Resolves the bypass permission through the legacy container, since the public RBAC surface of AccessControl does not offer a permission check yet. More...

Inheritance diagram for ILIAS\FileServices\Policy\UploadRestrictionBypassLegacyProxy:

Collaboration diagram for ILIAS\FileServices\Policy\UploadRestrictionBypassLegacyProxy:

Public Member Functions
	isGrantedToCurrentUser ()

	isGrantedToCurrentUser ()

Private Member Functions
	determineFileAdminRefId ()

Private Attributes
const string	PERMISSION = 'upload_blacklisted_files'

bool	$granted = null

Detailed Description

Resolves the bypass permission through the legacy container, since the public RBAC surface of AccessControl does not offer a permission check yet.

Without a constructor it can be built at build time; the container is only read once the check actually runs.

Author: Fabian Schmid fabia.nosp@m.n@sr.nosp@m..solu.nosp@m.tion.nosp@m.s

Definition at line 32 of file UploadRestrictionBypassLegacyProxy.php.

Member Function Documentation

◆ determineFileAdminRefId()

ILIAS\FileServices\Policy\UploadRestrictionBypassLegacyProxy::determineFileAdminRefId ( )

private

Definition at line 53 of file UploadRestrictionBypassLegacyProxy.php.

                                              : int
    {
        global $DIC;
        try {
            $r = $DIC->database()->query(
                "SELECT ref_id FROM object_reference JOIN object_data ON object_reference.obj_id = object_data.obj_id WHERE object_data.type = 'facs';"
            );
            $r = $DIC->database()->fetchObject($r);
            return (int) ($r->ref_id ?? 0);
        } catch (\Throwable) {
            return 0;
        }
    }

References $DIC.

Referenced by ILIAS\FileServices\Policy\UploadRestrictionBypassLegacyProxy\isGrantedToCurrentUser().

Here is the caller graph for this function:

◆ isGrantedToCurrentUser()

ILIAS\FileServices\Policy\UploadRestrictionBypassLegacyProxy::isGrantedToCurrentUser ( )

Implements ILIAS\FileServices\Policy\UploadRestrictionBypass.

Definition at line 38 of file UploadRestrictionBypassLegacyProxy.php.

                                            : bool
    {
        if ($this->granted !== null) {
            return $this->granted;
        }
 
        global $DIC;
        return $this->granted = ($DIC->isDependencyAvailable('rbac')
            && isset($DIC['rbacsystem'])
            && $DIC->rbac()->system()->checkAccess(
                self::PERMISSION,
                $this->determineFileAdminRefId()
            ));
    }