Ubiquity\security\acl\controllers\AclControllerTrait

Complexity

Total Complexity

6

Size/Duplication

Total Lines	37
Duplicated Lines	0 %

Test Coverage

Coverage

84.62%

Importance

Changes	3
Bugs	0	Features	2

2 Methods

Rating	Name	Duplication	Size	Complexity
A	isValidRole()	0	17	5
A	isValid()	0	2	1

<?php

namespace Ubiquity\security\acl\controllers;

use Ubiquity\security\acl\AclManager;
use Ubiquity\exceptions\AclException;
use Ubiquity\log\Logger;

/**
 * To use with a controller with acls.
 * Ubiquity\security\acl\controllers$AclControllerTrait
 * This class is part of Ubiquity
 *
 * @author jc
 * @version 1.0.0
 *         
 */
trait AclControllerTrait {
	public abstract function _getRole();

	/**
	 * Returns True if access to the controller is allowed for $role.
	 *
	 * @param string $action
	 * @param string $role
	 * @return boolean
	 */
	protected function isValidRole($action,$role) {
		$controller = \get_class ( $this );
		$resourceController = AclManager::getPermissionMap ()->getRessourcePermission ( $controller, $action );
		if (isset ( $resourceController )) {
			try{
				if (AclManager::isAllowed ( $role, $resourceController ['resource'], $resourceController ['permission'] )) {
					return true;
				}
			}
			catch(AclException $e){
				Logger::alert('Router', $role.' is not allowed for this resource','Acls',[$controller,$action]);
			}
		}
		if ($action !== '*') {
			return $this->isValidRole( '*',$role );
		}
		return false;
	}
	/**
	 * Returns True if access to the controller is allowed for the role returned by _getRole method.
	 * To be override in sub classes
	 *
	 * @param string $action
	 * @return boolean
	 */
	public function isValid($action) {
		return $this->isValidRole($action, $this->_getRole());
	}
}