Collaboration diagram for ilLDAPRoleAssignmentRule:

Public Member Functions
	matches ($a_user_data)
	Check if a rule matches. More...

	setRoleId ($a_role_id)
	set role id More...

	getRoleId ()
	get role id More...

	getRuleId ()
	get id More...

	setServerId ($a_id)
	set server id More...

	getServerId ()
	get server id More...

	setType ($a_type)
	set type More...

	getType ()
	getType More...

	setDN ($a_dn)
	set dn More...

	getDN ()
	get dn More...

	setMemberAttribute ($a_attribute)
	@access public More...

	getMemberAttribute ()
	get attribute More...

	setMemberIsDN ($a_status)
	set member attribute is dn More...

	isMemberAttributeDN ()
	is member attribute dn More...

	setAttributeName ($a_name)
	set attribute name More...

	getAttributeName ()
	get attribute name More...

	setAttributeValue ($a_value)
	set attribute value More...

	getAttributeValue ()
	get atrtibute value More...

	enableAddOnUpdate ($a_status)

	isAddOnUpdateEnabled ()

	enableRemoveOnUpdate ($a_status)

	isRemoveOnUpdateEnabled ()

	setPluginId ($a_id)

	getPluginId ()

	isPluginActive ()

	conditionToString ()
	condition to string More...

	create ()
	create More...

	update ()
	update More...

	validate ()
	validate More...

	delete ()
	delete rule More...

Static Public Member Functions
static	_getInstanceByRuleId ($a_rule_id)
	get instance by rule id More...

static	hasRulesForUpdate ()
	Check if there any rule for updates. More...

static	_getRules ($a_server_id)
	Get all rules. More...

Data Fields
const	TYPE_GROUP = 1

const	TYPE_ATTRIBUTE = 2

const	TYPE_PLUGIN = 3

Protected Member Functions
	wildcardCompare ($a_str1, $a_str2)

Private Member Functions
	__construct ($a_id=0)
	Constructor. More...

	isGroupMember ($a_user_data)
	Check if user is member of specific group. More...

	read ()
	load from db More...

Private Attributes
	$logger = null

	$db = null

	$server_id = 0

	$plugin_active = false

	$add_on_update = false

	$remove_on_update = false

	$plugin_id = 0

Static Private Attributes
static	$instances = null

Detailed Description

Author: Stefan Meyer meyer.nosp@m.@lei.nosp@m.fos.c.nosp@m.om

Definition at line 10 of file class.ilLDAPRoleAssignmentRule.php.

Constructor & Destructor Documentation

◆ __construct()

ilLDAPRoleAssignmentRule::__construct ( $a_id = 0 )

private

Constructor.

@access private

Parameters

int rule id

Definition at line 42 of file class.ilLDAPRoleAssignmentRule.php.

    {
        $this->db = $GLOBALS['DIC']->database();
        $this->logger = $GLOBALS['DIC']->logger()->auth();
 
        $this->rule_id = $a_id;
        $this->read();
    }

References $GLOBALS, and read().

Here is the call graph for this function:

Member Function Documentation

◆ _getInstanceByRuleId()

static ilLDAPRoleAssignmentRule::_getInstanceByRuleId ( $a_rule_id )

static

get instance by rule id

@access public

Parameters

int rule id

Definition at line 59 of file class.ilLDAPRoleAssignmentRule.php.

    {
        if (isset(self::$instances[$a_rule_id])) {
            return self::$instances[$a_rule_id];
        }
        return self::$instances[$a_rule_id] = new ilLDAPRoleAssignmentRule($a_rule_id);
    }

Referenced by _getRules(), ilLDAPSettingsGUI\confirmDeleteRules(), ilLDAPSettingsGUI\deleteRules(), ilLDAPSettingsGUI\editRoleAssignment(), ilLDAPRoleAssignmentRules\getAssignmentsForCreation(), ilLDAPRoleAssignmentRules\getAssignmentsForUpdate(), ilLDAPSettingsGUI\loadRoleAssignmentRule(), and ilLDAPSettingsGUI\roleAssignments().

Here is the caller graph for this function:

◆ _getRules()

static ilLDAPRoleAssignmentRule::_getRules ( $a_server_id )

static

Get all rules.

@access public

Returns: ilLDAPRoleAssignmentRule

Definition at line 179 of file class.ilLDAPRoleAssignmentRule.php.

    {
        $ilDB = $GLOBALS['DIC']->database();
        
        $query = "SELECT rule_id FROM ldap_role_assignments " .
                "WHERE server_id = " . $ilDB->quote($a_server_id, 'integer');
        $res = $ilDB->query($query);
        while ($row = $res->fetchRow(ilDBConstants::FETCHMODE_OBJECT)) {
            $rules[] = self::_getInstanceByRuleId($row->rule_id);
        }
        return $rules ? $rules : array();
    }

References $GLOBALS, $ilDB, $query, $res, $row, _getInstanceByRuleId(), and ilDBConstants\FETCHMODE_OBJECT.

Referenced by ilLDAPServer\delete(), ilLDAPSettingsGUI\getRoleAssignmentTable(), and ilLDAPSettingsGUI\roleAssignments().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ conditionToString()

ilLDAPRoleAssignmentRule::conditionToString ( )

condition to string

@access public

Definition at line 430 of file class.ilLDAPRoleAssignmentRule.php.

    {
        $lng = $GLOBALS['DIC']->language();
        
        switch ($this->getType()) {
            case self::TYPE_PLUGIN:
                return $lng->txt('ldap_plugin_id') . ': ' . $this->getPluginId();
            
            case self::TYPE_GROUP:
                $dn_arr = explode(',', $this->getDN());
                return $dn_arr[0];
                
            
            case self::TYPE_ATTRIBUTE:
                return $this->getAttributeName() . '=' . $this->getAttributeValue();
        }
    }

References $GLOBALS, $lng, getAttributeName(), getAttributeValue(), getDN(), getPluginId(), getType(), TYPE_ATTRIBUTE, TYPE_GROUP, and TYPE_PLUGIN.

Here is the call graph for this function:

◆ create()

ilLDAPRoleAssignmentRule::create ( )

create

@access public

Parameters

Definition at line 456 of file class.ilLDAPRoleAssignmentRule.php.

    {
        $ilDB = $this->db;
        $next_id = $ilDB->nextId('ldap_role_assignments');
 
        $query = "INSERT INTO ldap_role_assignments (server_id,rule_id,type,dn,attribute,isdn,att_name,att_value,role_id, " .
            "add_on_update, remove_on_update, plugin_id ) " .
            "VALUES( " .
            $this->db->quote($this->getServerId(), 'integer') . ", " .
            $this->db->quote($next_id, 'integer') . ", " .
            $this->db->quote($this->getType(), 'integer') . ", " .
            $this->db->quote($this->getDN(), 'text') . ", " .
            $this->db->quote($this->getMemberAttribute(), 'text') . ", " .
            $this->db->quote($this->isMemberAttributeDN(), 'integer') . ", " .
            $this->db->quote($this->getAttributeName(), 'text') . ", " .
            $this->db->quote($this->getAttributeValue(), 'text') . ", " .
            $this->db->quote($this->getRoleId(), 'integer') . ", " .
            $this->db->quote($this->isAddOnUpdateEnabled(), 'integer') . ', ' .
            $this->db->quote($this->isRemoveOnUpdateEnabled(), 'integer') . ', ' .
            $this->db->quote($this->getPluginId(), 'integer') . ' ' .
            ")";
        $res = $ilDB->manipulate($query);
        $this->rule_id = $next_id;
                
        return true;
    }

References $db, $ilDB, $query, $res, getAttributeName(), getAttributeValue(), getDN(), getMemberAttribute(), getPluginId(), getRoleId(), getServerId(), getType(), isAddOnUpdateEnabled(), isMemberAttributeDN(), and isRemoveOnUpdateEnabled().

Here is the call graph for this function:

◆ delete()

ilLDAPRoleAssignmentRule::delete ( )

delete rule

@access public

Definition at line 560 of file class.ilLDAPRoleAssignmentRule.php.

    {
        $ilDB = $this->db;
        
        $query = "DELETE FROM ldap_role_assignments " .
            "WHERE rule_id = " . $this->db->quote($this->getRuleId(), 'integer') . " ";
        $res = $ilDB->manipulate($query);
        return true;
    }

References $db, $ilDB, $query, $res, and getRuleId().

Here is the call graph for this function:

◆ enableAddOnUpdate()

ilLDAPRoleAssignmentRule::enableAddOnUpdate ( $a_status )

Definition at line 388 of file class.ilLDAPRoleAssignmentRule.php.

    {
        $this->add_on_update = $a_status;
    }

Referenced by read().

Here is the caller graph for this function:

◆ enableRemoveOnUpdate()

ilLDAPRoleAssignmentRule::enableRemoveOnUpdate ( $a_status )

Definition at line 398 of file class.ilLDAPRoleAssignmentRule.php.

    {
        $this->remove_on_update = $a_status;
    }

Referenced by read().

Here is the caller graph for this function:

◆ getAttributeName()

ilLDAPRoleAssignmentRule::getAttributeName ( )

get attribute name

@access public

Definition at line 360 of file class.ilLDAPRoleAssignmentRule.php.

    {
        return $this->attribute_name;
    }

Referenced by conditionToString(), create(), matches(), update(), and validate().

Here is the caller graph for this function:

◆ getAttributeValue()

ilLDAPRoleAssignmentRule::getAttributeValue ( )

get atrtibute value

@access public

Definition at line 383 of file class.ilLDAPRoleAssignmentRule.php.

    {
        return $this->attribute_value;
    }

Referenced by conditionToString(), create(), matches(), update(), and validate().

Here is the caller graph for this function:

◆ getDN()

ilLDAPRoleAssignmentRule::getDN ( )

get dn

@access public

Definition at line 291 of file class.ilLDAPRoleAssignmentRule.php.

    {
        return $this->dn;
    }

Referenced by conditionToString(), create(), isGroupMember(), update(), and validate().

Here is the caller graph for this function:

◆ getMemberAttribute()

ilLDAPRoleAssignmentRule::getMemberAttribute ( )

get attribute

@access public

Definition at line 314 of file class.ilLDAPRoleAssignmentRule.php.

    {
        return $this->member_attribute;
    }

Referenced by create(), isGroupMember(), update(), and validate().

Here is the caller graph for this function:

◆ getPluginId()

ilLDAPRoleAssignmentRule::getPluginId ( )

Definition at line 413 of file class.ilLDAPRoleAssignmentRule.php.

    {
        return $this->plugin_id;
    }

References $plugin_id.

Referenced by conditionToString(), create(), matches(), update(), and validate().

Here is the caller graph for this function:

◆ getRoleId()

ilLDAPRoleAssignmentRule::getRoleId ( )

get role id

@access public

Definition at line 210 of file class.ilLDAPRoleAssignmentRule.php.

    {
        return $this->role_id;
    }

Referenced by create(), matches(), update(), and validate().

Here is the caller graph for this function:

◆ getRuleId()

ilLDAPRoleAssignmentRule::getRuleId ( )

get id

@access public

Definition at line 221 of file class.ilLDAPRoleAssignmentRule.php.

    {
        return $this->rule_id;
    }

Referenced by delete(), read(), and update().

Here is the caller graph for this function:

◆ getServerId()

ilLDAPRoleAssignmentRule::getServerId ( )

get server id

@access public

Definition at line 244 of file class.ilLDAPRoleAssignmentRule.php.

    {
        return $this->server_id;
    }

References $server_id.

Referenced by create(), isGroupMember(), and update().

Here is the caller graph for this function:

◆ getType()

ilLDAPRoleAssignmentRule::getType ( )

getType

@access public

Parameters

Definition at line 268 of file class.ilLDAPRoleAssignmentRule.php.

    {
        return $this->type;
    }

References $type.

Referenced by conditionToString(), create(), isPluginActive(), matches(), update(), and validate().

Here is the caller graph for this function:

◆ hasRulesForUpdate()

static ilLDAPRoleAssignmentRule::hasRulesForUpdate ( )

static

Check if there any rule for updates.

Returns

Definition at line 71 of file class.ilLDAPRoleAssignmentRule.php.

    {
        global $ilDB;
        
        $query = 'SELECT COUNT(*) num FROM ldap_role_assignments ' .
            'WHERE add_on_update = 1 ' .
            'OR remove_on_update = 1 ';
        $res = $ilDB->query($query);
        $row = $res->fetchRow(ilDBConstants::FETCHMODE_OBJECT);
        return $row->num > 0;
    }

References $ilDB, $query, $res, $row, and ilDBConstants\FETCHMODE_OBJECT.

Referenced by ilLDAPUserSynchronisation\isUpdateRequired(), and ilAuthContainerApache\updateRequired().

Here is the caller graph for this function:

◆ isAddOnUpdateEnabled()

ilLDAPRoleAssignmentRule::isAddOnUpdateEnabled ( )

Definition at line 393 of file class.ilLDAPRoleAssignmentRule.php.

    {
        return (bool) $this->add_on_update;
    }

References $add_on_update.

Referenced by create(), and update().

Here is the caller graph for this function:

◆ isGroupMember()

ilLDAPRoleAssignmentRule::isGroupMember ( $a_user_data )

private

Check if user is member of specific group.

@access private

Parameters

array	user data
array	user_data

Definition at line 138 of file class.ilLDAPRoleAssignmentRule.php.

    {
        if ($this->isMemberAttributeDN()) {
            $user_cmp = $a_user_data['dn'];
        } else {
            $user_cmp = $a_user_data['ilExternalAccount'];
        }
        
        include_once('Services/LDAP/classes/class.ilLDAPQuery.php');
        include_once('Services/LDAP/classes/class.ilLDAPServer.php');
                
        $server = ilLDAPServer::getInstanceByServerId($this->getServerId());
        
        try {
            $query = new ilLDAPQuery($server);
            $query->bind();
            $res = $query->query(
                $this->getDN(),
                sprintf(
                                    '(%s=%s)',
                                    $this->getMemberAttribute(),
                                    $user_cmp
                                ),
                IL_LDAP_SCOPE_BASE,
                array('dn')
            );
            return $res->numRows() ? true : false;
        } catch (ilLDAPQueryException $e) {
            $this->logger->warning(': Caught Exception: ' . $e->getMessage());
            return false;
        }
    }

References $query, $res, $server, getDN(), ilLDAPServer\getInstanceByServerId(), getMemberAttribute(), getServerId(), IL_LDAP_SCOPE_BASE, isMemberAttributeDN(), and sprintf.

Referenced by matches().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ isMemberAttributeDN()

ilLDAPRoleAssignmentRule::isMemberAttributeDN ( )

is member attribute dn

@access public

Definition at line 337 of file class.ilLDAPRoleAssignmentRule.php.

    {
        return (bool) $this->member_is_dn;
    }

Referenced by create(), isGroupMember(), and update().

Here is the caller graph for this function:

◆ isPluginActive()

ilLDAPRoleAssignmentRule::isPluginActive ( )

Definition at line 418 of file class.ilLDAPRoleAssignmentRule.php.

    {
        return (bool) $this->getType() == self::TYPE_PLUGIN;
    }

References getType(), and TYPE_PLUGIN.

Here is the call graph for this function:

◆ isRemoveOnUpdateEnabled()

ilLDAPRoleAssignmentRule::isRemoveOnUpdateEnabled ( )

Definition at line 403 of file class.ilLDAPRoleAssignmentRule.php.

    {
        return (bool) $this->remove_on_update;
    }

References $remove_on_update.

Referenced by create(), and update().

Here is the caller graph for this function:

◆ matches()

ilLDAPRoleAssignmentRule::matches ( $a_user_data )

Check if a rule matches.

Returns

Parameters

object $a_user_data

Definition at line 88 of file class.ilLDAPRoleAssignmentRule.php.

    {
        switch ($this->getType()) {
            case self::TYPE_PLUGIN:
                include_once './Services/LDAP/classes/class.ilLDAPRoleAssignmentRules.php';
                return ilLDAPRoleAssignmentRules::callPlugin($this->getPluginId(), $a_user_data);
                
            case self::TYPE_ATTRIBUTE:
                
                $attn = strtolower($this->getAttributeName());
                
                if (!isset($a_user_data[$attn])) {
                    return false;
                }
 
                if (!is_array($a_user_data[$attn])) {
                    $attribute_val = array(0 => $a_user_data[$attn]);
                } else {
                    $attribute_val = $a_user_data[$attn];
                }
                
                foreach ($attribute_val as $value) {
                    if ($this->wildcardCompare(trim($this->getAttributeValue()), trim($value))) {
                        $this->logger->debug(': Found role mapping: ' . ilObject::_lookupTitle($this->getRoleId()));
                        return true;
                    }
                }
                return false;
 
            case self::TYPE_GROUP:
                return $this->isGroupMember($a_user_data);
                
        }
    }

References ilObject\_lookupTitle(), ilLDAPRoleAssignmentRules\callPlugin(), getAttributeName(), getAttributeValue(), getPluginId(), getRoleId(), getType(), isGroupMember(), TYPE_ATTRIBUTE, TYPE_GROUP, TYPE_PLUGIN, and wildcardCompare().

Here is the call graph for this function:

◆ read()

ilLDAPRoleAssignmentRule::read ( )

private

load from db

@access private

Definition at line 575 of file class.ilLDAPRoleAssignmentRule.php.

    {
        $ilDB = $this->db;
        
        $query = "SELECT * FROM ldap_role_assignments " .
            "WHERE rule_id = " . $this->db->quote($this->getRuleId(), 'integer') . " ";
        
        $res = $this->db->query($query);
        while ($row = $res->fetchRow(ilDBConstants::FETCHMODE_OBJECT)) {
            $this->setServerId($row->server_id);
            $this->setType($row->type);
            $this->setDN($row->dn);
            $this->setMemberAttribute($row->attribute);
            $this->setMemberIsDN($row->isdn);
            $this->setAttributeName($row->att_name);
            $this->setAttributeValue($row->att_value);
            $this->setRoleId($row->role_id);
            $this->enableAddOnUpdate($row->add_on_update);
            $this->enableRemoveOnUpdate($row->remove_on_update);
            $this->setPluginId($row->plugin_id);
        }
    }

References $db, $ilDB, $query, $res, $row, enableAddOnUpdate(), enableRemoveOnUpdate(), ilDBConstants\FETCHMODE_OBJECT, getRuleId(), setAttributeName(), setAttributeValue(), setDN(), setMemberAttribute(), setMemberIsDN(), setPluginId(), setRoleId(), setServerId(), and setType().

Referenced by __construct().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ setAttributeName()

ilLDAPRoleAssignmentRule::setAttributeName ( $a_name )

set attribute name

@access public

Parameters

Definition at line 349 of file class.ilLDAPRoleAssignmentRule.php.

    {
        $this->attribute_name = $a_name;
    }

Referenced by read().

Here is the caller graph for this function:

◆ setAttributeValue()

ilLDAPRoleAssignmentRule::setAttributeValue ( $a_value )

set attribute value

@access public

Parameters

string value

Definition at line 372 of file class.ilLDAPRoleAssignmentRule.php.

    {
        $this->attribute_value = $a_value;
    }

Referenced by read().

Here is the caller graph for this function:

◆ setDN()

ilLDAPRoleAssignmentRule::setDN ( $a_dn )

set dn

@access public

Parameters

string dn

Definition at line 280 of file class.ilLDAPRoleAssignmentRule.php.

    {
        $this->dn = $a_dn;
    }

Referenced by read().

Here is the caller graph for this function:

◆ setMemberAttribute()

ilLDAPRoleAssignmentRule::setMemberAttribute ( $a_attribute )

@access public

Parameters

Definition at line 303 of file class.ilLDAPRoleAssignmentRule.php.

    {
        $this->member_attribute = $a_attribute;
    }

Referenced by read().

Here is the caller graph for this function:

◆ setMemberIsDN()

ilLDAPRoleAssignmentRule::setMemberIsDN ( $a_status )

set member attribute is dn

@access public

Parameters

bool status

Definition at line 326 of file class.ilLDAPRoleAssignmentRule.php.

    {
        $this->member_is_dn = $a_status;
    }

Referenced by read().

Here is the caller graph for this function:

◆ setPluginId()

ilLDAPRoleAssignmentRule::setPluginId ( $a_id )

Definition at line 408 of file class.ilLDAPRoleAssignmentRule.php.

    {
        $this->plugin_id = $a_id;
    }

Referenced by read().

Here is the caller graph for this function:

◆ setRoleId()

ilLDAPRoleAssignmentRule::setRoleId ( $a_role_id )

set role id

@access public

Parameters

int	role id of global role

Definition at line 199 of file class.ilLDAPRoleAssignmentRule.php.

    {
        $this->role_id = $a_role_id;
    }

Referenced by read().

Here is the caller graph for this function:

◆ setServerId()

ilLDAPRoleAssignmentRule::setServerId ( $a_id )

set server id

@access public

Parameters

int server id

Definition at line 233 of file class.ilLDAPRoleAssignmentRule.php.

    {
        $this->server_id = $a_id;
    }

Referenced by read().

Here is the caller graph for this function:

◆ setType()

ilLDAPRoleAssignmentRule::setType ( $a_type )

set type

@access public

Parameters

int type

Definition at line 256 of file class.ilLDAPRoleAssignmentRule.php.

    {
        $this->type = $a_type;
    }

References $a_type.

Referenced by read().

Here is the caller graph for this function:

◆ update()

ilLDAPRoleAssignmentRule::update ( )

update

@access public

Definition at line 489 of file class.ilLDAPRoleAssignmentRule.php.

    {
        $ilDB = $this->db;
        
        $query = "UPDATE ldap_role_assignments " .
            "SET server_id = " . $this->db->quote($this->getServerId(), 'integer') . ", " .
            "type = " . $this->db->quote($this->getType(), 'integer') . ", " .
            "dn = " . $this->db->quote($this->getDN(), 'text') . ", " .
            "attribute = " . $this->db->quote($this->getMemberAttribute(), 'text') . ", " .
            "isdn = " . $this->db->quote($this->isMemberAttributeDN(), 'integer') . ", " .
            "att_name = " . $this->db->quote($this->getAttributeName(), 'text') . ", " .
            "att_value = " . $this->db->quote($this->getAttributeValue(), 'text') . ", " .
            "role_id = " . $this->db->quote($this->getRoleId(), 'integer') . ", " .
            "add_on_update = " . $this->db->quote($this->isAddOnUpdateEnabled(), 'integer') . ', ' .
            'remove_on_update = ' . $this->db->quote($this->isRemoveOnUpdateEnabled(), 'integer') . ', ' .
            'plugin_id = ' . $this->db->quote($this->getPluginId(), 'integer') . ' ' .
            "WHERE rule_id = " . $this->db->quote($this->getRuleId(), 'integer') . " ";
        $res = $ilDB->manipulate($query);
        return true;
    }

References $db, $ilDB, $query, $res, getAttributeName(), getAttributeValue(), getDN(), getMemberAttribute(), getPluginId(), getRoleId(), getRuleId(), getServerId(), getType(), isAddOnUpdateEnabled(), isMemberAttributeDN(), and isRemoveOnUpdateEnabled().

Here is the call graph for this function:

◆ validate()

ilLDAPRoleAssignmentRule::validate ( )

validate

@access public

Definition at line 516 of file class.ilLDAPRoleAssignmentRule.php.

    {
        global $ilErr;
        
        $ilErr->setMessage('');
        
        if (!$this->getRoleId()) {
            $ilErr->setMessage('fill_out_all_required_fields');
            return false;
        }
        switch ($this->getType()) {
            case self::TYPE_GROUP:
                if (!strlen($this->getDN()) or !strlen($this->getMemberAttribute())) {
                    $ilErr->setMessage('fill_out_all_required_fields');
                    return false;
                }
                break;
            case self::TYPE_ATTRIBUTE:
                if (!strlen($this->getAttributeName()) or !strlen($this->getAttributeValue())) {
                    $ilErr->setMessage('fill_out_all_required_fields');
                    return false;
                }
                break;
                
            case self::TYPE_PLUGIN:
                if (!$this->getPluginId()) {
                    $ilErr->setMessage('ldap_err_missing_plugin_id');
                    return false;
                }
                break;
                
            default:
                $ilErr->setMessage('ldap_no_type_given');
                return false;
        }
        return true;
    }

References $ilErr, getAttributeName(), getAttributeValue(), getDN(), getMemberAttribute(), getPluginId(), getRoleId(), getType(), TYPE_ATTRIBUTE, TYPE_GROUP, and TYPE_PLUGIN.

Here is the call graph for this function:

◆ wildcardCompare()

ilLDAPRoleAssignmentRule::wildcardCompare	(	$a_str1,
		$a_str2
	)

protected

Definition at line 123 of file class.ilLDAPRoleAssignmentRule.php.

    {
        $pattern = str_replace('*', '.*?', $a_str1);
        $this->logger->debug(': Replace pattern:' . $pattern . ' => ' . $a_str2);
        return (bool) preg_match('/^' . $pattern . '$/i', $a_str2);
    }