modAccessibleObject в MODX. Проверка доступов к объектам.

• MODx::hasPermission();
• modAccessibleObject::checkPolicy();

public function hasPermission($pm) {
    $state = $this->context->checkPolicy($pm);
    return $state;
}

class test extends modAccessibleSimpleObject{
    
}

public static function _loadInstance(& $xpdo, $className, $criteria, $row) {
    
    /** @var modAccessibleObject $instance */
    $instance = xPDOObject :: _loadInstance($xpdo, $className, $criteria, $row);
    // print_r($instance->toArray());
    if ($instance instanceof modAccessibleObject && !$instance->checkPolicy('load')) {
        if ($xpdo instanceof modX) {
            $userid = $xpdo->getLoginUserID();
            if (!$userid) $userid = '0';
            $xpdo->log(xPDO::LOG_LEVEL_INFO, "Principal {$userid} does not have permission to load object of class {$instance->_class} with primary key: " . (is_object($instance) && method_exists($instance,'getPrimaryKey') ? print_r($instance->getPrimaryKey(), true) : ''));
        }
        $instance = null;
    }
    return $instance;
}

public function findPolicy($context = '') {
    return array();
}

$policy = $this->findPolicy();
if (!empty($policy)) {
    $principal = $this->xpdo->user->getAttributes($targets);
    if (!empty($principal)) {
        foreach ($policy as $policyAccess => $access) {
            foreach ($access as $targetId => $targetPolicy) {
                foreach ($targetPolicy as $policyIndex => $applicablePolicy) {

public function getAttributes($targets = array(), $context = '', $reload = false) {
    $context = !empty($context) ? $context : $this->xpdo->context->get('key');
    if (!is_array($targets) || empty($targets)) {
        $targets = explode(',', $this->xpdo->getOption('principal_targets', null, 'modAccessContext,modAccessResourceGroup,modAccessCategory,sources.modAccessMediaSource'));
        array_walk($targets, 'trim');
    }
    $this->loadAttributes($targets, $context, $reload);
    return $this->_attributes[$context];
}