We ended up writing an extension to the ACL system to allow multiple roles. We wrote it so that deny takes precedence over allow.
Just subclassed Zend_Acl to Xx_Acl and overrode the isAllowed function to do a foreach() if there was more than one role.
Tim
没有评论:
发表评论