Docs @ zendframework/zf2-documentation#312

While this RBAC interface feels better designed and implemented than the ZF2 ACL module, I really do hope the SpiffySecurity firewall interface makes it into ZF2.

fnmatch() for route matches makes makes it very easy to use and a standard interface for 'Identities' (as implemented in SpiffySecurity) would provide a nice way to tie the less than stellar Zend\Authentication and ZfcUser components in with the rest of the framework.

$0.02.

I'm not sure where or how that would be implemented. Furthermore, shouldn't firewalls be restricted to userland code?

@HarryR Zend\Authentication and Zend\Permissions\Acl were designed from the outset to be standalone components that could work with or without the MVC. ACL is a very different paradigm than RBAC, and as such, it's neither better nor worse (the design is actually quite elegant, and one of the better ACL implementations I've seen. No I did not write it.).

I would prefer that RBAC follows the footsteps of Authentication and ACL, and be de-coupled from the MVC. If you want to implement something to do automated checks based on the current identity and/or route, the proper place to do that is at the integration layer -- in other words, a module.

This is ready for review.

Awesome -- thanks, @spiffyjr !