@@ 75-80 (lines=6) @@ | ||
72 | $context = array('user' => $session->getUsername()); |
|
73 | ||
74 | // check the username is in the authorised list. |
|
75 | if (null !== $users && !in_array($context['user'], $users)) { |
|
76 | ||
77 | $logger->notice('Auth: User unauthorised [{user}]', $context); |
|
78 | ||
79 | throw new Exception('Access unauthorised', 401); |
|
80 | } |
|
81 | ||
82 | // check user group |
|
83 | $context['group'] = $session->getGroup(); |
|
@@ 84-92 (lines=9) @@ | ||
81 | ||
82 | // check user group |
|
83 | $context['group'] = $session->getGroup(); |
|
84 | if (null !== $groups && !in_array($context['group'], $groups) ) { |
|
85 | ||
86 | $logger->notice( |
|
87 | 'Auth: Sessions\'s group unauthorised [{user}/{group}]".', |
|
88 | $context |
|
89 | ); |
|
90 | ||
91 | throw new Exception('Access unauthorised.', 401); |
|
92 | } |
|
93 | ||
94 | // check for (required) trusted user IPs |
|
95 | if ($session->hasTrustedIps()) { |