class.ilClaimingPermissionHelper.php

Go to the documentation of this file.

<?php
 
abstract class ilClaimingPermissionHelper
{
    protected int $user_id = 0;
    protected int $ref_id = 0;
    protected array $map = [];
    protected array $context_ids = [];
    protected ?array $plugins = null;
    protected static array $instances = [];
 
    protected function __construct(int $a_user_id, int $a_ref_id)
    {
        $this->setUserId($a_user_id);
        $this->setRefId($a_ref_id);
        $this->map = $this->buildPermissionMap();
        $this->reset();
    }
 
    public static function getInstance(int $a_user_id, int $a_ref_id): self
    {
        if (!isset(self::$instances[$a_user_id][$a_ref_id])) {
            self::$instances[$a_user_id][$a_ref_id] = new static($a_user_id, $a_ref_id);
        }
        return self::$instances[$a_user_id][$a_ref_id];
    }
 
    public function reset(): void
    {
        $this->context_ids = [];
    }
 
 
    // properties
 
    protected function setUserId(int $a_value): void
    {
        $this->user_id = $a_value;
    }
 
    protected function getUserId(): int
    {
        return $this->user_id;
    }
 
    protected function setRefId(int $a_value): void
    {
        $this->ref_id = $a_value;
    }
 
    protected function getRefId(): int
    {
        return $this->ref_id;
    }
 
 
    // caching
 
    abstract protected function readContextIds(int $a_context_type): array;
 
 
    // permissions
 
    abstract protected function buildPermissionMap(): array;
 
    protected function isValidContextAndAction(
        int $a_context_type,
        int $a_context_id,
        int $a_action_id,
        ?int $a_action_sub_id = null
    ): bool {
        $valid = false;
 
        if (array_key_exists($a_context_type, $this->map)) {
            if (!$a_action_sub_id) {
                if (in_array($a_action_id, $this->map[$a_context_type]["actions"])) {
                    $valid = true;
                }
            } else {
                if (array_key_exists($a_action_id, $this->map[$a_context_type]["subactions"]) &&
                    in_array($a_action_sub_id, $this->map[$a_context_type]["subactions"][$a_action_id])) {
                    $valid = true;
                }
            }
        }
 
        if ($valid &&
            $a_context_id &&
            !in_array($a_context_id, $this->getValidContextIds($a_context_type))) {
            $valid = false;
        }
 
        if (DEVMODE && !$valid) {
            trigger_error("INVALID permission context - " . $a_context_type . ":" . $a_context_id . ":" . $a_action_id . ":" . $a_action_sub_id, E_USER_WARNING);
        }
 
        return $valid;
    }
 
    protected function getValidContextIds(int $a_context_type): array
    {
        if (!array_key_exists($a_context_type, $this->context_ids)) {
            $this->context_ids[$a_context_type] = $this->readContextIds($a_context_type);
        }
        return (array) $this->context_ids[$a_context_type];
    }
 
    public function hasPermission(
        int $a_context_type,
        int $a_context_id,
        int $a_action_id,
        ?int $a_action_sub_id = null
    ): bool {
        if ($this->isValidContextAndAction($a_context_type, $a_context_id, $a_action_id, $a_action_sub_id)) {
            return $this->checkPermission($a_context_type, $a_context_id, $a_action_id, $a_action_sub_id);
        }
        // :TODO: exception?
        return false;
    }
 
    public function hasPermissions(int $a_context_type, int $a_context_id, array $a_action_ids): array
    {
        $res = [];
 
        foreach ($a_action_ids as $action_id) {
            if (is_array($action_id)) {
                $action_sub_id = $action_id[1];
                $action_id = $action_id[0];
 
                $res[$action_id][$action_sub_id] = $this->hasPermission($a_context_type, $a_context_id, $action_id, $action_sub_id);
            } else {
                $res[$action_id] = $this->hasPermission($a_context_type, $a_context_id, $action_id);
            }
        }
 
        return $res;
    }
 
    protected function checkPermission(
        int $a_context_type,
        int $a_context_id,
        int $a_action_id,
        ?int $a_action_sub_id = null
    ): bool {
        return ($this->checkRBAC() &&
            $this->checkPlugins($a_context_type, $a_context_id, $a_action_id, $a_action_sub_id));
    }
 
    protected function checkRBAC(): bool
    {
        global $DIC;
        $ilAccess = $DIC->access();
 
        // we are currently only supporting write operations
        return $ilAccess->checkAccessOfUser($this->getUserId(), "write", "", $this->getRefId());
    }
 
    abstract protected function getActivePlugins(): Generator;
 
    protected function checkPlugins(
        int $a_context_type,
        int $a_context_id,
        int $a_action_id,
        ?int $a_action_sub_id = null
    ): bool {
        $valid = true;
 
        if (!is_array($this->plugins)) {
            $this->plugins = iterator_to_array($this->getActivePlugins());
        }
 
        foreach ($this->plugins as $plugin) {
            $a_action_sub_id = is_null($a_action_sub_id)
                ? ilAdvancedMDPermissionHelper::SUBACTION_UNDEFINED
                : $a_action_sub_id;
            if (!$plugin->checkPermission($this->getUserId(), $a_context_type, $a_context_id, $a_action_id, $a_action_sub_id)) {
                $valid = false;
                break;
            }
        }
 
        return $valid;
    }
}