vendor/pimcore/portal-engine/src/Service/Security/Voter/DataPoolAccessVoter.php line 26

Open in your IDE?
  1. <?php
  3. /**
  4.  * Pimcore
  5.  *
  6.  * This source file is available under following license:
  7.  * - Pimcore Commercial License (PCL)
  8.  *
  9.  *  @copyright  Copyright (c) Pimcore GmbH (http://www.pimcore.org)
  10.  *  @license    http://www.pimcore.org/license     PCL
  11.  */
  13. namespace Pimcore\Bundle\PortalEngineBundle\Service\Security\Voter;
  15. use Pimcore\Bundle\PortalEngineBundle\Enum\Permission;
  16. use Pimcore\Bundle\PortalEngineBundle\Model\DataObject\PortalUserInterface;
  17. use Pimcore\Bundle\PortalEngineBundle\Service\DataPool\DataPoolConfigService;
  18. use Pimcore\Bundle\PortalEngineBundle\Service\PortalConfig\PortalConfigService;
  19. use Pimcore\Bundle\PortalEngineBundle\Service\Security\PermissionService;
  20. use Pimcore\Bundle\PortalEngineBundle\Service\Security\Traits\SecurityServiceAware;
  21. use Pimcore\Tool;
  22. use Symfony\Component\EventDispatcher\EventDispatcherInterface;
  23. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  24. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  26. class DataPoolAccessVoter extends Voter
  27. {
  28.     use SecurityServiceAware;
  30.     /**
  31.      * @var PortalConfigService
  32.      */
  33.     protected $portalConfigService;
  35.     /**
  36.      * @var DataPoolConfigService
  37.      */
  38.     protected $dataPoolConfigService;
  40.     /**
  41.      * @var EventDispatcherInterface
  42.      */
  43.     protected $eventDispatcher;
  45.     /**
  46.      * @var PermissionService
  47.      */
  48.     protected $permissionService;
  50.     /**
  51.      * DataPoolAccessVoter constructor.
  52.      *
  53.      * @param PortalConfigService $portalConfigService
  54.      * @param DataPoolConfigService $dataPoolConfigService
  55.      * @param EventDispatcherInterface $eventDispatcher
  56.      * @param PermissionService $permissionService
  57.      */
  58.     public function __construct(PortalConfigService $portalConfigService, DataPoolConfigService $dataPoolConfigService, EventDispatcherInterface $eventDispatcher, PermissionService $permissionService)
  59.     {
  60.         $this->portalConfigService = $portalConfigService;
  61.         $this->dataPoolConfigService = $dataPoolConfigService;
  62.         $this->eventDispatcher = $eventDispatcher;
  63.         $this->permissionService = $permissionService;
  64.     }
  66.     protected function supports($attribute, $subject)
  67.     {
  68.         return ($this->portalConfigService->isPortalEngineSite() || Tool::isFrontendRequestByAdmin() || $this->securityService->isAdminRestApiCall())
  69.                && $attribute === Permission::DATA_POOL_ACCESS;
  70.     }
  72.     /**
  73.      * @param string $attribute
  74.      * @param mixed $subject
  75.      * @param TokenInterface $token
  76.      *
  77.      * @return bool
  78.      */
  79.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
  80.     {
  81.         if (Tool::isFrontendRequestByAdmin()) {
  82.             return true;
  83.         }
  84.         $currentDataPoolConfigId = $this->dataPoolConfigService->getCurrentDataPoolConfig() ? $this->dataPoolConfigService->getCurrentDataPoolConfig()->getId() : 0;
  85.         $dataPoolId = !empty($subject) ? $subject : $currentDataPoolConfigId;
  87.         $user = $this->securityService->getPortalUser();
  88.         if (!$user instanceof PortalUserInterface) {
  89.             return false;
  90.         }
  92.         return $this->permissionService->isDataPoolAccessAllowed($user, $dataPoolId);
  93.     }
  94. }