<?php
/**
 * Copyright © Magento, Inc. All rights reserved.
 * See COPYING.txt for license details.
 */
namespace Magento\Framework\Webapi;

/**
 * Web API authorization model.
 *
 * @api
 * @since 100.1.0
 */
class Authorization
{
    /**
     * @var \Magento\Framework\AuthorizationInterface
     * @since 100.1.0
     */
    protected $authorization;

    /**
     * Initialize dependencies.
     *
     * @param \Magento\Framework\AuthorizationInterface $authorization
     * @since 100.1.0
     */
    public function __construct(\Magento\Framework\AuthorizationInterface $authorization)
    {
        $this->authorization = $authorization;
    }

    /**
     * Check if all ACL resources are allowed to be accessed by current API user.
     *
     * @param string[] $aclResources
     * @return bool
     * @since 100.1.0
     */
    public function isAllowed($aclResources)
    {
        foreach ($aclResources as $resource) {
            if (!$this->authorization->isAllowed($resource)) {
                return false;
            }
        }
        return true;
    }
}
