17.16. Summary

In this chapter we have implemented the Role Demo website which demonstrates how to use roles and permissions in ZF3.

A role is basically a group of users. A user may be assigned with one or several roles at once.

A role may be assigned one or more permissions. A permission is a single action in the system.

A dynamic assertion is an additional rule associated with the permission.

Roles may be organised into an hierarchy, when parent roles inherit permissions from their child roles.