在父控制器中重定向

Question

in my ZF2 (2.4.5) project I have main (parent) controller with function to validate user rights so every inherited controller can easily acces it. However there's a problem with redirect. I know that inherited controller's action has to return response, but is it possible to force redirection in parent controller?

Parent controller

<?php

namespace Application;

use Zend\Mvc\Controller\AbstractActionController;

class CoreController extends AbstractActionController{

    public function checkAccess($moduleName, $accessName){
        if($this->getAclService()->isAllowed($moduleName, $accessName)){
            self::redirect()->toRoute('access-denied');
        }
    }
}

Inherited controller

namespace Application\Controller;

use Application\CoreController;
use Zend\View\Model\ViewModel;

class InterfaceController extends CoreController{

    public function indexAction(){

        $this->checkAccess('Foo', 'Bar');

        return new ViewModel([

        ]);
    }
}

TL;DR If I call $this->checkAccess('Foo', 'Bar'); in InterfaceController and $this->getAclService()->isAllowed($moduleName, $accessName) in CoreController returns false I want to redirect user to route 'access-denied' immediately without completing rest of InterfaceController::indexAction

Important: I want to avoid checking what checkAccess returns, I just force redirection.

Thanks in advance for response.

Answer 1

Ok I did this using global exception handler

Child controller

<?php

namespace Warehouse\Controller;

use Application\CoreController;
use Zend\View\Model\ViewModel;

class IndexController extends CoreController {

    public function getWarehouseDocumentAction() {
        parent::checkAccess('Warehouse', 'incoming-goods');

        return new ViewModel([
            'foo' => 'bar',
        ]);
    }

}

Parent controller

namespace Application;

use Application\Exception\InsufficientPermissionException;
use Zend\Mvc\Controller\AbstractActionController;

class CoreController extends AbstractActionController {

    public function checkAccess($moduleName, $accessName){
        if(!$this->getServiceLocator()->get(MyAcl::class)->isAllowed($moduleName, $accessName, $this->identity())){
            throw new InsufficientPermissionException('Access denied. Insufficient permission.');
        }
    }
}

Module.php

<?php

namespace Application;

use Application\Exception\InsufficientPermissionException;
use Application\Monolog\Handler\DoctrineLogMessageHandler;
use Zend\Mvc\MvcEvent;

class Module {

    public function onBootstrap(MvcEvent $e) {

        $sharedEvents = $e->getApplication()->getEventManager()->getSharedManager();

        $sharedEvents->attach('Zend\Mvc\Application', 'dispatch.error', function (MvcEvent $event) {
            if (php_sapi_name() !== 'cli') {
                $exception = $event->getParam('exception');
                if ($exception instanceof InsufficientPermissionException) {
                    $target = $event->getTarget();
                    return $target->redirect()->toRoute('access-denied');
                }
            }
        });

    }
}

Permissions are held in database.