Mage_Admin_Model_Mysql4_Acl Class Reference

List of all members.

Public Member Functions
	__construct ()
	loadAcl ()
	loadRoles (Mage_Admin_Model_Acl $acl, array $rolesArr)
	loadRules (Mage_Admin_Model_Acl $acl, array $rulesArr)
Public Attributes
const	ACL_ALL_RULES = 'all'
Protected Attributes
	$_read
	$_write

---

Detailed Description

Definition at line 35 of file Acl.php.

---

Constructor & Destructor Documentation

__construct

(

)

Initialize resource connections

Definition at line 57 of file Acl.php.

    {
        $this->_read = Mage::getSingleton('core/resource')->getConnection('admin_read');
        $this->_write = Mage::getSingleton('core/resource')->getConnection('admin_write');
    }

---

Member Function Documentation

loadAcl

(

)

Load ACL for the user

Parameters:

integer

$userId

Returns:

Mage_Admin_Model_Acl

Definition at line 69 of file Acl.php.

    {
        $acl = Mage::getModel('admin/acl');

        Mage::getSingleton('admin/config')->loadAclResources($acl);

        $roleTable = Mage::getSingleton('core/resource')->getTableName('admin/role');
        $rolesArr = $this->_read->fetchAll("select * from $roleTable order by tree_level");
        $this->loadRoles($acl, $rolesArr);

        $ruleTable = Mage::getSingleton('core/resource')->getTableName('admin/rule');
        $assertTable = Mage::getSingleton('core/resource')->getTableName('admin/assert');
        $rulesArr = $this->_read->fetchAll("select r.*, a.assert_type, a.assert_data
            from $ruleTable r left join $assertTable a on a.assert_id=r.assert_id");
        $this->loadRules($acl, $rulesArr);

        return $acl;
    }

loadRoles	(	Mage_Admin_Model_Acl $	acl,
		array $	rolesArr
	)

Load roles

Parameters:

	Mage_Admin_Model_Acl	$acl
	array	$rolesArr

Returns:

Mage_Admin_Model_Mysql4_Acl

Definition at line 95 of file Acl.php.

    {
        foreach ($rolesArr as $role) {
            $parent = $role['parent_id']>0 ? Mage_Admin_Model_Acl::ROLE_TYPE_GROUP.$role['parent_id'] : null;
            switch ($role['role_type']) {
                case Mage_Admin_Model_Acl::ROLE_TYPE_GROUP:
                    $roleId = $role['role_type'].$role['role_id'];
                    $acl->addRole(Mage::getModel('admin/acl_role_group', $roleId), $parent);
                    break;

                case Mage_Admin_Model_Acl::ROLE_TYPE_USER:
                    $roleId = $role['role_type'].$role['user_id'];
                    if (!$acl->hasRole($roleId)) {
                        $acl->addRole(Mage::getModel('admin/acl_role_user', $roleId), $parent);
                    } else {
                        $acl->addRoleParent($roleId, $parent);
                    }
                    break;
            }
        }

        return $this;
    }

loadRules	(	Mage_Admin_Model_Acl $	acl,
		array $	rulesArr
	)

Load rules

Parameters:

	Mage_Admin_Model_Acl	$acl
	array	$rulesArr

Returns:

Mage_Admin_Model_Mysql4_Acl

Definition at line 126 of file Acl.php.

    {
        foreach ($rulesArr as $rule) {
            $role = $rule['role_type'].$rule['role_id'];
            $resource = $rule['resource_id'];
            $privileges = !empty($rule['privileges']) ? explode(',', $rule['privileges']) : null;

            $assert = null;
            if (0!=$rule['assert_id']) {
                $assertClass = Mage::getSingleton('admin/config')->getAclAssert($rule['assert_type'])->getClassName();
                $assert = new $assertClass(unserialize($rule['assert_data']));
            }
            try {
                if ( $rule['permission'] == 'allow' ) {
                    if ($resource === self::ACL_ALL_RULES) {
                        $acl->allow($role, null, $privileges, $assert);
                    }
                    $acl->allow($role, $resource, $privileges, $assert);
                } else if ( $rule['permission'] == 'deny' ) {
                    $acl->deny($role, $resource, $privileges, $assert);
                }
            } catch (Exception $e) {
                //$m = $e->getMessage();
                //if ( eregi("^Resource '(.*)' not found", $m) ) {
                    // Deleting non existent resource rule from rules table
                    //$cond = $this->_write->quoteInto('resource_id = ?', $resource);
                    //$this->_write->delete(Mage::getSingleton('core/resource')->getTableName('admin/rule'), $cond);
                //} else {
                    //TODO: We need to log such exceptions to somewhere like a system/errors.log
                //}
            }
            /*
            switch ($rule['permission']) {
                case Mage_Admin_Model_Acl::RULE_PERM_ALLOW:
                    $acl->allow($role, $resource, $privileges, $assert);
                    break;

                case Mage_Admin_Model_Acl::RULE_PERM_DENY:
                    $acl->deny($role, $resource, $privileges, $assert);
                    break;
            }
            */
        }
        return $this;
    }

---

Member Data Documentation

$_read [protected]

Definition at line 44 of file Acl.php.

$_write [protected]

Definition at line 51 of file Acl.php.

const ACL_ALL_RULES = 'all'

Definition at line 37 of file Acl.php.

---

The documentation for this class was generated from the following file:

• app/code/core/Mage/Admin/Model/Mysql4/Acl.php