|
1
|
|
|
<?php |
|
2
|
|
|
|
|
3
|
|
|
namespace HexMakina\kadro\Controllers; |
|
4
|
|
|
|
|
5
|
|
|
use HexMakina\kadro\Auth\{AccessRefusedException, AuthControllerInterface, OperatorInterface}; |
|
6
|
|
|
use HexMakina\kadro\Controllers\Interfaces\IntlControllerInterface; |
|
7
|
|
|
|
|
8
|
|
|
class Kadro extends Display implements AuthControllerInterface, IntlControllerInterface |
|
9
|
|
|
{ |
|
10
|
|
|
private $translation_function_name = 'L'; |
|
11
|
|
|
|
|
12
|
|
|
public function __toString() |
|
13
|
|
|
{ |
|
14
|
|
|
return get_called_class(); |
|
15
|
|
|
} |
|
16
|
|
|
|
|
17
|
|
|
public function requires_operator(): bool |
|
18
|
|
|
{ |
|
19
|
|
|
return true; // security by default |
|
20
|
|
|
} |
|
21
|
|
|
|
|
22
|
|
|
public function operator(): OperatorInterface |
|
23
|
|
|
{ |
|
24
|
|
|
return $this->get('OperatorInterface'); |
|
25
|
|
|
} |
|
26
|
|
|
|
|
27
|
|
|
// returns true or throws AccessRefusedException |
|
28
|
|
|
public function authorize($permission = null): bool |
|
29
|
|
|
{ |
|
30
|
|
|
if (!$this->requires_operator()) { |
|
31
|
|
|
return true; |
|
32
|
|
|
} |
|
33
|
|
|
|
|
34
|
|
|
$operator = $this->operator(); |
|
35
|
|
|
if (is_null($operator) || $operator->is_new() || !$operator->is_active()) { |
|
36
|
|
|
throw new AccessRefusedException(); |
|
37
|
|
|
} |
|
38
|
|
|
|
|
39
|
|
|
if (!is_null($permission) && !$operator->has_permission($permission)) { |
|
40
|
|
|
throw new AccessRefusedException(); |
|
41
|
|
|
} |
|
42
|
|
|
|
|
43
|
|
|
return true; |
|
44
|
|
|
} |
|
45
|
|
|
|
|
46
|
|
|
public function execute() |
|
47
|
|
|
{ |
|
48
|
|
|
// kadro controller is a display controller with authentification and intl |
|
49
|
|
|
$this->authorize(); |
|
50
|
|
|
return parent::execute(); |
|
51
|
|
|
} |
|
52
|
|
|
|
|
53
|
|
|
public function prepare() |
|
54
|
|
|
{ |
|
55
|
|
|
parent::prepare(); |
|
56
|
|
|
$this->trim_request_data(); |
|
57
|
|
|
} |
|
58
|
|
|
|
|
59
|
|
|
// intl function, calls to lezer |
|
60
|
|
|
public function l($message, $context = []): string |
|
61
|
|
|
{ |
|
62
|
|
|
return call_user_func($this->translation_function_name, $message, $context); |
|
63
|
|
|
} |
|
64
|
|
|
|
|
65
|
|
|
private function trim_request_data() |
|
66
|
|
|
{ |
|
67
|
|
|
array_walk_recursive($_GET, function (&$value) { |
|
68
|
|
|
$value = trim($value); |
|
69
|
|
|
}); |
|
70
|
|
|
array_walk_recursive($_REQUEST, function (&$value) { |
|
71
|
|
|
$value = trim($value); |
|
72
|
|
|
}); |
|
73
|
|
|
|
|
74
|
|
|
if ($this->router()->submits()) { |
|
75
|
|
|
array_walk_recursive($_POST, function (&$value) { |
|
76
|
|
|
$value = trim($value); |
|
77
|
|
|
}); |
|
78
|
|
|
} |
|
79
|
|
|
} |
|
80
|
|
|
} |
|
81
|
|
|
|