ACL for php applications

I have a question about ACL implementation.

Is it good to maintain the ACL rules in DB? or we can create the ACL rules at file level (in one of the file) and read it from there.

As i was reading about the ACL implementation in CakePHP & other frameworks. They use both as per the requirement.

I think maintaing the rules in one file & checking it there is more feasible & faster way to retrive & maintain the complexity of the system where we have more than 200 url actions to control.

Is it right way to follow?

Solution

Question comes down to how big your system is, how many users do you have, how many different functions do you have, etc. I would recommend doing it the database way, it can be tedious but it allows you to grow and there are many plugins out there that make ACL a lot easier to manage, i.e. http://www.alaxos.net/blaxos/pages/view/plugin_acl_2.0

When did C allow casting constants and variables to struct for assignment?
Why in C can I initialize more values than the size of an array?
What Values of Variables x and y Will Produce Incorrect Results When Testing for Overflow After Subtraction of x-y in the Following Program?
How to write a general-type queue library in c?
Which gcc and g++ version support which standard of c and c++?
How to dereference a member in a struct whose definition is not visible?
How to name a type in a meaningful way?
In this case, how to achieve modularity and information hiding at the same time?
What are Vectors and < > in C?
Using c to create a file and write+read to it, what went wrong?
Why does 1.0/100.0 == 0.1/10.0 give True?
How to organize the receive msg and user current input in C network such that it's clean
Using inclusive scan syntax in OpenMP in the C language
Unable to understand context in book "OOP in C" by Axel Schreiner
variable-length array in struct with TI compiler in C (socket programming)
A faster way to test 32bpp DDBs for a valid Alpha channel
How can I compile the zephyr example-application as a freestanding application?
Why does my forked process sometimes overwrite data in a file?
_Generic in C needs typecasting?
Declaring/defining an unused variable changes the output from an unrelated variable
How to use gdb to explore the stack/heap?
How can I read an input string of unknown length?
Confused by difference between expression inside if and expression outside if
Fast Arc Cos algorithm?
Discrepancy of `unsigned long` size between llvm and gcc in riscv32
GCC (C) - error: 'x' redeclared as different kind of symbol
Why does GCC’s static analyser falsely warn that a pointer to an allocated memory block itself stored in an allocated memory block may leak?
c language gcc compiler *.i file #3 "" 2 what is this?
How to make clang compile to llvm IR
Hashtable implementation in C