vendor/pimcore/portal-engine/src/EventSubscriber/DenyPermissionsForFolders.php line 53

Open in your IDE?
  1. <?php
  3. /**
  4.  * Pimcore
  5.  *
  6.  * This source file is available under following license:
  7.  * - Pimcore Commercial License (PCL)
  8.  *
  9.  *  @copyright  Copyright (c) Pimcore GmbH (http://www.pimcore.org)
  10.  *  @license    http://www.pimcore.org/license     PCL
  11.  */
  13. namespace Pimcore\Bundle\PortalEngineBundle\EventSubscriber;
  15. use Pimcore\Bundle\PortalEngineBundle\Event\Permission\AbstractEvent\DataPoolItemPermissionEvent;
  16. use Pimcore\Bundle\PortalEngineBundle\Event\Permission\DataPoolDeleteItemEvent;
  17. use Pimcore\Bundle\PortalEngineBundle\Event\Permission\DataPoolSubfolderItemEvent;
  18. use Pimcore\Bundle\PortalEngineBundle\Event\Permission\DataPoolUpdateItemEvent;
  19. use Pimcore\Bundle\PortalEngineBundle\Model\Configuration\DataPool\AssetConfig;
  20. use Pimcore\Bundle\PortalEngineBundle\Model\Configuration\DataPool\DataPoolConfigInterface;
  21. use Pimcore\Bundle\PortalEngineBundle\Service\DataPool\DataPoolConfigService;
  22. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  24. class DenyPermissionsForFolders implements EventSubscriberInterface
  25. {
  26.     protected $dataPoolConfigService;
  28.     public function __construct(DataPoolConfigService $dataPoolConfigService)
  29.     {
  30.         $this->dataPoolConfigService = $dataPoolConfigService;
  31.     }
  33.     /**
  34.      * @return array
  35.      */
  36.     public static function getSubscribedEvents()
  37.     {
  38.         return [
  39.             DataPoolUpdateItemEvent::class => 'denyAccessForRootAndUploadFolder',
  40.             DataPoolDeleteItemEvent::class => 'denyAccessForRootAndUploadFolder',
  41.             DataPoolSubfolderItemEvent::class => 'denyAccessForUploadFolderOnly',
  42.         ];
  43.     }
  45.     public function denyAccessForRootAndUploadFolder(DataPoolItemPermissionEvent $event)
  46.     {
  47.         $config = $this->dataPoolConfigService->getDataPoolConfigById($event->getDataPoolId());
  49.         $this->denyAccessForRootFolder($config, $event);
  50.         $this->denyAccessForUploadFolder($config, $event);
  51.     }
  53.     public function denyAccessForUploadFolderOnly(DataPoolItemPermissionEvent $event)
  54.     {
  55.         $config = $this->dataPoolConfigService->getDataPoolConfigById($event->getDataPoolId());
  57.         $this->denyAccessForUploadFolder($config, $event);
  58.     }
  60.     protected function denyAccessForRootFolder(DataPoolConfigInterface $dataPoolConfig, DataPoolItemPermissionEvent $event)
  61.     {
  62.         $workspaces = $dataPoolConfig->getWorkspaces();
  64.         if (!empty($workspaces)) {
  65.             foreach ($workspaces as $workspace) {
  66.                 if ($workspace->getFullPath() === $event->getSubjectFullPath()) {
  67.                     $event->setAllowed(false);
  69.                     return;
  70.                 }
  71.             }
  72.         }
  73.     }
  75.     protected function denyAccessForUploadFolder(DataPoolConfigInterface $dataPoolConfig, DataPoolItemPermissionEvent $event)
  76.     {
  77.         if (
  78.             !$dataPoolConfig instanceof AssetConfig ||
  79.             !$dataPoolConfig->getUploadFolder() ||
  80.             $dataPoolConfig->getUploadFolder()->getRealFullPath() !== $event->getSubjectFullPath()
  81.         ) {
  82.             return;
  83.         }
  85.         $event->setAllowed(false);
  86.     }
  87. }