co_security_id.class.php

Go to the documentation of this file.

<?php
/***************************************************************************************************************************/
defined( 'LGV_DBF_CATCHER' ) or die ( 'Cannot Execute Directly' );  // Makes sure that this file is in the correct context.
 
if ( !defined('LGV_SDBN_CATCHER') ) {
    define('LGV_SDBN_CATCHER', 1);
}
 
require_once(CO_Config::db_class_dir().'/co_security_node.class.php');
 
/***************************************************************************************************************************/
class CO_Security_ID extends CO_Security_Node {
    protected $_special_first_time_security_exemption;
 
    /***********************************************************************************************************************/
    /***********************/
    public function __construct(    $in_db_object = NULL,   
                                    $in_db_result = NULL    
                                ) {
        parent::__construct($in_db_object, $in_db_result);
        $this->class_description = 'This is a security class for IDs.';
        $this->instance_description = isset($this->name) && $this->name ? "$this->name ($this->_id)" : "Unnamed ID Node ($this->_id)";
        $this->_special_first_time_security_exemption = true;
        $this->read_security_id = $this->id();  // These are always the case, regardless of what anyone else says.
        $this->write_security_id = -1;
    }
 
    /***********************/
    public function load_from_db($in_db_result) {
        $ret = parent::load_from_db($in_db_result);
        
        if ($ret) {
            $this->read_security_id = $this->id();  // These are always the case, regardless of what anyone else says.
            $this->write_security_id = -1;
            $this->class_description = 'This is a security class for IDs.';
        }
        
        return $ret;
    }
 
    /***********************/
    public function security_exemption() {
        $ret = $this->_special_first_time_security_exemption;
        $this->_special_first_time_security_exemption = false;
        
        return $ret;
    }
    
    /***********************/
    public function user_can_read() {
        $ret = parent::user_can_read();
        
        if ($ret) {
            $ret = false;
            // We make double-damn sure that only cleared managers can see this.
            $item = $this->get_access_object()->get_login_item();
            if ($this->get_access_object()->god_mode() || (isset($item) && ($item instanceof CO_Login_Manager))) {
                $exemption = in_array($this->id(), $item->ids());
            
                $ret = ($this->get_access_object()->god_mode() || $exemption);
            }
        }
        
        return $ret;
    }
};