[Sommaire] [Imprimer]

   1  <?php
   2  /*****************************************************
   3  * This file is part of Agora, web based content management system.
   4  *
   5  * Agora is free software; you can redistribute it and/or modify
   6  * it under the terms of the GNU General Public License as published by
   7  * the Free Software Foundation; version 2 of the License.
   8  *
   9  * Agora is distributed in the hope that it will be useful,
  10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  12  * GNU General Public License for more details (file "COPYING").
  13  *
  14  * Copyright © Arnaud Martin, Antoine Pitrou et Philippe Rivière.
  15  * List of authors detailed in "copyright_fr.html" file.
  16  * E-mail : agora@sig.premier-ministre.gouv.fr
  17  * Web site : http://www.agora.gouv.fr
  18  *****************************************************/
  19  // Base class for Action "modifierAuteur".
  20  //
  21  
  22  if (defined("_AUTHORIZATION_MODIFIER_AUTEUR_COMMON"))
  23      return;
  24  
  25  define("_AUTHORIZATION_MODIFIER_AUTEUR_COMMON", "1");
  26  
  27  require_once dirname(__FILE__). "/../Action.php";
  28  require_once(dirname(__FILE__). "/../../bd/inc_profil_factory.php");
  29  
  30  /**
  31   * modifierAuteur is an implementation for Common of "modifierAuteur" Action.
  32   * @package    authorization/common
  33   * @author     François Xavier LACROIX <fxlacroix@clever-age.com>
  34   * @access    public
  35   */
  36  class modifierAuteur_common extends Action {
  37  
  38      // {{{ _isAuthorized()
  39  
  40      /**
  41       * Get if a user is authorized to access to a command
  42       * @access private
  43       * @return bool
  44       */
  45  
  46  	function _isAuthorized () {
  47          $profilMetier = &recuperer_instance_profil();
  48          $monProfil = $profilMetier->getProfilForIntitule('item_administrateur');
  49  
  50          if (PEAR::isError($monProfil)) {
  51              die($monProfil->getMessage());
  52          }
  53  
  54          $authorization = &recuperer_instance_authorization('isAuthorizedToManageAuteur', $this->_user->getAuteurId(),
  55                                                             array('id_auteur_slave' => $this->_parameters['id_auteur']));
  56          return (($authorization->isAuthorizedAction()AND $this->_parameters['auteurProfil']
  57                      < $this->_user->getProfil()AND $parameters['nouveauAuteurProfil']
  58                      < $this->_user->getProfil())OR $this->_user->getAuteurId()
  59                     == $this->_parameters['id_auteur']OR $this->_user->getProfil() == $monProfil->getPoids());
  60      }
  61  
  62  // }}} 
  63  
  64  }
  65  ?>