Fix phalcon#12004

CHANGELOG.md

@@ -106,7 +106,8 @@
 - Fixed `Phalcon\Forms\Form::getValue`. Now Elements can have names that match with the internal Form getters [#10398](https://github.com/phalcon/cphalcon/issues/10398)
 - Add `setContentLength()` method to `Phalcon\Http\Response`
 - Fixed `Phalcon\Mvc\Model\Manager::_mergeFindParameters` - Merging conditions [#11987](https://github.com/phalcon/cphalcon/issues/11987)
-- Renamed `Phalcon\Http\Request::isSoapRequest` to `Phalcon\Http\Request::isSoap` and `Phalcon\Http\Request::isSecureRequest` to `Phalcon\Http\Request::isSecure`. Left the originals functions as aliases and marked them deprecated. 
+- Renamed `Phalcon\Http\Request::isSoapRequest` to `Phalcon\Http\Request::isSoap` and `Phalcon\Http\Request::isSecureRequest` to `Phalcon\Http\Request::isSecure`. Left the originals functions as aliases and marked them deprecated.
+- Fixed wildcard inheritance in `Phalcon\Acl\Adapter\Memory` [#12004](https://github.com/phalcon/cphalcon/issues/12004)
 
 # [2.0.13](https://github.com/phalcon/cphalcon/releases/tag/phalcon-v2.0.13) (2016-05-19)
 - Restored `Phalcon\Text::camelize` behavior [#11767](https://github.com/phalcon/cphalcon/issues/11767)

phalcon/acl/adapter/memory.zep

@@ -371,7 +371,7 @@ class Memory extends Adapter
 	 */
 	protected function _allowOrDeny(string roleName, string resourceName, var access, var action, var func = null)
 	{
-		var defaultAccess, accessList, accessName, accessKey, accessKeyAll, internalAccess;
+		var accessList, accessName, accessKey;
 
 		if !isset this->_rolesNames[roleName] {
 			throw new Exception("Role '" . roleName . "' does not exist in ACL");
@@ -381,9 +381,7 @@ class Memory extends Adapter
 			throw new Exception("Resource '" . resourceName . "' does not exist in ACL");
 		}
 
-		let defaultAccess = this->_defaultAccess;
 		let accessList = this->_accessList;
-		let internalAccess = this->_access;
 
 		if typeof access == "array" {
 
@@ -401,13 +399,6 @@ class Memory extends Adapter
 				if func != null {
 				    let this->_func[accessKey] = func;
 				}
-
-				if accessName != "*" {
-					let accessKeyAll = roleName . "!" . resourceName . "!*";
-					if !isset internalAccess[accessKeyAll] {
-						let this->_access[accessKeyAll] = defaultAccess;
-					}
-				}
 			}
 
 		} else {
@@ -429,18 +420,6 @@ class Memory extends Adapter
 				let this->_func[accessKey] = func;
 			}
 
-			if access != "*" {
-				let accessKey = roleName . "!" . resourceName . "!*";
-
-				/**
-				 * If there is no default action for all the rest actions in the resource set the
-				 * default one
-				 */
-				if !isset internalAccess[accessKey] {
-					let this->_access[accessKey] = this->_defaultAccess;
-				}
-			}
-
 		}
 	}
 
@@ -666,7 +645,7 @@ class Memory extends Adapter
 		}
 
 		if haveAccess == null {
-			return false;
+			return (this->_defaultAccess == Acl::ALLOW);
 		}
 
 		/**