Acl.php 1.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051
  1. <?php
  2. /**
  3. * Uses ACL to control access. If ACL doesn't contain provided resource,
  4. * permission for all resources is checked
  5. *
  6. * Copyright © Magento, Inc. All rights reserved.
  7. * See COPYING.txt for license details.
  8. */
  9. namespace Magento\Framework\Authorization\Policy;
  10. use Magento\Framework\Acl\Builder;
  11. use Magento\Framework\Authorization\PolicyInterface;
  12. class Acl implements PolicyInterface
  13. {
  14. /**
  15. * @var \Magento\Framework\Acl\Builder
  16. */
  17. protected $_aclBuilder;
  18. /**
  19. * @param Builder $aclBuilder
  20. */
  21. public function __construct(Builder $aclBuilder)
  22. {
  23. $this->_aclBuilder = $aclBuilder;
  24. }
  25. /**
  26. * Check whether given role has access to give id
  27. *
  28. * @param string $roleId
  29. * @param string $resourceId
  30. * @param string $privilege
  31. * @return bool
  32. */
  33. public function isAllowed($roleId, $resourceId, $privilege = null)
  34. {
  35. try {
  36. return $this->_aclBuilder->getAcl()->isAllowed($roleId, $resourceId, $privilege);
  37. } catch (\Exception $e) {
  38. try {
  39. if (!$this->_aclBuilder->getAcl()->has($resourceId)) {
  40. return $this->_aclBuilder->getAcl()->isAllowed($roleId, null, $privilege);
  41. }
  42. } catch (\Exception $e) {
  43. }
  44. }
  45. return false;
  46. }
  47. }