PhabricatorPolicyRequestExceptionHandler.php
View Options

	<?php

	final class PhabricatorPolicyRequestExceptionHandler
	extends PhabricatorRequestExceptionHandler {

	public function getRequestExceptionHandlerPriority() {
	return 320000;
	}

	public function getRequestExceptionHandlerDescription() {
	return pht(
	'Handles policy exceptions which occur when a user tries to '.
	'do something they do not have permission to do.');
	}

	public function canHandleRequestThrowable(
	AphrontRequest $request,
	$throwable) {

	if (!$this->isPhabricatorSite($request)) {
	return false;
	}

	return ($throwable instanceof PhabricatorPolicyException);
	}

	public function handleRequestThrowable(
	AphrontRequest $request,
	$throwable) {

	$viewer = $this->getViewer($request);

	if (!$viewer->isLoggedIn()) {
	// If the user isn't logged in, just give them a login form. This is
	// probably a generally more useful response than a policy dialog that
	// they have to click through to get a login form.
	//
	// Possibly we should add a header here like "you need to login to see
	// the thing you are trying to look at".
	$auth_app_class = 'PhabricatorAuthApplication';
	$auth_app = PhabricatorApplication::getByClass($auth_app_class);

	return id(new PhabricatorAuthStartController())
	->setRequest($request)
	->setCurrentApplication($auth_app)
	->handleRequest($request);
	}

	$content = array(
	phutil_tag(
	'div',
	array(
	'class' => 'aphront-policy-rejection',
	),
	$throwable->getRejection()),
	);

	$list = null;
	if ($throwable->getCapabilityName()) {
	$list = $throwable->getMoreInfo();
	foreach ($list as $key => $item) {
	$list[$key] = $item;
	}

	$content[] = phutil_tag(
	'div',
	array(
	'class' => 'aphront-capability-details',
	),
	pht(
	'Users with the "%s" capability:',
	$throwable->getCapabilityName()));

	}

	$dialog = id(new AphrontDialogView())
	->setTitle($throwable->getTitle())
	->setClass('aphront-access-dialog')
	->setUser($viewer)
	->appendChild($content);

	if ($list) {
	$dialog->appendList($list);
	}

	// If the install is in developer mode, include a stack trace for the
	// exception. When debugging things, it isn't always obvious where a
	// policy exception came from and this can make it easier to hunt down
	// bugs or improve ambiguous/confusing messaging.

	$is_developer = PhabricatorEnv::getEnvConfig('phabricator.developer-mode');
	if ($is_developer) {
	$dialog->appendChild(
	id(new AphrontStackTraceView())
	->setTrace($throwable->getTrace()));
	}

	if ($request->isAjax()) {
	$dialog->addCancelButton('/', pht('Close'));
	} else {
	$dialog->addCancelButton('/', pht('OK'));
	}

	return $dialog;
	}

	}

File Metadata

Mime Type: text/x-php
Expires: Sun, Jan 19, 19:55 (2 w, 5 d ago)
Storage Engine: blob
Storage Format: Raw Data
Storage Handle: 1128198
Default Alt Text: PhabricatorPolicyRequestExceptionHandler.php (2 KB)

PhabricatorPolicyRequestExceptionHandler.php
No OneTemporary
Actions

PhabricatorPolicyRequestExceptionHandler.php
View Options

File Metadata

Event Timeline

PhabricatorPolicyRequestExceptionHandler.phpNo OneTemporaryActions

PhabricatorPolicyRequestExceptionHandler.phpView Options

File Metadata

Event Timeline

PhabricatorPolicyRequestExceptionHandler.php
No OneTemporary
Actions

PhabricatorPolicyRequestExceptionHandler.php
View Options