104 lines
2.4 KiB
PHP
104 lines
2.4 KiB
PHP
<?php
|
|
|
|
namespace Da\User\Helper;
|
|
|
|
use Da\User\Model\AbstractAuthItem;
|
|
use Da\User\Module;
|
|
use Da\User\Traits\AuthManagerTrait;
|
|
use Yii;
|
|
use yii\helpers\ArrayHelper;
|
|
use yii\rbac\Permission;
|
|
use yii\rbac\Role;
|
|
use yii\rbac\Rule;
|
|
|
|
class AuthHelper
|
|
{
|
|
use AuthManagerTrait;
|
|
|
|
/**
|
|
* Checks whether a user has certain role.
|
|
*
|
|
* @param $userId
|
|
* @param $role
|
|
*
|
|
* @return bool
|
|
*/
|
|
public function hasRole($userId, $role)
|
|
{
|
|
if ($this->getAuthManager()) {
|
|
$roles = array_keys($this->getAuthManager()->getRolesByUser($userId));
|
|
|
|
return in_array($role, $roles, true);
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* @param $username
|
|
*
|
|
* @return bool
|
|
*/
|
|
public function isAdmin($username)
|
|
{
|
|
/** @var Module $module */
|
|
$module = Yii::$app->getModule('user');
|
|
$hasAdministratorPermissionName = $this->getAuthManager() && $module->administratorPermissionName
|
|
? Yii::$app->getUser()->can($module->administratorPermissionName)
|
|
: false;
|
|
|
|
return $hasAdministratorPermissionName || in_array($username, $module->administrators);
|
|
}
|
|
|
|
/**
|
|
* @param $name
|
|
*
|
|
* @return null|\yii\rbac\Item|Permission
|
|
*/
|
|
public function getPermission($name)
|
|
{
|
|
return $this->getAuthManager()->getPermission($name);
|
|
}
|
|
|
|
/**
|
|
* @param $name
|
|
*
|
|
* @return null|\yii\rbac\Item|Role
|
|
*/
|
|
public function getRole($name)
|
|
{
|
|
return $this->getAuthManager()->getRole($name);
|
|
}
|
|
|
|
/**
|
|
* Removes a role, permission or rule from the RBAC system.
|
|
*
|
|
* @param Role|Permission|Rule $object
|
|
*
|
|
* @return bool whether the role, permission or rule is successfully removed
|
|
*/
|
|
public function remove($object)
|
|
{
|
|
return $this->getAuthManager()->remove($object);
|
|
}
|
|
|
|
/**
|
|
* @param AbstractAuthItem $model
|
|
*
|
|
* @return array
|
|
*/
|
|
public function getUnassignedItems(AbstractAuthItem $model)
|
|
{
|
|
$excludeItems = $model->item !== null ? [$model->item->name] : [];
|
|
$items = $this->getAuthManager()->getItems($model->getType(), $excludeItems);
|
|
|
|
return ArrayHelper::map(
|
|
$items,
|
|
'name',
|
|
function ($item) {
|
|
return empty($item->description) ? $item->name : "{$item->name} ({$item->description})";
|
|
}
|
|
);
|
|
}
|
|
}
|