AuthorizationPolicy.inc.php

<?php
define ('AUTHORIZATION_PERMIT', 0x01);
define ('AUTHORIZATION_DENY', 0x02);
 
define ('AUTHORIZATION_ADVICE_DENY_MESSAGE', 0x01);
define ('AUTHORIZATION_ADVICE_CALL_ON_DENY', 0x02);
 
class AuthorizationPolicy {
   var $_advice = array();
 
   var $_authorizedContext = array();
 
 
   function __construct($message = null) {
      if (!is_null($message)) $this->setAdvice(AUTHORIZATION_ADVICE_DENY_MESSAGE, $message);
   }
 
   //
   // Setters and Getters
   //
   function setAdvice($adviceType, &$adviceContent) {
      $this->_advice[$adviceType] =& $adviceContent;
   }
 
   function hasAdvice($adviceType) {
      return isset($this->_advice[$adviceType]);
   }
 
   function &getAdvice($adviceType) {
      if ($this->hasAdvice($adviceType)) {
         return $this->_advice[$adviceType];
      } else {
         $nullVar = null;
         return $nullVar;
      }
   }
 
   function addAuthorizedContextObject($assocType, &$authorizedObject) {
      $this->_authorizedContext[$assocType] =& $authorizedObject;
   }
 
   function hasAuthorizedContextObject($assocType) {
      return isset($this->_authorizedContext[$assocType]);
   }
 
   function &getAuthorizedContextObject($assocType) {
      if ($this->hasAuthorizedContextObject($assocType)) {
         return $this->_authorizedContext[$assocType];
      } else {
         $nullVar = null;
         return $nullVar;
      }
   }
 
   function setAuthorizedContext(&$authorizedContext) {
      $this->_authorizedContext =& $authorizedContext;
   }
 
   function &getAuthorizedContext() {
      return $this->_authorizedContext;
   }
 
   //
   // Protected template methods to be implemented by sub-classes
   //
   function applies() {
      // Policies apply by default
      return true;
   }
 
   function effect() {
      // Deny by default.
      return AUTHORIZATION_DENY;
   }
}