[Cartoweb-users] security for a new plugin

[Oliver Christen]

Hi Giuseppe

if your plugin class name is myplugin, then the config filename must be 
myplugin.ini

first try :

print_r($this->getConfig);

this should display the content of your plugin .ini file.
if it doesnt, then verify the filename, because the plugin manager didnt 
find it.

secondly,
the code you copied try to find a 'general.allowedRoles' parameter in your 
.ini file. So be sure you use the same name between the function and the 
.ini

regards
Oliver






> Hi all,
> I'm trying to get a plugin available only for a set of users.
>
> Performed operations:
> a) updating the file auth.ini
>  1) creation of a new user and password
>  2)  association new user - new role
>
> b) updating the file  myplugin.ini in server directory
>    adding the new role
>
> c) changing the cartoclient.tpl :
> <!-- folder 9 starts here -->
>    <div id="folder9" class="folder" style="height:550px;">
>
>      <br />
>        {if $myplugin|default:''}
>
>        {$myplugin}
>
>        {else}
>          <p>
>            {t}User not allowed{/t},
>            {if $auth_active|default:''}
>             {t}please{/t} {$auth}.
>            {/if}
>          </p>
>        {/if}
>
>    </div>
>
> d) inserting in myplugin.php the code I see in exportPdf.php:
>        $insertRoles = $this->getArrayFromIni('general.allowedRoles');
>        if (!SecurityManager::getInstance()->hasRole($insertRoles))
>            return '';
> I've added the code in : drawUserForm(), handleHttpGetRequest($request) 
> and
> handleHttpPostRequest($request).
>
> e) I though this was enoght but the code needs other two functions:
> getArrayFromList(), and getArrayFromIni()
> I've added them but I saw that the instruction  $this->getConfig()->$name;
> does not return nothing.
>
> The result is that the plugin is not accessible by all users (allowed or
> not).
>
> I think the file myplug.ini has not been red.
> Please, can anyone suggest me some piece of info about ?
>
> Thanks in advance and best regards.
>
> Giu
>
>
>
>
>
> --
> Email.it, the professional e-mail, gratis per te: http://www.email.it/f
>
> Sponsor:
> Fai squillare la PANTERA ROSA sul tuo cellulare: e' in REGALO
> Clicca qui: http://adv.email.it/cgi-bin/foclick.cgi?mid=6613&d=20070930
>
>
> _______________________________________________
> Cartoweb-users mailing list
> Cartoweb-users at lists.maptools.org
> http://lists.maptools.org/mailman/listinfo/cartoweb-users
>