PermissionManager.php

Go to the documentation of this file.

<?php
 
declare(strict_types=1);
 
namespace ILIAS\Blog\Permission;
 
use ILIAS\Blog\InternalDomainService;
use ILIAS\COPage\Page\PageManagerInterface;
 
class PermissionManager
{
    protected \ILIAS\Blog\Posting\PostingManager $posting_manager;
    protected \ilWorkspaceTree $ws_tree;
    protected int $owner;
    protected int $id_type;
    protected \ilWorkspaceAccessHandler|\ilAccessHandler $access;
    protected ?int $node_id;
    protected int $user_id;
    protected PageManagerInterface $page_manager;
 
    public function __construct(
        InternalDomainService $domain,
        \ilWorkspaceAccessHandler|\ilAccessHandler $access_handler,
        ?int $node_id,
        int $id_type,
        int $user_id,
        int $owner
    ) {
        $this->access = $access_handler;
        $this->node_id = $node_id;
        $this->id_type = $id_type;
        $this->user_id = $user_id;
        $this->owner = $owner;
        $this->ws_tree = new \ilWorkspaceTree($this->owner);
        $this->posting_manager = $domain->posting();
        $this->page_manager = $domain->pageManager();
    }
 
    public function canWrite(): bool
    {
        return $this->access->checkAccess('write', '', $this->node_id);
    }
 
    public function canRead(): bool
    {
        return $this->access->checkAccess('read', '', $this->node_id);
    }
 
    public function mayContribute(): bool
    {
        if ($this->id_type === \ilObject2GUI::WORKSPACE_NODE_ID) {
            return $this->checkPermissionBool("write");
        }
 
        return ($this->checkPermissionBool("redact") ||
            $this->checkPermissionBool("contribute"));
    }
 
    public function mayEditPosting(
        int $a_posting_id,
        ?int $a_author_id = null
    ): bool {
        // single author blog (owner) in personal workspace
        if ($this->id_type === \ilObject2GUI::WORKSPACE_NODE_ID) {
            return $this->checkPermissionBool("write");
        }
 
        // repository blogs
 
        // redact allows to edit all postings
        if ($this->checkPermissionBool("redact")) {
            return true;
        }
 
        // contribute gives access to own postings
        if ($this->checkPermissionBool("contribute")) {
            // check owner of posting
            if (!$a_author_id) {
                $post = new \ilBlogPosting($a_posting_id);
                $a_author_id = $post->getAuthor();
            }
            return $this->user_id === $a_author_id;
        }
        return false;
    }
 
    protected function checkPermissionBool(string $perm): bool
    {
        if (!is_null($this->node_id)) {
            return $this->access->checkAccess($perm, "", $this->node_id);
        }
        if ($this->owner === $this->user_id) {
            return true;
        }
        return false;
    }
 
 
    public function canManage(): bool
    {
        return ($this->checkPermissionBool("redact") ||
            $this->checkPermissionBool("write"));
    }
 
    public function canReadPosting(int $posting_id): bool
    {
        return (
            $this->postingIdMatches($posting_id) &&
            $this->checkPermissionBool("read") &&
            ($this->mayContribute() ||
            $this->page_manager->lookupActive($posting_id, "blp")));
    }
 
    public function canApprove(int $posting_id): bool
    {
        if (!$this->postingIdMatches($posting_id)) {
            return false;
        }
        return ($this->checkPermissionBool("redact") ||
            $this->checkPermissionBool("write")
        );
    }
 
    public function isActive(int $posting_id): bool
    {
        return $this->page_manager->lookupActive($posting_id, "blp");
    }
 
    public function postingIdMatches(int $posting_id): bool
    {
        if ($this->id_type === \ilObject2GUI::WORKSPACE_NODE_ID) {
            $obj_id = $this->ws_tree->lookupObjectId($this->node_id);
        } else {
            $obj_id = \ilObject::_lookupObjId($this->node_id);
        }
        return $this->posting_manager->lookupBlogId($posting_id) === $obj_id;
    }
 
    public function getAccessHandler(): \ilAccessHandler|\ilWorkspaceAccessHandler
    {
        return $this->access;
    }
 
}