AccessFileUploadPreview.php

Go to the documentation of this file.

<?php

declare(strict_types=1);

namespace ILIAS\Modules\Test;

use ILIAS\Data\Result;
use ILIAS\Data\Result\Ok;
use ILIAS\Data\Result\Error;
use ilDBConstants;
use ilAccess;
use ilDBInterface;
use Closure;
use ilObject;

class AccessFileUploadPreview implements SimpleAccess
{
    private ilDBInterface $database;
    private ilAccess $access;
    private Incident $incident;
    private Closure $references_of;
    private Closure $type_of;

    public function __construct(
        ilDBInterface $database,
        ilAccess $access,
        ?Incident $incident = null,
        $references_of = [ilObject::class, '_getAllReferences'],
        $type_of = [ilObject::class, '_lookupType']
    ) {
        $this->database = $database;
        $this->access = $access;
        $this->incident = $incident ?? new Incident();
        $this->references_of = Closure::fromCallable($references_of);
        $this->type_of = Closure::fromCallable($type_of);
    }

    public function isPermitted(string $path): Result
    {
        $question_id = $this->questionId($path);
        if (!$question_id) {
            return new Error('Not a question image path of test questions.');
        }

        $object_id = $this->objectId($question_id);
        if (!$object_id) {
            return new Ok(false);
        }

        $permitted = $this->incident->any([$this, 'refIdPermitted'], ($this->references_of)($object_id));

        return new Ok($permitted);
    }

    public function refIdPermitted(int $ref_id): bool
    {
        $ref_id = $ref_id;
        $type = ($this->type_of)($ref_id, true);

        switch ($type) {
            case 'qpl': return $this->access->checkAccess('read', '', $ref_id);
            case 'tst': return $this->access->checkAccess('write', '', $ref_id);
            default: return false;
        }
    }

    private function questionId(string $path): ?int
    {
        $results = [];
        if (!preg_match(':/assessment/qst_preview/\d+/(\d+)/fileuploads/([^/]+)$:', $path, $results)) {
            return null;
        }

        return (int) $results[1];
    }

    private function objectId(int $question_id): ?int
    {
        $object_id = $this->database->fetchAssoc($this->database->queryF(
            'SELECT obj_fi FROM qpl_questions WHERE question_id = %s',
            [ilDBConstants::T_INTEGER],
            [$question_id]
        ))['obj_fi'] ?? null;

        return $object_id ? (int) $object_id : null;
    }
}