Bric::App::Authz - Exports functions for checking user authorization.
$Revision: 1.7 $
$Date: 2002/01/06 04:40:35 $
use Bric::App::Authz qw(:all);
chk_authz($obj, READ);
# If we get here, we can read $obj.
chk_authz($obj, EDIT);
# If we get here, we can edit $obj.
chk_authz($obj, CREATE);
# If we get here, we can create $obj.
This package exporst the function chk_authz(), which will return true if the current user has permission to perform a given activity to $obj, and redirect to an error page if the user does not have the permission. The permissions available are also exported. They are READ, EDIT, and CREATE. CREATE includes READ and CREATE permissions while EDIT includes READ persmision.
NONE.
Dummy method to prevent wasting time trying to AUTOLOAD DESTROY.
Throws: NONE.
Side Effects: NONE.
Notes: NONE.
NONE.
Returns true if the current user has the given $permission on $obj, and sends an error page to the browser if the current user does not have $permission on $obj. If $no_redir is true, then the browser won't be redirected, but chk_authz() will return undef. If any group IDs are passed in via @gids, they will be checked as if $obj was a member of those groups.
Throws: NONE.
Side Effects: NONE.
Notes: Will use the Bric::Biz::Person::User object's can_do() method internally once Permissions have been implemented. Meanwhile, it ignores $obj and $permission and just returns true if the current user is a member of the Administrators group.
NONE.
NONE.
NONE.
NONE.
David Wheeler <david@wheeler.net>