<?php

class EDM_Controller_Plugin_Auth extends Zend_Controller_Plugin_Abstract
{
    public function preDispatch(Zend_Controller_Request_Abstract $request)
    {
		
		//$auth = Zend_Auth::getInstance();
        $user = Zend_Auth::getInstance()->getIdentity();
        $acl = EDM_Acl::getInstance();
		$request = $this->getRequest();
		
		try {

			if (!$acl->hasRole($user->user_level_id)) {
        	    throw new Exception('Sorry, the requested user role "'.$user->user_level_id.'" does not exist');									
        	}
        	if (!$acl->has($request->getControllerName())) {
        	    throw new Exception('Sorry, the requested controller "'.$request->getControllerName().'" does not exist as an ACL resource');
        	}
			if (!$acl->isAllowed($user->user_level_id, $request->getControllerName(), $request->getActionName())) {
        	    throw new Exception('Sorry, the page you requested does not exist or you do not have access');
        	}

		} catch (Zend_Exception $e) {
			
			$request->setControllerName('error');
			$request->setActionName('error');
			$request->setDispatched(false);
			
		}
    }
}