========================= * Permission helpers (fail-closed) * ========================= */
(array $perms)
| 40 | * Permission helpers (fail-closed) |
| 41 | * ========================= */ |
| 42 | private function isAdmin(array $perms): bool |
| 43 | { |
| 44 | if (!empty($perms['admin']) || !empty($perms['isAdmin'])) { |
| 45 | return true; |
| 46 | } |
| 47 | if (!empty($_SESSION['isAdmin']) && $_SESSION['isAdmin'] === true) { |
| 48 | return true; |
| 49 | } |
| 50 | $role = $_SESSION['role'] ?? null; |
| 51 | if ($role === 'admin' || $role === '1' || $role === 1) { |
| 52 | return true; |
| 53 | } |
| 54 | |
| 55 | $u = $_SESSION['username'] ?? ''; |
| 56 | if ($u) { |
| 57 | $roleStr = userModel::getUserRole($u); |
| 58 | if ($roleStr === '1') { |
| 59 | return true; |
| 60 | } |
| 61 | } |
| 62 | return false; |
| 63 | } |
| 64 | |
| 65 | private function isFolderOnly(array $perms): bool |
| 66 | { |
no test coverage detected