diff options
author | Fabio Bas <ctrlaltca@gmail.com> | 2015-01-20 19:33:03 +0100 |
---|---|---|
committer | Fabio Bas <ctrlaltca@gmail.com> | 2015-01-20 19:33:03 +0100 |
commit | 1729b4bffedbcd0e0bdff80b74aa9944312d817c (patch) | |
tree | 403ea960c5d2e49935920477a99482530b181440 /framework/Security/TAuthorizationRule.php | |
parent | 151aeac41b60f094242e65b6dbccbc1e95c5c27d (diff) |
One class per file: framework/Security
Diffstat (limited to 'framework/Security/TAuthorizationRule.php')
-rw-r--r-- | framework/Security/TAuthorizationRule.php | 54 |
1 files changed, 1 insertions, 53 deletions
diff --git a/framework/Security/TAuthorizationRule.php b/framework/Security/TAuthorizationRule.php index aa9bed90..6da784c7 100644 --- a/framework/Security/TAuthorizationRule.php +++ b/framework/Security/TAuthorizationRule.php @@ -238,56 +238,4 @@ class TAuthorizationRule extends TComponent { return ($this->_verb==='*' || strcasecmp($verb,$this->_verb)===0); } -} - - -/** - * TAuthorizationRuleCollection class. - * TAuthorizationRuleCollection represents a collection of authorization rules {@link TAuthorizationRule}. - * To check if a user is allowed, call {@link isUserAllowed}. - * - * @author Qiang Xue <qiang.xue@gmail.com> - * @package System.Security - * @since 3.0 - */ -class TAuthorizationRuleCollection extends TList -{ - /** - * @param IUser the user to be authorized - * @param string verb, can be empty, 'post' or 'get'. - * @param string the request IP address - * @return boolean whether the user is allowed - */ - public function isUserAllowed($user,$verb,$ip) - { - if($user instanceof IUser) - { - $verb=strtolower(trim($verb)); - foreach($this as $rule) - { - if(($decision=$rule->isUserAllowed($user,$verb,$ip))!==0) - return ($decision>0); - } - return true; - } - else - return false; - } - - /** - * Inserts an item at the specified position. - * This overrides the parent implementation by performing additional - * operations for each newly added TAuthorizationRule object. - * @param integer the specified position. - * @param mixed new item - * @throws TInvalidDataTypeException if the item to be inserted is not a TAuthorizationRule object. - */ - public function insertAt($index,$item) - { - if($item instanceof TAuthorizationRule) - parent::insertAt($index,$item); - else - throw new TInvalidDataTypeException('authorizationrulecollection_authorizationrule_required'); - } -} - +}
\ No newline at end of file |