How is the «Developer» → «Developer Client Restrictions» → «Allowed IPs (comma separated)» backend configuration option implemented and used?

dmitry_fedyuk · February 17, 2016, 3:13am

Implementation

magento/magento2/blob/2ea8cdd7/app/code/Magento/Developer/etc/adminhtml/system.xml#L20-L24


<field id="allow_ips" translate="label comment" type="text" sortOrder="20" showInDefault="1" showInWebsite="1" showInStore="1">
    <label>Allowed IPs (comma separated)</label>
    <comment>Leave empty for access from any location.</comment>
    <backend_model>Magento\Developer\Model\Config\Backend\AllowedIps</backend_model>
</field>

github.com

magento/magento2/blob/2ea8cdd7/app/code/Magento/Developer/Helper/Data.php#L13-L16


/**
 * Dev allow ips config path
 */
const XML_PATH_DEV_ALLOW_IPS = 'dev/restrict/allow_ips';

github.com

magento/magento2/blob/2ea8cdd7/app/code/Magento/Developer/Helper/Data.php#L24-L44


public function isDevAllowed($storeId = null)
{
    $allow = true;


    $allowedIps = $this->scopeConfig->getValue(
        self::XML_PATH_DEV_ALLOW_IPS,
        \Magento\Store\Model\ScopeInterface::SCOPE_STORE,
        $storeId
    );
    $remoteAddr = $this->_remoteAddress->getRemoteAddress();
    if (!empty($allowedIps) && !empty($remoteAddr)) {
        $allowedIps = preg_split('#\s*,\s*#', $allowedIps, null, PREG_SPLIT_NO_EMPTY);
        if (array_search($remoteAddr, $allowedIps) === false
            && array_search($this->_httpHeader->getHttpHost(), $allowedIps) === false
        ) {
            $allow = false;
        }
    }


    return $allow;
}

Usage

github.com

magento/magento2/blob/2ea8cdd7/app/code/Magento/Backend/Model/Translate/Inline/Config.php#L46-L49


public function isDevAllowed($scope = null)
{
    return $this->devHelper->isDevAllowed($scope);
}

github.com

magento/magento2/blob/2ea8cdd7/app/code/Magento/Developer/Model/TemplateEngine/Plugin/DebugHints.php#L91-L102


if ($this->scopeConfig->getValue($this->debugHintsPath, ScopeInterface::SCOPE_STORE, $storeCode)
    && $this->devHelper->isDevAllowed()) {
    $showBlockHints = $this->scopeConfig->getValue(
        self::XML_PATH_DEBUG_TEMPLATE_HINTS_BLOCKS,
        ScopeInterface::SCOPE_STORE,
        $storeCode
    );
    return $this->debugHintsFactory->create([
        'subject' => $invocationResult,
        'showBlockHints' => $showBlockHints,
    ]);
}

github.com

magento/magento2/blob/2ea8cdd7/lib/internal/Magento/Framework/Translate/Inline.php#L109-L124


/**
 * Check if Inline Translates is allowed
 *
 * @return bool
 */
public function isAllowed()
{
    if ($this->isAllowed === null) {
        if (!$this->scope instanceof \Magento\Framework\App\ScopeInterface) {
            $scope = $this->scopeResolver->getScope($this->scope);
        }
        $this->isAllowed = $this->config->isActive($scope)
            && $this->config->isDevAllowed($scope);
    }
    return $this->state->isEnabled() && $this->isAllowed;
}