Routes and plugin access by guest user

[Wemago]

I've started with a clean install of flexo, created a basic plugin and added custom routes for the plugin. So I have a custom route like site.com/people which should call NetworkController. I've added a page "people".

The thing is in Chrome works perfect but in Firefox and IE it breaks redirects me to a site.com/login page and gives the page not found error, which is correct since login page doesn't exists.

I've debugged the dispatcher but can't find anywhere where's the problem.

[Wemago]

After 3 hours of debugging just found out that controllers can't be accessed by logout users. It has nothing to do with the browser after all.

[radiocity]

Could you show a source code of your plugin?

[Wemago]

The problem is in construct function from PluginController, it checks if user is logged in or if has permission to access it. When removing this lines it brakes the flow saying that the plugin "network" controller can't be found. I'm not finding a work around for it. Any idea?

[Wemago]

ok at Plugin controller should change __construct to

function __construct() {
    AuthUser::load();

    $uri = explode('/', CURRENT_URI);

    if ($uri[1] == ADMIN_DIR_NAME && (!AuthUser::isLoggedIn() || !AuthUser::hasPermission(array('administrator','developer','editor')) ) ) {
        redirect(get_url('login'));
    }
}

So we only check if user is logged in or has permission for the backend. Now there's another problem at Plugin Model because it only adds controller if user has permissions, so if its a guest the plugin controller won't be loaded. Need to find a fix for this.

[Wemago]

At Plugin model do this

static function addController($plugin_id, $class_name, $permissions = null) {

        if (!isset(self::$plugins_infos[$plugin_id])) return;

        $class_name = Inflector::camelize($class_name).'Controller';
        $class_file = PLUGINS_ROOT.DIRECTORY_SEPARATOR.$plugin_id.DIRECTORY_SEPARATOR . $class_name.'.php';

        if (file_exists($class_file)) {
            self::$controllers[$plugin_id] = (object) array(
                'class_name' => $class_name,
                'file'       => $class_file,
                'permissions' => $permissions
            );

            AutoLoader::addFile($class_name, $class_file);
        } else
            throw new Exception('Plugin controller file '. $class_file .' was not found!');
}

Still need to find a better solution for this. But now I can get to controller action from the front end of the application. What I'm doing is calling the page from "network" plugin controller, just like frontpage controller, so all front end is still managed by the admin system. Now I need to check how security of the system acts.

[Wemago]

What I'm trying to do is to control the routes. My application is made by using different plugins, so if I have one route like site.com/call/param it will call one controller from a plugin, then I'll add a second route like site.com/call/param/call2/param2 which should call a second controller but from another plugin, using the behavior api this wouldn't work because the routes would always call the same plugin and would be changed by that plugin.

[radiocity]

You can call one plugin at a time. You can try to extend classes of plugins you use and compare it.

Example:

Dispatcher::addRoute(array(
 '/' => 'page/index',
 '/about' => 'page/about,
 '/blog/:num' => 'blog/post/$1',
 '/blog/:num/comment/:num/delete' => 'blog/deleteComment/$1/$2'
));

[Wemago]

That doesn't change anything. When you add a route it will call a controller and to load a controller into the system you use Plugin::addController() and this function will always check if user has permissions (app/model/plugin line 254), so if you're a guest the plugin controller won't be loaded.. Even if you extend FrontController instead of PluginController it wont work.

[radiocity]

So.... what about your plugin sources?
If you afraid to show code at this thread mail to test@rcreate.ru