Conditions | 8 |
Paths | 12 |
Total Lines | 46 |
Code Lines | 30 |
Lines | 0 |
Ratio | 0 % |
Tests | 6 |
CRAP Score | 39.042 |
Changes | 0 |
1 | <?php |
||
26 | 2 | public function call(Micro $api) |
|
27 | { |
||
28 | 2 | $auth = $api->getService('auth'); |
|
29 | 2 | $router = $api->getService('router'); |
|
30 | 2 | $request = $api->getService('request'); |
|
31 | |||
32 | 2 | if (!$auth->isIgnoreUri()) { |
|
33 | // explode() by / , postiion #1 is always the controller , so its the resource ^.^ |
||
34 | $matchRouter = explode('/', $router->getMatchedRoute()->getCompiledPattern()); |
||
35 | $resource = ucfirst($matchRouter[2]); //2 is alwasy the controller of the router |
||
36 | $userData = $api->getService('userData'); |
||
37 | |||
38 | $action = null; |
||
39 | // GET -> read |
||
40 | // PUT -> update |
||
41 | // DELETE -> delete |
||
42 | // POST -> create |
||
43 | |||
44 | switch (strtolower($request->getMethod())) { |
||
45 | case 'get': |
||
46 | $action = 'read'; |
||
47 | break; |
||
48 | case 'post': |
||
49 | $action = 'create'; |
||
50 | break; |
||
51 | case 'delete': |
||
52 | $action = 'delete'; |
||
53 | break; |
||
54 | case 'put': |
||
55 | case 'patch': |
||
56 | $action = 'update'; |
||
57 | break; |
||
58 | default: |
||
59 | throw new ServerErrorHttpException('No Permission define for this action'); |
||
60 | break; |
||
61 | } |
||
62 | |||
63 | //do you have permision |
||
64 | if (!$userData->can($resource . '.' . $action)) { |
||
65 | throw new PermissionException('You dont have permission to run this action ' . $action . ' at ' . $resource); |
||
66 | $api->stop(); |
||
67 | return false; |
||
68 | } |
||
69 | } |
||
70 | |||
71 | 2 | return true; |
|
72 | } |
||
74 |