Khaos :: KhACL

[eluser]Tominator[/eluser]
Hi guys!

If you need (as I needed) to set all permissions to admin group, and you have many ACO's (subjects) and many AXO's (actions), you are in big trouble

Feature: $this->acl->allow('admin', 'website', 'all') will be great, won't it?

Ok, I have solution I know, it isn't best but it partially works

So, here we go:

1, Open khacl.php
2, Find line 196 - 208:

Code:

if ($axo !== null)
        {
            if (!($rs = $this->_CI->db->get_where($this->_Tables['axos'], array('name' => $axo), 1)))
                return false;    
            
            if ($rs->num_rows() == 1)
            {
                $row    = $rs->row();
                $axo_id = $row->id;
            }
            else
                return false;    
        }

Replace with:

Code:

if ($axo !== null)
        {
            if ($axo !== 'all')
            {
                if (!($rs = $this->_CI->db->get_where($this->_Tables['axos'], array('name' => $axo), 1)))
                    return false;    
                
                if ($rs->num_rows() == 1)
                {
                    $row    = $rs->row();
                    $axo_id = $row->id;
                }
                else
                    return false;
            }
            
            else
            {
                if (!($rs = $this->_CI->db->get_where($this->_Tables['axos'])))
                    return false;    
                
                if ($rs->num_rows() > 0)
                {
                    $axo = array();
                    
                    foreach ($rs->result() as $row)
                    {
                        $axo[]    = $row->id;
                    }
                }
                else
                    return false;
            }
        }

3. Find line 277 - 303:

Code:

if ($axo !== null)
        {
            
            if (($rs = $this->_CI->db->get_where($this->_Tables['access_actions'], array('access_id' => $access_id, 'axo_id' => $axo_id))) !== false)
            {
                if ($rs->num_rows() === 0) // create link
                {
                    if (!$this->_CI->db->insert($this->_Tables['access_actions'], array('access_id' => $access_id, 'axo_id' => $axo_id, 'allow' => $allow)))
                        return false;
                }
                else // Modify existing link
                {
                    $row = $rs->row();
                    
                    if ($row->allow != $allow)
                        if (!$this->_CI->db->update($this->_Tables['access_actions'], array('allow' => $allow), array('id' => $row->id)))
                            return false;
                }
                
                return true;
            }
            else
                return false;
        }
        else
            return true;
}

Replace with:

Code:

if ($axo !== null)
        {
            if (is_array($axo))
            {
                foreach ($axo as $axo_id)
                {
                    $this->_set_helper($access_id, $axo_id, $allow);
                }
            }
            
            else
                $this->_set_helper($access_id, $axo_id, $allow);
            
        }
        else
            return true;
    }  
    
    function _set_helper($access_id, $axo_id, $allow)
    {
        if (($rs = $this->_CI->db->get_where($this->_Tables['access_actions'], array('access_id' => $access_id, 'axo_id' => $axo_id))) !== false)
        {
               if ($rs->num_rows() === 0) // create link
            {
                if (!$this->_CI->db->insert($this->_Tables['access_actions'], array('access_id' => $access_id, 'axo_id' => $axo_id, 'allow' => $allow)))
                    return false;
            }
            else // Modify existing link
            {
                $row = $rs->row();
                
                if ($row->allow != $allow)
                    if (!$this->_CI->db->update($this->_Tables['access_actions'], array('allow' => $allow), array('id' => $row->id)))
                        return false;
            }
            
            return true;
        }
        else
            return false;
    }

If you make new AXOs or ACOs you have to allow them (you can use 'all' again).

Tom.