Gecko [ contributie.vriendennsm.nl ]

Name	Size	Permission	Date
access.php	2.09 KB	-rwxr-xr-x	2022-02-20 10:42
emptynonzero.php	858 B	-rwxr-xr-x	2022-02-20 10:42
enabled.php	2.13 KB	-rwxr-xr-x	2022-02-20 10:42
filters.php	2.6 KB	-rwxr-xr-x	2022-02-20 10:42
language.php	4.38 KB	-rwxr-xr-x	2022-02-20 10:42
private.php	2.42 KB	-rwxr-xr-x	2022-02-20 10:42

Rename

<?php
/**
 * @package     FrameworkOnFramework
 * @subpackage  model
 * @copyright   Copyright (C) 2010-2016 Nicholas K. Dionysopoulos / Akeeba Ltd. All rights reserved.
 * @license     GNU General Public License version 2 or later; see LICENSE.txt
 */
// Protect from unauthorized access
defined('F0F_INCLUDED') or die;

/**
 * FrameworkOnFramework model behavior class to filter front-end access to items
 * craeted by the currently logged in user only.
 *
 * @package  FrameworkOnFramework
 * @since    2.1
 */
class F0FModelBehaviorPrivate extends F0FModelBehavior
{
	/**
	 * This event runs after we have built the query used to fetch a record
	 * list in a model. It is used to apply automatic query filters.
	 *
	 * @param   F0FModel        &$model  The model which calls this event
	 * @param   F0FDatabaseQuery  &$query  The model which calls this event
	 *
	 * @return  void
	 */
	public function onAfterBuildQuery(&$model, &$query)
	{
		// This behavior only applies to the front-end.
		if (!F0FPlatform::getInstance()->isFrontend())
		{
			return;
		}

// Get the name of the access field
		$table = $model->getTable();
		$createdField = $table->getColumnAlias('created_by');

// Make sure the access field actually exists
		if (!in_array($createdField, $table->getKnownFields()))
		{
			return;
		}

// Get the current user's id
		$user_id = F0FPlatform::getInstance()->getUser()->id;

// And filter the query output by the user id
		$db    = F0FPlatform::getInstance()->getDbo();

$alias = $model->getTableAlias();
		$alias = $alias ? $db->qn($alias) . '.' : '';

$query->where($alias . $db->qn($createdField) . ' = ' . $db->q($user_id));
	}

/**
	 * The event runs after F0FModel has called F0FTable and retrieved a single
	 * item from the database. It is used to apply automatic filters.
	 *
	 * @param   F0FModel  &$model   The model which was called
	 * @param   F0FTable  &$record  The record loaded from the databae
	 *
	 * @return  void
	 */
	public function onAfterGetItem(&$model, &$record)
	{
		if ($record instanceof F0FTable)
		{
			$keyName = $record->getKeyName();
			if ($record->$keyName === null)
			{
				return;
			}

$fieldName = $record->getColumnAlias('created_by');

// Make sure the field actually exists
			if (!in_array($fieldName, $record->getKnownFields()))
			{
				return;
			}

$user_id = F0FPlatform::getInstance()->getUser()->id;

if ($record->$fieldName != $user_id)
			{
				$record = null;
			}
		}
	}
}