ilPRGPermissionsHelper Class Reference

Both role and OrgU-based permissions are relevant in many places of the PRG. More...

Collaboration diagram for ilPRGPermissionsHelper:

Public Member Functions
	__construct (ilAccess $access, ilOrgUnitPositionAccess $orgu_access, ilObjStudyProgramme $programme)
	may (string $operation)
	mayAnyOf (array $operations)
	getUserIdsSusceptibleTo (string $operation)
	return int[] More...
	filterUserIds (array $user_ids, string $operation)

Data Fields
const	ORGU_OPERATIONS
const	ROLEPERM_VIEW = 'rp_visible'
const	ROLEPERM_READ = 'rp_read'
const	ROLEPERM_WRITE = 'rp_write'
const	ROLEPERM_MANAGE_MEMBERS = 'rp_manage_members'
const	ROLEMAPPINGS

Protected Member Functions
	throwForInvalidOperation (string $operation)
	getUserIdsInPrgAccessibleForOperation (string $orgu_operation)
	getAllAssignedUserIds ()
	getProgrammeRefId ()

Protected Attributes
	$access
	$orgu_access
	$programme
	$user_id_cache

Detailed Description

Both role and OrgU-based permissions are relevant in many places of the PRG.

This is to bundle permission-checks.

Please note that the 'manage_members'-permission granted via global or local roles will include all the ORGU_OPERATIONS listed here and is thus very different from the OrgUnitOperation 'manage_members'.

Definition at line 11 of file ilPRGPermissionsHelper.php.

Constructor & Destructor Documentation

__construct()

ilPRGPermissionsHelper::__construct	(	ilAccess	$access,
		ilOrgUnitPositionAccess	$orgu_access,
		ilObjStudyProgramme	$programme
	)

Definition at line 55 of file ilPRGPermissionsHelper.php.

References $access, $orgu_access, and $programme.

      {
        $this->access = $access;
        $this->orgu_access = $orgu_access;
        $this->programme = $programme;
    }

Member Function Documentation

filterUserIds()

ilPRGPermissionsHelper::filterUserIds	(	array	$user_ids,
		string	$operation
	)

Parameters

int[]

$user_ids

Definition at line 114 of file ilPRGPermissionsHelper.php.

References getProgrammeRefId(), and may().

                                                                      : array
    {
        if ($this->may(self::ROLEPERM_MANAGE_MEMBERS)) { //RBAC overrides OrgUs
            return $user_ids;
        }

        return $this->orgu_access->filterUserIdsByPositionOfCurrentUser(
            $operation,
            $this->getProgrammeRefId(),
            $user_ids
        );
    }

Here is the call graph for this function:

getAllAssignedUserIds()

ilPRGPermissionsHelper::getAllAssignedUserIds ( )

protected

Returns

int[]

Definition at line 163 of file ilPRGPermissionsHelper.php.

Referenced by getUserIdsInPrgAccessibleForOperation(), and getUserIdsSusceptibleTo().

                                               : array
    {
        if (!$this->cache[self::ROLEPERM_MANAGE_MEMBERS]) {
            $this->cache[self::ROLEPERM_MANAGE_MEMBERS] = array_unique($this->programme->getMembers());
        }
        return $this->cache[self::ROLEPERM_MANAGE_MEMBERS];
    }

Here is the caller graph for this function:

getProgrammeRefId()

ilPRGPermissionsHelper::getProgrammeRefId ( )

protected

Definition at line 171 of file ilPRGPermissionsHelper.php.

Referenced by filterUserIds(), and may().

                                           : int
    {
        return (int) $this->programme->getRefId();
    }

Here is the caller graph for this function:

getUserIdsInPrgAccessibleForOperation()

ilPRGPermissionsHelper::getUserIdsInPrgAccessibleForOperation ( string  $orgu_operation )

protected

Definition at line 144 of file ilPRGPermissionsHelper.php.

References getAllAssignedUserIds().

Referenced by getUserIdsSusceptibleTo().

                                                                                     : array
    {
        if (!$this->cache[$orgu_operation]) {
            $user_ids = array_map(
                'intval',
                $this->orgu_access->filterUserIdsByPositionOfCurrentUser(
                    $orgu_operation,
                    $this->getProgrammeRefId(),
                    $this->getAllAssignedUserIds()
                )
            );
            $this->cache[$orgu_operation] = array_unique($user_ids);
        }
        return $this->cache[$orgu_operation];
    }

Here is the call graph for this function:

Here is the caller graph for this function:

getUserIdsSusceptibleTo()

ilPRGPermissionsHelper::getUserIdsSusceptibleTo

(

string

$operation

)

return int[]

Definition at line 97 of file ilPRGPermissionsHelper.php.

References getAllAssignedUserIds(), getUserIdsInPrgAccessibleForOperation(), may(), and throwForInvalidOperation().

                                                               : array
    {
        $this->throwForInvalidOperation($operation);

        if ($this->may(self::ROLEPERM_MANAGE_MEMBERS)) { //RBAC overrides OrgUs
            return $this->getAllAssignedUserIds();
        }

        if (in_array($operation, self::ORGU_OPERATIONS) && $this->may($operation)) {
            return $this->getUserIdsInPrgAccessibleForOperation($operation);
        }
        return [];
    }

Here is the call graph for this function:

may()

ilPRGPermissionsHelper::may

(

string

$operation

)

Definition at line 65 of file ilPRGPermissionsHelper.php.

References getProgrammeRefId(), and throwForInvalidOperation().

Referenced by filterUserIds(), getUserIdsSusceptibleTo(), and mayAnyOf().

                                           : bool
    {
        $this->throwForInvalidOperation($operation);
        if (in_array($operation, self::ORGU_OPERATIONS)) {
            return
                $this->access->checkAccess( //RBAC overrides OrgUs
                    self::ROLEMAPPINGS[self::ROLEPERM_MANAGE_MEMBERS],
                    '',
                    $this->getProgrammeRefId()
                )
                || $this->access->checkPositionAccess($operation, $this->getProgrammeRefId());
        } else {
            return $this->access->checkAccess(self::ROLEMAPPINGS[$operation], '', $this->getProgrammeRefId());
        }
    }

Here is the call graph for this function:

Here is the caller graph for this function:

mayAnyOf()

ilPRGPermissionsHelper::mayAnyOf

(

array

$operations

)

Parameters

string[]

$operations

Definition at line 84 of file ilPRGPermissionsHelper.php.

References may().

                                                : bool
    {
        foreach ($operations as $operation) {
            if ($this->may($operation)) {
                return true;
            }
        }
        return false;
    }

Here is the call graph for this function:

throwForInvalidOperation()

ilPRGPermissionsHelper::throwForInvalidOperation ( string  $operation )

protected

Definition at line 127 of file ilPRGPermissionsHelper.php.

References $valid.

Referenced by getUserIdsSusceptibleTo(), and may().

                                                                   : void
    {
        $valid = array_merge(
            self::ORGU_OPERATIONS,
            [
                self::ROLEPERM_VIEW,
                self::ROLEPERM_READ,
                self::ROLEPERM_WRITE,
                self::ROLEPERM_MANAGE_MEMBERS
            ]
        );

        if (!in_array($operation, $valid)) {
            throw new \ilException('prg does not provide this permission: ' . $operation);
        }
    }

Here is the caller graph for this function:

Field Documentation

$access

ilPRGPermissionsHelper::$access

protected

Definition at line 38 of file ilPRGPermissionsHelper.php.

Referenced by __construct().

$orgu_access

ilPRGPermissionsHelper::$orgu_access

protected

Definition at line 43 of file ilPRGPermissionsHelper.php.

Referenced by __construct().

$programme

ilPRGPermissionsHelper::$programme

protected

Definition at line 48 of file ilPRGPermissionsHelper.php.

Referenced by __construct().

$user_id_cache

ilPRGPermissionsHelper::$user_id_cache

protected

Definition at line 53 of file ilPRGPermissionsHelper.php.

ORGU_OPERATIONS

const ilPRGPermissionsHelper::ORGU_OPERATIONS

Initial value:

= [
        ilOrgUnitOperation::OP_VIEW_MEMBERS,
        ilOrgUnitOperation::OP_READ_LEARNING_PROGRESS,
        ilOrgUnitOperation::OP_VIEW_INDIVIDUAL_PLAN,
        ilOrgUnitOperation::OP_EDIT_INDIVIDUAL_PLAN,
        ilOrgUnitOperation::OP_MANAGE_MEMBERS
    ]

Definition at line 13 of file ilPRGPermissionsHelper.php.

ROLEMAPPINGS

const ilPRGPermissionsHelper::ROLEMAPPINGS

Initial value:

= [
        'rp_visible' => 'visible'

Definition at line 28 of file ilPRGPermissionsHelper.php.

ROLEPERM_MANAGE_MEMBERS

const ilPRGPermissionsHelper::ROLEPERM_MANAGE_MEMBERS = 'rp_manage_members'

Definition at line 26 of file ilPRGPermissionsHelper.php.

ROLEPERM_READ

const ilPRGPermissionsHelper::ROLEPERM_READ = 'rp_read'

Definition at line 22 of file ilPRGPermissionsHelper.php.

Referenced by ilObjStudyProgrammeGUI\addToNavigationHistory(), ilObjStudyProgrammeGUI\executeCommand(), ilObjStudyProgrammeGUI\getSubTabs(), ilObjStudyProgrammeGUI\getTabs(), and ilObjStudyProgrammeGUI\view().

ROLEPERM_VIEW

const ilPRGPermissionsHelper::ROLEPERM_VIEW = 'rp_visible'

Definition at line 21 of file ilPRGPermissionsHelper.php.

Referenced by ilObjStudyProgrammeGUI\denyAccessIfNotAnyOf(), and ilObjStudyProgrammeGUI\executeCommand().

ROLEPERM_WRITE

const ilPRGPermissionsHelper::ROLEPERM_WRITE = 'rp_write'

Definition at line 23 of file ilPRGPermissionsHelper.php.

Referenced by ilObjStudyProgrammeGUI\edit(), ilObjStudyProgrammeGUI\editAdvancedSettings(), ilObjStudyProgrammeGUI\executeCommand(), ilObjStudyProgrammeGUI\getSubTabs(), ilObjStudyProgrammeGUI\getTabs(), and ilObjStudyProgrammeGUI\updateAdvancedSettings().

---

The documentation for this class was generated from the following file:

• Modules/StudyProgramme/classes/helpers/ilPRGPermissionsHelper.php