merging all changes done in sandbox for next release into the trunk

git-svn-id: https://svn.cakephp.org/repo/trunk/cake@1057 3807eeeb-6ff5-0310-8944-8be069107fe0
2025-09-04 18:42:40 +00:00 · 2005-10-03 04:48:00 +00:00 · 2005-10-03 04:48:00 +00:00 · d44a364285
commit d44a364285
parent ab1db2532e
169 changed files with 2739 additions and 2166 deletions
--- a/app/controllers/components/my_acl.php
+++ b/app/controllers/components/my_acl.php
@ -0,0 +1,185 @@
+<?php
+//////////////////////////////////////////////////////////////////////////
+// + $Id$
+// +------------------------------------------------------------------+ //
+// + Cake PHP : Rapid Development Framework <http://www.cakephp.org/> + //
+// + Copyright: (c) 2005, CakePHP Authors/Developers                  + //
+// +------------------------------------------------------------------+ //
+// + Licensed under The MIT License                                   + //
+//////////////////////////////////////////////////////////////////////////
+
+/**
+ *
+ * @filesource 
+ * @package cake
+ * @subpackage cake.app.helpers
+ * @version $Revision$
+ * @modifiedby $LastChangedBy$
+ * @lastmodified $Date$
+ */
+
+uses('acl_base');
+
+/**
+ * In this file you can extend the AclBase.
+ *
+ * @package cake
+ * @subpackage cake.app.apis
+ */
+
+class MyACL extends AclBase 
+{
+   /**
+    * The constructor must be overridden, as AclBase is abstract.
+    *
+    */
+   function __construct()
+   {
+      
+   }
+   
+   /**
+    * Main ACL check function. Checks to see if the ARO (access request object) has access to the ACO (access control object).
+    * Looks at the acl.ini.php file for permissions (see instructions in /config/acl.ini.php).
+    *
+    * @param string $aro
+    * @param string $aco
+    * @return boolean
+    */
+   function check($aro, $aco)
+   {
+      $aclConfig = $this->readConfigFile(CONFIGS . 'acl.ini.php');
+      
+      //First, if the user is specifically denied, then DENY
+      if(isset($aclConfig[$aro]['deny']))
+      {
+         $userDenies = $this->arrayTrim(explode(",", $aclConfig[$aro]['deny']));
+         if (array_search($aco, $userDenies))
+         {
+            //echo "User Denied!";
+            return false;
+         }
+      }
+      
+      //Second, if the user is specifically allowed, then ALLOW
+      if(isset($aclConfig[$aro]['allow']))
+      {
+         $userAllows = $this->arrayTrim(explode(",", $aclConfig[$aro]['allow']));
+         if (array_search($aco, $userAllows))
+         {
+            //echo "User Allowed!";
+            return true;
+         }
+      }
+      
+      //Check group permissions
+      if (isset($aclConfig[$aro]['groups']))
+      {
+         $userGroups = $this->arrayTrim(explode(",", $aclConfig[$aro]['groups']));
+         foreach ($userGroups as $group)
+         {
+            //If such a group exists,
+            if(array_key_exists($group, $aclConfig))
+            {
+               //If the group is specifically denied, then DENY
+               if(isset($aclConfig[$group]['deny']))
+               {
+                  $groupDenies = $this->arrayTrim(explode(",", $aclConfig[$group]['deny']));
+                  if (array_search($aco, $groupDenies))
+                  {
+                     //echo("Group Denied!");
+                     return false;
+                  }
+               }
+      
+               //If the group is specifically allowed, then ALLOW
+               if(isset($aclConfig[$group]['allow']))
+               {
+                  $groupAllows = $this->arrayTrim(explode(",", $aclConfig[$group]['allow']));
+                  if (array_search($aco, $groupAllows))
+                  {
+                     //echo("Group Allowed!");
+                     return true;
+                  }
+               }
+            }
+         }
+      }
+      
+      //Default, DENY
+      //echo("DEFAULT: DENY.");
+      return false;
+   }
+   
+   /**
+    * Parses an INI file and returns an array that reflects the INI file's section structure. Double-quote friendly.
+    *
+    * @param string $fileName
+    * @return array
+    */
+   function readConfigFile ($fileName)
+   {
+   	$fileLineArray = file($fileName);
+   
+   	foreach ($fileLineArray  as $fileLine)
+   	{
+   		$dataLine = trim($fileLine);
+   		$firstChar = substr($dataLine, 0, 1);
+   		if ($firstChar != ';' && $dataLine != '')
+   		{
+   			if ($firstChar == '[' && substr($dataLine, -1, 1) == ']')
+   			{
+   				$sectionName = preg_replace('/[\[\]]/', '', $dataLine);
+   			}
+   			else
+   			{
+   				$delimiter = strpos($dataLine, '=');
+   				if ($delimiter > 0)
+   				{
+   					$key = strtolower(trim(substr($dataLine, 0, $delimiter)));
+   					$value = trim(substr($dataLine, $delimiter + 1));
+   					if (substr($value, 0, 1) == '"' && substr($value, -1) == '"')
+   					{
+   						$value = substr($value, 1, -1);
+   					}
+   					$iniSetting[$sectionName][$key] = stripcslashes($value);
+   				}
+   				else
+   				{
+   				   if(!isset($sectionName))
+   				   {
+   				      $sectionName = '';
+   				   }
+   					$iniSetting[$sectionName][strtolower(trim($dataLine))]='';
+   				}
+   			}
+   		}
+   		else
+   		{
+   		}
+   	}
+   	return $iniSetting;
+   }
+   
+   /**
+    * Removes trailing spaces on all array elements (to prepare for searching)
+    *
+    * @param array $array
+    * @return array
+    */
+   function arrayTrim($array)
+   {
+      foreach($array as $element) {
+         $element = trim($element);
+      }
+      
+      //Adding this element keeps array_search from returning 0:
+      //0 is the first key, which may be correct, but 0 is interpreted as false.
+      //Adding this element makes all the keys be positive integers.
+      array_unshift($array, "");
+      return $array;
+   }
+
+}
+
+?>