PHP Access::can方法代码示例

 public function action_delete()
 {
     $result = array('status' => false, 'error' => array());
     try {
         $input = Input::post();
         if (empty($input) || empty($input['id'])) {
             throw new Exception('You must specify a blog to delete.');
         }
         $blog = Model_Blog::find($input['id']);
         if (!$blog) {
             throw new Exception('Blog not found.');
         }
         if (!\Access::can('delete_any_blog', $this->user) && (!\Access::can('delete_own_blog', $this->user) || !Model_Agency_Contact::is_confirmed($blog->user_id, $this->user))) {
             throw new Exception('You are not authorized to delete this blog');
         }
         try {
             $blog->delete();
             $result['status'] = true;
         } catch (\Orm\ValidationFailed $ex) {
             $result['error'] = $ex->getMessage();
         } catch (Exception $ex) {
             $msg = $ex->getMessage();
             $result['error'] = $msg ? $msg : 'Oops, something went wrong.';
         }
     } catch (Exception $ex) {
         $result['error'] = $ex->getMessage();
     }
     return $this->response($result);
 }

 public static function load($blog_id = null, $user_id = null, $include_count = true, $offset = 0, $limit = BLOG_DISPLAY_LIMIT)
 {
     $filters = array();
     $current_user = \Warden::current_user();
     $result = array('data' => array(), 'count' => 0);
     if (empty($blog_id)) {
         if (empty($user_id)) {
             $filters['public_flag'] = true;
             //only load public blogs if not loading a specific user's blog
             if (!$current_user || !\Access::can('publicize_any_blog', $current_user)) {
                 $filters['publish_flag'] = true;
                 //only load published blogs if the user is not privileged to publicize any blog
             }
         } else {
             if (!$current_user || $user_id != $current_user->id) {
                 $filters['publish_flag'] = true;
                 //only load published blogs if the user is loading a blog that's not their own
             }
             $filters['user_id'] = $user_id;
             //load blogs for the specified user only
         }
         $result['data'] = static::get_where($filters, $offset, $limit);
     } else {
         $result['data'] = static::get_where(array('id' => $blog_id, 0, 1));
     }
     if (!empty($result['data'])) {
         $result['count'] = $include_count ? static::get_count($filters) : count($result['data']);
     }
     return $result;
 }

 public function action_login()
 {
     $this->template->title = 'User » Login';
     $this->template->content = $this->action_get_login_form();
     $post = Input::post();
     if (!empty($post)) {
         //get the destination path to redirect to upon login
         $destination = empty($_REQUEST['destination']) ? '/welcome' : $_REQUEST['destination'];
         $this->template->content->destination = $destination;
         //add server-side validation
         $validation = $this->template->content->validation;
         $validation->add_field('username_or_email', 'Username or Email', 'required');
         $validation->add_field('password', 'Password', 'required');
         if ($validation->run()) {
             try {
                 $authenticated_flag = false;
                 if ($this->user && \Access::can('impersonate_any_user', $this->user)) {
                     Warden::logout();
                     $authenticated_flag = Warden::force_login($validation->validated('username_or_email'), true);
                 } else {
                     $authenticated_flag = Warden::authenticate($validation->validated('username_or_email'), $validation->validated('password'), Input::post('remember_me'));
                 }
                 if ($authenticated_flag) {
                     Response::redirect(Uri::create($destination, array(), array(), false));
                 } else {
                     Session::set_flash('error', 'Invalid username/email or password entered.');
                 }
             } catch (Warden\Failure $failure) {
                 switch ($failure->reason()) {
                     case 'unconfirmed':
                         //user is unconfirmed - let them know they need to confirm and activate their account
                         Session::set_flash('error', $failure->getMessage());
                         $this->template->content = View::forge('user/unconfirmed');
                         $this->template->content->user = $failure->get_user();
                         $this->template->content->user->send_confirmation_instructions();
                         break;
                     case 'locked':
                         Session::set_flash('error', array('Your account has been locked due to too many consecutive failed login attempts.', 'Check your email for instructions on unlocking your account. Or you can wait a few days and try again.'));
                         break;
                     default:
                         Session::set_flash('error', $failure->getMessage());
                 }
             } catch (Exception $ex) {
                 Session::set_flash('error', $ex->getMessage());
             }
         } else {
             Session::set_flash('error', 'Invalid username/email or password entered.');
         }
     }
 }

<?php

$disabled_flag = $current_user && !\Access::can('impersonate_any_user', $current_user) ? true : false;
?>
<div id="login">
	<?php 
echo Form::open(array('action' => $disabled_flag ? false : Uri::create('user/login', array(), array(), \Config::get('ssl_enable')), 'id' => 'login-form'));
?>
		<h1 class="center">Sign In</h1>
		<?php 
echo Form::hidden('destination', $destination);
?>
		<?php 
echo Form::hidden('omniauth', '', array('id' => 'omniauth'));
?>
		<div class="input"><?php 
echo Form::input('username_or_email', $validation->input('username_or_email'), array('type' => 'text', 'id' => 'login_username_or_email', 'class' => 'text', 'placeholder' => 'Username or Email', 'disabled' => $disabled_flag));
?>
		</div>
		<div class="input"><?php 
echo Form::password('password', $validation->input('password'), array('id' => 'login_password', 'class' => 'text', 'placeholder' => 'Password', 'disabled' => $disabled_flag));
?>
		</div>
		<div class="input links">
			<span id="remember-me"><?php 
echo Form::checkbox('remember_me', false, array('id' => 'remember-me-checkbox'));
?>
<label for="remember-me-checkbox"> Remember Me</label></span>
			<span id="forgot-password"><a href="<?php 
echo Uri::create('user/forgot_password', array(), array(), \Config::get('ssl_enable'));
?>

 public function action_unlock()
 {
     if (!\Access::can('unlock_any_user', $this->user)) {
         //user must either be editing their own account, or have special privileges to edit someone else's
         \Response::redirect('/welcome/404');
     }
     $post = \Input::post();
     if (empty($post) || empty($post['user_id'])) {
         //user_id of user to unlock must be posted
         \Response::redirect('/welcome/404');
     }
     $user_id = $post['user_id'];
     try {
         //load the user, assign the new roles and save
         $user = $user_id == $this->user->id ? $this->user : \Warden\Model_User::find($user_id);
         if (!$user->is_access_locked()) {
             throw new Exception('User is not locked.');
         }
         $user->unlock_access(true);
         Session::set_flash('success', 'User is unlocked.');
     } catch (\MongoOrm\ValidationFailed $ex) {
         Session::set_flash('error', $ex->getMessage());
     } catch (Exception $ex) {
         $msg = $ex->getMessage();
         Session::set_flash('error', $msg ? $msg : 'Oops, something went wrong.');
     }
     \Response::redirect('/member/view/' . $user_id);
 }

 protected function load_blog_view($user_id, $blog_id = null)
 {
     $blogView = \View::forge('pages/blog');
     $results = Model_Blog::load($blog_id, $user_id);
     $blogView->is_confirmed = $this->user && $this->user->id == $user_id;
     $blogView->user_id = $this->user ? $this->user->id : $user_id;
     $blogView->blog_id = $blog_id;
     $blogView->blogs = $results['data'];
     $blogView->count = $results['count'];
     $blogView->is_public = empty($user_id) ? true : false;
     $blogView->can_edit_own = $this->user && \Access::can('edit_own_blog', $this->user);
     $blogView->can_edit_any = $this->user && \Access::can('edit_any_blog', $this->user);
     $blogView->can_delete_own = $this->user && \Access::can('delete_own_blog', $this->user);
     $blogView->can_delete_any = $this->user && \Access::can('delete_any_blog', $this->user);
     $blogView->can_make_own_public = $this->user && \Access::can('publicize_own_blog', $this->user);
     $blogView->can_make_any_public = $this->user && \Access::can('publicize_any_blog', $this->user);
     $blogView->addable = empty($blog_id) && $this->user && $blogView->can_edit_own && ($blogView->is_public && $blogView->can_make_own_public || $blogView->is_confirmed);
     //user can add their own blog
     $blogView->include_edit_form = $blogView->addable || $blogView->can_edit_any && $blogView->count;
     $blogView->force_public = $blogView->is_public && $blogView->can_make_any_public;
     $blogView->title = null;
     if ($blogView->include_edit_form) {
         $this->include_client_scripts(array('jquery_forms'));
     }
     return $blogView;
 }