class.ilObjBookingPoolAccess.php

Go to the documentation of this file.

<?php
 
/* Copyright (c) 1998-2012 ILIAS open source, Extended GPL, see docs/LICENSE */
 
 
include_once("./Services/Object/classes/class.ilObjectAccess.php");
require_once('./Services/WebAccessChecker/interfaces/interface.ilWACCheckingClass.php');
 
class ilObjBookingPoolAccess extends ilObjectAccess implements ilWACCheckingClass
{
    protected $user;
 
    protected $rbacsystem;
 
 
    public function __construct()
    {
        global $DIC;
 
        $this->user = $DIC->user();
        $this->rbacsystem = $DIC->rbac()->system();
    }
 
 
    public static function _getCommands()
    {
        $commands = array();
        $commands[] = array("permission" => "read", "cmd" => "render", "lang_var" => "show", "default" => true);
        $commands[] = array("permission" => "write", "cmd" => "render", "lang_var" => "edit_content");
        $commands[] = array("permission" => "write", "cmd" => "edit", "lang_var" => "settings");
        
        return $commands;
    }
    
    public static function _checkGoto($a_target)
    {
        global $DIC;
 
        $ilAccess = $DIC->access();
        
        $t_arr = explode("_", $a_target);
 
        if ($t_arr[0] != "book" || ((int) $t_arr[1]) <= 0) {
            return false;
        }
 
        if ($ilAccess->checkAccess("read", "", $t_arr[1])) {
            return true;
        }
        return false;
    }
 
    public function _checkAccess($a_cmd, $a_permission, $a_ref_id, $a_obj_id, $a_user_id = "")
    {
        $ilUser = $this->user;
        $rbacsystem = $this->rbacsystem;
 
        if ($a_user_id == "") {
            $a_user_id = $ilUser->getId();
        }
 
        // add no access info item and return false if access is not granted
        // $ilAccess->addInfoItem(IL_NO_OBJECT_ACCESS, $a_text, $a_data = "");
        //
        // for all RBAC checks use checkAccessOfUser instead the normal checkAccess-method:
        // $rbacsystem->checkAccessOfUser($a_user_id, $a_permission, $a_ref_id)
 
        //TODO refactor this: first check if the object is online and then the permissions.
        #22653
        if (($a_permission == "visible" || $a_permission == "read") && !$rbacsystem->checkAccessOfUser($a_user_id, 'write', $a_ref_id)) {
            include_once "Modules/BookingManager/classes/class.ilObjBookingPool.php";
            $pool = new ilObjBookingPool($a_ref_id);
            if ($pool->isOffline()) {
                return false;
            }
        }
 
        return true;
    }
 
    public function canBeDelivered(ilWACPath $ilWACPath)
    {
 
        // we return always false, since the files in the file/ and post/ directoies
        // are server by php (they could/should be moved to the data dir outside of the web doc root)
        return false;
    }
}