{"action":"created","issue":{"url":"https://api.github.com/repos/phalcon/cphalcon/issues/12004","repository_url":"https://api.github.com/repos/phalcon/cphalcon","labels_url":"https://api.github.com/repos/phalcon/cphalcon/issues/12004/labels{/name}","comments_url":"https://api.github.com/repos/phalcon/cphalcon/issues/12004/comments","events_url":"https://api.github.com/repos/phalcon/cphalcon/issues/12004/events","html_url":"https://github.com/phalcon/cphalcon/issues/12004","id":167024353,"number":12004,"title":"Acl inheritance wildcard","user":{"login":"KuLi","id":345592,"avatar_url":"https://avatars.githubusercontent.com/u/345592?v=3","gravatar_id":"","url":"https://api.github.com/users/KuLi","html_url":"https://github.com/KuLi","followers_url":"https://api.github.com/users/KuLi/followers","following_url":"https://api.github.com/users/KuLi/following{/other_user}","gists_url":"https://api.github.com/users/KuLi/gists{/gist_id}","starred_url":"https://api.github.com/users/KuLi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/KuLi/subscriptions","organizations_url":"https://api.github.com/users/KuLi/orgs","repos_url":"https://api.github.com/users/KuLi/repos","events_url":"https://api.github.com/users/KuLi/events{/privacy}","received_events_url":"https://api.github.com/users/KuLi/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2016-07-22T11:17:49Z","updated_at":"2016-07-22T20:06:57Z","closed_at":null,"body":"Hi, i inherit from role and check for a non existing resource i get deny on wildcard check.\r\n\r\nIn my case a guest can access payment with resource paypal. A user can access all from payment and also an admin and superadmin. The user can access the not existing resource but the admin can't. \r\n\r\nHere my testcase\r\n```php\r\n<?php\r\n\r\n$oAcl = new \\Phalcon\\Acl\\Adapter\\Memory();\r\n\r\n$oAcl->setDefaultAction(\\Phalcon\\Acl::DENY);\r\n\r\n$oRoleGuest = new \\Phalcon\\Acl\\Role(\"guest\");\r\n$oRoleUser = new \\Phalcon\\Acl\\Role(\"user\");\r\n$oRoleAdmin = new \\Phalcon\\Acl\\Role(\"admin\");\r\n$oRoleSuperAdmin = new \\Phalcon\\Acl\\Role(\"superadmin\");\r\n\r\n$oAcl->addRole($oRoleGuest);\r\n$oAcl->addRole($oRoleUser, $oRoleGuest);\r\n$oAcl->addRole($oRoleAdmin, $oRoleUser);\r\n$oAcl->addRole($oRoleSuperAdmin, $oRoleAdmin);\r\n\r\n$oAcl->addResource(\"payment\", array(\"paypal\", \"facebook\",));\r\n\r\n$oAcl->allow($oRoleGuest->getName(), \"payment\", \"paypal\");\r\n$oAcl->allow($oRoleGuest->getName(), \"payment\", \"facebook\");\r\n\r\n$oAcl->allow($oRoleUser->getName(), \"payment\", \"*\");\r\n\r\nvar_dump(\r\n    $oAcl->isAllowed($oRoleUser->getName(), \"payment\", \"notSet\"),\r\n    $oAcl->isAllowed($oRoleUser->getName(), \"payment\", \"*\"),\r\n    $oAcl->isAllowed($oRoleAdmin->getName(), \"payment\", \"notSet\"),\r\n    $oAcl->isAllowed($oRoleAdmin->getName(), \"payment\", \"*\")\r\n);\r\n```\r\n\r\nMy output\r\n```text\r\ntrue\r\n\r\ntrue\r\n\r\nfalse\r\n\r\ntrue\r\n```\r\n\r\nVersion 2.1.0 RC 1\r\n"},"comment":{"url":"https://api.github.com/repos/phalcon/cphalcon/issues/comments/234643084","html_url":"https://github.com/phalcon/cphalcon/issues/12004#issuecomment-234643084","issue_url":"https://api.github.com/repos/phalcon/cphalcon/issues/12004","id":234643084,"user":{"login":"Jurigag","id":10086991,"avatar_url":"https://avatars.githubusercontent.com/u/10086991?v=3","gravatar_id":"","url":"https://api.github.com/users/Jurigag","html_url":"https://github.com/Jurigag","followers_url":"https://api.github.com/users/Jurigag/followers","following_url":"https://api.github.com/users/Jurigag/following{/other_user}","gists_url":"https://api.github.com/users/Jurigag/gists{/gist_id}","starred_url":"https://api.github.com/users/Jurigag/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Jurigag/subscriptions","organizations_url":"https://api.github.com/users/Jurigag/orgs","repos_url":"https://api.github.com/users/Jurigag/repos","events_url":"https://api.github.com/users/Jurigag/events{/privacy}","received_events_url":"https://api.github.com/users/Jurigag/received_events","type":"User","site_admin":false},"created_at":"2016-07-22T20:06:57Z","updated_at":"2016-07-22T20:06:57Z","body":"Well created PR, but it's changing somehow internally how acl was working. Not sure if it will affect any app."}}
{"actor":{"display_login":"Jurigag"}}