Ejemplo n.º 1
0
 /**
  * Global ACL processing
  *
  * @param Mage_Api2_Model_Request $request
  * @param Mage_Api2_Model_Auth_User_Abstract $apiUser
  * @return Mage_Api2_Model_Server
  * @throws Mage_Api2_Exception
  */
 protected function _allow(Mage_Api2_Model_Request $request, Mage_Api2_Model_Auth_User_Abstract $apiUser)
 {
     /** @var $globalAcl Mage_Api2_Model_Acl_Global */
     $globalAcl = Mage::getModel('api2/acl_global');
     if (!$globalAcl->isAllowed($apiUser, $request->getResourceType(), $request->getOperation())) {
         throw new Mage_Api2_Exception('Access denied', self::HTTP_FORBIDDEN);
     }
     return $this;
 }