Author Topic: Is there a way to find Drupal role in the $session object? (Read 2841 times)

CiviTeacher.com · August 06, 2010, 07:15:57 pm

Searched the forums, searched the docs, didn't find anything. Searched for "civicrm session object", etc etc. Maybe I looked in the wrong place? Nothing.

&smartyDebug=1 doesn't show me the contents of the $session object, only that it exists. {$session|@debug_print_var} in the .tpl gives me only the name of the session object, no contents... I couldn't find a map of what's in the $session object or how to access it anywhere in Civi docs. This page tells me I can find the userID in the $session, but no other examples nor anything else about the session: http://en.flossmanuals.net/CiviCRM/DevelopTemplates

Do these docs exist?

Is there a way to find the users role(s) in the session object just as we find their userID?
$session->get('userID')

If this is not possible, how do I access the current user role(s) in the .php files using CiviCRMish language?

but ....
$session->get('roles');
$session->get('role');
$session->get('userRole')
$session->get('userRoles')
all produce NULL.

Am I missing the obvious? Where are the docs describing the contents of $session? After spending 30 minutes just trying to find this information I decided to post here.

PS. woot! 500th post

Donald Lobo · August 06, 2010, 08:00:47 pm

i assume by user roles, u mean drupal user roles and not civicrm acl roles.

for drupal roles, u'll have to use the drupal api (dont know the function name, something like user_roles() ?) to get the roles of the current user. we dont use that internally within civicrm

note that in 3.2 the session should be significantly smaller than prior versions (most of the sessions contents are now stored in a cache table)

lobo

demeritcowboy · August 07, 2010, 02:30:21 am

Code: [Select]

global $user;
$roles_array = $user->roles;

CiviTeacher.com · August 09, 2010, 01:38:11 am

Thanks guys. So Drupal roles are not in the Civi session is basically what you're saying?

Ok, I can work with that.

Basically the reason I'm doing this is I want Drupal authenticated users to be able to use auto-complete fields on contribution forms, while logged in of course. This ability only comes with the "Access civicrm" drupal permission. This permission has the unwanted side effect of putting the black Civi menu at the top of their page, so I wrote this code and just included it in the Drupal theme page.tpl.php. Hides the menu for certain roles. Code is written long hand for ease of reading. Experienced programmers can condense it as needed. This was my code.

Code: [Select]

  <?php 
       //this hides the civicrm menu unless user has specific role(s)
	//add role key # (in my case it's '3') if you want to add more roles
  	global $user;
  	$roles_array = $user->roles;
  	if (array_key_exists(3,$roles_array)) {  
		//don't hide the menu
	} else {
?>
	<!-- this hides the CiviCRM menu for certain roles in the page.tpl.php -->
	<style type="text/css">
	  #civicrm-menu { display: none; }
	</style>
<?php 
	}
  ?>

torenware · August 11, 2010, 09:37:29 pm

Quote from: Stoob on August 09, 2010, 01:38:11 am

Thanks guys. So Drupal roles are not in the Civi session is basically what you're saying?

Ok, I can work with that.

Yep. Nor should you expect it to be there.

Your code should be pretty robust, since the standard way of getting the current user's roles is exactly as you're doing it here.

xavier · August 14, 2010, 04:18:49 pm

Beware that it meant that your users can add manually /civicrm and have access to civicrm.

If they are hackerish enough, they are able to use the ajax api and retrieve contacts and what else (or modify them).

ie. "CiviCRM access" is your first, and best line of defence. If you put it down, you might have bad surprises.

I would suggest you to create a ajax rest interface clone mostly a copy of the the civicrm one but that don't need CiviCRM access right, and that you can limit to exactly the urls you want (on your own module).

X+

CiviTeacher.com · September 02, 2010, 11:38:07 pm

Thanks, yes I realize the risk. I don't have the time or skill right now to clone rest.js and modify it to my goals. I might like to hire you to do it. Are you available in October?

CiviCRM Community Forums (archive)

News:

Author Topic: Is there a way to find Drupal role in the $session object? (Read 2841 times)

CiviTeacher.com

Is there a way to find Drupal role in the $session object?

Donald Lobo

Re: Is there a way to find Drupal role in the $session object?

demeritcowboy

Re: Is there a way to find Drupal role in the $session object?

CiviTeacher.com

Re: Is there a way to find Drupal role in the $session object?

torenware

Re: Is there a way to find Drupal role in the $session object?

xavier

Re: Is there a way to find Drupal role in the $session object?

CiviTeacher.com

Re: Is there a way to find Drupal role in the $session object?