1: <?php
  2: /**
  3:  *
  4:  *
  5:  * CakePHP(tm) : Rapid Development Framework (http://cakephp.org)
  6:  * Copyright (c) Cake Software Foundation, Inc. (http://cakefoundation.org)
  7:  *
  8:  * Licensed under The MIT License
  9:  * For full copyright and license information, please see the LICENSE.txt
 10:  * Redistributions of files must retain the above copyright notice.
 11:  *
 12:  * @copyright     Copyright (c) Cake Software Foundation, Inc. (http://cakefoundation.org)
 13:  * @link          http://cakephp.org CakePHP(tm) Project
 14:  * @license       http://www.opensource.org/licenses/mit-license.php MIT License
 15:  */
 16: 
 17: App::uses('BaseAuthorize', 'Controller/Component/Auth');
 18: App::uses('Router', 'Routing');
 19: 
 20: /**
 21:  * An authorization adapter for AuthComponent. Provides the ability to authorize using CRUD mappings.
 22:  * CRUD mappings allow you to translate controller actions into *C*reate *R*ead *U*pdate *D*elete actions.
 23:  * This is then checked in the AclComponent as specific permissions.
 24:  *
 25:  * For example, taking `/posts/index` as the current request. The default mapping for `index`, is a `read` permission
 26:  * check. The Acl check would then be for the `posts` controller with the `read` permission. This allows you
 27:  * to create permission systems that focus more on what is being done to resources, rather than the specific actions
 28:  * being visited.
 29:  *
 30:  * @package       Cake.Controller.Component.Auth
 31:  * @since 2.0
 32:  * @see AuthComponent::$authenticate
 33:  * @see AclComponent::check()
 34:  */
 35: class CrudAuthorize extends BaseAuthorize {
 36: 
 37: /**
 38:  * Sets up additional actionMap values that match the configured `Routing.prefixes`.
 39:  *
 40:  * @param ComponentCollection $collection The component collection from the controller.
 41:  * @param string $settings An array of settings. This class does not use any settings.
 42:  */
 43:     public function __construct(ComponentCollection $collection, $settings = array()) {
 44:         parent::__construct($collection, $settings);
 45:         $this->_setPrefixMappings();
 46:     }
 47: 
 48: /**
 49:  * sets the crud mappings for prefix routes.
 50:  *
 51:  * @return void
 52:  */
 53:     protected function _setPrefixMappings() {
 54:         $crud = array('create', 'read', 'update', 'delete');
 55:         $map = array_combine($crud, $crud);
 56: 
 57:         $prefixes = Router::prefixes();
 58:         if (!empty($prefixes)) {
 59:             foreach ($prefixes as $prefix) {
 60:                 $map = array_merge($map, array(
 61:                     $prefix . '_index' => 'read',
 62:                     $prefix . '_add' => 'create',
 63:                     $prefix . '_edit' => 'update',
 64:                     $prefix . '_view' => 'read',
 65:                     $prefix . '_remove' => 'delete',
 66:                     $prefix . '_create' => 'create',
 67:                     $prefix . '_read' => 'read',
 68:                     $prefix . '_update' => 'update',
 69:                     $prefix . '_delete' => 'delete'
 70:                 ));
 71:             }
 72:         }
 73:         $this->mapActions($map);
 74:     }
 75: 
 76: /**
 77:  * Authorize a user using the mapped actions and the AclComponent.
 78:  *
 79:  * @param array $user The user to authorize
 80:  * @param CakeRequest $request The request needing authorization.
 81:  * @return boolean
 82:  */
 83:     public function authorize($user, CakeRequest $request) {
 84:         if (!isset($this->settings['actionMap'][$request->params['action']])) {
 85:             trigger_error(__d('cake_dev',
 86:                 'CrudAuthorize::authorize() - Attempted access of un-mapped action "%1$s" in controller "%2$s"',
 87:                 $request->action,
 88:                 $request->controller
 89:                 ),
 90:                 E_USER_WARNING
 91:             );
 92:             return false;
 93:         }
 94:         $user = array($this->settings['userModel'] => $user);
 95:         $Acl = $this->_Collection->load('Acl');
 96:         return $Acl->check(
 97:             $user,
 98:             $this->action($request, ':controller'),
 99:             $this->settings['actionMap'][$request->params['action']]
100:         );
101:     }
102: 
103: }
104: