Changeset 15 for trunk/grails-app/controllers/BaseController.groovy

Timestamp:

Oct 21, 2009, 1:04:41 PM (10 years ago)

Author:

duh

Message:

-added initial implementation of authorization code

File:

• trunk/grails-app/controllers/BaseController.groovy (modified) (5 diffs)

trunk/grails-app/controllers/BaseController.groovy

@@ -1 +1 @@
 import org.codehaus.groovy.grails.commons.GrailsApplication
 import grails.util.GrailsUtil
-//import org.apache.log4j.*
 
 /**
@@ -23 +22 @@
      * @visibility public
      */
-    public def Authorization;
-    public def scaffold = false;
+    public def authorizationService;
+
+    /**
+     * @var boolean scaffolding default
+     * @visibility public
+     */
+    def scaffold = false;
 
     /**
      * class constructor
+     * @visibility protected
      * @void
      */
     protected BaseController() {
-        // instantiate Authorization class
-        this.Authorization = new Authorization();
+        // debug line for now
+        printf("instantiated %s\n",this.class.name);
+
+        // instantiate Authorization service
+        this.authorizationService = new AuthorizationService();
 
         // dynamically set scaffolding
@@ -39 +47 @@
 
     /**
-     * Render default output to the browser, overload this in extended classes
-     * @void
-     */
-    def index = {
-        render(sprintf("default index for %s @ %s environment :: nothing to see here! :)",this.class.name,GrailsUtil.environment));
-    }
-
-    /**
      * intercept any method calls in extended classes
+     * @visibility public
      * @see http://www.grails.org/Controllers+-+Interceptors
      */
@@ -53 +54 @@
         def controller = params.controller;
         def action = params.action;
-        
+
         // check if the user is Authorized to call this method
-        if (Authorization.isAuthorized(controller,action)) {
+        if (this.authorizationService.isAuthorized(controller,action)) {
             // user is not authorized to use this functionality
-            printf("authorized call to action: %s->%s(...)\n",controller,action);
+            printf("authorized call to action: %s->%s(...)\n",this.class.name,action);
         } else {
-            // user is not authorized to use this functionality
-            printf("!! unauthorized call to action: %s-->%s(...)\n",controller,action);
+            // user is not authorized to use this controller + method
+            printf("!! unauthorized call to action: %s-->%s(...)\n",this.class.name,action);
 
             // redirect to error page
@@ -67 +68 @@
         }
     }
-
-    /**
-     * after interception
-     * @param object model
-     * @param object modelAndView
-     * @see http://www.grails.org/Controllers+-+Interceptors
-     */
-    def afterInterceptor = {
-        // nothing here yet
-    }
 }