|
@@ 53-57 (lines=5) @@
|
| 50 |
|
{ |
| 51 |
|
$user = App::$User->identity(); |
| 52 |
|
// user is not authed ? |
| 53 |
|
if ($user === null || !App::$User->isAuth()) { |
| 54 |
|
$redirectUrl = App::$Alias->scriptUrl . '/user/login'; |
| 55 |
|
App::$Response->redirect($redirectUrl, true); |
| 56 |
|
exit(); |
| 57 |
|
} |
| 58 |
|
|
| 59 |
|
$permission = env_name . '/' . App::$Request->getController() . '/' . App::$Request->getAction(); |
| 60 |
|
|
|
@@ 62-68 (lines=7) @@
|
| 59 |
|
$permission = env_name . '/' . App::$Request->getController() . '/' . App::$Request->getAction(); |
| 60 |
|
|
| 61 |
|
// doesn't have permission? get the f*ck out |
| 62 |
|
if (!$user->getRole()->can($permission)) { |
| 63 |
|
App::$Session->invalidate(); |
| 64 |
|
|
| 65 |
|
$redirectUrl = App::$Alias->scriptUrl . '/user/login'; |
| 66 |
|
App::$Response->redirect($redirectUrl, true); |
| 67 |
|
exit(); |
| 68 |
|
} |
| 69 |
|
} |
| 70 |
|
|
| 71 |
|
/** |