Here's the simple skeleton for RESTful API in PHP. Look for TODO comments to plug the actions user checking there.
Obviously, there are no real actions or permission checking. It uses basic HTTP authorization and .htaccess
includes SSL enforcing directive and URL rewriting.
It's pretty simple but can be used to kick-start API implementation.
Download: