Warning: mysql_connect(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone. in /home/zurmoorg/public_html/z-header.php on line 8

Deprecated: mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in /home/zurmoorg/public_html/z-header.php on line 8

ControllerSecurityUtil Class Reference

Inheritance diagram for ControllerSecurityUtil:
ApiControllerSecurityUtil EmailMessagesControllerSecurityUtil LeadsControllerSecurityUtil

Static Public Member Functions

static doesCurrentUserHavePermissionOnSecurableItem ($securableItem, $permissionToCheck)
static resolveAccessCanCurrentUserReadModel (RedBeanModel $model, $fromAjax=false)
static resolveAccessCanCurrentUserWriteModel (RedBeanModel $model, $fromAjax=false)
static resolveAccessCanCurrentUserDeleteModel (RedBeanModel $model, $fromAjax=false)
static resolveAccessCanCurrentUserWriteModule ($moduleClassName, $fromAjax=false)
static resolveCanCurrentUserAccessModule ($moduleClassName, $fromAjax=false)

Static Protected Member Functions

static processAccessFailure ($fromAjax=false, $nonAjaxFailureMessageContent=null)
static renderAccessFailureContent ($fromAjax=false, $nonAjaxFailureMessageContent=null)

Detailed Description

Helper class to assist with security checks in controllers.

Definition at line 40 of file ControllerSecurityUtil.php.


Member Function Documentation

static doesCurrentUserHavePermissionOnSecurableItem ( securableItem,
permissionToCheck 
) [static]
Parameters:
$securableItem 
$permissionToCheck 
Returns:
bool - true if the current user has permission on model.

Definition at line 47 of file ControllerSecurityUtil.php.

static resolveAccessCanCurrentUserReadModel ( RedBeanModel model,
fromAjax = false 
) [static]
Parameters:
$model - RedBeanModel
Returns:
null If a current user cannot read the model, then render a AccessFailurePageView and end the application.
Parameters:
RedBeanModel $model
bool $fromAjax

Definition at line 78 of file ControllerSecurityUtil.php.

static resolveAccessCanCurrentUserWriteModel ( RedBeanModel model,
fromAjax = false 
) [static]

If a current user cannot write the model, then render a AccessFailurePageView and end the application.

Parameters:
$model - RedBeanModel
Returns:
null;

Definition at line 94 of file ControllerSecurityUtil.php.

static resolveAccessCanCurrentUserDeleteModel ( RedBeanModel model,
fromAjax = false 
) [static]

If a current user cannot delete the model, then render a AccessFailurePageView and end the application.

Parameters:
$model - RedBeanModel
Returns:
null;

Definition at line 110 of file ControllerSecurityUtil.php.

static resolveAccessCanCurrentUserWriteModule ( moduleClassName,
fromAjax = false 
) [static]

If a current user cannot write the module, then render a AccessFailurePageView and end the application.

Parameters:
$model - RedBeanModel
Returns:
null;

Definition at line 126 of file ControllerSecurityUtil.php.

static resolveCanCurrentUserAccessModule ( moduleClassName,
fromAjax = false 
) [static]
Parameters:
string $moduleClassName
bool $fromAjax

Definition at line 142 of file ControllerSecurityUtil.php.


The documentation for this class was generated from the following file:
 All Data Structures Functions Variables
Generated on Tue Jun 25 07:10:53 2019

Warning: mysql_connect(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone. in /home/zurmoorg/public_html/z-footer.php on line 8

Deprecated: mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in /home/zurmoorg/public_html/z-footer.php on line 8