Application\Acl\DefaultAcl

Complexity

Total Complexity

7

Size/Duplication

Total Lines	71
Duplicated Lines	0 %

Coupling/Cohesion

Components	0
Dependencies	3

Importance

Changes

0

1 Method

Rating	Name	Duplication	Size	Complexity
B	__construct()	0	66	7

<?php

/**
 * DefaultAcl
 * @copyright Copyright (c) 2011 - 2015 Aleksandr Torosh (http://wezoom.com.ua)
 * @author Aleksandr Torosh <webtorua@gmail.com>
 */

namespace Application\Acl;

class DefaultAcl extends \Phalcon\Acl\Adapter\Memory
{

    public function __construct()
    {
        parent::__construct();

        $this->setDefaultAction(\Phalcon\Acl::DENY);

        /**
         * Full list of Roles
         */
        $roles = [];
        $roles['guest'] = new \Phalcon\Acl\Role('guest', 'Guest');
        $roles['member'] = new \Phalcon\Acl\Role('member', 'Member');

        $roles['journalist'] = new \Phalcon\Acl\Role('journalist', 'Journalist');
        $roles['editor'] = new \Phalcon\Acl\Role('editor', 'Journalist');
        $roles['admin'] = new \Phalcon\Acl\Role('admin', 'Admin');

        /**
         * Frontend roles
         */
        $this->addRole($roles['guest']);
        $this->addRole($roles['member'], $roles['guest']);

        /**
         * Backend roles
         */
        $this->addRole($roles['journalist'], $roles['guest']);
        $this->addRole($roles['editor'], $roles['journalist']);
        $this->addRole($roles['admin']);

        /**
         * Include resources permissions list from file /app/config/acl.php
         */
        $resources = include APPLICATION_PATH . '/config/acl.php';

        foreach ($resources as $roles_resources) {
            foreach ($roles_resources as $resource => $actions) {
                $registerActions = '*';
                if (is_array($actions)) {
                    $registerActions = $actions;
                }
                $this->addResource(new \Phalcon\Acl\Resource($resource), $registerActions);
            }
        }

        /**
         * Make unlimited access for admin role
         */
        $this->allow('admin', '*', '*');

        /**
         * Set roles permissions
         */
        foreach ($roles as $k => $role) {
            $user_resource = $resources[$k];
            foreach ($user_resource as $roles_resources => $method) {
                if ($method == '*') {
                    $this->allow($k, $roles_resources, '*');
                } else {
                    $this->allow($k, $roles_resources, $method);
                }

            }
        }

    }

}