Init Repo

extend/app_alipay/lotusphp_runtime/RBAC/Rbac.php

@@ -0,0 +1,87 @@
+<?php
+class LtRbac {
+
+	public $configHandle;
+
+	protected $acl; 
+
+	public function __construct()
+	{
+		if (! $this->configHandle instanceof LtConfig)
+		{
+			if (class_exists("LtObjectUtil", false))
+			{
+				$this->configHandle = LtObjectUtil::singleton("LtConfig");
+			}
+			else
+			{
+				$this->configHandle = new LtConfig;
+			}
+		}
+	}
+
+	public function init()
+	{
+		$this->acl = $this->configHandle->get('rbac.acl');
+	}
+
+	public function checkAcl($roles, $resource)
+	{
+		$allow = false;
+		// deny priority
+		foreach (array("allow", "deny") as $operation) 
+		{
+			foreach($roles as $role) 
+			{
+				if (isset($this->acl[$operation][$role])) 
+				{
+					// everyone *
+					if (in_array($resource, $this->acl[$operation]['*'])) 
+					{
+						$allow = "allow" == $operation ? true : false;
+						break;
+					} 
+					if (in_array($resource, $this->acl[$operation][$role])) 
+					{
+						$allow = "allow" == $operation ? true : false;
+						break;
+					}
+					else 
+					{
+						$res = explode('/', trim($resource, '/'));
+						for ($i = count($res)-1; $i >= 0; $i--) 
+						{
+							$res[$i] = '*';
+							$tmp = implode('/', $res);
+							if (in_array($tmp, $this->acl[$operation][$role])) 
+							{
+								$allow = "allow" == $operation ? true : false;
+								break;
+							}
+							unset($res[$i]);
+						}
+					}
+				}
+			}
+		}
+		return $allow;
+	}
+/*
+	private function __set($p,$v)
+	{
+		$this->$p = $v;
+	}
+
+	private function __get($p)
+	{
+		if(isset($this->$p))
+		{
+			return($this->$p);
+		}
+		else
+		{
+			return(NULL);
+		}
+	}
+*/
+}