pictcode / lib / Cake / Controller / Component / Acl / DbAcl.php @ 22fd3a57
履歴 | 表示 | アノテート | ダウンロード (5.073 KB)
| 1 | 635eef61 | spyder1211 | <?php
 | 
      
|---|---|---|---|
| 2 | /**
 | 
      ||
| 3 |  * CakePHP(tm) : Rapid Development Framework (http://cakephp.org)
 | 
      ||
| 4 |  * Copyright (c) Cake Software Foundation, Inc. (http://cakefoundation.org)
 | 
      ||
| 5 |  *
 | 
      ||
| 6 |  * Licensed under The MIT License
 | 
      ||
| 7 |  * For full copyright and license information, please see the LICENSE.txt
 | 
      ||
| 8 |  * Redistributions of files must retain the above copyright notice.
 | 
      ||
| 9 |  *
 | 
      ||
| 10 |  * @copyright     Copyright (c) Cake Software Foundation, Inc. (http://cakefoundation.org)
 | 
      ||
| 11 |  * @link          http://cakephp.org CakePHP(tm) Project
 | 
      ||
| 12 |  * @package       Cake.Controller.Component.Acl
 | 
      ||
| 13 |  * @since         CakePHP(tm) v 0.10.0.1076
 | 
      ||
| 14 |  * @license       http://www.opensource.org/licenses/mit-license.php MIT License
 | 
      ||
| 15 |  */
 | 
      ||
| 16 | |||
| 17 | App::uses('AclInterface', 'Controller/Component/Acl');  | 
      ||
| 18 | App::uses('Hash', 'Utility');  | 
      ||
| 19 | App::uses('ClassRegistry', 'Utility');  | 
      ||
| 20 | |||
| 21 | /**
 | 
      ||
| 22 |  * DbAcl implements an ACL control system in the database. ARO's and ACO's are
 | 
      ||
| 23 |  * structured into trees and a linking table is used to define permissions. You
 | 
      ||
| 24 |  * can install the schema for DbAcl with the Schema Shell.
 | 
      ||
| 25 |  *
 | 
      ||
| 26 |  * `$aco` and `$aro` parameters can be slash delimited paths to tree nodes.
 | 
      ||
| 27 |  *
 | 
      ||
| 28 |  * eg. `controllers/Users/edit`
 | 
      ||
| 29 |  *
 | 
      ||
| 30 |  * Would point to a tree structure like
 | 
      ||
| 31 |  *
 | 
      ||
| 32 |  * ```
 | 
      ||
| 33 |  *        controllers
 | 
      ||
| 34 |  *                Users
 | 
      ||
| 35 |  *                        edit
 | 
      ||
| 36 |  * ```
 | 
      ||
| 37 |  *
 | 
      ||
| 38 |  * @package       Cake.Controller.Component.Acl
 | 
      ||
| 39 |  */
 | 
      ||
| 40 | class DbAcl extends Object implements AclInterface {  | 
      ||
| 41 | |||
| 42 | /**
 | 
      ||
| 43 |  * Constructor
 | 
      ||
| 44 |  */
 | 
      ||
| 45 | public function __construct() {  | 
      ||
| 46 |                 parent::__construct();
 | 
      ||
| 47 | $this->Permission = ClassRegistry::init(array('class' => 'Permission', 'alias' => 'Permission'));  | 
      ||
| 48 | $this->Aro = $this->Permission->Aro;  | 
      ||
| 49 | $this->Aco = $this->Permission->Aco;  | 
      ||
| 50 | }  | 
      ||
| 51 | |||
| 52 | /**
 | 
      ||
| 53 |  * Initializes the containing component and sets the Aro/Aco objects to it.
 | 
      ||
| 54 |  *
 | 
      ||
| 55 |  * @param AclComponent $component The AclComponent instance.
 | 
      ||
| 56 |  * @return void
 | 
      ||
| 57 |  */
 | 
      ||
| 58 | public function initialize(Component $component) {  | 
      ||
| 59 | $component->Aro = $this->Aro;  | 
      ||
| 60 | $component->Aco = $this->Aco;  | 
      ||
| 61 | }  | 
      ||
| 62 | |||
| 63 | /**
 | 
      ||
| 64 |  * Checks if the given $aro has access to action $action in $aco
 | 
      ||
| 65 |  *
 | 
      ||
| 66 |  * @param string $aro ARO The requesting object identifier.
 | 
      ||
| 67 |  * @param string $aco ACO The controlled object identifier.
 | 
      ||
| 68 |  * @param string $action Action (defaults to *)
 | 
      ||
| 69 |  * @return bool Success (true if ARO has access to action in ACO, false otherwise)
 | 
      ||
| 70 |  * @link http://book.cakephp.org/2.0/en/core-libraries/components/access-control-lists.html#checking-permissions-the-acl-component
 | 
      ||
| 71 |  */
 | 
      ||
| 72 | public function check($aro, $aco, $action = "*") {  | 
      ||
| 73 | return $this->Permission->check($aro, $aco, $action);  | 
      ||
| 74 | }  | 
      ||
| 75 | |||
| 76 | /**
 | 
      ||
| 77 |  * Allow $aro to have access to action $actions in $aco
 | 
      ||
| 78 |  *
 | 
      ||
| 79 |  * @param string $aro ARO The requesting object identifier.
 | 
      ||
| 80 |  * @param string $aco ACO The controlled object identifier.
 | 
      ||
| 81 |  * @param string $actions Action (defaults to *)
 | 
      ||
| 82 |  * @param int $value Value to indicate access type (1 to give access, -1 to deny, 0 to inherit)
 | 
      ||
| 83 |  * @return bool Success
 | 
      ||
| 84 |  * @link http://book.cakephp.org/2.0/en/core-libraries/components/access-control-lists.html#assigning-permissions
 | 
      ||
| 85 |  */
 | 
      ||
| 86 | public function allow($aro, $aco, $actions = "*", $value = 1) {  | 
      ||
| 87 | return $this->Permission->allow($aro, $aco, $actions, $value);  | 
      ||
| 88 | }  | 
      ||
| 89 | |||
| 90 | /**
 | 
      ||
| 91 |  * Deny access for $aro to action $action in $aco
 | 
      ||
| 92 |  *
 | 
      ||
| 93 |  * @param string $aro ARO The requesting object identifier.
 | 
      ||
| 94 |  * @param string $aco ACO The controlled object identifier.
 | 
      ||
| 95 |  * @param string $action Action (defaults to *)
 | 
      ||
| 96 |  * @return bool Success
 | 
      ||
| 97 |  * @link http://book.cakephp.org/2.0/en/core-libraries/components/access-control-lists.html#assigning-permissions
 | 
      ||
| 98 |  */
 | 
      ||
| 99 | public function deny($aro, $aco, $action = "*") {  | 
      ||
| 100 | return $this->allow($aro, $aco, $action, -1);  | 
      ||
| 101 | }  | 
      ||
| 102 | |||
| 103 | /**
 | 
      ||
| 104 |  * Let access for $aro to action $action in $aco be inherited
 | 
      ||
| 105 |  *
 | 
      ||
| 106 |  * @param string $aro ARO The requesting object identifier.
 | 
      ||
| 107 |  * @param string $aco ACO The controlled object identifier.
 | 
      ||
| 108 |  * @param string $action Action (defaults to *)
 | 
      ||
| 109 |  * @return bool Success
 | 
      ||
| 110 |  */
 | 
      ||
| 111 | public function inherit($aro, $aco, $action = "*") {  | 
      ||
| 112 | return $this->allow($aro, $aco, $action, 0);  | 
      ||
| 113 | }  | 
      ||
| 114 | |||
| 115 | /**
 | 
      ||
| 116 |  * Allow $aro to have access to action $actions in $aco
 | 
      ||
| 117 |  *
 | 
      ||
| 118 |  * @param string $aro ARO The requesting object identifier.
 | 
      ||
| 119 |  * @param string $aco ACO The controlled object identifier.
 | 
      ||
| 120 |  * @param string $action Action (defaults to *)
 | 
      ||
| 121 |  * @return bool Success
 | 
      ||
| 122 |  * @see allow()
 | 
      ||
| 123 |  */
 | 
      ||
| 124 | public function grant($aro, $aco, $action = "*") {  | 
      ||
| 125 | return $this->allow($aro, $aco, $action);  | 
      ||
| 126 | }  | 
      ||
| 127 | |||
| 128 | /**
 | 
      ||
| 129 |  * Deny access for $aro to action $action in $aco
 | 
      ||
| 130 |  *
 | 
      ||
| 131 |  * @param string $aro ARO The requesting object identifier.
 | 
      ||
| 132 |  * @param string $aco ACO The controlled object identifier.
 | 
      ||
| 133 |  * @param string $action Action (defaults to *)
 | 
      ||
| 134 |  * @return bool Success
 | 
      ||
| 135 |  * @see deny()
 | 
      ||
| 136 |  */
 | 
      ||
| 137 | public function revoke($aro, $aco, $action = "*") {  | 
      ||
| 138 | return $this->deny($aro, $aco, $action);  | 
      ||
| 139 | }  | 
      ||
| 140 | |||
| 141 | /**
 | 
      ||
| 142 |  * Get an array of access-control links between the given Aro and Aco
 | 
      ||
| 143 |  *
 | 
      ||
| 144 |  * @param string $aro ARO The requesting object identifier.
 | 
      ||
| 145 |  * @param string $aco ACO The controlled object identifier.
 | 
      ||
| 146 |  * @return array Indexed array with: 'aro', 'aco' and 'link'
 | 
      ||
| 147 |  */
 | 
      ||
| 148 | public function getAclLink($aro, $aco) {  | 
      ||
| 149 | return $this->Permission->getAclLink($aro, $aco);  | 
      ||
| 150 | }  | 
      ||
| 151 | |||
| 152 | /**
 | 
      ||
| 153 |  * Get the keys used in an ACO
 | 
      ||
| 154 |  *
 | 
      ||
| 155 |  * @param array $keys Permission model info
 | 
      ||
| 156 |  * @return array ACO keys
 | 
      ||
| 157 |  */
 | 
      ||
| 158 | protected function _getAcoKeys($keys) {  | 
      ||
| 159 | return $this->Permission->getAcoKeys($keys);  | 
      ||
| 160 | }  | 
      ||
| 161 | |||
| 162 | }  |