Exemple #1
0
use Mocks\Examples\User;
use Ovide\Libs\Mvc\Rest\App;
use Phalcon\Acl;
use Ovide\Libs\Mvc\Rest\ContentType\XmlEncoder;
App::reset();
$app = App::instance();
$handlers = $app->getHandlers();
$accept = $handlers[\Ovide\Libs\Mvc\Rest\HeaderHandler\Accept::HEADER];
$accept->setAcceptable(XmlEncoder::CONTENT_TYPE, XmlEncoder::class);
$app->mountResource(User::class);
$app->di->set('acl', function () {
    $guest = new Acl\Role('guest');
    $user = new Acl\Role('user');
    $root = new Acl\Role('root');
    $users = new Acl\Resource('users');
    $acl = new Acl\Adapter\Memory();
    $acl->addRole($guest);
    $acl->addRole($user, $guest);
    $acl->addRole($root, $user);
    $acl->addResource($users, ['delete', 'get', 'getOne', 'post', 'put', 'putSelf', 'getSelf', 'deleteSelf']);
    $acl->allow('guest', 'users', ['post']);
    $acl->allow('user', 'users', ['getSelf', 'deleteSelf', 'putSelf']);
    $acl->deny('user', 'users', 'post');
    $acl->allow('root', 'users', '*');
    $acl->setDefaultAction(Acl::DENY);
    //Sets 'gest' as active role
    $acl->isAllowed('guest', '', '');
    return $acl;
}, true);
return $app;
Exemple #2
0
 public function isAllowed($roleName, $resourceName, $access)
 {
     return parent::isAllowed($roleName, $resourceName, $access);
 }
Exemple #3
0
 public function isAllowed($roleName, $resourceName, $access, array $parameters = null)
 {
     return parent::isAllowed($roleName, $resourceName, $access, $parameters);
 }
 protected function assertAclIsConfiguredAsExpected(\Phalcon\Acl\Adapter\Memory $acl, \Phalcon\Config $config)
 {
     // assert default action
     $this->assertEquals(\Phalcon\Acl::DENY, $acl->getDefaultAction());
     // assert resources
     $resources = $acl->getResources();
     $this->assertInternalType('array', $resources);
     $indexResource = $resources[0];
     $testResource = $resources[1];
     $this->assertEquals('index', $indexResource->getName());
     $this->assertEquals('test', $testResource->getName());
     $this->assertEquals($config->acl->resource->index->description, $indexResource->getDescription());
     $this->assertEquals($config->acl->resource->test->description, $testResource->getDescription());
     // assert roles
     $roles = $acl->getRoles();
     $this->assertInternalType('array', $roles);
     $guestRole = $roles[0];
     $userRole = $roles[1];
     $this->assertEquals('guest', $guestRole->getName());
     $this->assertEquals('user', $userRole->getName());
     $this->assertEquals($config->acl->role->guest->description, $guestRole->getDescription());
     $this->assertEquals($config->acl->role->user->description, $userRole->getDescription());
     // assert guest rules
     $this->assertTrue($acl->isAllowed('guest', 'index', 'index'));
     $this->assertFalse($acl->isAllowed('guest', 'test', 'index'));
     // assert user rules
     // inherited from guest
     $this->assertTrue($acl->isAllowed('user', 'index', 'index'));
     $this->assertTrue($acl->isAllowed('user', 'test', 'index'));
 }
Exemple #5
0
 /**
  * Tests the negation of inherited roles
  *
  * @issue T65
  */
 public function testNegationOfInheritedRoles_T65()
 {
     $acl = new PhAclMem();
     $acl->setDefaultAction(PhAcl::DENY);
     $acl->addRole('Guests');
     $acl->addRole('Members', 'Guests');
     $acl->addResource('Login', array('index'));
     $acl->allow('Guests', 'Login', 'index');
     $acl->deny('Members', 'Login', 'index');
     $actual = (bool) $acl->isAllowed('Members', 'Login', 'index');
     $this->assertFalse($actual, 'Negation of inherited roles not correct');
 }