geniv/nette-identity-authorizator

Identity authorizator class for Nette Framework

Identity authorizator

Installation

$ composer require geniv/nette-identity-authorizator

or, _(*1)

"geniv/nette-identity-authorizator": "^1.2"

require:, _(*2)

"php": ">=7.0",
"nette/nette": ">=2.4",
"dibi/dibi": ">=3.0"

Include in application

available source drivers:

• Identity\Authorizator\Drivers\ArrayDriver (array configure)
• Identity\Authorizator\Drivers\NeonDriver (neon file)
• Identity\Authorizator\Drivers\DibiDriver (dibi + cache)

policy:

• allow - all is deny, allow part
• deny - all is allow, deny part
• none - all is allow, ignore part

neon configure:, _(*3)

# identity authorizator
identityAuthorizator:
#   debugger: true
#   autowired: true
#   policy: allow
#   driver: Identity\Authorizator\Drivers\ArrayDriver([],[],[],[])
#   driver: Identity\Authorizator\Drivers\NeonDriver(%appDir%/acl.neon)
    driver: Identity\Authorizator\Drivers\DibiDriver(%tablePrefix%)

Authorizator interface: IIdentityAuthorizator, _(*4)

neon configure extension:, _(*5)

extensions:
    identityAuthorizator: Identity\Authorizator\Bridges\Nette\Extension

presenters:, _(*6)

use AuthorizatorTrait;      // trait for add ACL from Tracy


$acl = $this->user->getAuthorizator();
$acl->isAllowed('role', 'resource', 'privilege');

$this->user->isAllowed('resource', 'privilege');

usage:, _(*7)

<span n:if="$user->isAllowed('resource', 'privilege')">...</span>

generic usage on security base presenter:, _(*8)

$acl = $this->user->getAuthorizator();
// manual set allowed with internal resolve policy
$acl->setAllowed(IAuthorizator::ALL, 'Homepage');
$acl->setAllowed(IAuthorizator::ALL, 'Login');

if (!$this->user->isAllowed($this->name, $this->action)) {
    // NOT ALLOWED
}