roles.php

Aller à la documentation de ce fichier.

<?php

$visitor[] = array('ModuleName'=>'ezjscore', 'FunctionName'=>'run');
$visitor[] = array('ModuleName'=>'user', 'FunctionName'=>'password');
$visitor[] = array('ModuleName'=>'user', 'FunctionName'=>'preferences');
$visitor[] = array('ModuleName'=>'content', 'FunctionName'=>'read', 'limitations'=>array('Class'=>array('user'), 'Section'=>array('Users')));

$member[] = array('ModuleName'=>'content', 'FunctionName'=>'read', 'limitations'=>array('Class'=>array('user'), 'Section'=>array('Users')));
$member[] = array('ModuleName'=>'content', 'FunctionName'=>'edit', 'limitations'=>array('Class'=>array('user'), 'Section'=>array('Users')));

$creator[0]['ModuleName']   = 'content';
$creator[0]['FunctionName'] = 'create';
$creator[0]['limitations']  = array('Class'=>array('article'), 'Section'=>array('Standard','Users'));

$creator[1]['ModuleName']   = 'content';
$creator[1]['FunctionName'] = 'edit';
$creator[1]['limitations']  = array('Class'=>array('article'), 'Section'=>array('Standard','Users')); // manque Owner( Self )

$delegate[0]['ModuleName']   = 'pediatrician';
$delegate[0]['FunctionName'] = 'login';

$delegate[1]['ModuleName']   = 'registration';
$delegate[1]['FunctionName'] = 'register';

$delegate[2]['ModuleName']   = 'user';
$delegate[2]['FunctionName'] = 'login';

$maman[0]['ModuleName']   = 'content';
$maman[0]['FunctionName'] = 'read';
$maman[0]['limitations']  = array('Class'=>array('article'));

$maman[1]['ModuleName']   = 'content';
$maman[1]['FunctionName'] = 'read';
$maman[1]['limitations']  = array('Class'=>array('folder'), 'Section'=>array('Standard'));

$pediatrician[0]['ModuleName']   = 'content';
$pediatrician[0]['FunctionName'] = 'create';
$pediatrician[0]['limitations']  = array('Class'=>array('article'), 'Section'=>array('Standard','Users'));

$pediatrician[1]['ModuleName']   = 'ip';
$pediatrician[1]['FunctionName'] = 'publish';

$pediatrician[2]['ModuleName']   = 'ezjscore';
$pediatrician[2]['FunctionName'] = 'call';

$pediatrician[3]['ModuleName']   = 'content';
$pediatrician[3]['FunctionName'] = 'manage_locations';

$pediatrician[4]['ModuleName']   = 'user';
$pediatrician[4]['FunctionName'] = 'selfedit';

$pediatrician[5]['ModuleName']   = 'content';
$pediatrician[5]['FunctionName'] = 'remove';
$pediatrician[5]['limitations']  = array('Class'=>array('article')); // manque owner( Self )

$pediatrician[6]['ModuleName']   = 'ezjscore';
$pediatrician[6]['FunctionName'] = 'run';

$pediatrician[7]['ModuleName']   = 'user';
$pediatrician[7]['FunctionName'] = 'login';

$pediatrician[8]['ModuleName']   = 'content';
$pediatrician[8]['FunctionName'] = 'read';
$pediatrician[8]['limitations']  = array('Class'=>array('article', 'folder', 'user'), 'Section'=>array('Standard', 'Users'));

$publisher[0]['ModuleName'] = 'content';
$publisher[0]['FunctionName'] = 'move';

$publisher[1]['ModuleName'] = 'ezoe';
$publisher[1]['FunctionName'] = 'editor';

$limitPublisher = array('Class'=>array('article'), 'Section'=>array('Standard'));

$publisher[2]['ModuleName']   = 'content';
$publisher[2]['FunctionName'] = 'versionread';
$publisher[2]['limitations']  = $limitPublisher;

$publisher[3]['ModuleName']   = 'content';
$publisher[3]['FunctionName'] = 'remove';
$publisher[3]['limitations']  = $limitPublisher;

$publisher[4]['ModuleName']   = 'content';
$publisher[4]['FunctionName'] = 'manage_locations';
$publisher[4]['limitations']  = $limitPublisher;

$publisher[5]['ModuleName']   = 'user';
$publisher[5]['FunctionName'] = 'login';
$publisher[5]['limitations']  = array('SiteAccess' => 'private');

$roles = array('Visitor'=> $visitor, 'Member'=>$member, 'Content chooser'=>array(), 'Publisher'=>$publisher, 'Content creator front'=>$creator, 'Delegate'=>$delegate, 'Maman'=>$maman,'Pediatrician'=>$pediatrician);

$db = eZDB::instance();
$db->begin();

foreach ($roles as $roleName => $policies) {

    $originalRole  = eZRole::createNew();
    $temporaryRole = $originalRole->createTemporaryVersion();

    $temporaryRole->setAttribute( 'name' , $roleName );
    $temporaryRole->store();
    $originalRole->revertFromTemporaryVersion();

    foreach ($policies as $policy) {

        $policyObject = eZPolicy::createNew($originalRole->attribute('id'), array('ModuleName'=>$policy['ModuleName'],
                                                                                  'FunctionName'=>$policy['FunctionName']));

        foreach ($policy['limitations'] as $identifier => $values) {

            $limitationObject = eZPolicyLimitation::createNew($policyObject->attribute('id'), $identifier);

            foreach ($values as $value) {

                switch ($identifier) {

                    case 'ParentClass':
                    case 'Class':
                        $value = eZContentClass::fetchByIdentifier($value)->attribute('id');
                        break;

                    case 'SiteAccess':
                        $value = eZSys::ezcrc32($value);
                        break;

                    case 'Section':
                        $sections = eZSection::fetchFilteredList( array( 'name' => $value ), false, false, true );
                        $value    = $sections[0]->attribute('id');
                        break;

                    case 'Subtree':
                    case 'Node':
                    case 'Language':
                    case 'ParentDepth':
                        break;

                    default: throw new Exception('Limitation de permission inconnue: ' . $identifier);
                }
                eZPolicyLimitationValue::createNew($limitationObject->attribute('id'), $value);
            }
            $roles[] = $originalRole;
        }
    }
}
$db->commit();


$visitor = eZRole::fetchByName('Visitor');
$users   = eZContentObjectTreeNode::fetchByURLPath('u');
$visitor->assignToUser($users->object()->attribute('id'));