App\Controller\Component\ActionAuthorizationComponent

Complexity

Total Complexity

7

Size/Duplication

Total Lines	32
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	5

Importance

Changes

0

1 Method

Rating	Name	Duplication	Size	Complexity
B	isAuthorized()	0	21	7

<?php

declare(strict_types=1);

/**
 * Saito - The Threaded Web Forum
 *
 * @copyright Copyright (c) the Saito Project Developers
 * @link https://github.com/Schlaefer/Saito
 * @license http://opensource.org/licenses/MIT
 */

namespace App\Controller\Component;

use Cake\Controller\Component;
use Saito\App\Registry;
use Saito\User\CurrentUser\CurrentUserInterface;

class ActionAuthorizationComponent extends Component
{

    /**
     * Check if user is authorized to use the controller-action
     *
     * @param CurrentUserInterface $user current-user
     * @param string $action current controller action
     * @return bool true is authorized, false otherwise
     */
    public function isAuthorized(CurrentUserInterface $user, $action)
    {
        $Controller = $this->_registry->getController();
        if (isset($Controller->actionAuthConfig)
            && isset($Controller->actionAuthConfig[$action])) {
            $requiredRole = $Controller->actionAuthConfig[$action];

            return Registry::get('Permission')
                ->check($user->getRole(), $requiredRole);
        }

        $prefix = $this->request->getParam('prefix');

The property Cake\Controller\Component::$request has been deprecated with message: 3.4.0 Storing references to the request is deprecated. Use Component::getController() or callback $event->getSubject() to access the controller & request instead.

        $plugin = $this->request->getParam('plugin');

The property Cake\Controller\Component::$request has been deprecated with message: 3.4.0 Storing references to the request is deprecated. Use Component::getController() or callback $event->getSubject() to access the controller & request instead.

        $isAdminRoute = ($prefix && strtolower($prefix) === 'admin')
            || ($plugin && strtolower($plugin) === 'admin');
        if ($isAdminRoute) {
            return $user->permission('saito.core.admin.backend');
        }

        return true;
    }
}