Miscellany

<?php/** * AgaviRbacFilter checks security by calling the getPermissions() * method of the action. Once the permission has been acquired, * AgaviRbacFilter verifies the user has the same permissions * by calling the hasPermissions() method of AgaviRbacUser. * * @package    agavi * @subpackage filter * * @copyright  (c) Authors * @since      0.9.0 * * @version    $Id: AgaviSecurityFilter.class.php 657 2006-07-03 14:53:53Z david $ */class AgaviRbacFilter extends AgaviSecurityFilter implements AgaviIActionFilter, AgaviISecurityFilter{	/**	 * Execute this filter.	 *	 * @param      AgaviFilterChain A FilterChain instance.	 * @param      AgaviResponse A Response instance.	 *	 * @since      0.11.0	 */	public function execute(AgaviFilterChain $filterChain, AgaviResponse $response)	{		parent::execute($filterChain, $response);		// get the cool stuff		$context    = $this->getContext();		$controller = $context->getController();		$request    = $context->getRequest();		$user       = $context->getUser();		// get the current action instance		$actionEntry    = $controller->getActionStack()->getLastEntry();		$actionInstance = $actionEntry->getActionInstance();		// get the credential required for this action		$permissions = $actionInstance->getPermissions();		if($user->isAuthenticated())		{			if($permissions === null || $user->hasPermissions($permissions) )			{				$filterChain->execute();			}			else			{				$request->setAttributes(array(					'requested_module' => $actionEntry->getModuleName(),					'requested_action' => $actionEntry->getActionName()				), 'org.agavi.controller.forwards.secure');				$controller->forward(AgaviConfig::get('actions.secure_module'), AgaviConfig::get('actions.secure_action'));			}		}		else		{			$request->setAttributes(array(				'requested_module' => $actionEntry->getModuleName(),				'requested_action' => $actionEntry->getActionName()			), 'org.agavi.controller.forwards.login');			$controller->forward(AgaviConfig::get('actions.login_module'), AgaviConfig::get('actions.login_action'));		}	}}?>