app\modules\admin\filters\AdminFilter

Complexity

Total Complexity

10

Size/Duplication

Total Lines	53
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	3

Importance

Changes

0

4 Methods

Rating	Name	Duplication	Size	Complexity
A	beforeAction()	0	12	3
A	checkAccess()	0	14	4
A	getCurrentPermissionName()	0	4	1
A	getUserPermissions()	0	15	2

<?php

namespace app\modules\admin\filters;

use Yii;
use yii\base\ActionFilter;
use yii\web\ForbiddenHttpException;

class AdminFilter extends ActionFilter
{
    public $permissions = [];

    public function beforeAction($action)
    {
        if (Yii::$app->user->isGuest === false) {
            $this->permissions = $this->getUserPermissions();
        }

        if (parent::beforeAction($action)) {
            return $this->checkAccess($action);
        }

        return false;
    }

    public function checkAccess($action)
    {
        if ($action->controller->id === 'index') {
            return true;
        }

        if (!\Yii::$app->user->can('AdminModule') ||
            !\Yii::$app->user->can($this->getCurrentPermissionName($action))
        ) {
            throw new ForbiddenHttpException(Yii::t('app.msg', 'Access Denied'));
        }

        return true;
    }

    private function getCurrentPermissionName($action)
    {
        return 'ACTION_Admin' . ucfirst($action->controller->id);
    }

    private function getUserPermissions()
    {
        $authManager = Yii::$app->authManager;

        if (Yii::$app->user->identity->isSuperUser() === false) {
            return $authManager->getPermissionsByRole(Yii::$app->user->identity->role);
        }

        return Yii::$app->cache->getOrSet(
            'rbac-permissions',
            function () use ($authManager) {
                return $authManager->getPermissions();
            }
        );
    }
}