Nemcio/Grav-Admin-Plugin
1
0
Fork 0
mirror of https://github.com/getgrav/grav-plugin-admin.git synced 2026-05-07 14:36:16 +02:00
Code Issues Packages Projects Releases Activity

Fixed ACL for Configuration tabs [#771]

Browse Source
This commit is contained in:
Matias Griese
2021-02-10 15:26:02 +02:00
parent 417d82769b
commit a8983a003d
7 changed files with 72 additions and 49 deletions
Download Patch File Download Diff File Expand all files Collapse all files

49
classes/plugin/Admin.php
View File

@@ -246,23 +246,62 @@ class Admin
/**
* Return the found configuration blueprints
*
* @param bool $checkAccess
* @return array
*/
public static function configurations()
public static function configurations(bool $checkAccess = false): array
{
$configurations = [];
$grav = Grav::instance();
/** @var Admin $admin */
$admin = $grav['admin'];
/** @var UniformResourceIterator $iterator */
$iterator = Grav::instance()['locator']->getIterator('blueprints://config');
$iterator = $grav['locator']->getIterator('blueprints://config');
// Find all main level configuration files.
$configurations = [];
foreach ($iterator as $file) {
if ($file->isDir() || !preg_match('/^[^.].*.yaml$/', $file->getFilename())) {
continue;
}
$configurations[] = $file->getBasename('.yaml');
$name = $file->getBasename('.yaml');
// Check that blueprint exists and is not hidden.
$data = $admin->data('config/'. $name);
if (!is_callable([$data, 'blueprints'])) {
continue;
}
$blueprint = $data->blueprints();
if (!$blueprint) {
continue;
}
$test = $blueprint->toArray();
if (empty($test['form']['hidden']) && (!empty($test['form']['field']) || !empty($test['form']['fields']))) {
$configurations[$name] = true;
}
}
return $configurations;
// Remove scheduler and backups configs (they belong to the tools).
unset($configurations['scheduler'], $configurations['backups']);
// Sort configurations.
ksort($configurations);
$configurations = ['system' => true, 'site' => true] + $configurations + ['info' => true];
if ($checkAccess) {
// ACL checks.
foreach ($configurations as $name => $value) {
if (!$admin->authorize(['admin.configuration.' . $name, 'admin.super'])) {
unset($configurations[$name]);
}
}
}
return array_keys($configurations);
}
/**