vendor/pimcore/portal-engine/src/EventSubscriber/DenyPermissionsForFolders.php line 42

Open in your IDE?
  1. <?php
  3. /**
  4.  * Pimcore
  5.  *
  6.  * This source file is available under following license:
  7.  * - Pimcore Commercial License (PCL)
  8.  *
  9.  *  @copyright  Copyright (c) Pimcore GmbH (http://www.pimcore.org)
  10.  *  @license    http://www.pimcore.org/license     PCL
  11.  */
  13. namespace Pimcore\Bundle\PortalEngineBundle\EventSubscriber;
  15. use Pimcore\Bundle\PortalEngineBundle\Event\Permission\AbstractEvent\DataPoolItemPermissionEvent;
  16. use Pimcore\Bundle\PortalEngineBundle\Event\Permission\DataPoolDeleteItemEvent;
  17. use Pimcore\Bundle\PortalEngineBundle\Event\Permission\DataPoolSubfolderItemEvent;
  18. use Pimcore\Bundle\PortalEngineBundle\Event\Permission\DataPoolUpdateItemEvent;
  19. use Pimcore\Bundle\PortalEngineBundle\Model\Configuration\DataPool\AssetConfig;
  20. use Pimcore\Bundle\PortalEngineBundle\Model\Configuration\DataPool\DataPoolConfigInterface;
  21. use Pimcore\Bundle\PortalEngineBundle\Service\DataPool\DataPoolConfigService;
  22. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  24. class DenyPermissionsForFolders implements EventSubscriberInterface
  25. {
  26.     protected $dataPoolConfigService;
  28.     public function __construct(DataPoolConfigService $dataPoolConfigService)
  29.     {
  30.         $this->dataPoolConfigService = $dataPoolConfigService;
  31.     }
  33.     public static function getSubscribedEvents()
  34.     {
  35.         return [
  36.             DataPoolUpdateItemEvent::class => 'denyAccessForRootAndUploadFolder',
  37.             DataPoolDeleteItemEvent::class => 'denyAccessForRootAndUploadFolder',
  38.             DataPoolSubfolderItemEvent::class => 'denyAccessForUploadFolderOnly',
  39.         ];
  40.     }
  42.     public function denyAccessForRootAndUploadFolder(DataPoolItemPermissionEvent $event)
  43.     {
  44.         $config = $this->dataPoolConfigService->getDataPoolConfigById($event->getDataPoolId());
  46.         $this->denyAccessForRootFolder($config, $event);
  47.         $this->denyAccessForUploadFolder($config, $event);
  48.     }
  50.     public function denyAccessForUploadFolderOnly(DataPoolItemPermissionEvent $event)
  51.     {
  52.         $config = $this->dataPoolConfigService->getDataPoolConfigById($event->getDataPoolId());
  54.         $this->denyAccessForUploadFolder($config, $event);
  55.     }
  57.     protected function denyAccessForRootFolder(DataPoolConfigInterface $dataPoolConfig, DataPoolItemPermissionEvent $event)
  58.     {
  59.         $workspaces = $dataPoolConfig->getWorkspaces();
  61.         if (!empty($workspaces)) {
  62.             foreach ($workspaces as $workspace) {
  63.                 if ($workspace->getFullPath() === $event->getSubjectFullPath()) {
  64.                     $event->setAllowed(false);
  66.                     return;
  67.                 }
  68.             }
  69.         }
  70.     }
  72.     protected function denyAccessForUploadFolder(DataPoolConfigInterface $dataPoolConfig, DataPoolItemPermissionEvent $event)
  73.     {
  74.         if (
  75.             !$dataPoolConfig instanceof AssetConfig ||
  76.             !$dataPoolConfig->getUploadFolder() ||
  77.             $dataPoolConfig->getUploadFolder()->getRealFullPath() !== $event->getSubjectFullPath()
  78.         ) {
  79.             return;
  80.         }
  82.         $event->setAllowed(false);
  83.     }
  84. }