Actualizacion automatica: 2024-07-02 01:01:40

ci4/app/Config/RBAC/permissionMatrix.php

@@ -21,10 +21,6 @@ const SK_PERMISSION_MATRIX = [
 		"presupuesto-cliente.edit",
 		"presupuesto-cliente.delete",
 		"presupuesto-cliente.menu",
-		"tarifa-preimpresion.create",
-		"tarifa-preimpresion.edit",
-		"tarifa-preimpresion.delete",
-		"tarifa-preimpresion.menu",
 		"tarifa-manipulado.create",
 		"tarifa-manipulado.edit",
 		"tarifa-manipulado.delete",

ci4/app/Config/RBAC/roles.json

@@ -0,0 +1,22 @@
+{
+  "superadmin": {
+    "title": "Super Admin",
+    "description": "Complete control of the site."
+  },
+  "admin": {
+    "title": "Admin",
+    "description": "Day to day administrators of the site."
+  },
+  "developer": {
+    "title": "Developer",
+    "description": "Site programmers."
+  },
+  "user": {
+    "title": "User",
+    "description": "General users of the site. Often customers."
+  },
+  "beta": {
+    "title": "Beta User",
+    "description": "Has access to beta-level features."
+  }
+}

ci4/app/Controllers/BaseResourceController.php

@@ -130,6 +130,29 @@ abstract class BaseResourceController extends \CodeIgniter\RESTful\ResourceContr
         $this->viewData['alertStyle'] = $this->alertStyle;
     }
 
+    protected function checkPermission($sectionPermission, $redirectRoute = NULL)
+    {
+        // TODO ojo, con no redirigir al indexRoute, que se crea bucle!!!
+        if (!auth()->user()->can($sectionPermission)) {
+            $this->session->setFlashdata('errorMessage', "No tiene permisos de acceso");
+            if (is_null($redirectRoute)) {
+                return $this->response->redirect(route_to('home'));
+            } else {
+                return $this->response->redirect(route_to($redirectRoute));
+            }
+        }
+    }
+
+    protected function checkPermissionAJAX($sectionPermission)
+    {
+
+        if (!auth()->user()->can($sectionPermission)) {
+            return $this->fail('Error');
+        }
+
+    }
+
+
     /**
      * Convenience method to display the form of a module
      * @param $forMethod
@@ -233,8 +256,7 @@ abstract class BaseResourceController extends \CodeIgniter\RESTful\ResourceContr
             if (!$this->model->delete($id)) {
                 return $this->failNotFound(lang('Basic.global.deleteError', [$objName]));
             }
-        }
+        } else {
-        else{
             $datetime = (new \CodeIgniter\I18n\Time("now"));
             $rawResult = $this->model->where('id', $id)
                 ->set(['deleted_at' => $datetime->format('Y-m-d H:i:s'),
@@ -263,8 +285,7 @@ abstract class BaseResourceController extends \CodeIgniter\RESTful\ResourceContr
 
         if ($customValidationRules == null) {
             $validationRules = $this->model->validationRules ?? $this->formValidationRules ?? null;
-        }
+        } else {
-        else{
             $validationRules = $customValidationRules;
         }
         if ($validationRules == null) {
@@ -273,8 +294,7 @@ abstract class BaseResourceController extends \CodeIgniter\RESTful\ResourceContr
 
         if ($customValidationMessages == null) {
             $validationErrorMessages = $this->model->validationMessages ?? $this->formValidationErrorMessagess ?? null;;
-        }
+        } else {
-        else{
             $validationErrorMessages = $customValidationMessages;
         }
 
@@ -303,7 +323,8 @@ abstract class BaseResourceController extends \CodeIgniter\RESTful\ResourceContr
      * @param array|null $postData
      * @return array
      */
-    protected function sanitized(array $postData = null, bool $nullIfEmpty = false) {
+    protected function sanitized(array $postData = null, bool $nullIfEmpty = false)
+    {
         if ($postData == null) {
             $postData = $this->request->getPost();
         }
@@ -326,10 +347,10 @@ abstract class BaseResourceController extends \CodeIgniter\RESTful\ResourceContr
      * @param string $customMessage
      * @return mixed
      */
-    protected function failWithNewToken($messages, int $status = 400, string $code = null, string $customMessage = '') {
+    protected function failWithNewToken($messages, int $status = 400, string $code = null, string $customMessage = '')
-
-        if (! is_array($messages))
     {
+
+        if (!is_array($messages)) {
             $messages = ['error' => $messages];
         }
         $response = [
@@ -360,7 +381,8 @@ abstract class BaseResourceController extends \CodeIgniter\RESTful\ResourceContr
      * Convenience method for common exception handling
      * @param \Exception $e
      */
-    protected function dealWithException(\Exception $e) {
+    protected function dealWithException(\Exception $e)
+    {
         // using another try / catch block to prevent to avoid CodeIgniter bug throwing trivial exceptions for querying DB errors
         try {
             $query = $this->model->db->getLastQuery();

ci4/app/Controllers/Tarifas/Tarifaimpresion.php

@@ -1,35 +0,0 @@
-<?php
-
-namespace App\Controllers\Tarifas;
-use App\Controllers\BaseController;
-
-
-class Tarifaimpresion extends BaseController
-{ 
-    function __construct()
-    { 
-            
-    }
-
-    public function index()
-    {
-        echo 'Tarifa impresion';
-    } 
-
-    public function delete()
-    {
-
-    }
-
-    public function add()
-    {
-
-    }
-
-    public function edit()
-    {
-
-    }
-
-}
- 

ci4/app/Controllers/Tarifas/Tarifasencuadernacion.php

@@ -55,6 +55,8 @@ class Tarifasencuadernacion extends \App\Controllers\BaseResourceController
 
     public function index()
     {
+        // Check if the user is allowed to list items
+        parent::checkPermission('tarifa-encuadernacion.menu');
 
         $viewData = [
             'currentModule' => static::$controllerSlug,
@@ -73,8 +75,7 @@ class Tarifasencuadernacion extends \App\Controllers\BaseResourceController
     public function add()
     {
 
-
+        parent::checkPermission('tarifa-encuadernacion.create', $this->indexRoute);
-        
 
         if ($this->request->getPost()) :
 
@@ -157,6 +158,7 @@ class Tarifasencuadernacion extends \App\Controllers\BaseResourceController
     public function edit($requestedId = null)
     {
 
+        parent::checkPermission('tarifa-encuadernacion.create', $this->indexRoute);
 
         if ($requestedId == null) :
             return $this->redirect2listView();
@@ -248,6 +250,12 @@ class Tarifasencuadernacion extends \App\Controllers\BaseResourceController
         return $this->displayForm(__METHOD__, $id);
     } // end function edit(...)
 
+    /*public function delete($id =null){
+        if (!auth()->user()->can('tarifa-encuadernacion.delete')) {
+            return $this->fail('No tiene permisos');
+        }
+        parent::delete($id);
+    }*/
 
     public function datatable()
     {

ci4/app/Controllers/Tarifas/Tarifasenvios.php

@@ -56,6 +56,9 @@ class Tarifasenvios extends \App\Controllers\BaseResourceController {
 
     public function index() {
 
+        // Check if the user is allowed to list items
+        parent::checkPermission('tarifa-envio.menu');
+
         $viewData = [
                 'currentModule' => static::$controllerSlug,
                 'pageSubTitle' => lang('Basic.global.ManageAllRecords', [lang('TarifasEnvios.tarifaEnvio')]),
@@ -72,8 +75,7 @@ class Tarifasenvios extends \App\Controllers\BaseResourceController {
 
     public function add() {
 
-
+        parent::checkPermission('tarifa-envio.create', $this->indexRoute);
-        
 
         if ($this->request->getPost()) :
 
@@ -142,6 +144,8 @@ class Tarifasenvios extends \App\Controllers\BaseResourceController {
 
     public function edit($requestedId = null) {
 
+        parent::checkPermission('tarifa-envio.edit', $this->indexRoute);
+
         
         if ($requestedId == null) :
             return $this->redirect2listView();
@@ -227,6 +231,10 @@ class Tarifasenvios extends \App\Controllers\BaseResourceController {
     // JJO
     public function delete($id = null)
     {
+        if (!auth()->user()->can('tarifa-envio.delete')) {
+            return $this->fail('Error');
+        }
+
         if (!empty(static::$pluralObjectNameCc) && !empty(static::$singularObjectNameCc)) {
             $objName = mb_strtolower(lang(ucfirst(static::$pluralObjectNameCc).'.'.static::$singularObjectNameCc));
         } else {
@@ -242,7 +250,6 @@ class Tarifasenvios extends \App\Controllers\BaseResourceController {
         else{
             $datetime = (new \CodeIgniter\I18n\Time("now"));
 
-
             $zonaModel = new TarifaEnvioZonaModel();
             $zonaResult = $zonaModel->removeAllZonasLineas($id, $datetime, $this->delete_flag);
 

ci4/app/Controllers/Tarifas/Tarifasmanipulado.php

@@ -51,6 +51,8 @@ class Tarifasmanipulado extends \App\Controllers\BaseResourceController
 
     public function index()
     {
+        // Check if the user is allowed to list items
+        parent::checkPermission('tarifa-manipulado.menu');
 
         $viewData = [
             'currentModule' => static::$controllerSlug,