use Zend_Acl in sample app to perform authorization checks on products, refs #1297