PHP：访问控制机制的体系结构

I have a PHP application which has an access control mechanism based on the navigation-id's of the single pages. So a user may have access to pages 1, 4, 5, for example. Navigation-id's are not static, new pages (and therefore new nav-id's) may be generated by admin-user. And I have some kind of a service oriented architecture. So I have services which are called from the client by JSON but also from server-side by PHP-classes (controllers) directly. The problem I have is, I need a access control mechanism for the services. And I'd like to have it separated from the services itself.I have a PHP application which has an access co