mirror of
https://github.com/kamilwylegala/cakephp2-php8.git
synced 2024-12-29 00:41:33 +00:00
157 lines
4.6 KiB
PHP
157 lines
4.6 KiB
PHP
<?php
|
|
/**
|
|
* PHP 5
|
|
*
|
|
* CakePHP(tm) : Rapid Development Framework (http://cakephp.org)
|
|
* Copyright 2005-2011, Cake Software Foundation, Inc. (http://cakefoundation.org)
|
|
*
|
|
* Licensed under The MIT License
|
|
* Redistributions of files must retain the above copyright notice.
|
|
*
|
|
* @copyright Copyright 2005-2011, Cake Software Foundation, Inc. (http://cakefoundation.org)
|
|
* @link http://cakephp.org CakePHP(tm) Project
|
|
* @license MIT License (http://www.opensource.org/licenses/mit-license.php)
|
|
*/
|
|
|
|
/**
|
|
* Abstract base authorization adapter for AuthComponent.
|
|
*
|
|
* @package Cake.Controller.Component.Auth
|
|
* @since 2.0
|
|
* @see AuthComponent::$authenticate
|
|
*/
|
|
abstract class BaseAuthorize {
|
|
/**
|
|
* Controller for the request.
|
|
*
|
|
* @var Controller
|
|
*/
|
|
protected $_Controller = null;
|
|
|
|
/**
|
|
* Component collection instance for getting more components.
|
|
*
|
|
* @var ComponentCollection
|
|
*/
|
|
protected $_Collection;
|
|
|
|
/**
|
|
* Settings for authorize objects.
|
|
*
|
|
* - `actionPath` - The path to ACO nodes that contains the nodes for controllers. Used as a prefix
|
|
* when calling $this->action();
|
|
* - `actionMap` - Action -> crud mappings. Used by authorization objects that want to map actions to CRUD roles.
|
|
* - `userModel` - Model name that ARO records can be found under. Defaults to 'User'.
|
|
*
|
|
* @var array
|
|
*/
|
|
public $settings = array(
|
|
'actionPath' => null,
|
|
'actionMap' => array(
|
|
'index' => 'read',
|
|
'add' => 'create',
|
|
'edit' => 'update',
|
|
'view' => 'read',
|
|
'delete' => 'delete',
|
|
'remove' => 'delete'
|
|
),
|
|
'userModel' => 'User'
|
|
);
|
|
|
|
/**
|
|
* Constructor
|
|
*
|
|
* @param ComponentCollection $collection The controller for this request.
|
|
* @param string $settings An array of settings. This class does not use any settings.
|
|
*/
|
|
public function __construct(ComponentCollection $collection, $settings = array()) {
|
|
$this->_Collection = $collection;
|
|
$controller = $collection->getController();
|
|
$this->controller($controller);
|
|
$this->settings = Set::merge($this->settings, $settings);
|
|
}
|
|
|
|
/**
|
|
* Checks user authorization.
|
|
*
|
|
* @param array $user Active user data
|
|
* @param CakeRequest $request
|
|
* @return boolean
|
|
*/
|
|
abstract public function authorize($user, CakeRequest $request);
|
|
|
|
/**
|
|
* Accessor to the controller object.
|
|
*
|
|
* @param mixed $controller null to get, a controller to set.
|
|
* @return mixed
|
|
* @throws CakeException
|
|
*/
|
|
public function controller($controller = null) {
|
|
if ($controller) {
|
|
if (!$controller instanceof Controller) {
|
|
throw new CakeException(__d('cake_dev', '$controller needs to be an instance of Controller'));
|
|
}
|
|
$this->_Controller = $controller;
|
|
return true;
|
|
}
|
|
return $this->_Controller;
|
|
}
|
|
|
|
/**
|
|
* Get the action path for a given request. Primarily used by authorize objects
|
|
* that need to get information about the plugin, controller, and action being invoked.
|
|
*
|
|
* @param CakeRequest $request The request a path is needed for.
|
|
* @param string $path
|
|
* @return string the action path for the given request.
|
|
*/
|
|
public function action($request, $path = '/:plugin/:controller/:action') {
|
|
$plugin = empty($request['plugin']) ? null : Inflector::camelize($request['plugin']) . '/';
|
|
return str_replace(
|
|
array(':controller', ':action', ':plugin/'),
|
|
array(Inflector::camelize($request['controller']), $request['action'], $plugin),
|
|
$this->settings['actionPath'] . $path
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Maps crud actions to actual action names. Used to modify or get the current mapped actions.
|
|
*
|
|
* Create additional mappings for a standard CRUD operation:
|
|
*
|
|
* {{{
|
|
* $this->Auth->mapActions(array('create' => array('add', 'register'));
|
|
* }}}
|
|
*
|
|
* Create mappings for custom CRUD operations:
|
|
*
|
|
* {{{
|
|
* $this->Auth->mapActions(array('my_action' => 'admin'));
|
|
* }}}
|
|
*
|
|
* You can use the custom CRUD operations to create additional generic permissions
|
|
* that behave like CRUD operations. Doing this will require additional columns on the
|
|
* permissions lookup. When using with DbAcl, you'll have to add additional _admin type columns
|
|
* to the `aros_acos` table.
|
|
*
|
|
* @param mixed $map Either an array of mappings, or undefined to get current values.
|
|
* @return mixed Either the current mappings or null when setting.
|
|
* @see AuthComponent::mapActions()
|
|
*/
|
|
public function mapActions($map = array()) {
|
|
if (empty($map)) {
|
|
return $this->settings['actionMap'];
|
|
}
|
|
$crud = array('create', 'read', 'update', 'delete');
|
|
foreach ($map as $action => $type) {
|
|
if (in_array($action, $crud) && is_array($type)) {
|
|
foreach ($type as $typedAction) {
|
|
$this->settings['actionMap'][$typedAction] = $action;
|
|
}
|
|
} else {
|
|
$this->settings['actionMap'][$action] = $type;
|
|
}
|
|
}
|
|
}
|
|
}
|