simple_edit_user.inc

<?php
require_once SQ_CORE_PACKAGE_PATH.'/users/user/user.inc';


class Simple_Edit_User extends User
{


    function Simple_Edit_User($assetid=0)
    {
        $this->User($assetid);

    }//end constructor


    function canAccessBackend()
    {
        // Simple_Edit_User must not access the backend interface however it can access limbo
        // This function is called before limbo access is granted because traditionally, backend access is
        // required for limbo
        // Permit 'backend' access only if this user is requesting a limbo page
        // Allow simple edit user to have backend interface access when in cron
        // we also have to consider the EES/JS API. Here the State wouldnt be in SQ_IN_LIMBO
        // but never the less we are in simple edit. 
        // Lets be a bit chicky here and check the referer to decide if we are indeed in LIMBO
        // We also have to make sure that the user we are currently deling with isnt the user
        // who initiated the workflow. or else he deserves to be known
        $in_limbo = $workflow_starter = FALSE;
        if(isset($_SERVER['HTTP_REFERER']) && !empty($_SERVER['HTTP_REFERER'])) {
            $in_limbo = (strpos($_SERVER['HTTP_REFERER'],SQ_CONF_LIMBO_SUFFIX) !== FALSE) ? TRUE : FALSE;
        }

        // we are not in limbo or EES see if the user was a workflow starter and if the workflow has been canceled
        // see workflow_manager::cancelWorkflow()
        if(!$in_limbo && (isset($this->_tmp['starter_of_workflow']) && $this->_tmp['starter_of_workflow'])) $workflow_starter = TRUE;

        return (SQ_IN_LIMBO || SQ_IN_CRON || $in_limbo || $workflow_starter);

    }//end canAccessBackend()


}//end class
?>