<?php
// $Id: domain_strict.module,v 1.8 2009-07-03 17:09:26 agentken Exp $

/**
 * @defgroup domain_strict Domain Strict: strict access control
 * Forces users to be assigned to a domain in order to view content on that domain.
 */

/**
 * @file
 * Forces users to be assigned to a domain in order to view content on that domain.
 *
 * @ingroup domain_strict
 */

/**
 * Implement hook_domaingrants()
 *
 * In Domain Strict, we only let users see content on domains that
 * they are registered with.  So we check the $user object in order
 * to set our grants rather than using the default module grants.
 *
 * @ingroup strict
 */
function domain_strict_domaingrants(&$grants, $account, $op) {
  global $_domain;
  // We only act on the 'view' operation.
  if ($op != 'view') {
    return;
  }
  // Erase the default domain_id grants.
  $grants['domain_id'] = array();
  // Get the user-assigned domains.
  $domains = domain_get_user_domains($account);
  if (!empty($domains)) {
    foreach ($domains as $key => $value) {
      // The -1 is the root domain, since 0 cannot be stored by checkboxes.
      ($value == -1) ? $id = 0 : $id = $value;
      // If the user has access to the current domain, set that grant.
      if (abs($value) > 0 && $id == $_domain['domain_id']) {
        $grants['domain_id'][] = $id;
      }
    }
  }
}