RightsFilter.php

Go to the documentation of this file.

<?php
class RightsFilter extends CFilter
{
    protected $_allowedActions = array();

    protected function preFilter($filterChain)
    {
        // By default we assume that the user is allowed access
        $allow = true;

        $user = Yii::app()->getUser();
        $controller = $filterChain->controller;
        $action = $filterChain->action;

        // Check if the action should be allowed
        if ($this->_allowedActions !== '*' && in_array($action->id, $this->_allowedActions) === false) {
            // Initialize the authorization item as an empty string
            $authItem = '';

            // Append the module id to the authorization item name
            // in case the controller called belongs to a module
            if (($module = $controller->getModule()) !== null) {
                $authItem .= ucfirst($module->id).'.';
            }

            // Append the controller id to the authorization item name
            $authItem .= ucfirst($controller->id);

            // Check if user has access to the controller
            if ($user->checkAccess($authItem.'.*') !== true) {
                // Append the action id to the authorization item name
                $authItem .= '.'.ucfirst($action->id);

                // Check if the user has access to the controller action
                if ($user->checkAccess($authItem) !== true) {
                    $allow = false;
                }
            }
        }

        // User is not allowed access, deny access
        if ($allow === false) {
            $controller->accessDenied();

            return false;
        }

        // Authorization item did not exist or the user had access, allow access
        return true;
    }

    public function setAllowedActions($allowedActions)
    {
        if ($allowedActions === '*') {
            $this->_allowedActions = $allowedActions;
        } else {
            $this->_allowedActions = preg_split('/[\s,]+/', $allowedActions, -1, PREG_SPLIT_NO_EMPTY);
        }
    }
}