AccessControl.php

Go to the documentation of this file.

<?php
 
declare(strict_types=1);
 
namespace ILIAS;
 
use ILIAS\AccessControl\PublicInterface\Access;
use ILIAS\AccessControl\PublicInterface\RBAC;
use ILIAS\AccessControl\PublicInterface\DefaultRBAC;
use ILIAS\AccessControl\User\UserIdProviderProxy;
use ILIAS\AccessControl\Tree\RepositoryTreeAccessProxy;
use ILIAS\AccessControl\Object\ObjectDataAccessProxy;
use ILIAS\AccessControl\Object\ObjectDefinitionAccessProxy;
use ILIAS\Database\Connection;
use ILIAS\HTTP\GlobalHttpState;
use ILIAS\Language\ComponentTranslation\LanguageFileDirectory;
use ILIAS\Language\ComponentTranslation\ComponentLanguageFileDirectory;
 
class AccessControl implements Component\Component
{
    public function init(
        array | \ArrayAccess &$define,
        array | \ArrayAccess &$implement,
        array | \ArrayAccess &$use,
        array | \ArrayAccess &$contribute,
        array | \ArrayAccess &$seek,
        array | \ArrayAccess &$provide,
        array | \ArrayAccess &$pull,
        array | \ArrayAccess &$internal,
    ): void {
        // Public surface
        $define[] = Access::class;
        $define[] = RBAC::class;
 
        // Internal proxies (concrete classes — no interfaces)
        $internal[UserIdProviderProxy::class] = static fn() => new UserIdProviderProxy();
        $internal[RepositoryTreeAccessProxy::class] = static fn() => new RepositoryTreeAccessProxy();
        $internal[ObjectDataAccessProxy::class] = static fn() => new ObjectDataAccessProxy();
        $internal[ObjectDefinitionAccessProxy::class] = static fn() => new ObjectDefinitionAccessProxy();
 
        // Internal RBAC services (legacy concrete classes)
        $internal[\ilRbacReview::class] = static fn() => new \ilRbacReview(
            $pull[Connection::class],
            $use[\ILIAS\Logging\Logger\LoggerFactoryInterface::class]->getLazy('ac'),
        );
 
        $internal[\ilRbacSystem::class] = static fn() => new \ilRbacSystem(
            $internal[UserIdProviderProxy::class],
            $pull[Connection::class],
            $internal[\ilRbacReview::class],
            $internal[RepositoryTreeAccessProxy::class],
            $use[GlobalHttpState::class],
            $pull[\ILIAS\Refinery\Factory::class],
            $internal[ObjectDataAccessProxy::class],
        );
 
        $internal[\ilRbacAdmin::class] = static fn() => new \ilRbacAdmin(
            $pull[Connection::class],
            $internal[\ilRbacReview::class],
            $use[\ILIAS\Logging\Logger\LoggerFactoryInterface::class]->getLazy('ac'),
        );
 
        // Public implementations (in case of RBAC for legacy reasons only)
        $implement[RBAC::class] = static fn() => new DefaultRBAC(
            $internal[\ilRbacReview::class],
            $internal[\ilRbacSystem::class],
            $internal[\ilRbacAdmin::class],
        );
 
        $implement[Access::class] = static fn() => new \ilAccess(
            $internal[UserIdProviderProxy::class],
            $pull[Connection::class],
            $internal[\ilRbacSystem::class],
            $internal[RepositoryTreeAccessProxy::class],
            $internal[ObjectDefinitionAccessProxy::class],
            $use[\ILIAS\Logging\Logger\LoggerFactoryInterface::class]->getLazy('ac'),
        );
 
        // Setup agents and assets
        $contribute[\ILIAS\Setup\Agent::class] = static fn() =>
            new \ilAccessControlSetupAgent(
                $pull[\ILIAS\Refinery\Factory::class]
            );
        $contribute[\ILIAS\Setup\Agent::class] = static fn() =>
            new \ilAccessRBACSetupAgent(
                $pull[\ILIAS\Refinery\Factory::class]
            );
        $contribute[Component\Resource\PublicAsset::class] = fn() =>
            new Component\Resource\ComponentJS($this, "ilPermSelect.js");
        $contribute[LanguageFileDirectory::class] = fn() => new ComponentLanguageFileDirectory(
            $this,
            'rbac'
        );
    }
}