blackicedbear/FHC-Core
1
0
Fork 0
mirror of https://github.com/FH-Complete/FHC-Core.git synced 2026-06-01 20:29:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

- Changed AuthLib->loginASByPersonId: now if to the given person_id is linked a uid, then permissions are checked using the uid

Browse Source
This commit is contained in:
Paolo
2019-03-22 11:54:25 +01:00
parent 3abc2e2948
commit 9eaa0b66d7
1 changed files with 21 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
application/libraries/AuthLib.php
+21 -4
View File
@@ -106,15 +106,32 @@ class AuthLib
{
$this->_ci->load->library('PermissionLib'); // Loads permissions library
// Checks if the logged user is allowed to obtain the new identity
// Checks if the logged user is allowed to obtain the new identity by its person id
if ($this->_ci->permissionlib->isEntitledLoginASByPersonId($person_id))
{
// Create the authentication object with new identity data
$loginAS = $this->_createAuthObjByPerson(array('person_id' => $person_id));
if (isSuccess($loginAS))
if (isSuccess($loginAS)) // if successfully created
{
// Store the new authentication object in authentication session
setSessionElement(self::SESSION_NAME, self::SESSION_AUTH_OBJ, getData($loginAS));
$authObj = getData($loginAS); // get the authenticate object
if ($authObj->{self::AO_USERNAME} != null) // if the username is present
{
// Checks if the logged user is allowed to obtain the new identity by its uid
if ($this->_ci->permissionlib->isEntitledLoginASByUID($authObj->{self::AO_USERNAME}))
{
// Store the new authentication object in authentication session
setSessionElement(self::SESSION_NAME, self::SESSION_AUTH_OBJ, $authObj);
}
else // if does NOT have permissions
{
$loginAS = error('Not authenticated', AUTH_NOT_AUTHENTICATED);
}
}
else // otherwise it's NOT possible to check other permissions
{
// Store the new authentication object in authentication session
setSessionElement(self::SESSION_NAME, self::SESSION_AUTH_OBJ, $authObj);
}
}
}
}