Update check wildcard match

takes into consideration multilevel permissions.
codeigniter4 · Nov 9, 2024 · 4db173c · 4db173c
1 parent 031b637
commit 4db173c
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/src/Authorization/Traits/Authorizable.php b/src/Authorization/Traits/Authorizable.php
@@ -280,8 +280,13 @@ public function can(string ...$permissions): bool
                 }
 
                 // Check wildcard match
-                $check = substr($permission, 0, strpos($permission, '.')) . '.*';
-                if (isset($matrix[$group]) && in_array($check, $matrix[$group], true)) {
+                $checks = [];
+                $parts = explode('.', $permission);
+                for ($i = count($parts); $i > 0; $i--) {
+                    $check = implode('.', array_slice($parts, 0, $i)) . '.*';
+                    $checks[] = $check;
+                }
+                if (isset($matrix[$group]) && array_intersect($checks, $matrix[$group])) {
                     return true;
                 }
             }