Beispiel #1
0
 protected function seoGUI()
 {
     if (!K_Access::acl()->isAllowed(K_Auth::getRoles(), 'admin/tree/updateseo', true)) {
         return false;
     }
     $this->tabs['seo'] = 'SEO';
     $this->view->node = $this->nodeData;
     return $this->x_render('seo', $this);
 }
Beispiel #2
0
 public function indexAction()
 {
     $auth_error = false;
     //Если авторизован отпровляем в админку
     if (K_Access::acl()->isAllowed(K_Auth::getRoles(), 'admin')) {
         K_Request::redirect("/admin");
     }
     if (isset($_POST['btnauth'])) {
         $login = K_Arr::get($_POST, 'login', false);
         if ($login and strlen($login) < 100) {
             $password = K_Arr::get($_POST, 'password', false);
             if ($password) {
                 $password_hash = md5(md5($password . K_Registry::get('Configure.salt')));
                 $user_model = new Admin_Model_User();
                 $user_arr = $user_model->find(K_Db_Select::create()->fields('user_id, user_name, user_login , user_email')->where(array('and' => array('user_login' => $login, "user_password" => $password_hash)))->limit(1));
                 if (is_array($user_arr) && count($user_arr)) {
                     $user = $user_arr[0]->toArray();
                     $user_role = new Admin_Model_UserRole();
                     // находим все роли пользователя
                     $user_roles_arr = $user_role->fetchAssoc('role_acl_key', 'SELECT r.role_acl_key FROM (`users_roles`)inner join `role` as r on usrol_role_id=r.role_id  WHERE usrol_user_id = "' . $user['user_id'] . '"');
                     foreach ($user_roles_arr as $v) {
                         $user_roles[] = $v["role_acl_key"];
                     }
                     //Загружаем роли в класc авторизации
                     // var_dump ($user);
                     //даже если у пользователя нет ролей даём ему роль guests
                     if (!isset($user_roles)) {
                         $user_roles = array('guests');
                     }
                     K_Auth::authorize($user, $user_roles);
                     K_Request::redirect("/admin");
                 } else {
                     $auth_error = true;
                 }
             } else {
                 $auth_error = true;
             }
         } else {
             $auth_error = true;
         }
     }
     $this->view->error_msg = '';
     if ($auth_error) {
         $this->view->error_msg = "Ошибка авторизации, неверный логин или пароль";
     }
 }
Beispiel #3
0
 public static function accessSite($res, $privilege = 'view')
 {
     $access = self::accessSiteCheck($res, $privilege);
     if (!$access) {
         if (isset(self::$lastKnowResourse)) {
             $denyAction = K_Access::acl()->getDeneyAction(self::$lastKnowResourse);
             if ($denyAction) {
                 if ($resourse != $denyAction) {
                     K_Request::redirect($denyAction);
                 }
             } else {
                 if ($resourse != 'default/index/index') {
                     K_Request::redirect('/');
                 }
             }
         } else {
             if ($resourse != 'default/index/index') {
                 K_Request::redirect('/');
             }
         }
     }
 }