public function run()
{
funcAcl_models_classes_Initialisation::run();
$impl = new funcAcl_models_classes_FuncAcl();
$exts = common_ext_ExtensionsManager::singleton()->getInstalledExtensions();
foreach ($exts as $extension) {
foreach ($extension->getManifest()->getAclTable() as $tableEntry) {
$rule = new tao_models_classes_accessControl_AccessRule($tableEntry[0], $tableEntry[1], $tableEntry[2]);
$impl->applyRule($rule);
}
}
tao_models_classes_accessControl_AclProxy::setImplementation($impl);
}
public function testFuncACL()
{
$baseRole = $this->testrole;
$srv = tao_models_classes_UserService::singleton();
$generisUser = new core_kernel_users_GenerisUser($this->user);
$this->assertTrue(LoginService::startSession($generisUser));
// -- Test uri creation
$emauri = FUNCACL_NS . '#a_tao_Users_add';
$emaurimod = FUNCACL_NS . '#m_tao_Users';
$makeemauri = funcAcl_models_classes_AccessService::singleton()->makeEMAUri('tao', 'Users', 'add');
$makeemaurimod = funcAcl_models_classes_AccessService::singleton()->makeEMAUri('tao', 'Users');
$this->assertEquals($emauri, $makeemauri);
$this->assertEquals($emaurimod, $makeemaurimod);
$funcAclImp = new funcAcl_models_classes_FuncAcl();
// -- Try to access a restricted action
$this->assertFalse($funcAclImp->hasAccess('add', 'Users', 'tao'));
// -- Try to access a unrestricted action
// (BACKOFFICE has access to the backend login action because it includes the TAO Role)
$this->assertTrue($funcAclImp->hasAccess('login', 'Main', 'tao'));
// -- Try to access an action that does not exist.
$this->assertFalse($funcAclImp->hasAccess('action', 'Unknown', 'tao'));
// -- Try to access a unrestricted action
// Add access for this action to the Manager role.
funcAcl_models_classes_ActionAccessService::singleton()->add($this->testRole->getUri(), $makeemauri);
// Add the Manager role the the currently tested user
tao_models_classes_UserService::singleton()->attachRole($this->user, $this->testRole);
// Logoff/login, to refresh roles cache
$this->assertTrue(LoginService::startSession($generisUser));
// Ask for access
$this->assertTrue($funcAclImp->hasAccess('add', 'Users', 'tao'));
// Remove the access to this action from the Manager role
funcAcl_models_classes_ActionAccessService::singleton()->remove($this->testRole->getUri(), $makeemauri);
// We should not have access anymore to this action with the Manager role
$this->assertFalse($funcAclImp->hasAccess('add', 'Users', 'tao'));
// -- Give access to the entire module and try to access the previously tested action
funcAcl_models_classes_ModuleAccessService::singleton()->add($this->testRole->getUri(), $makeemaurimod);
$this->assertTrue($funcAclImp->hasAccess('add', 'Users', 'tao'));
// -- Remove the entire module access and try again
funcAcl_models_classes_ModuleAccessService::singleton()->remove($this->testRole->getUri(), $makeemaurimod);
$this->assertFalse($funcAclImp->hasAccess('add', 'Users', 'tao'));
// reset
funcAcl_models_classes_ModuleAccessService::singleton()->add($this->testRole->getUri(), $makeemaurimod);
// Unattach role from user
tao_models_classes_UserService::singleton()->unnatachRole($this->user, $this->testRole);
}
<?php
/**
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation; under version 2
* of the License (non-upgradable).
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
*
* Copyright (c) 2013 (original work) Open Assessment Technologies SA (under the project TAO-PRODUCT);
*
*/
use oat\tao\model\accessControl\func\AclProxy;
use oat\tao\model\accessControl\func\AccessRule;
$impl = new funcAcl_models_classes_FuncAcl();
$exts = common_ext_ExtensionsManager::singleton()->getInstalledExtensions();
foreach ($exts as $extension) {
foreach ($extension->getManifest()->getAclTable() as $tableEntry) {
$rule = new AccessRule($tableEntry[0], $tableEntry[1], $tableEntry[2]);
$impl->applyRule($rule);
}
}
AclProxy::setImplementation($impl);
