In your ACL plugin, you probably have something like
if (!$acl->isAllowed($role, $resource, $action)) $this->deny();
Set the $role to 'guest' if Zend_Auth::getInstance()->hasIdentity() is
false. But before that, make sure you don't flat out deny access if
hasIdentity() is false.
On Sat, Oct 25,
Yes i thought that setting a default role would be the best way to go - any
advice (or links) on how to do it?
--
View this message in context:
http://www.nabble.com/Setting-default-auth-object-tp20141150p20155405.html
Sent from the Zend Framework mailing list archive at Nabble.com.
You should be able to set up a guest role and assign that to any user not
logged in. Not sure how you've set up Zend_Auth and Zend_Acl, but thats what
we've been doing.
Every action we define in our projects has an ->allow() call even if
everyone is able to access it.
Tim
On Fri, Oct 24, 2008 a
Hello
I have a controller that displays the latest news on the index page on my
site. Obviously, its called newsController that has the action latestNews
(called from the view's action helper).
Now i am developing the admin side of the site, it makes sense that i put
the add/edit/delete actions