1:   2:   3:   4:   5:   6:   7:   8:   9:  10:  11:  12:  13:  14:  15:  16:  17:  18:  19:  20:  21:  22:  23:  24:  25:  26:  27:  28:  29:  30:  31:  32:  33:  34:  35:  36:  37:  38:  39:  40:  41:  42:  43:  44:  45:  46:  47:  48:  49:  50:  51:  52:  53:  54:  55:  56:  57:  58:  59:  60:  61:  62:  63:  64:  65:  66:  67:  68:  69:  70:  71:  72:  73:  74:  75:  76:  77:  78:  79:  80:  81:  82:  83:  84:  85:  86:  87:  88:  89:  90:  91:  92:  93:  94:  95:  96:  97:  98:  99: 100: 101: 102: 103: 104: 105: 106: 107: 108: 109: 110: 111: 112: 113: 114: 115: 116: 117: 118: 119: 120: 121: 122: 123: 124: 125: 126: 127: 128: 129: 130: 131: 132: 133: 134: 135: 136: 137: 138: 139: 140: 141: 142: 143: 

<?php
namespace Nethgui\Authorization;

/*
 * Copyright (C) 2011 Nethesis S.r.l.
 * 
 * This script is part of NethServer.
 * 
 * NethServer is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 * 
 * NethServer is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 * 
 * You should have received a copy of the GNU General Public License
 * along with NethServer.  If not, see <http://www.gnu.org/licenses/>.
 */

/**
 * Lazy authorizations
 *
 * @see GroupBasedPolicyDecisionPoint
 * @author Davide Principi <davide.principi@nethesis.it>
 * @since 1.0
 */
class LazyAccessControlResponse implements AccessControlResponseInterface
{

    private $message;
    private $code;
    private $closure;

    /**
     * 
     * @var array
     */
    private $request;

    /**
     *
     * @param Closure $closure
     * @param array $request
     */
    public function __construct($closure, $request)
    {
        $this->request = $request;
        $this->closure = $closure;
    }

    public function getMessage()
    {
        if ( ! isset($this->message)) {
            $this->authorize();
        }
        return $this->message;
    }

    public function isAllowed()
    {
        return $this->getCode() === 0;
    }

    public function isDenied()
    {
        return ! $this->isAllowed();
    }

    /**
     * Convert the given $value to a String
     *
     * @param mixed $value
     * @return string
     */
    protected function asString($value)
    {
        $converter = new StringAttributesProvider($value);
        return $converter->asAuthorizationString();
    }

    public function asException($identifier)
    {
        $originalRequest = '';

        foreach ($this->request as $name => $value) {
            $originalRequest .= sprintf('%s `%s` ', $name, $this->asString($value));
        }

        return new \Nethgui\Exception\AuthorizationException($this->getMessage() . " :: AppliedTo :: " . trim($originalRequest), $this->getCode(), $identifier, NULL);
    }

    public function getCode()
    {
        if ( ! isset($this->code)) {
            $this->code = $this->authorize();
        }
        return $this->code;
    }

    protected function authorize()
    {
        $f = $this->closure;
        return $f($this->request, $this->message);
    }

    /**
     * @return AccessControlResponseInterface
     */
    public static function createDenyResponse()
    {
        $request = array(
            'subject' => 'None',
            'resource' => 'None',
            'action' => 'None'
        );

        return new LazyAccessControlResponse(function (&$message) {
                    $message = 'ALWAYSFAIL';
                    return 1;
                }, $request);
    }

    /**
     * @return AccessControlResponseInterface
     */
    public static function createSuccessResponse()
    {
        $request = array(
            'subject' => 'None',
            'resource' => 'None',
            'action' => 'None'
        );

        return new LazyAccessControlResponse(function (&$message) {
                    $message = '';
                    return 0;
                }, $request);
    }

}