Canvas\Middleware\AclMiddleware::call()

Complexity

Conditions	9
Paths	7

Size

Total Lines	46
Code Lines	29

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	0
CRAP Score	90

Importance

Changes	1
Bugs	0	Features	0

<?php
    public function call(Micro $api)
    {
        $router = $api->getService('router');
        $request = $api->getService('request');

        // explode() by / , postiion #1 is always the controller , so its the resource ^.^
        $matchRouter = explode('/', $router->getMatchedRoute()->getCompiledPattern());

        $resource = ucfirst(isset($matchRouter[2]) ? $matchRouter[2] : $matchRouter[1]); //2 is alwasy the controller of the router
        $userData = $api->getService('userData');

        $action = null;
        $method = strtolower($request->getMethod());

        // GET -> read
        // PUT -> update
        // DELETE -> delete
        // POST -> create
        switch ($method) {
            case 'get':
                $action = 'list';
                if (preg_match("/\/([0-9]+)(?=[^\/]*$)/", $request->getURI())) {
                    $action = 'read';
                }
                break;
            case 'post':
                $action = 'create';
                break;
            case 'delete':
                $action = 'delete';
                break;
            case 'put':
            case 'patch':
                $action = 'update';
                break;
            default:
                throw new InternalServerErrorException('No Permission define for this action ' . $method);
            break;
        }

        //do you have permision
        if (!$userData->can($resource . '.' . $action)) {
            throw new UnauthorizedException('You dont have permission to run this action ' . $action . ' at ' . $resource);
        }

        return true;
    }