Access.php

Go to the documentation of this file.

<?php
 
declare(strict_types=1);
 
namespace ILIAS\GlobalScreen\GUI\Access;
 
use ILIAS\Refinery\Factory;
use ILIAS\HTTP\Services;
use ILIAS\DI\RBACServices;
 
class Access
{
    private \ilRbacSystem $rbac_system;
    private ?int $ref_id = null;
 
    private bool $access_checked = false;
 
    public function __construct(
        RBACServices $rbac,
        Services $http,
        Factory $refinery,
    ) {
        $this->rbac_system = $rbac->system();
        $this->ref_id = $http->wrapper()->query()->has('ref_id')
            ? $http->wrapper()->query()->retrieve('ref_id', $refinery->kindlyTo()->int())
            : null;
    }
 
    public function checkAccessAndThrowException(string $permission): void
    {
        if (!$this->hasUserPermissionTo($permission)) {
            throw new \ilException('Permission denied');
        }
    }
 
    public function hasUserPermissionTo(string $permission): bool
    {
        if ($this->ref_id === null) {
            return false;
        }
        // split permission string
        $permissions = explode(',', $permission);
        foreach ($permissions as $p) {
            if ($this->rbac_system->checkAccess($p, $this->ref_id)) {
                $this->access_checked = true;
                return true;
            }
        }
        $this->access_checked = true;
        return false;
    }
 
    public function __destruct()
    {
        if (!$this->access_checked) {
            //            throw new \RuntimeException('No Access Check');
        }
    }
 
    public function requireReadable(): void
    {
        $this->require('read');
    }
 
    public function requireWritable(): void
    {
        $this->require('write');
    }
 
    public function require(string $permissions): void
    {
        $this->checkAccessAndThrowException($permissions);
    }
 
}