* * @since 1.0 */ class PermissionController extends Controller { /** * {@inheritdoc} */ public function behaviors() { return [ 'verbs' => [ 'class' => VerbFilter::className(), 'actions' => [ 'delete' => ['post'], ], ], ]; } /** * Lists all AuthItem models. * * @return mixed */ public function actionIndex() { $searchModel = new AuthItemSearch(['type' => Item::TYPE_PERMISSION]); $dataProvider = $searchModel->search(Yii::$app->getRequest()->getQueryParams()); return $this->render('index', [ 'dataProvider' => $dataProvider, 'searchModel' => $searchModel, ]); } /** * Displays a single AuthItem model. * * @param string $id * * @return mixed */ public function actionView($id) { $model = $this->findModel($id); return $this->render('view', ['model' => $model]); } /** * Creates a new AuthItem model. * If creation is successful, the browser will be redirected to the 'view' page. * * @return mixed */ public function actionCreate() { $model = new AuthItem(null); $model->type = Item::TYPE_PERMISSION; if ($model->load(Yii::$app->getRequest()->post()) && $model->save()) { MenuHelper::invalidate(); return $this->redirect(['view', 'id' => $model->name]); } else { return $this->render('create', ['model' => $model]); } } /** * Updates an existing AuthItem model. * If update is successful, the browser will be redirected to the 'view' page. * * @param string $id * * @return mixed */ public function actionUpdate($id) { $model = $this->findModel($id); if ($model->load(Yii::$app->getRequest()->post()) && $model->save()) { MenuHelper::invalidate(); return $this->redirect(['view', 'id' => $model->name]); } return $this->render('update', ['model' => $model]); } /** * Deletes an existing AuthItem model. * If deletion is successful, the browser will be redirected to the 'index' page. * * @param string $id * * @return mixed */ public function actionDelete($id) { $model = $this->findModel($id); Yii::$app->getAuthManager()->remove($model->item); MenuHelper::invalidate(); return $this->redirect(['index']); } /** * Assign or remove items. * * @param string $id * @param string $action * * @return array */ public function actionAssign() { $post = Yii::$app->getRequest()->post(); $id = $post['id']; $action = $post['action']; $roles = $post['roles']; $manager = Yii::$app->getAuthManager(); $parent = $manager->getPermission($id); $error = []; if ($action == 'assign') { foreach ($roles as $role) { $child = $manager->getPermission($role); try { $manager->addChild($parent, $child); } catch (\Exception $exc) { $error[] = $exc->getMessage(); } } } else { foreach ($roles as $role) { $child = $manager->getPermission($role); try { $manager->removeChild($parent, $child); } catch (\Exception $exc) { $error[] = $exc->getMessage(); } } } MenuHelper::invalidate(); Yii::$app->getResponse()->format = Response::FORMAT_JSON; return[ 'type' => 'S', 'errors' => $error, ]; } /** * Search role. * * @param string $id * @param string $target * @param string $term * * @return array */ public function actionSearch($id, $target, $term = '') { $result = [ 'Permission' => [], 'Routes' => [], ]; $authManager = Yii::$app->getAuthManager(); if ($target == 'avaliable') { $children = array_keys($authManager->getChildren($id)); $children[] = $id; foreach ($authManager->getPermissions() as $name => $role) { if (in_array($name, $children)) { continue; } if (empty($term) or strpos($name, $term) !== false) { $result[$name[0] === '/' ? 'Routes' : 'Permissions'][$name] = $name; } } } else { foreach ($authManager->getChildren($id) as $name => $child) { if (empty($term) or strpos($name, $term) !== false) { $result[$name[0] === '/' ? 'Routes' : 'Permissions'][$name] = $name; } } } Yii::$app->getResponse()->format = Response::FORMAT_JSON; return array_filter($result); } /** * Finds the AuthItem model based on its primary key value. * If the model is not found, a 404 HTTP exception will be thrown. * * @param string $id * * @return AuthItem the loaded model * * @throws HttpException if the model cannot be found */ protected function findModel($id) { $item = Yii::$app->getAuthManager()->getPermission($id); if ($item) { return new AuthItem($item); } else { throw new NotFoundHttpException('The requested page does not exist.'); } } }