+global\Permission::checkMember()

Complexity

Conditions	27
Paths	1695

Size

Total Lines	115
Code Lines	67

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
	public static function checkMember($member, $code, $arg = "any", $strict = true) {
		if(!$member) {
			$memberID = $member = Member::currentUserID();

$member is not used, you could remove the assignment.

		} else {
			$memberID = (is_object($member)) ? $member->ID : $member;
		}

		if (!$memberID) {
			return false;
		}

		// Turn the code into an array as we may need to add other permsissions to the set we check
		if(!is_array($code)) $code = array($code);

		if($arg == 'any') {
			$adminImpliesAll = (bool)Config::inst()->get('Permission', 'admin_implies_all');
			// Cache the permissions in memory
			if(!isset(self::$cache_permissions[$memberID])) {
				self::$cache_permissions[$memberID] = self::permissions_for_member($memberID);
			}
			foreach ($code as $permCode) {
				if ($permCode === 'CMS_ACCESS') {
					foreach (self::$cache_permissions[$memberID] as $perm) {
						//if they have admin rights OR they have an explicit access to the CMS then give permission
						if (($adminImpliesAll && $perm == 'ADMIN') || substr($perm, 0, 11) === 'CMS_ACCESS_') {
							return true;
						}
					}
				}
				elseif (substr($permCode, 0, 11) === 'CMS_ACCESS_') {
					//cms_access_leftandmain means access to all CMS areas
					$code[] = 'CMS_ACCESS_LeftAndMain';
					break;
				}
			}

			// if ADMIN has all privileges, then we need to push that code in
			if($adminImpliesAll) {
				$code[] = "ADMIN";
			}

			// Multiple $code values - return true if at least one matches, ie, intersection exists
			return (bool)array_intersect($code, self::$cache_permissions[$memberID]);
		}

		// Code filters
		$codeParams = is_array($code) ? $code : array($code);
		$codeClause = DB::placeholders($codeParams);
		$adminParams = (self::$admin_implies_all) ? array('ADMIN') : array();
		$adminClause = (self::$admin_implies_all) ?  ", ?" : '';

		// The following code should only be used if you're not using the "any" arg.  This is kind
		// of obselete functionality and could possibly be deprecated.
		$groupParams = self::groupList($memberID);
		if(empty($groupParams)) return false;
		$groupClause = DB::placeholders($groupParams);

		// Arg component
		$argClause = "";
		$argParams = array();
		switch($arg) {
			case "any":
				break;
			case "all":
				$argClause = " AND \"Arg\" = ?";
				$argParams = array(-1);
				break;
			default:
				if(is_numeric($arg)) {
					$argClause = "AND \"Arg\" IN (?, ?) ";
					$argParams = array(-1, $arg);
				} else {
					user_error("Permission::checkMember: bad arg '$arg'", E_USER_ERROR);
				}
		}
		$adminFilter = (Config::inst()->get('Permission', 'admin_implies_all')) ?  ",'ADMIN'" : '';

$adminFilter is not used, you could remove the assignment.

		// Raw SQL for efficiency
		$permission = DB::prepared_query(
			"SELECT \"ID\"
			FROM \"Permission\"
			WHERE (
				\"Code\" IN ($codeClause $adminClause)
				AND \"Type\" = ?
				AND \"GroupID\" IN ($groupClause)
				$argClause
			)",
			array_merge(
				$codeParams,
				$adminParams,
				array(self::GRANT_PERMISSION),
				$groupParams,
				$argParams
			)
		)->value();

		if($permission) return $permission;

		// Strict checking disabled?
		if(!Config::inst()->get('Permission', 'strict_checking') || !$strict) {
			$hasPermission = DB::prepared_query(
				"SELECT COUNT(*)
				FROM \"Permission\"
				WHERE (
					\"Code\" IN ($codeClause) AND
					\"Type\" = ?
				)",
				array_merge($codeParams, array(self::GRANT_PERMISSION))
			)->value();

			if(!$hasPermission) return;
		}

		return false;
	}