UploadRestrictionBypassLegacyProxy.php

Go to the documentation of this file.

<?php
 
declare(strict_types=1);
 
namespace ILIAS\FileServices\Policy;
 
final class UploadRestrictionBypassLegacyProxy implements UploadRestrictionBypass
{
    private const string PERMISSION = 'upload_blacklisted_files';
 
    private ?bool $granted = null;
 
    public function isGrantedToCurrentUser(): bool
    {
        if ($this->granted !== null) {
            return $this->granted;
        }
 
        global $DIC;
        return $this->granted = ($DIC->isDependencyAvailable('rbac')
            && isset($DIC['rbacsystem'])
            && $DIC->rbac()->system()->checkAccess(
                self::PERMISSION,
                $this->determineFileAdminRefId()
            ));
    }
 
    private function determineFileAdminRefId(): int
    {
        global $DIC;
        try {
            $r = $DIC->database()->query(
                "SELECT ref_id FROM object_reference JOIN object_data ON object_reference.obj_id = object_data.obj_id WHERE object_data.type = 'facs';"
            );
            $r = $DIC->database()->fetchObject($r);
            return (int) ($r->ref_id ?? 0);
        } catch (\Throwable) {
            return 0;
        }
    }
}