66 lines
1.8 KiB
PHP
66 lines
1.8 KiB
PHP
<?php
|
|
class PrivilegesHelper
|
|
{
|
|
private static $privileges = [];
|
|
|
|
public static function init()
|
|
{
|
|
self::$privileges = [];
|
|
foreach (\Chibi\Registry::getConfig()->privileges as $key => $minAccessRankName)
|
|
{
|
|
if (strpos($key, '.') === false)
|
|
$key .= '.';
|
|
list ($privilegeName, $subPrivilegeName) = explode('.', $key);
|
|
$privilegeName = TextHelper::camelCaseToKebabCase($privilegeName);
|
|
$subPrivilegeName = TextHelper::camelCaseToKebabCase($subPrivilegeName);
|
|
$key = rtrim($privilegeName . '.' . $subPrivilegeName, '.');
|
|
|
|
$minAccessRank = TextHelper::resolveConstant($minAccessRankName, 'AccessRank');
|
|
self::$privileges[$key] = $minAccessRank;
|
|
}
|
|
}
|
|
|
|
public static function confirm($privilege, $subPrivilege = null)
|
|
{
|
|
$user = \Chibi\Registry::getContext()->user;
|
|
$minAccessRank = AccessRank::Admin;
|
|
|
|
$key = TextHelper::camelCaseToKebabCase(Privilege::toString($privilege));
|
|
if (isset(self::$privileges[$key]))
|
|
{
|
|
$minAccessRank = self::$privileges[$key];
|
|
}
|
|
if ($subPrivilege != null)
|
|
{
|
|
$key2 = $key . '.' . strtolower($subPrivilege);
|
|
if (isset(self::$privileges[$key2]))
|
|
{
|
|
$minAccessRank = self::$privileges[$key2];
|
|
}
|
|
}
|
|
|
|
return intval($user->access_rank) >= $minAccessRank;
|
|
}
|
|
|
|
public static function confirmWithException($privilege, $subPrivilege = null)
|
|
{
|
|
if (!self::confirm($privilege, $subPrivilege))
|
|
{
|
|
throw new SimpleException('Insufficient privileges');
|
|
}
|
|
}
|
|
|
|
public static function getIdentitySubPrivilege($user)
|
|
{
|
|
$userFromContext = \Chibi\Registry::getContext()->user;
|
|
return $user->id == $userFromContext->id ? 'own' : 'all';
|
|
}
|
|
|
|
public static function confirmEmail($user)
|
|
{
|
|
if (!$user->email_confirmed)
|
|
throw new SimpleException('Need e-mail address confirmation to continue');
|
|
}
|
|
}
|
|
|
|
PrivilegesHelper::init();
|