Exemple #1
0
 /**
  * Forward current request
  *
  * @param string $action
  * @param string $module
  * @param string $controller
  * @return void
  */
 protected function _forward($action = 'denied', $module = null, $controller = null)
 {
     if ($this->_request->getActionName() === $action && (null === $module || $this->_request->getModuleName() === $module) && (null === $controller || $this->_request->getControllerName() === $controller)) {
         return;
     }
     $this->_request->initForward();
     if ($module) {
         $this->_request->setModuleName($module);
     }
     if ($controller) {
         $this->_request->setControllerName($controller);
     }
     $this->_request->setActionName($action)->setDispatched(false);
 }
 /**
  * Forward current request
  *
  * @param string $action
  * @param string $module
  * @param string $controller
  */
 protected function _forward($action = 'denied', $module = null, $controller = null)
 {
     $actionName = strtolower($this->_request->getActionName());
     // avoid cycling
     if ($actionName === $action && (null === $module || $this->_request->getModuleName() === $module) && (null === $controller || $this->_request->getControllerName() === $controller)) {
         return;
     }
     $this->_request->initForward();
     if ($module) {
         $this->_request->setModuleName($module);
     }
     if ($controller) {
         $this->_request->setControllerName($controller);
     }
     $this->_request->setActionName($action)->setDispatched(false);
     $this->_isForwarded = true;
 }
Exemple #3
0
 /**
  * Checks whether route/controller action is allowed to be reached depending on initializer state
  *
  * @param Mage_Core_Controller_Request_Http $request
  * @return bool
  */
 public function isAllowed(Mage_Core_Controller_Request_Http $request)
 {
     if ($this->isDataCollected()) {
         return true;
     }
     if (count($this->_restrictions) == 1) {
         $initializerAclNode = Mage::getConfig()->getNode('default/xcom/initializer_acl');
         if ($initializerAclNode) {
             $this->_restrictions += $initializerAclNode->asArray();
         }
     }
     $parts = array('module' => str_replace('_adminhtml', '', strtolower($request->getControllerModule())), 'controller' => strtolower($request->getControllerName()), 'action' => strtolower($request->getActionName()), 'urn' => trim(strtolower($request->getRequestString()), '/'));
     $moduleParts = explode('_', $parts['module']);
     $parts['namespace'] = $moduleParts[0];
     $this->_currentMatch = array('scopeWeight' => 0, 'directionWeight' => 2, 'urn' => '');
     foreach ($this->_restrictions as $issuer => $rules) {
         if ($issuer != '*') {
             if (!Mage::getResourceModel('xcom_initializer/job')->hasJobsLeft($issuer)) {
                 continue;
             }
         }
         foreach (array('allowed', 'denied') as $direction) {
             if (empty($rules[$direction])) {
                 continue;
             }
             foreach ($rules[$direction] as $scope => $values) {
                 if (!is_array($values)) {
                     Mage::log(printf('Invalid configuration for scope node %s', $scope));
                     continue;
                 }
                 foreach ($values as $value) {
                     $value = strtolower(is_array($value) ? current($value) : $value);
                     $hasMatched = false;
                     if (empty($value)) {
                         Mage::log(printf('Empty node inside scope %s', $scope));
                         continue;
                     }
                     switch (strtolower($scope)) {
                         case 'namespace':
                             if ('denied' == $direction) {
                                 $hasMatched = $value == $parts['namespace'];
                             } else {
                                 Mage::log('<namespace> node allowed in <denied> section only');
                             }
                             break;
                         case 'action':
                         case 'controller':
                             $pattern = '(?P<module>.+)/(?P<controller>.+)';
                             $scopes = array('module', 'controller');
                             if ('action' == $scope) {
                                 $pattern .= '::(?P<action>.+)';
                                 $scopes[] = 'action';
                             }
                             if (preg_match('#' . $pattern . '#', $value, $matches)) {
                                 // Split value into module and controller (and action, if it's 'action' rule)
                                 $hasMatched = true;
                                 foreach ($scopes as $_scope) {
                                     if (!in_array($matches[$_scope], array('*', $parts[$_scope]))) {
                                         // Value part doesn't match corresponding part of current request or '*'
                                         $hasMatched = false;
                                         break;
                                     }
                                 }
                             } else {
                                 Mage::log(printf('Invalid action/controller definition: %s. Allowed pattern: namespace_module/controller::action', $value));
                             }
                             break;
                         case 'module':
                             $hasMatched = $value == $parts['module'];
                             break;
                         case 'urn':
                             $value = trim($value, '/');
                             $hasMatched = 0 === strpos($parts['urn'], $value);
                             break;
                         default:
                             Mage::log(printf('Unknown rule scope: %s', $scope));
                     }
                     if ($hasMatched) {
                         $this->_matched($scope, $direction, 'urn' == $scope ? $value : '');
                     }
                 }
             }
         }
     }
     return $this->_isAllowed();
 }
 /**
  * Check is controller action is allowed w/o authorization
  *
  * @param Mage_Core_Controller_Request_Http $request
  * @param Mage_XmlConnect_Controller_AdminAction $controllerAction
  * @return bool|null
  */
 protected function _checkAdminController($request, $controllerAction)
 {
     if ($controllerAction instanceof Mage_XmlConnect_Controller_AdminAction) {
         foreach ($controllerAction->getAllowedControllerActions() as $controller => $allowedActions) {
             if ($request->getControllerName() == $controller && in_array(strtolower($request->getActionName()), $allowedActions)) {
                 return true;
             }
         }
         return false;
     }
 }
 /**
  * Initialize some useful values from request
  * 
  * @param Mage_Core_Controller_Request_Http $request
  * @return this
  */
 protected function _initializeFromRequest($request)
 {
     $this->_moduleName = $request->getModuleName();
     $this->_controllerName = $request->getControllerName();
     return $this;
 }
Exemple #6
0
 /**
  * Return whether request corresponds to an export request from our module for handled grid
  * 
  * @param Mage_Core_Controller_Request_Http $request Request object
  * @param string $gridType Grid block type
  * @return bool
  */
 public function isExportRequest($request, $gridType)
 {
     $action = $request->getRouteName() . '/' . $request->getControllerName() . '/' . $request->getActionName();
     foreach ($this->_getExportTypes($gridType) as $type) {
         if ($type['url'] == $action) {
             return true;
         }
     }
     return false;
 }
 /**
  * Get the empty handles handler for any given request
  *
  * @param Mage_Core_Controller_Request_Http $request
  * @return string
  */
 public function getHandler(Mage_Core_Controller_Request_Http $request)
 {
     $requestParts = array($request->getModuleName(), $request->getControllerName(), $request->getActionName());
     return 'emptyhandles/handler_' . implode('_', $requestParts);
 }
Exemple #8
0
 public function matchRoute(Mage_Core_Controller_Request_Http $request, $route)
 {
     $path = explode('/', $route);
     for ($i = 0; $i < 3; $i++) {
         if (!isset($path[$i])) {
             $path[$i] = 'index';
         } else {
             if ($path[$i][0] == '(') {
                 $path[$i] = explode('|', trim($path[$i], '()'));
             }
         }
     }
     return $this->_compareComponents($path, array($request->getRouteName(), $request->getControllerName(), $request->getActionName()));
 }
Exemple #9
0
 public function getFullActionName(Mage_Core_Controller_Request_Http $request)
 {
     return $request->getModuleName() . '_' . $request->getControllerName() . '_' . $request->getActionName();
 }
Exemple #10
0
 /**
  * @param Mage_Core_Controller_Request_Http $request
  * @param $route
  * @return bool
  */
 public function isMatchedRequestRoute($request, $route)
 {
     $this->debug('Testing route : ' . $route . ' with ' . $request->getControllerModule() . '/' . $request->getControllerName() . '/' . $request->getActionName());
     $route = trim($route);
     $route_parts = explode('/', $route);
     if (isset($route_parts[0])) {
         $module = $route_parts[0];
         $module_name = strtolower($request->getControllerModule());
         if (strtolower($module) == strtolower($module_name)) {
             if (isset($route_parts[1])) {
                 $controller = $route_parts[1];
                 $controller_name = strtolower($request->getControllerName());
                 if (strtolower($controller) == strtolower($controller_name)) {
                     if (isset($route_parts[2])) {
                         $action = $route_parts[2];
                         $action_name = strtolower($request->getActionName());
                         if (strtolower($action) == strtolower($action_name)) {
                             return true;
                         }
                     } else {
                         return true;
                     }
                 }
             } else {
                 return true;
             }
         }
     }
     return false;
 }
Exemple #11
0
 /**
  * Match controller name
  *
  * @param Mage_Core_Controller_Request_Http $request
  * @param string $param
  * @return string
  */
 protected function _matchControllerName(Mage_Core_Controller_Request_Http $request, $param)
 {
     if ($request->getControllerName()) {
         $controller = $request->getControllerName();
     } else {
         if (!empty($param)) {
             $controller = $param;
         } else {
             $controller = $this->getFront()->getDefault('controller');
             $request->setAlias(Mage_Core_Model_Url_Rewrite::REWRITE_REQUEST_PATH_ALIAS, ltrim($request->getOriginalPathInfo(), '/'));
         }
     }
     return $controller;
 }