// Changes to BO permissions management
git-svn-id: http://dev.prestashop.com/svn/v1/branches/1.5.x@12366 b9a71923-0436-4b27-9f14-aed3839534dd
This commit is contained in:
@@ -79,6 +79,11 @@ abstract class ControllerCore
|
||||
*/
|
||||
abstract public function checkAccess();
|
||||
|
||||
/**
|
||||
* check that the current user/visitor has valid view permissions
|
||||
*/
|
||||
abstract public function viewAccess();
|
||||
|
||||
/**
|
||||
* Initialize the page
|
||||
*/
|
||||
@@ -141,7 +146,6 @@ abstract class ControllerCore
|
||||
public function run()
|
||||
{
|
||||
$this->init();
|
||||
|
||||
if ($this->checkAccess())
|
||||
{
|
||||
if (!$this->content_only && ($this->display_header || (isset($this->className) && $this->className)))
|
||||
@@ -156,7 +160,10 @@ abstract class ControllerCore
|
||||
if (!$this->content_only && ($this->display_header || (isset($this->className) && $this->className)))
|
||||
$this->initHeader();
|
||||
|
||||
$this->initContent();
|
||||
if ($this->viewAccess())
|
||||
$this->initContent();
|
||||
else
|
||||
$this->errors[] = Tools::displayError('Access denied.');
|
||||
|
||||
if (!$this->content_only && ($this->display_footer || (isset($this->className) && $this->className)))
|
||||
$this->initFooter();
|
||||
|
||||
Reference in New Issue
Block a user