phpffcms / ffcms

    {

        $user = App::$User->identity();

        // user is not authed ?

        if ($user === null || !App::$User->isAuth()) {

            $redirectUrl = App::$Alias->scriptUrl . '/user/login';

            App::$Response->redirect($redirectUrl, true);

            exit();

        }

        $permission = env_name . '/' . App::$Request->getController() . '/' . App::$Request->getAction();

        $permission = env_name . '/' . App::$Request->getController() . '/' . App::$Request->getAction();

        // doesn't have permission? get the f*ck out

        if (!$user->getRole()->can($permission)) {

            App::$Session->invalidate();

            $redirectUrl = App::$Alias->scriptUrl . '/user/login';

            App::$Response->redirect($redirectUrl, true);

            exit();

        }

    }

    /**