De lo mejor que he visto sobre Zend y PHPUnit.

Gracias por compartir su experiencia.

Un saludo desde España,

————————
Translator Google
————————
Awesome John!

The best I’ve seen on Zend and PHPUnit.

Thanks for sharing your experience.

A greeting from Spain

Regards :b

I’m against having that particular kind of information in a session, even though it is server side. Through hijacking or manipulation it is quite possible to change your own role and you could have a serious breach of security. My philosophy is to keep user information in the database and just save the userid and a secretkey in your session to authenticate and after authentication look up the information in the database for full security.

@video, even though I like how you explained the auth and acl, I do have some remarks on your code. First of all, I would not make a difference in user lookups (e.g. UserLookup and AdminLookup). A user is a user. The proces should be the same. Zend_Acl is there to differentiate users, the authentication is merely to authenticate.

I would also not, if I chose to separate the authentication for regular users and admin, make a interface, but rather a parent class or even an abstract class to obey the laws of DRY.

Even though I had remarks, great job on your video.

I agree too, i’m developed a solution like SousGarden using a helper to control ACL.

Make this using the native Zend_Acl would be nice!

That’s ugly.
I’m searching for a way to give a controller/action class a predefined resource like PUBLIC_PAGE and ADMIN_PAGE. That would make the work much more clean.

But how to get this. I use a preDispatch plugin, and at that point the controller isn’t initiated.

A good idea or help will be nice.

IMO,
If you plan to manage a different Role per User, then static Zend_ACL is not feasible. Because Zend_ACL uses the Roles Approach, which basically predefines a set of rules to be shared among many users.

I can’t imagine updating manually the Role’s file every time a user is added to the database !

So, creating a role per user could be insane using Zend_Acl

If you apply a role to many users (as it should be), then it’s just a matter of mapping the user to the specific role created with Zend_Acl.

The mapping could be done dynamically on the database. Just add a “role” column to the Users table. Then after the user logs in, having the role in session, you can check whether he has permissions or not whe he tries to access certain controllers/actions.

Jon,

A tutorial combining Zend_Auth with Zend_Acl focused on controlling access to Controllers/Actions will be great!

Are you referencing the Zend Framework or is it actually sitting in your library? If its in the actual NetBeans project than there shouldn’t be a problem, however I’ve moved to Zend Studio recently so I can’t comment on NB specifically. I might start using NB for some more videos in the next months. Thanks for the feedback

I’m just starting learning Zend Framework and your Zendcast are great very good job:) U can’t say it with one word

I have a couple of questions… i have some problems with “code Code Completions”. I’m using NetBeans and sometimes it complete code by hit Ctrl+Space, but very offen i get “no suggestions”. And i see that in this same steps in your ZC u have “Code Completions”.

I’m searching whole net to find something, but in NetBeans it isn’t support for ZF. And in Eclipse are some points for it. I saw many ppl have problems with it with half working code completions.

I’ll very glad if u have somewhere some solutions for it. IDE isn’t metter( but in margin: I prefer NB:)

Thank you for help.
Lukas

P.S.
Sorry for my bad english:) I believe u understand me

At first , thank’s to John for great struggle and hope to continue .

this is the link for this screen cast :

http://www.zendcasts.com/wp-content/uploads/2009/06/zc28-zend-acl-reflection-authentication-screen.mov

http://www.zendcasts.com/wp-content/uploads/2009/06/zc28-zend-acl-reflection-authentication-screen.mov

By the way, thank you Jon Lebensold for the nice video tutorials.