Custom permissions and custom errors

lifeisfoo

I'm developing an application with the Garden framework and now I'm securing controllers actions using custom permissions.

class MyController extends Gdn_Controller {
public function Index() {
    $this->Permission('MyApp.OneSecurityPermission');
...
}
}

When I access to /myController with a role that don't has this permission I see this:

Can I customize this error page only for this controller action (not globally)?

x00

Yes

Gdn::Locale()->SetTranslation('PermissionErrorMessage',T('Your Message'));

lifeisfoo

Thank you @x00, but what I want is a custom page...

x00

   public function CustomPermission($Permission) {
      if(Gdn::Session()->CheckPermission($Permission)){
          return TRUE;
        }else{
          header("HTTP/1.0 401", TRUE, 401);
          if ($this->DeliveryMethod() != DELIVERY_METHOD_XHTML) {
             $this->Render();
          } else {
             $this->MasterView = 'empty';
             $this->View='yourview';
             $this->Render();
          }
          exit;
      }
   }

lifeisfoo

@x00, your help is invaluable. I hope this can help many others developer.

x00

There is more than one way to shell an egg. You could make it a proper exception, then direct to a custom controller.

lifeisfoo

Here what I've done:

added this function to my application bootstrap.php

function PermissionCheck($Controller, $Permission, $ErrorView, $ErrorMasterView) {
    if( CheckPermission($Permission) ){
        return TRUE;
    }else{
        header("HTTP/1.0 401", TRUE, 401);
        if($ErrorMasterView){
            $Controller->MasterView = $ErrorMasterView;
        }
        if($ErrorView){
            $Controller->View = $ErrorView;
        }
        $Controller->Render();
        exit;
    }
}

then use this in every controller action:

public function Index() {
    PermissionCheck($this, 'MyApp.Main.Allow', 'permission_error');
...
}

So now I can show different pages for every action (and If I want I can use another master view as a parameter).

Thank you again @x00

x00

I think if you are making your own app you might well keep in house. You could create a base controller, for you app and extend that, or whatever.