vendor/nellapp/sdk-bundle/src/Permission/Controller/Async/ChannelResourceAccessCacheController.php line 16

Open in your IDE?
  1. <?php
  3. namespace Nellapp\Bundle\SDKBundle\Permission\Controller\Async;
  5. use Nellapp\Bundle\SDKBundle\Auth\Entity\UserInterface;
  6. use Nellapp\Bundle\SDKBundle\Channel\Entity\ChannelInterface;
  7. use Nellapp\Bundle\SDKBundle\GlobalGetters\GlobalEntitiesService;
  8. use Nellapp\Bundle\SDKBundle\Permission\ChannelResourceManager;
  9. use Nellapp\Bundle\SDKBundle\Permission\Security\Authorization\AuthorizationHelper;
  10. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  11. use Symfony\Component\HttpFoundation\Request;
  12. use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
  13. use Symfony\Component\HttpFoundation\JsonResponse;
  14. use Symfony\Component\HttpKernel\Exception\BadRequestHttpException;
  16. class ChannelResourceAccessCacheController extends AbstractController
  17. {
  18.     public function __construct(
  19.         private GlobalEntitiesService  $globalEntitiesService,
  20.         private ChannelResourceManager $channelResourceManager,
  21.         private AuthorizationHelper    $authorizationHelper,
  22.     )
  23.     {
  24.     }
  26.     public function __invoke(Request $request, string $channelId, string $userId): JsonResponse
  27.     {
  28.         $channel = $this->getChannel($channelId);
  29.         if (!$channel) {
  30.             throw new NotFoundHttpException('');
  31.         }
  33.         $user = $this->getUserCheck($userId);
  34.         if (!$user) {
  35.             throw new NotFoundHttpException('');
  36.         }
  38.         $resourceClass = $this->getResourceClass($request);
  39.         if (!$resourceClass) {
  40.             throw new NotFoundHttpException('');
  41.         }
  43.         $permCheck = $this->getPermCheck($request);
  44.         if (!$permCheck) {
  45.             throw new NotFoundHttpException('');
  46.         }
  48.         $data = json_decode($request->getContent(), true);
  49.         if (!isset($data['ids']) || !is_array($data['ids'])) {
  50.             throw new BadRequestHttpException();
  51.         }
  53.         $channelResourceRepository = $this->channelResourceManager->getChannelResourceRepository($resourceClass);
  54.         if (!$channelResourceRepository) {
  55.             throw new BadRequestHttpException();
  56.         }
  58.         $qb = $channelResourceRepository->queryByChannel($channel);
  59.         $iterable = $qb->andWhere($qb->getRootAliases()[0] . '.id IN (:ids)')
  60.             ->setParameter('ids', $data['ids'])
  61.             ->getQuery()
  62.             ->toIterable();
  64.         $accessibleIds = [];
  65.         foreach ($iterable as $resource) {
  66.             if ($this->authorizationHelper->isUserGranted($user, $permCheck, $resource)) {
  67.                 $accessibleIds[] = $resource->getId();
  68.             }
  69.         }
  71.         return new JsonResponse(['accessibleIds' => $accessibleIds]);
  72.     }
  74.     private function getChannel(string $channelId): ?ChannelInterface
  75.     {
  76.         return $this->globalEntitiesService->getChannelRepository()->find($channelId);
  77.     }
  79.     private function getUserCheck(string $userId): ?UserInterface
  80.     {
  81.         return $this->globalEntitiesService->getUserRepository()->find($userId);
  82.     }
  84.     public function getResourceClass(Request $request): string
  85.     {
  86.         return $request->attributes->get('_resource_class');
  87.     }
  89.     public function getPermCheck(Request $request): string
  90.     {
  91.         return $request->attributes->get('_perm_check');
  92.     }
  93. }