How to implement an access privilege and user checking in every Controller using Codeigniter?

Question

I am using Ion_Auth library. And I found out that it's easy to implement authentication here. But my question is how can I use this to perform a checking in every controller?

In my admin part I have multiple users but every users is assigned to a specific group. Means there are no user will be assign to a multiple group. When I checked the ion_auth the user can be belong to multiple groups. In that part I just get the value from the index 0 and make it as the primary group type.

public function __construct() {

    parent::__construct();

    $this->load->library('my_auth');

    $user_groups = $this->ion_auth->get_users_groups()->result_array();
    $get_user_group = $user_groups[0]['id']; //hard coded!!! still finding a good way to prevent this

    if (!$this->ion_auth->logged_in()) {
        redirect('auth/login');
    }

    if (!$this->ion_auth->is_admin()) {
        redirect('error/error_privilege');
    }

    $this->data['options'] = array(
        'active_menu'   =>  'dashboard'
    );

}

And the other thing I want is how can I do this without including all of these codes in every controller I want to have an authentication?

What I want is perform an authentication

first to validate if user is login or not
next is to validate what are they group type

After getting the group type how can I restrict the view of the page? My idea is after login and if the user is valid I will call their group type and store it in a session. And I will include a flag variable with an id of the user group(hard coded)in a specific view and from that I can validate thew viewing of the page.

Just like this: Here I have a navigation menu

Inbound List Outbound List Inbound List Outbound List

And for the specific controller

//inbound controller
public function __construct() {
   parent::__construct();
   $group_type = 1;
   if(!$this->session->userdata('group_type') == 1) {
        //warn user or redirect
   }
}

Can you suggest me a better way to implement this type of checking?

Ohgodwhy · Accepted Answer · 2015-10-23 02:04:01Z

1

Your controllers should all be extending a default controller that contains all logic applied before any rendering or data manipulation occurs.

class PageController extends DefaultController {
    /*
     * logic for pages!
     */
}

Where DefaultController actually extends the base Controller

class DefaultController extends Controller {
    /**
     * And also checks the authorization as well
     */
     public function __construct(){
         //logic to check roles etc.

         //redirect and flash session if failed, otherwise just return.
     }
}

answered Oct 23, 2015 at 2:04

Ohgodwhy

50.8k11 gold badges86 silver badges114 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

Jerielle Over a year ago

Thanks I will try that approach :)

Jerielle Over a year ago

Hi I created a Main controller for checking and I extend my class to it but I got an error: Fatal error: Class 'Main' not found in C:\wamp\www\toyota_monitoring\application\controllers\dashboard.php on line 3

Ohgodwhy Over a year ago

Does the Dashboard extend MainController?

Jerielle Over a year ago

Yes, where should I put the Main controller? In the library/core/controller folder?

Collectives™ on Stack Overflow

How to implement an access privilege and user checking in every Controller using Codeigniter?

1 Answer 1

4 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

4 Comments

Your Answer

Sign up or log in

Post as a guest

Related