protected function _getValidAco(Zend_Acl $aco, $context) { foreach ($aco->getChildren() as $node) { if (!$this->canAccess($node, $context)) { $aco->remove($node->getPath()); } } return $aco; }