README

Symfony2 绑定用于 Kalinka.

安装

1. 在您的 `composer.json` 中添加 "ac/kalinka-bundle": "~0.1.0"
2. 运行 composer update ac/kalinka
3. 在您的 AppKernel 中实例化 AC\KalinkaBundle\ACKalinkaBundle
4. 配置此绑定，详情如下

配置

ac_kalinka:
    #default_authorizer: 'default'
    authorizers:
        default:
            authenticated_role: 'authenticated'     #optional
            anonymous_role: 'anonymous'             #optional
            roles:                                  #map roles to actions and guard policies
                authenticated:
                    document:
                        read: 'allow'
                        index: 'allow'
                anonymous:
                    document:
                        read: 'allow'
                teacher:
                    system:
                        foo: 'allow'
                    document:
                        index: 'allow'
                        create: 'allow'
                        read: 'allow'
                        update: ['owner', 'unlocked']
                        delete: ['owner', 'unlocked']
                admin:
                    system:
                        foo: 'allow'
                        bar: 'allow'
                        baz: 'allow'
                    document:
                        index: 'allow'
                        create: 'allow'
                        read: 'allow'
                        update: 'allow'
                        delete: 'allow'
                student:
                    document:
                        index: 'allow'
                        read: 'allow'

服务

该绑定注册了 kalinka.authorizer 服务，您可以在您的应用程序中使用它

$document = //...get some document instance, however you do that

$authorizer = $this->container->get('kalinka.authorizer');

if (!$authorizer->can('edit', 'document', $someDocument)) {
    throw new Exception('Computer says no. :(');
}

要注册守卫，只需使用 kalinka.guard 标签，并指定守卫的域。例如

services:
    app.guard.document:
        class: ACME\AppBundle\Authorization\DocumentGuard
        tags:
            - { name: 'kalinka.guard', tag: 'document' }

如果您需要，也可以配置多个授权者。

#TODO: document said feature