Search code examples
phpsecurityzend-framework2zend-aclzfc-rbac

Acl vs RBAC in ZF2

I want to incorporate a component of access control in my application, I saw that ZF2 offer: Zend /permissions/Acl and Zend /permissions/RBAC, I would like to know which is more efficient and secured , and what about Zfc-RBAC ? thank you .

Solution

  • It totally depends on your needs. Rbac is Access Control managed by permissions on merely roles, where Acl is a solution where you will be managing both resources and roles. The Rbac of Zend Framework 2 has some complexities that are going to be simplified in ZF3.

    If you consider using Rbac I would suggest to check zfc-rbac from zf-commons which is built on top of the prototype for ZF3's Rbac.

    Here on GitHub you can find zfc-rbac.

    If you consider Acl I would suggest to take a look at BjyAuthorize which can be found here