Zend Framework 2 Permissions extras

0.1.0 2015-03-03 13:29 UTC

This package is not auto-updated.

Last update: 2021-01-08 22:02:17 UTC


Build Status

Adds extra functionality for Component_ZendPermissionsRbac and Component_ZendPermissionsAcl


Install composer in your project:

curl -s https://getcomposer.org/installer | php

Create a composer.json file in your project root:

    "require": {
        "kanellov/zf2-permissions": "dev-master"

Install via composer:

php composer.phar install

Add this line to your application’s index.php file:

require 'vendor/autoload.php';

System Requirements

You need PHP >= 5.3.23.

Acl Callback Assertions

use Zend\Permissions\Acl\Acl;
use Knlv\Zf2\Permissions\Acl\Assertion\Callback;

$validIps = array(,
$acl = new Acl();
$assertion = new Callback(function ($acl, $role, $resource, $privilege) use ($validIps) {
    return in_array($_SERVER['REMOTE_ADDR'], $validIps);
$acl->allow(null, null, null, $assertion);

See also Writing Conditional ACL Rules with Assertions

Rbac Callback Assertions

use Zend\Permissions\Rbac\Rbac;
use Knlv\Zf2\Permissions\Rbac\Assertion\Callback;

// User is assigned the foo role with id 5
// News article belongs to userId 5
// Jazz article belongs to userId 6

$rbac = new Rbac();
$user = $mySessionObject->getUser();
$news = $articleService->getArticle(5);
$jazz = $articleService->getArticle(6);


$assertionCb = function ($user, $article) {
    return function ($rbac) use ($user, $article) {
        return $user->getId() == $article->getUserId();

// true always - bad!
if ($rbac->isGranted($user->getRole(), 'edit.article')) {
    // hacks another user's article

$assertion = new Callback($assertionCb($user, $news));

// true for user id 5, because he belongs to write group and user id matches
if ($rbac->isGranted($user->getRole(), 'edit.article', $assertion)) {
    // edits his own article

$assertion = new Callback($assertionCb($user, $jazz));

// false for user id 5
if ($rbac->isGranted($user->getRole(), 'edit.article', $assertion)) {
    // can not edit another user's article

See also: Dynamic Assertions