I want to incorporate a component of access control in my application, I saw that ZF2 offer: Zend /permissions/Acl
and Zend /permissions/RBAC
, I would like to know which is more efficient and secured , and what about Zfc-RBAC
?
thank you .
It totally depends on your needs. Rbac
is Access Control managed by permissions on merely roles, where Acl
is a solution where you will be managing both resources and roles. The Rbac of Zend Framework 2 has some complexities that are going to be simplified in ZF3.
If you consider using Rbac I would suggest to check zfc-rbac
from zf-commons
which is built on top of the prototype for ZF3's Rbac.
Here on GitHub you can find zfc-rbac
.
If you consider Acl I would suggest to take a look at BjyAuthorize
which can be found here