/**
* Compatibility class for old implementation
*
* @param string $extension
* @param string $controller
* @param string $action
* @param array $parameters
* @return boolean
* @deprecated
*/
public function hasAccess($action, $controller, $extension, $parameters = array())
{
$user = common_session_SessionManager::getSession()->getUser();
$uri = funcAcl_models_classes_ModuleAccessService::singleton()->makeEMAUri($extension, $controller);
$controllerClassName = funcAcl_helpers_Map::getControllerFromUri($uri);
return self::accessPossible($user, $controllerClassName, $action);
}
/**
* Short description of method remove
*
* @access public
* @author Jehan Bihin, <*****@*****.**>
* @param string roleUri
* @param string accessUri
* @return mixed
*/
public function remove($roleUri, $accessUri)
{
$uri = explode('#', $accessUri);
list($type, $ext, $mod, $act) = explode('_', $uri[1]);
$role = new core_kernel_classes_Class($roleUri);
$actionAccessProperty = new core_kernel_classes_Property(funcAcl_models_classes_AccessService::PROPERTY_ACL_GRANTACCESS);
$module = new core_kernel_classes_Resource($this->makeEMAUri($ext, $mod));
$controllerClassName = funcAcl_helpers_Map::getControllerFromUri($module->getUri());
// access via controller?
$controllerAccess = funcAcl_helpers_Cache::getControllerAccess($controllerClassName);
if (in_array($roleUri, $controllerAccess['module'])) {
// remove access to controller
funcAcl_models_classes_ModuleAccessService::singleton()->remove($roleUri, $module->getUri());
// add access to all other actions
foreach (funcAcl_helpers_Model::getActions($module) as $action) {
if ($action->getUri() != $accessUri) {
$this->add($roleUri, $action->getUri());
$this->getEventManager()->trigger(new AccessRightAddedEvent($roleUri, $action->getUri()));
}
}
} elseif (isset($controllerAccess['actions'][$act]) && in_array($roleUri, $controllerAccess['actions'][$act])) {
// remove action only
$role->removePropertyValues($actionAccessProperty, array('pattern' => $accessUri));
$this->getEventManager()->trigger(new AccessRightRemovedEvent($roleUri, $accessUri));
funcAcl_helpers_Cache::flushControllerAccess($controllerClassName);
}
}
/**
* returns the actions of a module from the ontology
*
* @access public
* @author Jerome Bogaerts, <*****@*****.**>
* @param Resource module
* @return array
*/
public static function getActions(core_kernel_classes_Resource $module)
{
$returnValue = array();
$controllerClassName = funcAcl_helpers_Map::getControllerFromUri($module->getUri());
try {
foreach (ControllerHelper::getActions($controllerClassName) as $actionName) {
$uri = funcAcl_helpers_Map::getUriForAction($controllerClassName, $actionName);
$returnValue[$uri] = new core_kernel_classes_Resource($uri);
}
} catch (ReflectionException $e) {
// unknown controller, no actions returned
}
return (array) $returnValue;
}
/**
* force recache of a controller
*
* @access public
* @author Jerome Bogaerts, <*****@*****.**>
* @param Resource module
* @return void
*/
public static function cacheModule(core_kernel_classes_Resource $module)
{
$controllerClassName = funcAcl_helpers_Map::getControllerFromUri($module->getUri());
self::flushControllerAccess($controllerClassName);
self::getControllerAccess($controllerClassName);
}
/**
* Shows the access to the actions of a controller for a specific role
*
* @throws Exception
*/
public function getActions()
{
if (!tao_helpers_Request::isAjax()) {
throw new Exception("wrong request mode");
} else {
$role = new core_kernel_classes_Resource($this->getRequestParameter('role'));
$included = array();
foreach (tao_models_classes_RoleService::singleton()->getIncludedRoles($role) as $includedRole) {
$included[] = $includedRole->getUri();
}
$module = new core_kernel_classes_Resource($this->getRequestParameter('module'));
$controllerClassName = funcAcl_helpers_Map::getControllerFromUri($module->getUri());
$controllerAccess = funcAcl_helpers_Cache::getControllerAccess($controllerClassName);
$actions = array();
foreach (ControllerHelper::getActions($controllerClassName) as $actionName) {
$uri = funcAcl_helpers_Map::getUriForAction($controllerClassName, $actionName);
$part = explode('#', $uri);
list($type, $extId, $modId, $actId) = explode('_', $part[1]);
$allowedRoles = isset($controllerAccess['actions'][$actionName]) ? array_merge($controllerAccess['module'], $controllerAccess['actions'][$actionName]) : $controllerAccess['module'];
$access = count(array_intersect($included, $allowedRoles)) > 0 ? self::ACCESS_INHERITED : (in_array($role->getUri(), $allowedRoles) ? self::ACCESS_FULL : self::ACCESS_NONE);
$actions[$actId] = array('uri' => $uri, 'access' => $access);
}
ksort($actions);
$this->returnJson($actions);
}
}
