Gecko [ ifk.uw.edu.pl ]

Name	Size	Permission
IPermissions.php	1.2 KB	-rw-r--r--
TPermissionEvent.php	3.9 KB	-rw-r--r--
TPermissionsAction.php	12.11 KB	-rw-r--r--
TPermissionsBehavior.php	5.51 KB	-rw-r--r--
TPermissionsConfigurationBehav...	3.73 KB	-rw-r--r--
TPermissionsManager.php	34.08 KB	-rw-r--r--
TUserOwnerRule.php	1.18 KB	-rw-r--r--
TUserPermissionsBehavior.php	2.91 KB	-rw-r--r--

Code Editor : TUserOwnerRule.php

<?php
/**
 * TUserOwnerRule class file
 *
 * @author Brad Anderson <belisoful@icloud.com>
 * @link https://github.com/pradosoft/prado
 * @license https://github.com/pradosoft/prado/blob/master/LICENSE
 */

namespace Prado\Security\Permissions;

use Prado\Security\IUser;
use Prado\Security\TAuthorizationRule;

/**
 * TUserOwnerRule class
 *
 * TUserOwnerRule will check if the extra data sent to isUserAllowed
 * has a user name that matches the parameter user name.
 *
 * @author Brad Anderson <belisoful@icloud.com>
 * @since 4.2.0
 */
class TUserOwnerRule extends TAuthorizationRule
{
	/**
	 * @param \Prado\Security\IUser $user the user object
	 * @param string $verb the request verb (GET, PUT)
	 * @param string $ip the request IP address
	 * @param null|array $extra extra data username to validate
	 * @return int 1 if the user is allowed, -1 if the user is denied, 0 if the rule does not apply to the user
	 */
	public function isUserAllowed(IUser $user, $verb, $ip, $extra = null)
	{
		if (parent::isUserAllowed($user, $verb, $ip, $extra) !== 0 && strcasecmp($user->getName(), $extra['username'] ?? '') === 0) {
			return ($this->getAction() === 'allow') ? 1 : -1;
		} else {
			return 0;
		}
	}
}

${this.title}

Code Editor : TUserOwnerRule.php