Prado\Security\Permissions\TUserOwnerRule

Complexity

Total Complexity

4

Size/Duplication

Total Lines	15
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

1 Method

Rating	Name	Duplication	Size	Complexity
A	isUserAllowed()	0	6	4

<?php
/**
 * TUserOwnerRule class file
 *
 * @author Brad Anderson <belisoful@icloud.com>
 * @link https://github.com/pradosoft/prado
 * @license https://github.com/pradosoft/prado/blob/master/LICENSE
 * @package Prado\Security\Permissions
 */

namespace Prado\Security\Permissions;

use Prado\Exceptions\TInvalidDataValueException;
use Prado\Security\IUser;
use Prado\Security\TAuthorizationRule;

/**
 * TUserOwnerRule class
 *
 * TUserOwnerRule will check if the extra data sent to isUserAllowed
 * has a user name that matches the parameter user name.
 *
 * @author Brad Anderson <belisoful@icloud.com>
 * @package Prado\Security\Permissions
 * @since 4.2.0
 */
class TUserOwnerRule extends TAuthorizationRule
{
	/**
	 * @param \Prado\Security\IUser $user the user object
	 * @param string $verb the request verb (GET, PUT)
	 * @param string $ip the request IP address
	 * @param null|array $extra extra data username to validate
	 * @return int 1 if the user is allowed, -1 if the user is denied, 0 if the rule does not apply to the user
	 */
	public function isUserAllowed(IUser $user, $verb, $ip, $extra = null)
	{
		if (parent::isUserAllowed($user, $verb, $ip, $extra) !== 0 && strcasecmp($user->getName(), $extra['username'] ?? '') === 0) {
			return ($this->getAction() === 'allow') ? 1 : -1;
		} else {
			return 0;
		}
	}
}