Which is best for ACL?

[eluser]esra[/eluser]
I have not taken a close look at the Zend ACL code, but you should be able to adapt it to use database tables. Rather than creating roles and permissions in the controller, you would have to handle this in your database schema. You might be able to find some Zend mailing list threads where this is discussed.

To minimize controller code (better code reuse and better performance), you might think about using a factory (based on the factory design pattern) composed of get/set methods (&getSession;, &getUser;, &getRoles;, &getPermissions;, etc.). A factory class delegates resposibilities to other libraries without loading them until they are called. You could load the factory as a single library in your application controller (base controller) without loading the delegated libraries directly. The factory Get methods create an instance of the library objects, calling the delegated libraries only when necessary. Set methods called by the Get methods in the factory could handle your database queries.