1
|
|
|
<?php |
2
|
|
|
/** |
3
|
|
|
* RBAC implementation for HiPanel |
4
|
|
|
* |
5
|
|
|
* @link https://github.com/hiqdev/hipanel-rbac |
6
|
|
|
* @package hipanel-rbac |
7
|
|
|
* @license BSD-3-Clause |
8
|
|
|
* @copyright Copyright (c) 2016-2020, HiQDev (http://hiqdev.com/) |
9
|
|
|
*/ |
10
|
|
|
|
11
|
|
|
namespace hipanel\rbac; |
12
|
|
|
|
13
|
|
|
/** |
14
|
|
|
* Initer for AuthManager. |
15
|
|
|
* |
16
|
|
|
* @author Andrii Vasyliev <[email protected]> |
17
|
|
|
*/ |
18
|
|
|
abstract class AbstractIniter implements RbacIniterInterface |
19
|
|
|
{ |
20
|
|
|
/** |
21
|
|
|
* Provides a tree of permissions to be set in AuthManager. |
22
|
|
|
* |
23
|
|
|
* @return array where: |
24
|
|
|
* - key: role name |
25
|
|
|
* - value: role items |
26
|
|
|
*/ |
27
|
|
|
abstract public function getTree(); |
28
|
|
|
|
29
|
|
|
/** |
30
|
|
|
* Provides a tree of permissions to be set in AuthManager. |
31
|
|
|
* |
32
|
|
|
* @return array where: |
33
|
|
|
* - key: permission or role name |
34
|
|
|
* - array: role additional data according to `\yii\rbac\Permission` properties |
35
|
|
|
*/ |
36
|
|
|
abstract public function getMetadata(); |
37
|
|
|
|
38
|
|
|
/** |
39
|
|
|
* {@inheritdoc} |
40
|
|
|
*/ |
41
|
1 |
|
public function init(AuthManager $auth) |
42
|
|
|
{ |
43
|
1 |
|
$metadata = $this->getMetadata(); |
44
|
|
|
|
45
|
1 |
|
foreach (array_keys($this->getTree()) as $roleName) { |
46
|
1 |
|
$roleMeta = $metadata[$roleName]; |
47
|
1 |
|
$auth->setRole($roleName, $roleMeta['description'] ?? null); |
48
|
|
|
} |
49
|
|
|
|
50
|
1 |
|
foreach ($this->getTree() as $roleName => $items) { |
51
|
1 |
|
foreach ($items as $name) { |
52
|
1 |
|
$item = $auth->getItem($name); |
53
|
1 |
|
if ($item === null) { |
54
|
1 |
|
$itemMeta = $metadata[$name]; |
55
|
1 |
|
$item = $auth->setPermission($name, $itemMeta['description'] ?? null); |
56
|
|
|
|
57
|
1 |
|
$itemMeta = $metadata["deny:$name"]; |
58
|
1 |
|
$auth->setPermission("deny:$name", $itemMeta['description'] ?? null); |
59
|
|
|
} |
60
|
1 |
|
$auth->setChild($roleName, $item); |
61
|
|
|
} |
62
|
|
|
} |
63
|
1 |
|
} |
64
|
|
|
|
65
|
|
|
/** |
66
|
|
|
* {@inheritdoc} |
67
|
|
|
*/ |
68
|
1 |
|
public function reinit(AuthManager $auth) |
69
|
|
|
{ |
70
|
1 |
|
$auth->removeAll(); |
71
|
1 |
|
$this->init($auth); |
72
|
1 |
|
} |
73
|
|
|
} |
74
|
|
|
|