ZF2中的Acl与RBAC

Question

I want to incorporate a component of access control in my application, I saw that ZF2 offer: Zend /permissions/Acl and Zend /permissions/RBAC, I would like to know which is more efficient and secured , and what about Zfc-RBAC ? thank you .

Answer 1

It totally depends on your needs. Rbac is Access Control managed by permissions on merely roles, where Acl is a solution where you will be managing both resources and roles. The Rbac of Zend Framework 2 has some complexities that are going to be simplified in ZF3.

If you consider using Rbac I would suggest to check zfc-rbac from zf-commons which is built on top of the prototype for ZF3's Rbac.

Here on GitHub you can find zfc-rbac.

If you consider Acl I would suggest to take a look at BjyAuthorize which can be found here