WebSVN – LeadersLinked - Antes de SPA – Diff – /module/LeadersLinked/src/Module.php

 use LeadersLinked\Mapper\UserMapper;
 use LeadersLinked\Authentication\AuthTokenAdapter;
 use Laminas\Authentication\AuthenticationService;
 use Laminas\Permissions\Acl\Resource\GenericResource;
 use LeadersLinked\Model\UserType;
+use LeadersLinked\Plugin\CurrentNetworkPlugin;
+use LeadersLinked\Model\Network;
+use LeadersLinked\Model\User;
+use LeadersLinked\Mapper\CompanyUserMapper;
+use LeadersLinked\Model\CompanyUser;
+use LeadersLinked\Mapper\CompanyMapper;
 class Module
+{
+     *
      * @var Acl
      */
     private $acl;
-    /**
-     *
-     * @var Company
-     */
     private $company;
     /**
+     *
     /**
+     *
      * @var CurrentUserPlugin
      */
+    private $currentUserPlugin;
+    /**
+     *
+     * @var CurrentNetworkPlugin
+     */
-    private $currentUser;
+    private $currentNetworkPlugin;
         } else {
             $timestamp = 0;
+        }
+        $this->currentNetworkPlugin = new CurrentNetworkPlugin($adapter);
+        if(!$this->currentNetworkPlugin->hasNetwork()) {
+            echo '2';
+            exit;
+            header("HTTP/1.1 401 Unauthorized - Private network - not found");
+            exit;
+        }
+        if($this->currentNetworkPlugin->getNetwork()->status == Network::STATUS_INACTIVE) {
+            echo '3';
+            exit;
+            header("HTTP/1.1 401 Unauthorized - Private network - inactive");
+            exit;
+        }
         $this->authByHeaders = false;
+        }
+        if(empty($_SERVER['REDIRECT_URL'])) {
+            if(empty($_SERVER['REQUEST_URI'])) {
+                $routeName = '';
+            } else {
+                $routeName = $_SERVER['REQUEST_URI'];
+            }
+        } else {
+            $routeName = $_SERVER['REDIRECT_URL'];
+        }
+        $routeName = strtolower(trim($routeName));
+        if(strlen($routeName) > 0 && substr($routeName, 0, 1) == '/') {
+            $routeName = substr($routeName, 1);
+        }
+        $this->isHtml = $this->isJson ? false : true;
+        $this->currentUserPlugin = new CurrentUserPlugin($adapter);
+        if($this->authByHeaders && substr($routeName, 0, 8) == 'services') {
+            $checkUserForNetwork = false;
+        } else {
+            if($this->currentUserPlugin->hasIdentity()) {
+                $checkUserForNetwork = true;
+            } else {
+                $checkUserForNetwork = false;
+            }
+        }
+        if($checkUserForNetwork) {
+            if(!$routeName || in_array($routeName, ['signout', 'signin', 'home'])) {
+                $checkUserForNetwork = false;
+            }
+        }
+        if($checkUserForNetwork) {
             if($this->currentUserPlugin->getUser()->network_id != $this->currentNetworkPlugin->getNetworkId()) {
                 header("HTTP/1.1 401 Unauthorized - The user is not part of this private network");
                 exit;
+            }
+    }
     public function initAcl(MvcEvent $event)
+    {
+        $serviceManager = $event->getApplication()->getServiceManager();
+        $adapter = $serviceManager->get('leaders-linked-db');
         require_once   (dirname(__DIR__) . DIRECTORY_SEPARATOR . 'config' . DIRECTORY_SEPARATOR . 'acl.config.php');
+            {
                 $this->acl->allow($usertype, $resourceName);
+            }
+        }
+        if($this->currentUserPlugin->hasIdentity() && $this->currentUserPlugin->getUser()->is_super_user == User::IS_SUPER_USER_YES) {
+            $resources =  getAclSuperAdmin();
+            foreach($resources as $resourceName)
+            {
+                $this->acl->allow(UserType::ADMIN, $resourceName);
+            }
+        }
+        if($this->currentNetworkPlugin->getNetwork()->default == Network::DEFAULT_YES) {
+            $usertypes = getAclUsertypeDefaultNetwork();
+            foreach($usertypes as $usertype => $resources)
+            {
+                foreach ($resources as $resourceName)
+                {
+                    $this->acl->allow($usertype, $resourceName);
+                }
+            }
+        } else {
+            $companyMapper = CompanyMapper::getInstance($adapter);
+            $company = $companyMapper->fetchDefaultForNetworkByNetworkId($this->currentNetworkPlugin->getNetwork()->id);
+            if($company) {
+                $companyUserMapper = CompanyUserMapper::getInstance($this->adapter);
+                $companyUser = $companyUserMapper->fetchOneByCompanyIdAndUserId($this->company->id,  $this->currentUserPlugin->getUserId());
+                if($companyUser) {
+                    $usertype = $this->currentUserPlugin->getUserTypeId();
+                    if($companyUser->creator == CompanyUser::CREATOR_YES) {
+                        $resources =  getAclUsertypeOtherNetworkCreator();
+                        foreach($resources as $resourceName)
+                        {
+                            $this->acl->allow($usertype, $resourceName);
+                        }
+                    }
+                    if($companyUser->creator == CompanyUser::CREATOR_NO) {
+                        $resources =  getAclUsertypeOtherNetworkNonCreator();
+                        foreach($resources as $resourceName)
+                        {
+                            $this->acl->allow($usertype, $resourceName);
+                        }
+                    }
+                }
+            }
+        }
         $event->getViewModel()->setVariable('acl', $this->acl);
+            }
+        }
-        if($this->currentUser->hasIdentity())  {
+        if($this->currentUserPlugin->hasIdentity())  {
-            $user = $this->currentUser->getUser();
+            $user = $this->currentUserPlugin->getUser();
             $userTypeId = $user->usertype_id;
         }  else {
             //print_r($this->routesAuthorized);
            // echo 'sin permiso'; exit;
-            $this->currentUser->clearIdentity();
+            $this->currentUserPlugin->clearIdentity();

Proyectos de Subversion LeadersLinked - Antes de SPA

(root)/module/LeadersLinked/src/Module.php – Rev 3099 → 3639