2009年11月4日星期三

Re: [fw-auth] Zend_Acl , Ownership - request scope or injection in domain objects

Where are you going to store the ACL - in a file most probably then isnt't going to slow down the application in event of high traffic i.e reading from the disk. I dont think using ACL for high traffic site is a good option. Looking at ZF's slow performance using ACL will act as icing on cake. Correct me if I am wrong and this reply is not to prove that what you're doing is wrong. Just sharing my thoughts.

On Fri, Oct 30, 2009 at 10:23 PM, Abraham Block <atblock@gmail.com> wrote:
A lot of people (me included), like to have their domain entities implement the ACL Role interface, and then have the ACL check directly against the domain entities in question. You can do this in a service layer, or perhaps with some kind of event system.


On Fri, Oct 30, 2009 at 12:37 PM, tomascejka <dis.cejkatomas@gmail.com> wrote:

Hi,

I stand before implementing authorization/ownership in ZF based application.
I am developer but now I ask you as developer and architect in one person. I
would like to know how to design authorization process. After I read some
sources - there are two articles which interest me.

A.
http://devzone.zend.com/article/3510-Zend_Acl-and-MVC-Integration-Part-II-Advanced-Use
B.
http://www.weierophinney.net/matthew/archives/201-Applying-ACLs-to-Models.html

Where is good location to check rights and ownership?




-----
Enviroment
==========

OS:
SUSE Linux Enterprice 10 (i586) - version 2.6.16.60-0.27-smp
Windows XP SP 3

Tomcat v6.0.16, 6.0.18
Java(TM) SE Runtime Enviroment (build 1.6.0-b105)
Java HotSpot(TM) Client VM (build 1.6.0-b105, mixed mode)
Maven v2.0.9
Apache 2.2.11
MySQL 5.1.30
PHP 5.2.10
qooxdoo-0.8.2
Python 2.5
Zend framework 1.9.3
Dojo 1.3.2

Hudson:
=======
version 1.329
plugins: Maven 1.304, SSH Slaves
running: deployed in Tomcat

front-end developer web-based application
A.S.E.I. [http://www.asei.cz]
--
View this message in context: http://old.nabble.com/Zend_Acl-%2C-Ownership---request-scope-or-injection-in-domain-objects-tp26133244p26133244.html
Sent from the Zend Auth mailing list archive at Nabble.com.



没有评论: