cakephp2-php8/cake/libs/controller/components/iniacl/ini_acl.php

<?php
/* SVN FILE: $Id$ */

/**
 * This is core configuration file.
 *
 * Use it to configure core behaviour ofCake.
 *
 * PHP versions 4 and 5
 *
 * CakePHP :  Rapid Development Framework <http://www.cakephp.org/>
 * Copyright (c) 2006, Cake Software Foundation, Inc.
 *                     1785 E. Sahara Avenue, Suite 490-204
 *                     Las Vegas, Nevada 89104
 *
 * Licensed under The MIT License
 * Redistributions of files must retain the above copyright notice.
 *
 * @filesource
 * @copyright    Copyright (c) 2006, Cake Software Foundation, Inc.
 * @link         http://www.cakefoundation.org/projects/info/cakephp CakePHP Project
 * @package      cake
 * @subpackage   cake.cake.libs.controller.componenets.iniacl
 * @since        CakePHP v 0.2.9
 * @version      $Revision$
 * @modifiedby   $LastChangedBy$
 * @lastmodified $Date$
 * @license      http://www.opensource.org/licenses/mit-license.php The MIT License
 */

uses('controller/components/acl_base');

/**
 * In this file you can extend the AclBase.
 *
 * @package    cake
 * @subpackage cake.cake.libs.controller.componenets.iniacl
 */

class INI_ACL extends AclBase
{
/**
 * The constructor must be overridden, as AclBase is abstract.
 *
 */
    function __construct()
    {

    }

/**
 * Main ACL check function. Checks to see if the ARO (access request object) has access to the ACO (access control object).
 * Looks at the acl.ini.php file for permissions (see instructions in/config/acl.ini.php).
 *
 * @param string $aro
 * @param string $aco
 * @return boolean
 */
    function check($aro, $aco, $aco_action = null)
    {
      $aclConfig = $this->readConfigFile(CONFIGS . 'acl.ini.php');

//First, if the user is specifically denied, then DENY
      if(isset($aclConfig[$aro]['deny']))
      {
         $userDenies = $this->arrayTrim(explode(",", $aclConfig[$aro]['deny']));
         if (array_search($aco, $userDenies))
         {
//echo "User Denied!";
            return false;
         }
      }

//Second, if the user is specifically allowed, then ALLOW
      if(isset($aclConfig[$aro]['allow']))
      {
         $userAllows = $this->arrayTrim(explode(",", $aclConfig[$aro]['allow']));
         if (array_search($aco, $userAllows))
         {
//echo "User Allowed!";
            return true;
         }
      }

//Check group permissions
      if (isset($aclConfig[$aro]['groups']))
      {
         $userGroups = $this->arrayTrim(explode(",", $aclConfig[$aro]['groups']));
         foreach ($userGroups as $group)
         {
//If such a group exists,
            if(array_key_exists($group, $aclConfig))
            {
//If the group is specifically denied, then DENY
                if(isset($aclConfig[$group]['deny']))
                {
                  $groupDenies = $this->arrayTrim(explode(",", $aclConfig[$group]['deny']));
                  if (array_search($aco, $groupDenies))
                  {
//echo("Group Denied!");
                     return false;
                  }
                }

//If the group is specifically allowed, then ALLOW
                if(isset($aclConfig[$group]['allow']))
                {
                  $groupAllows = $this->arrayTrim(explode(",", $aclConfig[$group]['allow']));
                  if (array_search($aco, $groupAllows))
                  {
//echo("Group Allowed!");
                     return true;
                  }
                }
            }
         }
      }

//Default, DENY
//echo("DEFAULT: DENY.");
      return false;
    }

/**
 * Parses an INI file and returns an array that reflects the INI file's section structure. Double-quote friendly.
 *
 * @param string $fileName
 * @return array
 */
    function readConfigFile ($fileName)
    {
        $fileLineArray = file($fileName);

        foreach ($fileLineArray  as $fileLine)
        {
            $dataLine = trim($fileLine);
            $firstChar = substr($dataLine, 0, 1);
            if ($firstChar != ';' && $dataLine != '')
            {
                if ($firstChar == '[' && substr($dataLine, -1, 1) == ']')
                {
                    $sectionName = preg_replace('/[\[\]]/', '', $dataLine);
                }
                else
                {
                    $delimiter = strpos($dataLine, '=');
                    if ($delimiter > 0)
                    {
                        $key = strtolower(trim(substr($dataLine, 0, $delimiter)));
                        $value = trim(substr($dataLine, $delimiter + 1));
                        if (substr($value, 0, 1) == '"' && substr($value, -1) == '"')
                        {
                            $value = substr($value, 1, -1);
                        }
                        $iniSetting[$sectionName][$key] = stripcslashes($value);
                    }
                    else
                    {
                      if(!isset($sectionName))
                      {
                         $sectionName = '';
                      }
                        $iniSetting[$sectionName][strtolower(trim($dataLine))]='';
                    }
                }
            }
            else
            {
            }
        }
        return $iniSetting;
    }

/**
 * Removes trailing spaces on all array elements (to prepare for searching)
 *
 * @param array $array
 * @return array
 */
    function arrayTrim($array)
    {
      foreach($array as $element) {
         $element = trim($element);
      }

//Adding this element keeps array_search from returning 0:
//0 is the first key, which may be correct, but 0 is interpreted as false.
//Adding this element makes all the keys be positive integers.
      array_unshift($array, "");
      return $array;
    }

}

?>