123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260 |
- <?php
- /**
- * @link http://www.yiiframework.com/
- * @copyright Copyright (c) 2008 Yii Software LLC
- * @license http://www.yiiframework.com/license/
- */
- namespace yii\rbac;
- /**
- * For more details and usage information on ManagerInterface, see the [guide article on security authorization](guide:security-authorization).
- *
- * @author Qiang Xue <qiang.xue@gmail.com>
- * @since 2.0
- */
- interface ManagerInterface extends CheckAccessInterface
- {
- /**
- * Creates a new Role object.
- * Note that the newly created role is not added to the RBAC system yet.
- * You must fill in the needed data and call [[add()]] to add it to the system.
- * @param string $name the role name
- * @return Role the new Role object
- */
- public function createRole($name);
- /**
- * Creates a new Permission object.
- * Note that the newly created permission is not added to the RBAC system yet.
- * You must fill in the needed data and call [[add()]] to add it to the system.
- * @param string $name the permission name
- * @return Permission the new Permission object
- */
- public function createPermission($name);
- /**
- * Adds a role, permission or rule to the RBAC system.
- * @param Role|Permission|Rule $object
- * @return bool whether the role, permission or rule is successfully added to the system
- * @throws \Exception if data validation or saving fails (such as the name of the role or permission is not unique)
- */
- public function add($object);
- /**
- * Removes a role, permission or rule from the RBAC system.
- * @param Role|Permission|Rule $object
- * @return bool whether the role, permission or rule is successfully removed
- */
- public function remove($object);
- /**
- * Updates the specified role, permission or rule in the system.
- * @param string $name the old name of the role, permission or rule
- * @param Role|Permission|Rule $object
- * @return bool whether the update is successful
- * @throws \Exception if data validation or saving fails (such as the name of the role or permission is not unique)
- */
- public function update($name, $object);
- /**
- * Returns the named role.
- * @param string $name the role name.
- * @return null|Role the role corresponding to the specified name. Null is returned if no such role.
- */
- public function getRole($name);
- /**
- * Returns all roles in the system.
- * @return Role[] all roles in the system. The array is indexed by the role names.
- */
- public function getRoles();
- /**
- * Returns the roles that are assigned to the user via [[assign()]].
- * Note that child roles that are not assigned directly to the user will not be returned.
- * @param string|int $userId the user ID (see [[\yii\web\User::id]])
- * @return Role[] all roles directly assigned to the user. The array is indexed by the role names.
- */
- public function getRolesByUser($userId);
- /**
- * Returns child roles of the role specified. Depth isn't limited.
- * @param string $roleName name of the role to file child roles for
- * @return Role[] Child roles. The array is indexed by the role names.
- * First element is an instance of the parent Role itself.
- * @throws \yii\base\InvalidParamException if Role was not found that are getting by $roleName
- * @since 2.0.10
- */
- public function getChildRoles($roleName);
- /**
- * Returns the named permission.
- * @param string $name the permission name.
- * @return null|Permission the permission corresponding to the specified name. Null is returned if no such permission.
- */
- public function getPermission($name);
- /**
- * Returns all permissions in the system.
- * @return Permission[] all permissions in the system. The array is indexed by the permission names.
- */
- public function getPermissions();
- /**
- * Returns all permissions that the specified role represents.
- * @param string $roleName the role name
- * @return Permission[] all permissions that the role represents. The array is indexed by the permission names.
- */
- public function getPermissionsByRole($roleName);
- /**
- * Returns all permissions that the user has.
- * @param string|int $userId the user ID (see [[\yii\web\User::id]])
- * @return Permission[] all permissions that the user has. The array is indexed by the permission names.
- */
- public function getPermissionsByUser($userId);
- /**
- * Returns the rule of the specified name.
- * @param string $name the rule name
- * @return null|Rule the rule object, or null if the specified name does not correspond to a rule.
- */
- public function getRule($name);
- /**
- * Returns all rules available in the system.
- * @return Rule[] the rules indexed by the rule names
- */
- public function getRules();
- /**
- * Checks the possibility of adding a child to parent.
- * @param Item $parent the parent item
- * @param Item $child the child item to be added to the hierarchy
- * @return bool possibility of adding
- *
- * @since 2.0.8
- */
- public function canAddChild($parent, $child);
- /**
- * Adds an item as a child of another item.
- * @param Item $parent
- * @param Item $child
- * @return bool whether the child successfully added
- * @throws \yii\base\Exception if the parent-child relationship already exists or if a loop has been detected.
- */
- public function addChild($parent, $child);
- /**
- * Removes a child from its parent.
- * Note, the child item is not deleted. Only the parent-child relationship is removed.
- * @param Item $parent
- * @param Item $child
- * @return bool whether the removal is successful
- */
- public function removeChild($parent, $child);
- /**
- * Removed all children form their parent.
- * Note, the children items are not deleted. Only the parent-child relationships are removed.
- * @param Item $parent
- * @return bool whether the removal is successful
- */
- public function removeChildren($parent);
- /**
- * Returns a value indicating whether the child already exists for the parent.
- * @param Item $parent
- * @param Item $child
- * @return bool whether `$child` is already a child of `$parent`
- */
- public function hasChild($parent, $child);
- /**
- * Returns the child permissions and/or roles.
- * @param string $name the parent name
- * @return Item[] the child permissions and/or roles
- */
- public function getChildren($name);
- /**
- * Assigns a role to a user.
- *
- * @param Role|Permission $role
- * @param string|int $userId the user ID (see [[\yii\web\User::id]])
- * @return Assignment the role assignment information.
- * @throws \Exception if the role has already been assigned to the user
- */
- public function assign($role, $userId);
- /**
- * Revokes a role from a user.
- * @param Role|Permission $role
- * @param string|int $userId the user ID (see [[\yii\web\User::id]])
- * @return bool whether the revoking is successful
- */
- public function revoke($role, $userId);
- /**
- * Revokes all roles from a user.
- * @param mixed $userId the user ID (see [[\yii\web\User::id]])
- * @return bool whether the revoking is successful
- */
- public function revokeAll($userId);
- /**
- * Returns the assignment information regarding a role and a user.
- * @param string $roleName the role name
- * @param string|int $userId the user ID (see [[\yii\web\User::id]])
- * @return null|Assignment the assignment information. Null is returned if
- * the role is not assigned to the user.
- */
- public function getAssignment($roleName, $userId);
- /**
- * Returns all role assignment information for the specified user.
- * @param string|int $userId the user ID (see [[\yii\web\User::id]])
- * @return Assignment[] the assignments indexed by role names. An empty array will be
- * returned if there is no role assigned to the user.
- */
- public function getAssignments($userId);
- /**
- * Returns all user IDs assigned to the role specified.
- * @param string $roleName
- * @return array array of user ID strings
- * @since 2.0.7
- */
- public function getUserIdsByRole($roleName);
- /**
- * Removes all authorization data, including roles, permissions, rules, and assignments.
- */
- public function removeAll();
- /**
- * Removes all permissions.
- * All parent child relations will be adjusted accordingly.
- */
- public function removeAllPermissions();
- /**
- * Removes all roles.
- * All parent child relations will be adjusted accordingly.
- */
- public function removeAllRoles();
- /**
- * Removes all rules.
- * All roles and permissions which have rules will be adjusted accordingly.
- */
- public function removeAllRules();
- /**
- * Removes all role assignments.
- */
- public function removeAllAssignments();
- }
|