1: <?php
 2: /**
 3:  * Magento
 4:  *
 5:  * NOTICE OF LICENSE
 6:  *
 7:  * This source file is subject to the Open Software License (OSL 3.0)
 8:  * that is bundled with this package in the file LICENSE.txt.
 9:  * It is also available through the world-wide-web at this URL:
10:  * http://opensource.org/licenses/osl-3.0.php
11:  * If you did not receive a copy of the license and are unable to
12:  * obtain it through the world-wide-web, please send an email
13:  * to license@magentocommerce.com so we can send you a copy immediately.
14:  *
15:  * DISCLAIMER
16:  *
17:  * Do not edit or add to this file if you wish to upgrade Magento to newer
18:  * versions in the future. If you wish to customize Magento for your
19:  * needs please refer to http://www.magentocommerce.com for more information.
20:  *
21:  * @category    Mage
22:  * @package     Mage_Customer
23:  * @copyright   Copyright (c) 2012 Magento Inc. (http://www.magentocommerce.com)
24:  * @license     http://opensource.org/licenses/osl-3.0.php  Open Software License (OSL 3.0)
25:  */
26: 
27: /**
28:  * API2 class for customer (customer)
29:  *
30:  * @category   Mage
31:  * @package    Mage_Customer
32:  * @author     Magento Core Team <core@magentocommerce.com>
33:  */
34: class Mage_Customer_Model_Api2_Customer_Rest_Customer_V1 extends Mage_Customer_Model_Api2_Customer_Rest
35: {
36:     /**
37:      * Is customer has rights to retrieve/update customer item
38:      *
39:      * @param int $customerId
40:      * @throws Mage_Api2_Exception
41:      * @return bool
42:      */
43:     protected function _isOwner($customerId)
44:     {
45:         if ($this->getApiUser()->getUserId() !== $customerId) {
46:             $this->_critical(self::RESOURCE_NOT_FOUND);
47:         }
48:         return true;
49:     }
50: 
51:     /**
52:      * Retrieve information about customer
53:      *
54:      * @throws Mage_Api2_Exception
55:      * @return array
56:      */
57:     protected function _retrieve()
58:     {
59:         if ($this->_isOwner($this->getRequest()->getParam('id'))) {
60:             return parent::_retrieve();
61:         }
62:     }
63: 
64:     /**
65:      * Retrieve collection with only current customer instance
66:      *
67:      * @return Mage_Customer_Model_Resource_Customer_Collection
68:      */
69:     protected function _getCollectionForRetrieve()
70:     {
71:         return parent::_getCollectionForRetrieve()->addAttributeToFilter('entity_id', $this->getApiUser()->getUserId());
72:     }
73: 
74:     /**
75:      * Update customer
76:      *
77:      * @param array $data
78:      * @throws Mage_Api2_Exception
79:      */
80:     protected function _update(array $data)
81:     {
82:         if ($this->_isOwner($this->getRequest()->getParam('id'))) {
83:             parent::_update($data);
84:         }
85:     }
86: 
87:     /**
88:      * Update customers
89:      *
90:      * @param array $data
91:      * @throws Mage_Api2_Exception
92:      */
93:     protected function _multiUpdate(array $data)
94:     {
95:         $this->_critical(self::RESOURCE_METHOD_NOT_ALLOWED, Mage_Api2_Model_Server::HTTP_FORBIDDEN);
96:     }
97: }
98: