@@ 53-57 (lines=5) @@ | ||
50 | { |
|
51 | $user = App::$User->identity(); |
|
52 | // user is not authed ? |
|
53 | if ($user === null || !App::$User->isAuth()) { |
|
54 | $redirectUrl = App::$Alias->scriptUrl . '/user/login'; |
|
55 | App::$Response->redirect($redirectUrl, true); |
|
56 | exit(); |
|
57 | } |
|
58 | ||
59 | $permission = env_name . '/' . App::$Request->getController() . '/' . App::$Request->getAction(); |
|
60 | ||
@@ 62-68 (lines=7) @@ | ||
59 | $permission = env_name . '/' . App::$Request->getController() . '/' . App::$Request->getAction(); |
|
60 | ||
61 | // doesn't have permission? get the f*ck out |
|
62 | if (!$user->getRole()->can($permission)) { |
|
63 | App::$Session->invalidate(); |
|
64 | ||
65 | $redirectUrl = App::$Alias->scriptUrl . '/user/login'; |
|
66 | App::$Response->redirect($redirectUrl, true); |
|
67 | exit(); |
|
68 | } |
|
69 | } |
|
70 | ||
71 | /** |