FM / en

/var/www/vhosts/ihelp.ro/httpdocs/vendor/cakephp/authentication/docs/en/

/var/www/vhosts/ihelp.ro/httpdocs/vendor/cakephp/authentication/docs/en

Name	Size	Mode	Actions
authentication-component.rst	3975	0644	edit dl rm
authenticators.rst	20661	0644	edit dl rm
conf.py	261	0644	edit dl rm
contents.rst	329	0644	edit dl rm
identifiers.rst	6550	0644	edit dl rm
identity-object.rst	3358	0644	edit dl rm
impersonation.rst	2216	0644	edit dl rm
index.rst	8877	0644	edit dl rm
middleware.rst	2633	0644	edit dl rm
migration-from-the-authcomponent.rst	11361	0644	edit dl rm
password-hashers.rst	2704	0644	edit dl rm
testing.rst	1799	0644	edit dl rm
url-checkers.rst	1040	0644	edit dl rm
view-helper.rst	731	0644	edit dl rm

Edit: /var/www/vhosts/ihelp.ro/httpdocs/vendor/cakephp/authentication/docs/en/impersonation.rst (2216B)

User Impersonation
##################

.. versionadded:: 2.10.0
   User impersonation was added.

After deploying your application, you may occasionally need to
'impersonate' another user in order to debug problems that your customers report
or to see the application in the state that your customers are seeing it.

Enabling Impersonation
======================

To impersonate another user you can use the ``impersonate()`` method on the
``AuthenticationComponent``. To impersonate a user you first need to load that
user from your application's database::

// In a controller
    public function impersonate()
    {
        $this->request->allowMethod(['POST']);

$currentUser = $this->request->getAttribute('identity');

// You should always check that the current user is allowed
        // to impersonate other users first.
        if (!$currentUser->isStaff()) {
            throw new NotFoundException();
        }

// Fetch the user we want to impersonate.
        $targetUser = $this->Users->findById(
            $this->request->getData('user_id')
        )->firstOrFail();

// Enable impersonation.
        $this->Authentication->impersonate($targetUser);
        $this->redirect($this->referer());
    }

Once you have started to impersonate a user, all subsequent requests will have
``$targetUser`` as the active identity.

Ending Impersonation
====================

Once you are done impersonating a user, you can then end impersonation and revert
back to your previous identity using ``AuthenticationComponent``::

// In a controller
    public function revertIdentity()
    {
        $this->request->allowMethod(['POST']);

// Make sure we are still impersonating a user.
        if (!$this->Authentication->isImpersonating()) {
            throw new NotFoundException();
        }
        $this->Authentication->stopImpersonating();
    }

Limitations to Impersonation
============================

There are a few limitations to impersonation.

#. Your application must be using the ``Session`` authenticator.
#. You cannot impersonate another user while impersonation is active. Instead
   you must ``stopImpersonation()`` and then start it again.

User Impersonation ################## .. versionadded:: 2.10.0 User impersonation was added. After deploying your application, you may occasionally need to 'impersonate' another user in order to debug problems that your customers report or to see the application in the state that your customers are seeing it. Enabling Impersonation ====================== To impersonate another user you can use the ``impersonate()`` method on the ``AuthenticationComponent``. To impersonate a user you first need to load that user from your application's database:: // In a controller public function impersonate() { $this->request->allowMethod(['POST']); $currentUser = $this->request->getAttribute('identity'); // You should always check that the current user is allowed // to impersonate other users first. if (!$currentUser->isStaff()) { throw new NotFoundException(); } // Fetch the user we want to impersonate. $targetUser = $this->Users->findById( $this->request->getData('user_id') )->firstOrFail(); // Enable impersonation. $this->Authentication->impersonate($targetUser); $this->redirect($this->referer()); } Once you have started to impersonate a user, all subsequent requests will have ``$targetUser`` as the active identity. Ending Impersonation ==================== Once you are done impersonating a user, you can then end impersonation and revert back to your previous identity using ``AuthenticationComponent``:: // In a controller public function revertIdentity() { $this->request->allowMethod(['POST']); // Make sure we are still impersonating a user. if (!$this->Authentication->isImpersonating()) { throw new NotFoundException(); } $this->Authentication->stopImpersonating(); } Limitations to Impersonation ============================ There are a few limitations to impersonation. #. Your application must be using the ``Session`` authenticator. #. You cannot impersonate another user while impersonation is active. Instead you must ``stopImpersonation()`` and then start it again.