Completed
Push — master ( 89be15...80fd60 )
by Igor
11:15
created

AdminFilter::checkAccess()   A

Complexity

Conditions 4
Paths 3

Size

Total Lines 14
Code Lines 7

Duplication

Lines 0
Ratio 0 %

Importance

Changes 0
Metric Value
dl 0
loc 14
rs 9.2
c 0
b 0
f 0
cc 4
eloc 7
nc 3
nop 1
1
<?php
2
3
namespace app\modules\admin\filters;
4
5
use Yii;
6
use yii\base\ActionFilter;
7
use yii\web\ForbiddenHttpException;
8
9
class AdminFilter extends ActionFilter
10
{
11
    public $permissions = [];
12
13
    public function beforeAction($action)
14
    {
15
        if (Yii::$app->user->isGuest === false) {
16
            $this->permissions = $this->getUserPermissions();
17
        }
18
19
        if (parent::beforeAction($action)) {
20
            return $this->checkAccess($action);
21
        }
22
23
        return false;
24
    }
25
26
    public function checkAccess($action)
27
    {
28
        if ($action->controller->id === 'index') {
29
            return true;
30
        }
31
32
        if (!\Yii::$app->user->can('AdminModule') ||
33
            !\Yii::$app->user->can($this->getCurrentPermissionName($action))
34
        ) {
35
            throw new ForbiddenHttpException(Yii::t('app.msg', 'Access Denied'));
36
        }
37
38
        return true;
39
    }
40
41
    private function getCurrentPermissionName($action)
42
    {
43
        return 'ACTION_Admin' . ucfirst($action->controller->id);
44
    }
45
46
    private function getUserPermissions()
47
    {
48
        $authManager = Yii::$app->authManager;
49
50
        if (Yii::$app->user->identity->isSuperUser() === false) {
51
            return $authManager->getPermissionsByRole(Yii::$app->user->identity->role);
52
        }
53
54
        return Yii::$app->cache->getOrSet(
55
            'rbac-permissions',
56
            function () use ($authManager) {
57
                return $authManager->getPermissions();
58
            }
59
        );
60
    }
61
}
62