class.ilObjMainMenuAccess.php

Go to the documentation of this file.

<?php

declare(strict_types=1);

class ilObjMainMenuAccess extends ilObjectAccess implements ilMainMenuAccess
{
    private ilObjUser $user;
    private ilRbacSystem $rbacsystem;
    private ilRbacReview $rbacreview;
    private ?int $ref_id;
    private ?array $global_roles = null;

    public function __construct()
    {
        global $DIC;
        $this->rbacreview = $DIC->rbac()->review();
        $this->rbacsystem = $DIC->rbac()->system();
        $this->user = $DIC->user();
        $this->ref_id = $DIC->http()->wrapper()->query()->has('ref_id')
            ? $DIC->http()->wrapper()->query()->retrieve('ref_id', $DIC->refinery()->kindlyTo()->int())
            : null;
    }

    public function checkAccessAndThrowException(string $permission): void
    {
        if (!$this->hasUserPermissionTo($permission)) {
            throw new ilException('Permission denied');
        }
    }

    public function hasUserPermissionTo(string $permission): bool
    {
        if ($this->ref_id === null) {
            return false;
        }
        return $this->rbacsystem->checkAccess($permission, $this->ref_id);
    }

    public function getGlobalRoles(): array
    {
        $global_roles = $this->rbacreview->getRolesForIDs(
            $this->rbacreview->getGlobalRoles(),
            false
        );

        $roles = [];
        foreach ($global_roles as $global_role) {
            $roles[$global_role['rol_id']] = $global_role['title'];
        }

        return $roles;
    }

    public function isCurrentUserAllowedToSeeCustomItem(ilMMCustomItemStorage $item, Closure $current): Closure
    {
        return function () use ($item, $current): bool {
            if (!$item->hasRoleBasedVisibility()) {
                return $current();
            }
            if (!empty($item->getGlobalRoleIDs())) {
                foreach ($this->resolveUsersGlobalRoles() as $role_of_current_user) {
                    if (in_array((int) $role_of_current_user, $item->getGlobalRoleIDs(), true)) {
                        return $current();
                    }
                }
            }
            return false;
        };
    }

    private function resolveUsersGlobalRoles(): array
    {
        return $this->global_roles
            ?? $this->global_roles = $this->rbacreview->assignedGlobalRoles($this->user->getId());
    }
}