phpPeanuts  2.2.0
phpPeanuts framework
 All Data Structures Namespaces Files Functions Variables
SecurityManager Class Reference

Inherits PntSecurityManager.

Additional Inherited Members

- Public Member Functions inherited from PntSecurityManager
 __construct ($baseUrl, $tokenSalt)
 
 getAuthenticator ()
 
 initAuthenticator ()
 
 isAuthenticated ($request, $scout)
 
 authenticate ($username, $password)
 
 newFootprintId ()
 
 checkAccessRef ($handler, $request, $scout)
 
 checkRefEqual ($httpRef, $footprint)
 
 isEntryPage ($handler, $request)
 
 checkAccessApp ($path)
 
 checkViewInDomainDir ($path)
 
 checkModifyInDomainDir ($path)
 
 checkViewClass ($objects, $clsDesc)
 
 checkModifyClass ($objects, $clsDesc)
 
 checkCreateClass ($objects, $clsDesc)
 
 checkEditClass ($objects, $clsDesc)
 
 checkDeleteClass ($objects, $clsDesc)
 
 checkViewObject ($object, $clsDesc)
 
 checkCreateObject ($object, $clsDesc)
 
 checkEditObject ($object, $clsDesc)
 
 checkDeleteObject ($object, $clsDesc)
 
 checkViewProperty ($object, $propDesc)
 
 checkEditProperty ($object, $propDesc)
 
 checkSelectProperty ($objects, $clsDesc, $propertyName)
 
 getMessageDeniedAccessApp ($path)
 
 getMessageDeniedViewInDomainDir ($path)
 
 getMessageDeniedModifyInDomainDir ($path)
 
 getMessageDeniedViewClass ($objects, $clsDesc)
 
 getMessageDeniedModifyClass ($objects, $clsDesc)
 
 getMessageDeniedCreateClass ($objects, $clsDesc)
 
 getMessageDeniedEditClass ($objects, $clsDesc)
 
 getMessageDeniedDeleteClass ($objects, $clsDesc)
 
 getMessageDeniedViewObject ($object, $clsDesc)
 
 getMessageDeniedCreateObject ($object, $clsDesc)
 
 getMessageDeniedEditObject ($object, $clsDesc)
 
 getMessageDeniedDeleteObject ($object, $clsDesc)
 
 getMessageDeniedViewProperty ($object, $propDesc)
 
 getMessageDeniedViewPropertyValues ($object, $propDesc)
 
 getMessageDeniedEditProperty ($object, $propDesc)
 
 getMessageDeniedSelectProperty ($objects, $clsDesc, $propertyName)
 
 getMessageDeniedAccessRef ($pntRef)
 
 getMessageFootprintMismatch ($httpRef, $footprint)
 
- Data Fields inherited from PntSecurityManager
 $baseUrl
 
 $tokenSalt
 
 $authenticator
 

Detailed Description

Objects of this class are designed to give detailed control over what a user can see and do by overriding methods here. Default is no authentication and allowing access to everything.

Currently the default user interface does check on invocation of Pages, Dialogs and Actions, hides multi value property buttons and tables, but does not hide or make readOnly widgets, fields and columns and does not ghost Create, Update and Delete buttons.

Check methods should return an appropriate error message to be displayed in the access denied error page

This concrete subclass is here to keep de application developers code separated from the framework code.

See Also
http://www.phppeanuts.org/site/index_php/Menu/178 Framework code is in the superclass to provide defaults. This class may be copied to an application folder to make application specific overrides.

Overrides specific to the examples on the internet: because external links may exist, each page must be accessable directly.


The documentation for this class was generated from the following file: