zfr / rbac
Zend Framework 3 prototype for Zend\Permissions\Rbac.
Installs: 1 072 435
Dependents: 6
Suggesters: 0
Security: 0
Stars: 27
Watchers: 6
Forks: 14
Open Issues: 1
Requires
- php: >=5.5
Requires (Dev)
- phpunit/phpunit: ~4.0
- squizlabs/php_codesniffer: 1.5.*
This package is auto-updated.
Last update: 2024-11-29 04:36:38 UTC
README
Rbac (not to be confused with ZfcRbac) is a pure PHP implementation of the RBAC (Role based access control) concept. Actually, it is a Zend Framework 3 prototype of the ZF2 Zend\Permissions\Rbac component.
It aims to fix some design mistakes that were made to make it more usable and more efficient.
It differs on those points:
RoleInterface
no longer havesetParent
andgetParent
methods, and cannot have children anymore (this is used to implement a simpler "flat RBAC").- A new
HierarchicalRoleInterface
has been introduced to allow roles to have children. - Method
hasPermission
on a role no longer recursively iterate the children role, but only check its own permissions. To properly check if a role is granted, you should use theisGranted
method of theRbac
class. Rbac
class is no longer a container. Instead, it just has aisGranted
method. The container was complex to properly handle because of role duplication, which could lead to security problems if not used correctly.
Version 1.0 of this library is used in ZfcRbac 2.0. Version 2.0 of this library is used in ZfcRbac 3.0.