OSB enhancements to date

2010-11-30 09:41:08 +11:00
parent 8715a2059b
commit ec6a542bc3
478 changed files with 23423 additions and 9309 deletions
--- a/application/classes/controller/lnapp/default.php
+++ b/application/classes/controller/lnapp/default.php
@@ -0,0 +1,75 @@
+<?php defined('SYSPATH') or die('No direct access allowed.');
+
+/**
+ * This class provides the default controller for rendering pages.
+ *
+ * @package    lnApp
+ * @subpackage Page
+ * @category   Abstract/Controllers
+ * @author     Deon George
+ * @copyright  (c) 2010 Deon George
+ * @license    http://dev.leenooks.net/license.html
+ */
+abstract class Controller_lnApp_Default extends Controller {
+	/**
+	 * Controls access to this controller.
+	 * Can be set to a string or an array, for example 'login' or array('login', 'admin')
+	 * Note that in second(array) example, user must have both 'login' AND 'admin' roles set in database
+	 *
+	 * @var boolean is authenticate required with this controller
+	 */
+	protected $auth_required = FALSE;
+	/**
+	 * If redirecting to a login page, which page to redirect to
+	 */
+	protected $noauth_redirect = 'login';
+	/**
+	 * Controls access for separate actions, eg:
+	 * 'adminpanel' => 'admin' will only allow users with the role admin to access action_adminpanel
+	 * 'moderatorpanel' => array('login', 'moderator') will only allow users with the roles login and moderator to access action_moderatorpanel
+	 *
+	 * @var array actions that require a valid user
+	 */
+	protected $secure_actions = array();
+
+	/**
+	 * Check and see if this controller needs authentication
+	 *
+	 * if $this->auth_required is TRUE, then the user must be logged in only.
+	 * if $this->auth_required is FALSE, AND $this->secure_actions has an array of
+	 * methods set to TRUE, then the user must be logged in AND a member of the
+	 * role.
+	 *
+	 * @return boolean
+	 */
+	protected function _auth_required() {
+		// If our global configurable is disabled, then continue
+		if (! Kohana::Config('config.method_security'))
+			return FALSE;
+
+		return (($this->auth_required !== FALSE && Auth::instance()->logged_in() === FALSE) ||
+			(is_array($this->secure_actions) && array_key_exists($this->request->action,$this->secure_actions) &&
+			Auth::instance()->logged_in($this->secure_actions[$this->request->action]) === FALSE));
+	}
+
+	public function before() {
+		parent::before();
+
+		// Check user auth and role
+		if ($this->_auth_required()) {
+			// For AJAX/JSON requests, authorisation is controlled in the method.
+			if (Request::$is_ajax && $this->request->action === 'json') {
+				// Nothing required.
+
+			// For no AJAX/JSON requests, display an access page
+			} elseif (Auth::instance()->logged_in(NULL,get_class($this).'|'.__METHOD__)) {
+				Request::instance()->redirect('login/noaccess');
+
+			} else {
+				Session::instance()->set('afterlogin',Request::instance()->uri());
+				Request::instance()->redirect($this->noauth_redirect);
+			}
+		}
+	}
+}
+?>