AccessManager.php 838 B

1234567891011121314151617181920212223242526
  1. <?php
  2. class Amfphp_BackOffice_AccessManager {
  3. /**
  4. * the field in the session where the roles array is stored
  5. */
  6. const SESSION_FIELD_ROLES = '91bfa85e5204b5806d536a098caacd31'; // gwang
  7. const AMFPHP_ADMIN_ROLE = 'a08dd655a04c8c4cd541c92c6d5d1350'; // wanggang
  8. /**
  9. * checks if access should be granted, either because no sign in is required, or because the user is actually signed in.
  10. * note: must be called before output starts, as starting a session can change headers on some configs.
  11. */
  12. public function isAccessGranted() {
  13. if (session_id() == '') {
  14. session_start();
  15. }
  16. if (!isset($_SESSION[self::SESSION_FIELD_ROLES])) {
  17. return false;
  18. }
  19. return isset($_SESSION[self::SESSION_FIELD_ROLES][self::AMFPHP_ADMIN_ROLE]);
  20. }
  21. }