[Summary view] [Print] [Text view]

   1  <?php
   2  
   3  /**
   4   * @package     Joomla.Administrator
   5   * @subpackage  com_workflow
   6   *
   7   * @copyright   (C) 2019 Open Source Matters, Inc. <https://www.joomla.org>
   8   * @license     GNU General Public License version 2 or later; see LICENSE.txt
   9   */
  10  
  11  namespace Joomla\Component\Workflow\Administrator\Dispatcher;
  12  
  13  use Joomla\CMS\Access\Exception\NotAllowed;
  14  use Joomla\CMS\Dispatcher\ComponentDispatcher;
  15  
  16  // phpcs:disable PSR1.Files.SideEffects
  17  \defined('_JEXEC') or die;
  18  // phpcs:enable PSR1.Files.SideEffects
  19  
  20  /**
  21   * ComponentDispatcher class for com_workflow
  22   *
  23   * @since  4.0.0
  24   */
  25  class Dispatcher extends ComponentDispatcher
  26  {
  27      /**
  28       * Workflows have to check for extension permission
  29       *
  30       * @return  void
  31       */
  32      protected function checkAccess()
  33      {
  34          $extension = $this->getApplication()->input->getCmd('extension');
  35  
  36          $parts = explode('.', $extension);
  37  
  38          // Check the user has permission to access this component if in the backend
  39          if ($this->app->isClient('administrator') && !$this->app->getIdentity()->authorise('core.manage.workflow', $parts[0])) {
  40              throw new NotAllowed($this->app->getLanguage()->_('JERROR_ALERTNOAUTHOR'), 403);
  41          }
  42      }
  43  }