Zend Framework之Zend_Auth,Zend_Acl实现用户的授权和操作

index.php:

<?php

error_reporting(E_ALL|E_STRICT);

date_default_timezone_set(‘Asia/Shanghai’);

set_include_path(‘.’ .PATH_SEPARATOR .’./library’.PATH_SEPARATOR .’./application/models/’.PATH_SEPARATOR . get_include_path());

require_once ‘Zend/Loader.php';

Zend_Loader::registerAutoload();//设置Zend Framework 自动载入类文件

$registry = Zend_Registry::getInstance();

$view = new Zend_View();

$view->setScriptPath(‘./application/views/scripts/’);//设置模板显示路径

$registry['view'] = $view;//注册View

//初始化访问控制连

$acl = new Zend_Acl;

$acl->add(new Zend_Acl_Resource(‘video’));

$acl->add(new Zend_Acl_Resource(‘notices’));

//上面对应我的两个module，一个video,一个notices

$acl->addRole(new Zend_Acl_Role(‘guest’));

$acl->addRole(new Zend_Acl_Role(‘user’), ‘guest’);

$acl->addRole(new Zend_Acl_Role(‘staff’), ‘user’);//继承关系staff,user,guest

$acl->addRole(new Zend_Acl_Role(‘admin’));

$acl->allow(‘guest’, array(‘video’, ‘notices’), ‘view’);//guest只有view权利

$acl->allow(‘user’, array(‘video’), array(‘reply’, ‘download’));

$acl->allow(‘staff’, array(‘video’, ‘notices’), array(‘delete’, ‘update’));

$acl->allow(‘admin’);

//验证权限,如果没有登录则以游客身份登录

$auth = Zend_Auth::getInstance();

if(!$auth->hasIdentity())

{

$auth->getStorage()->write((object)array(‘username’ => ‘Guest’,

‘role’ => ‘guest’,

‘truename’ => ‘游客’

));

}

$router = new Zend_Controller_Router_Rewrite();

//$router->addRoute(‘root’,new Zend_Controller_Router_Route(‘/’,array(‘module’ =>’News’, ‘controller’ => ‘Index’, ‘Action’ => ‘index’))); //也是给出默认控制器的

//设置控制器

$frontController =Zend_Controller_Front::getInstance();

$frontController->setBaseUrl(‘/zendframework’)//设置基本路径

->setParam(‘noViewRenderer’, true)

->setRouter($router)//1

->setParam(‘Zend_Acl’, $acl)//2

->setParam(‘Zend_Auth’, $auth)//3

->returnResponse(false)//4

->setControllerDirectory(‘./application/controllers’)

->throwExceptions(true)

->dispatch();

IndexController.php:

<?php

header(‘Content-Type: text/html; charset=utf-8′);

class IndexController extends Zend_Controller_Action

{

function init()

{

$this->registry = Zend_Registry::getInstance();

$this->view = $this->registry['view'];

$this->view->baseUrl = $this->_request->getBaseUrl();

}

function indexAction()

{

$acl = $this->getInvokeArg(‘Zend_Acl’);

$role = $this->getInvokeArg(‘Zend_Auth’)->getStorage()->read()->role;//取得角色

if(!$acl->isAllowed($role, ‘video’, ‘download’))//判断用户有没有电影的下载权利

$this->getResponse()->appendBody($role.’没有video的下载权利,’.$role.’为游客登录!’);

else

$this->getResponse()->appendBody($role.’有权下载电影.合法访问’);

}

}