/**
* returns the actions of a module from the ontology
*
* @access public
* @author Jerome Bogaerts, <*****@*****.**>
* @param Resource module
* @return array
*/
public static function getActions(core_kernel_classes_Resource $module)
{
$returnValue = array();
$controllerClassName = funcAcl_helpers_Map::getControllerFromUri($module->getUri());
try {
foreach (ControllerHelper::getActions($controllerClassName) as $actionName) {
$uri = funcAcl_helpers_Map::getUriForAction($controllerClassName, $actionName);
$returnValue[$uri] = new core_kernel_classes_Resource($uri);
}
} catch (ReflectionException $e) {
// unknown controller, no actions returned
}
return (array) $returnValue;
}
/**
* Return the cached description of the roles
* that have access to this controller
*
* @param string $controllerClassName
* @return array
*/
public static function getControllerAccess($controllerClassName)
{
try {
$returnValue = self::getCacheImplementation()->get(self::SERIAL_PREFIX_MODULE . $controllerClassName);
} catch (common_cache_Exception $e) {
$extId = funcAcl_helpers_Map::getExtensionFromController($controllerClassName);
$extension = funcAcl_helpers_Map::getUriForExtension($extId);
$module = funcAcl_helpers_Map::getUriForController($controllerClassName);
$roleClass = new core_kernel_classes_Class(CLASS_ROLE);
$accessProperty = new core_kernel_classes_Property(funcAcl_models_classes_AccessService::PROPERTY_ACL_GRANTACCESS);
$returnValue = array('module' => array(), 'actions' => array());
// roles by extensions
$roles = $roleClass->searchInstances(array($accessProperty->getUri() => $extension), array('recursive' => true, 'like' => false));
foreach ($roles as $grantedRole) {
$returnValue['module'][] = $grantedRole->getUri();
}
// roles by controller
$filters = array($accessProperty->getUri() => $module);
$options = array('recursive' => true, 'like' => false);
foreach ($roleClass->searchInstances($filters, $options) as $grantedRole) {
$returnValue['module'][] = $grantedRole->getUri();
}
// roles by action
foreach (ControllerHelper::getActions($controllerClassName) as $actionName) {
$actionUri = funcAcl_helpers_Map::getUriForAction($controllerClassName, $actionName);
$rolesForAction = $roleClass->searchInstances(array($accessProperty->getUri() => $actionUri), array('recursive' => true, 'like' => false));
if (!empty($rolesForAction)) {
$actionName = funcAcl_helpers_Map::getActionFromUri($actionUri);
$returnValue['actions'][$actionName] = array();
foreach ($rolesForAction as $roleResource) {
$returnValue['actions'][$actionName][] = $roleResource->getUri();
}
}
}
self::getCacheImplementation()->put($returnValue, self::SERIAL_PREFIX_MODULE . $controllerClassName);
}
return $returnValue;
}
/**
* Shows the access to the actions of a controller for a specific role
*
* @throws Exception
*/
public function getActions()
{
if (!tao_helpers_Request::isAjax()) {
throw new Exception("wrong request mode");
} else {
$role = new core_kernel_classes_Resource($this->getRequestParameter('role'));
$included = array();
foreach (tao_models_classes_RoleService::singleton()->getIncludedRoles($role) as $includedRole) {
$included[] = $includedRole->getUri();
}
$module = new core_kernel_classes_Resource($this->getRequestParameter('module'));
$controllerClassName = funcAcl_helpers_Map::getControllerFromUri($module->getUri());
$controllerAccess = funcAcl_helpers_Cache::getControllerAccess($controllerClassName);
$actions = array();
foreach (ControllerHelper::getActions($controllerClassName) as $actionName) {
$uri = funcAcl_helpers_Map::getUriForAction($controllerClassName, $actionName);
$part = explode('#', $uri);
list($type, $extId, $modId, $actId) = explode('_', $part[1]);
$allowedRoles = isset($controllerAccess['actions'][$actionName]) ? array_merge($controllerAccess['module'], $controllerAccess['actions'][$actionName]) : $controllerAccess['module'];
$access = count(array_intersect($included, $allowedRoles)) > 0 ? self::ACCESS_INHERITED : (in_array($role->getUri(), $allowedRoles) ? self::ACCESS_FULL : self::ACCESS_NONE);
$actions[$actId] = array('uri' => $uri, 'access' => $access);
}
ksort($actions);
$this->returnJson($actions);
}
}
