>acl_groups</code> that has a JSON column <code>inherits</code>. What should I do, the "laravel way" to query the inherited groups when checking if a group can do something? The rights are stored in another JSON column, allow/deny so I can just do a <code>in_array</code> to check a single group if they have access. </div>

大学四年自学走来，这些私藏的实用工具/学习网站我贡献出来了

大学四年，看课本是不可能一直看课本的了，对于学习，特别是自学，善于搜索网上的一些资源来辅助，还是非常有必要的，下面我就把这几年私藏的各种资源，网站贡献出来给你们。主要有：电子书搜索、实用工具、在线视频学习网站、非视频学习网站、软件下载、面试/求职必备网站。注意：文中提到的所有资源，文末我都给你整理好了，你们只管拿去，如果觉得不错，转发、分享就是最大的支持了。一、电子书搜索对于大部分程序员...

在中国程序员是青春饭吗？

今年，我也32了，为了不给大家误导，咨询了猎头、圈内好友，以及年过35岁的几位老程序员……舍了老脸去揭人家伤疤……希望能给大家以帮助，记得帮我点赞哦。目录：你以为的人生一次又一次的伤害猎头界的真相如何应对互联网行业的「中年危机」一、你以为的人生刚入行时，拿着傲人的工资，想着好好干，以为我们的人生是这样的：等真到了那一天，你会发现，你的人生很可能是这样的： ...

程序员请照顾好自己，周末病魔差点一套带走我。

程序员在一个周末的时间，得了重病，差点当场去世，还好及时挽救回来了。

ArrayList源码分析(入门篇)

ArrayList源码分析前言：写这篇博客的主要原因是，在我上一次参加千牵科技Java实习生面试时，有被面试官问到ArrayList为什么查找的速度较快，插入和删除的速度较慢？当时我回答得不好，很大的一部分原因是因为我没有阅读过ArrayList源码，虽然最后收到Offer了，但我拒绝了，打算寒假学得再深入些再广泛些，下学期开学后再去投递其他更好的公司。为了更加深入理解ArrayList，也为

我以为我学懂了数据结构，直到看了这个导图才发现，我错了

数据结构与算法思维导图

String s = new String(" a ") 到底产生几个对象？

老生常谈的一个梗，到2020了还在争论，你们一天天的，哎哎哎，我不是针对你一个，我是说在座的各位都是人才！上图红色的这3个箭头，对于通过new产生一个字符串（”宜春”）时，会先去常量池中查找是否已经有了”宜春”对象，如果没有则在常量池中创建一个此字符串对象，然后堆中再创建一个常量池中此”宜春”对象的拷贝对象。也就是说准确答案是产生了一个或两个对象，如果常量池中原来没有 ”宜春” ,就是两个。...

技术大佬：我去，你写的 switch 语句也太老土了吧

昨天早上通过远程的方式 review 了两名新来同事的代码，大部分代码都写得很漂亮，严谨的同时注释也很到位，这令我非常满意。但当我看到他们当中有一个人写的 switch 语句时，还是忍不住破口大骂：“我擦，小王，你丫写的 switch 语句也太老土了吧！” 来看看小王写的代码吧，看完不要骂我装逼啊。 private static String createPlayer(PlayerTypes p...

和黑客斗争的 6 天！

互联网公司工作，很难避免不和黑客们打交道，我呆过的两家互联网公司，几乎每月每天每分钟都有黑客在公司网站上扫描。有的是寻找 Sql 注入的缺口，有的是寻找线上服务器可能存在的漏洞，大部分都...

讲一个程序员如何副业月赚三万的真实故事

loonggg读完需要3分钟速读仅需 1 分钟大家好，我是你们的校长。我之前讲过，这年头，只要肯动脑，肯行动，程序员凭借自己的技术，赚钱的方式还是有很多种的。仅仅靠在公司出卖自己的劳动时...

上班一个月，后悔当初着急入职的选择了

最近有个老铁，告诉我说，上班一个月，后悔当初着急入职现在公司了。他之前在美图做手机研发，今年美图那边今年也有一波组织优化调整，他是其中一个，在协商离职后，当时捉急找工作上班，因为有房贷供着，不能没有收入来源。所以匆忙选了一家公司，实际上是一个大型外包公司，主要派遣给其他手机厂商做外包项目。**当时承诺待遇还不错，所以就立马入职去上班了。但是后面入职后，发现薪酬待遇这块并不是HR所说那样，那个HR自...

女程序员，为什么比男程序员少？？？

昨天看到一档综艺节目，讨论了两个话题：（1）中国学生的数学成绩，平均下来看，会比国外好？为什么？（2）男生的数学成绩，平均下来看，会比女生好？为什么？同时，我又联想到了一个技术圈经常讨...

副业收入是我做程序媛的3倍，工作外的B面人生是怎样的？

提到“程序员”，多数人脑海里首先想到的大约是：为人木讷、薪水超高、工作枯燥…… 然而，当离开工作岗位，撕去层层标签，脱下“程序员”这身外套，有的人生动又有趣，马上展现出了完全不同的A/B面人生！不论是简单的爱好，还是正经的副业，他们都干得同样出色。偶尔，还能和程序员的特质结合，产生奇妙的“化学反应”。 @Charlotte：平日素颜示人，周末美妆博主大家都以为程序媛也个个不修边幅，但我们也许...

MySQL数据库面试题（2020最新版）

文章目录数据库基础知识为什么要使用数据库什么是SQL？什么是MySQL?数据库三大范式是什么mysql有关权限的表都有哪几个MySQL的binlog有有几种录入格式？分别有什么区别？数据类型mysql有哪些数据类型引擎MySQL存储引擎MyISAM与InnoDB区别MyISAM索引与InnoDB索引的区别？InnoDB引擎的4大特性存储引擎选择索引什么是索引？索引有哪些优缺点？索引使用场景（重点）...

如果你是老板，你会不会踢了这样的员工？

有个好朋友ZS，是技术总监，昨天问我：“有一个老下属，跟了我很多年，做事勤勤恳恳，主动性也很好。但随着公司的发展，他的进步速度，跟不上团队的步伐了，有点...

我入职阿里后，才知道原来简历这么写

私下里，有不少读者问我：“二哥，如何才能写出一份专业的技术简历呢？我总感觉自己写的简历太烂了，所以投了无数份，都石沉大海了。”说实话，我自己好多年没有写过简历了，但我认识的一个同行，他在阿里，给我说了一些他当年写简历的方法论，我感觉太牛逼了，实在是忍不住，就分享了出来，希望能够帮助到你。 01、简历的本质作为简历的撰写者，你必须要搞清楚一点，简历的本质是什么，它就是为了来销售你的价值主张的。往深...

玩转springboot启动banner定义所得

最近接手了一个springboot项目，不是不熟悉这个框架，启动时打印的信息吸引了我。这不是我熟悉的常用springboot的打印信息啊，我打开自己的项目：还真是的，不用默认的感觉也挺高大上的。一时兴起，就去研究了一下源代码，还正是有些收获，稍后我会总结一下。正常情况下做为一个老程序员，是不会对这种小儿科感兴趣的，不就是一个控制台打印嘛。哈哈！于是出于最初的好奇，研究了项目的源代码。看到

带了6个月的徒弟当了面试官，而身为高级工程师的我天天修Bug......

即将毕业的应届毕业生一枚，现在只拿到了两家offer，但最近听到一些消息，其中一个offer，我这个组据说客户很少，很有可能整组被裁掉。想问大家：如果我刚入职这个组就被裁了怎么办呢？大家都是什么时候知道自己要被裁了的？面试软技能指导: BQ/Project/Resume 试听内容：除了刷题，还有哪些技能是拿到offer不可或缺的要素如何提升面试软实力：简历, 行为面试，沟通能...

离职半年了，老东家又发 offer，回不回？

有小伙伴问松哥这个问题，他在上海某公司，在离职了几个月后，前公司的领导联系到他，希望他能够返聘回去，他很纠结要不要回去？俗话说好马不吃回头草，但是这个小伙伴既然感到纠结了，我觉得至少说明了两个问题：1.曾经的公司还不错；2.现在的日子也不是很如意。否则应该就不会纠结了。老实说，松哥之前也有过类似的经历，今天就来和小伙伴们聊聊回头草到底吃不吃。首先一个基本观点，就是离职了也没必要和老东家弄的苦...

男生更看重女生的身材脸蛋，还是思想？

往往，我们看不进去大段大段的逻辑。深刻的哲理，往往短而精悍，一阵见血。问：产品经理挺漂亮的，有点心动，但不知道合不合得来。男生更看重女生的身材脸蛋，还是...

为什么程序员做外包会被瞧不起？

二哥，有个事想询问下您的意见，您觉得应届生值得去外包吗？公司虽然挺大的，中xx，但待遇感觉挺低，马上要报到，挺纠结的。

当HR压你价，说你只值7K，你该怎么回答？

当HR压你价，说你只值7K时，你可以流畅地回答，记住，是流畅，不能犹豫。礼貌地说：“7K是吗？了解了。嗯~其实我对贵司的面试官印象很好。只不过，现在我的手头上已经有一份11K的offer。来面试，主要也是自己对贵司挺有兴趣的，所以过来看看……”（未完）这段话主要是陪HR互诈的同时，从公司兴趣，公司职员印象上，都给予对方正面的肯定，既能提升HR的好感度，又能让谈判气氛融洽，为后面的发挥留足空间。...

面试：第十六章：Java中级开发（16k）

HashMap底层实现原理，红黑树，B+树，B树的结构原理 Spring的AOP和IOC是什么？它们常见的使用场景有哪些？Spring事务，事务的属性，传播行为，数据库隔离级别 Spring和SpringMVC，MyBatis以及SpringBoot的注解分别有哪些？SpringMVC的工作原理，SpringBoot框架的优点，MyBatis框架的优点 SpringCould组件有哪些，他们...

面试阿里p7，被按在地上摩擦，鬼知道我经历了什么？

面试阿里p7被问到的问题(当时我只知道第一个)：@Conditional是做什么的?@Conditional多个条件是什么逻辑关系？条件判断在什么时候执...

终于懂了TCP和UDP协议区别

你打算用Java 8一辈子都不打算升级到Java 14，真香

我们程序员应该抱着尝鲜、猎奇的心态，否则就容易固步自封，技术停滞不前。

无代码时代来临，程序员如何保住饭碗？

编程语言层出不穷，从最初的机器语言到如今2500种以上的高级语言，程序员们大呼“学到头秃”。程序员一边面临编程语言不断推陈出新，一边面临由于许多代码已存在，程序员编写新应用程序时存在重复“搬砖”的现象。无代码/低代码编程应运而生。无代码/低代码是一种创建应用的方法，它可以让开发者使用最少的编码知识来快速开发应用程序。开发者通过图形界面中，可视化建模来组装和配置应用程序。这样一来，开发者直...

面试了一个 31 岁程序员，让我有所触动，30岁以上的程序员该何去何从？

最近面试了一个31岁8年经验的程序猿，让我有点感慨，大龄程序猿该何去何从。

大三实习生，字节跳动面经分享，已拿Offer

说实话，自己的算法，我一个不会，太难了吧

程序员垃圾简历长什么样？

已经连续五年参加大厂校招、社招的技术面试工作，简历看的不下于万份这篇文章会用实例告诉你，什么是差的程序员简历！疫情快要结束了，各个公司也都开始春招了，作为即将红遍大江南北的新晋UP主，那当然要为小伙伴们做点事（手动狗头）。就在公众号里公开征简历，义务帮大家看，并一一点评。《启舰：春招在即，义务帮大家看看简历吧》一石激起千层浪，三天收到两百多封简历。花光了两个星期的所有空闲时...

《经典算法案例》01-08：如何使用质数设计扫雷（Minesweeper）游戏

我们都玩过Windows操作系统中的经典游戏扫雷（Minesweeper），如果把质数当作一颗雷，那么，表格中红色的数字哪些是雷（质数）？您能找出多少个呢？文中用列表的方式罗列了10000以内的自然数、质数（素数），6的倍数等，方便大家观察质数的分布规律及特性，以便对算法求解有指导意义。另外，判断质数是初学算法，理解算法重要性的一个非常好的案例。

顺其自然做胖子