File manager

File manager - Edit - /home/c14075/dragmet-ural.ru/www/bitrix/modules/socialnetwork/lib/item/workgroup/accessmanager.php

Back
<?php /** * Bitrix Framework * @package bitrix * @subpackage socialnetwork * @copyright 2001-2022 Bitrix */ namespace Bitrix\Socialnetwork\Item\Workgroup; use Bitrix\Main\ArgumentException; use Bitrix\Socialnetwork\EO_UserToGroup; use Bitrix\Socialnetwork\EO_Workgroup; use Bitrix\Socialnetwork\EO_WorkgroupFavorites; use Bitrix\Socialnetwork\UserToGroupTable; class AccessManager { protected EO_Workgroup $group; protected ?EO_UserToGroup $targetUserRelation = null; protected ?EO_UserToGroup $currentUserRelation = null; protected ?EO_WorkgroupFavorites $currentUserFavorites = null; protected bool $isCurrentUserModuleAdmin = false; protected int $currentUserId = 0; public function __construct( EO_Workgroup $group, ?EO_UserToGroup $targetUserRelation, ?EO_UserToGroup $currentUserRelation, ?array $additionalEntityList = [], ?array $additionalParams = [] ) { $this->group = $group; $this->targetUserRelation = $targetUserRelation; $this->currentUserRelation = $currentUserRelation; $this->isCurrentUserModuleAdmin = self::isCurrentUserModuleAdmin((bool)($additionalParams['checkAdminSession'] ?? true)); $this->currentUserId = \Bitrix\Socialnetwork\Helper\User::getCurrentUserId(); if (is_array($additionalEntityList) && !empty($additionalEntityList)) { if ( $additionalEntityList['currentUserFavorites'] && get_class($additionalEntityList['currentUserFavorites']) === EO_WorkgroupFavorites::class ) { $this->currentUserFavorites = $additionalEntityList['currentUserFavorites']; } } } private static function isCurrentUserModuleAdmin(bool $checkSession = false): bool { static $result = [ 'Y' => null, 'N' => null ]; $cacheKey = ($checkSession ? 'Y' : 'N'); if ($result[$cacheKey] === null) { $result[$cacheKey] = \CSocNetUser::isCurrentUserModuleAdmin(SITE_ID, $checkSession); } return $result[$cacheKey]; } public function canView(): bool { $this->checkGroupEntityFields([ 'ID', 'VISIBLE', ]); $this->checkRelationEntityFields($this->currentUserRelation, [ 'GROUP_ID', 'ROLE', ]); return ( $this->isCurrentUserModuleAdmin \|\| $this->group->get('VISIBLE') \|\| ( $this->currentUserRelation && in_array($this->currentUserRelation->get('ROLE'), UserToGroupTable::getRolesMember(), true) ) ); } public function canModify(): bool { $this->checkGroupEntityFields([ 'ID', 'CLOSED', 'PROJECT', 'SCRUM_MASTER_ID', ]); $this->checkRelationEntityFields($this->currentUserRelation, [ 'GROUP_ID', 'USER_ID', 'ROLE', ]); if ( !$this->isCurrentUserModuleAdmin && !$this->checkRelationGroupId($this->currentUserRelation) ) { return false; } if (!$this->canCurrentUserModify()) { return false; } return true; } public function canEdit(): bool { return $this->canModify(); } public function canDelete(): bool { return $this->canModify(); } public function canAddToArchive(): bool { if (!$this->canModify()) { return false; } return !$this->group->get('CLOSED'); } public function canRemoveFromArchive(): bool { if (!$this->canModify()) { return false; } return $this->group->get('CLOSED'); } public function canAddToFavorites(): bool { if (!$this->canView()) { return false; } return ($this->currentUserFavorites === null); } public function canRemoveFromFavorites(): bool { if (!$this->canView()) { return false; } return ($this->currentUserFavorites !== null); } public function canSetOwner(): bool { if (!$this->canModify()) { return false; } $this->checkRelationEntityFields($this->targetUserRelation, [ 'GROUP_ID', 'ROLE', ]); if ( $this->targetUserRelation && ( !$this->checkRelationGroupId($this->targetUserRelation) \|\| !in_array($this->targetUserRelation->get('ROLE'), [ UserToGroupTable::ROLE_USER, UserToGroupTable::ROLE_MODERATOR ], true) ) ) { return false; } if ( !$this->isCurrentUserModuleAdmin && !$this->checkClosedGroup() ) { return false; } return true; } public function canSetScrumMaster(): bool { if (!$this->canModify()) { return false; } $this->checkRelationEntityFields($this->targetUserRelation, [ 'GROUP_ID', 'ROLE', ]); if (!$this->checkScrum()) { return false; } if ($this->checkScrumMaster($this->targetUserRelation)) { return false; } if ( $this->targetUserRelation && ( !$this->checkRelationGroupId($this->targetUserRelation) \|\| !in_array($this->targetUserRelation->get('ROLE'), UserToGroupTable::getRolesMember(), true) ) ) { return false; } if ( !$this->isCurrentUserModuleAdmin && !$this->checkClosedGroup() ) { return false; } return true; } public function canSetModerator(): bool { if (!$this->canModify()) { return false; } $this->checkRelationEntityFields($this->targetUserRelation, [ 'GROUP_ID', 'ROLE', ]); if ( !$this->targetUserRelation \|\| !$this->checkRelationGroupId($this->targetUserRelation) \|\| $this->targetUserRelation->get('ROLE') !== UserToGroupTable::ROLE_USER ) { return false; } if ( !$this->isCurrentUserModuleAdmin && !$this->checkClosedGroup() ) { return false; } return true; } public function canRemoveModerator(): bool { if (!$this->canModify()) { return false; } $this->checkRelationEntityFields($this->targetUserRelation, [ 'GROUP_ID', 'USER_ID', 'ROLE', ]); if ( !$this->targetUserRelation \|\| !$this->checkRelationGroupId($this->targetUserRelation) \|\| $this->targetUserRelation->get('ROLE') !== UserToGroupTable::ROLE_MODERATOR \|\| $this->targetUserRelation->get('USER_ID') === $this->currentUserId ) { return false; } if ($this->checkScrumMaster($this->targetUserRelation)) { return false; } if ( !$this->isCurrentUserModuleAdmin && !$this->checkClosedGroup() ) { return false; } return true; } public function canJoin(): bool { $this->checkGroupEntityFields([ 'ID', 'CLOSED', 'VISIBLE', ]); $this->checkRelationEntityFields($this->currentUserRelation, [ 'GROUP_ID', 'INITIATED_BY_TYPE', 'ROLE', ]); if ( !$this->isCurrentUserModuleAdmin && !$this->group->get('VISIBLE') ) { return false; } if ( $this->currentUserRelation && ( $this->currentUserRelation->get('ROLE') !== UserToGroupTable::ROLE_REQUEST \|\| $this->currentUserRelation->get('INITIATED_BY_TYPE') !== UserToGroupTable::INITIATED_BY_GROUP ) ) { return false; } if ( !$this->isCurrentUserModuleAdmin && !$this->checkClosedGroup() ) { return false; } return true; } public function canLeave(): bool { $this->checkGroupEntityFields([ 'ID', 'PROJECT', 'SCRUM_MASTER_ID', ]); $this->checkRelationEntityFields($this->currentUserRelation, [ 'GROUP_ID', 'USER_ID', 'ROLE', 'AUTO_MEMBER', ]); if ( !$this->currentUserRelation \|\| !$this->checkRelationGroupId($this->currentUserRelation) ) { return false; } if (!in_array($this->currentUserRelation->get('ROLE'), [ UserToGroupTable::ROLE_USER , UserToGroupTable::ROLE_MODERATOR ], true)) { return false; } if ($this->currentUserRelation->get('AUTO_MEMBER')) { return false; } if ($this->checkScrumMaster($this->currentUserRelation)) { return false; } return true; } public function canDeleteOutgoingRequest(): bool { $this->checkGroupEntityFields([ 'ID', 'CLOSED', 'PROJECT', 'SCRUM_MASTER_ID', 'INITIATE_PERMS', ]); $this->checkRelationEntityFields($this->currentUserRelation, [ 'GROUP_ID', 'USER_ID', 'ROLE', ]); $this->checkRelationEntityFields($this->targetUserRelation, [ 'GROUP_ID', 'ROLE', 'INITIATED_BY_TYPE', 'INITIATED_BY_USER_ID', ]); if ( !$this->isCurrentUserModuleAdmin && !$this->checkRelationGroupId($this->currentUserRelation) ) { return false; } if ( !$this->targetUserRelation \|\| !$this->checkRelationGroupId($this->targetUserRelation) ) { return false; } if ( $this->targetUserRelation->get('ROLE') !== UserToGroupTable::ROLE_REQUEST \|\| $this->targetUserRelation->get('INITIATED_BY_TYPE') !== UserToGroupTable::INITIATED_BY_GROUP ) { return false; } if ( !$this->canCurrentUserInitiate() && (int)$this->targetUserRelation->get('INITIATED_BY_USER_ID') !== $this->currentUserId ) { return false; } return true; } public function canExclude(): bool { $this->checkGroupEntityFields([ 'ID', 'CLOSED', 'PROJECT', 'SCRUM_MASTER_ID', ]); $this->checkRelationEntityFields($this->currentUserRelation, [ 'GROUP_ID', 'USER_ID', 'ROLE', ]); $this->checkRelationEntityFields($this->targetUserRelation, [ 'GROUP_ID', 'ROLE', 'AUTO_MEMBER', ]); if ( !$this->isCurrentUserModuleAdmin && !$this->checkRelationGroupId($this->currentUserRelation) ) { return false; } if (!$this->canCurrentUserModify()) { return false; } if ( !$this->targetUserRelation \|\| !$this->checkRelationGroupId($this->targetUserRelation) \|\| $this->targetUserRelation->get('AUTO_MEMBER') \|\| $this->targetUserRelation->get('USER_ID') === $this->currentUserId \|\| !in_array($this->targetUserRelation->get('ROLE'), [ UserToGroupTable::ROLE_MODERATOR, UserToGroupTable::ROLE_USER, ], true) ) { return false; } if ($this->checkScrumMaster($this->targetUserRelation)) { return false; } if ( !$this->isCurrentUserModuleAdmin && !$this->checkClosedGroup() ) { return false; } return true; } public function canProcessIncomingRequest(): bool { $this->checkGroupEntityFields([ 'ID', 'CLOSED', 'PROJECT', 'SCRUM_MASTER_ID', 'INITIATE_PERMS', ]); $this->checkRelationEntityFields($this->currentUserRelation, [ 'GROUP_ID', 'USER_ID', 'ROLE', ]); $this->checkRelationEntityFields($this->targetUserRelation, [ 'GROUP_ID', 'ROLE', 'INITIATED_BY_TYPE', ]); if ( !$this->isCurrentUserModuleAdmin && !$this->checkRelationGroupId($this->currentUserRelation) ) { return false; } if ( !$this->targetUserRelation \|\| !$this->checkRelationGroupId($this->targetUserRelation) ) { return false; } if ($this->targetUserRelation->get('ROLE') !== UserToGroupTable::ROLE_REQUEST) { return false; } if ( !$this->canCurrentProcessRequestsIn() \|\| $this->targetUserRelation->get('INITIATED_BY_TYPE') !== UserToGroupTable::INITIATED_BY_USER ) { return false; } return true; } public function canDeleteIncomingRequest(): bool { $this->checkRelationEntityFields($this->currentUserRelation, [ 'GROUP_ID', ]); $this->checkRelationEntityFields($this->targetUserRelation, [ 'GROUP_ID', 'ROLE', 'INITIATED_BY_TYPE', 'INITIATED_BY_USER_ID', ]); if ( !$this->isCurrentUserModuleAdmin && !$this->checkRelationGroupId($this->currentUserRelation) ) { return false; } if ( !$this->targetUserRelation \|\| !$this->checkRelationGroupId($this->targetUserRelation) ) { return false; } if ( $this->targetUserRelation->get('ROLE') !== UserToGroupTable::ROLE_REQUEST \|\| $this->targetUserRelation->get('INITIATED_BY_TYPE') !== UserToGroupTable::INITIATED_BY_USER ) { return false; } if ( !$this->isCurrentUserModuleAdmin && (int)$this->targetUserRelation->get('INITIATED_BY_USER_ID') !== $this->currentUserId ) { return false; } return true; } protected function checkGroupEntityFields(array $fieldsList = []): void { if (!$this->group) { return; } $this->checkEntityFields($this->group, $fieldsList); } protected function checkRelationEntityFields(?EO_UserToGroup $relation, array $fieldsList = []): void { if (!$relation) { return; } $this->checkEntityFields($relation, $fieldsList); } protected function checkFavoritesEntityFields(?EO_WorkgroupFavorites $favoritesEntity, array $fieldsList = []): void { if (!$favoritesEntity) { return; } $this->checkEntityFields($favoritesEntity, $fieldsList); } protected function checkEntityFields(\Bitrix\Main\ORM\Objectify\EntityObject $entityObject, array $fieldsList = []): void { foreach ($fieldsList as $field) { if (!$entityObject->has($field)) { throw new ArgumentException('Entity has no '. $field . ' field.'); } } } protected function checkRelationGroupId( ?EO_UserToGroup $relation ): bool { return ( $relation && (int)$this->group->get('ID') === (int)$relation->get('GROUP_ID') ); } protected function checkFavoritesEntityGroupId( ?EO_WorkgroupFavorites $favoritesEntity ): bool { return ( $favoritesEntity && (int)$this->group->get('ID') === (int)$favoritesEntity->get('GROUP_ID') ); } protected function checkOwnerOrScrumMaster( ?EO_UserToGroup $relation ): bool { return ( $relation && ( $this->checkOwner($relation) \|\| $this->checkScrumMaster($relation) ) ); } protected function checkOwner( EO_UserToGroup $relation ): bool { return ($relation->get('ROLE') === UserToGroupTable::ROLE_OWNER); } protected function checkScrumMaster( ?EO_UserToGroup $relation ): bool { return ( $this->group->get('PROJECT') && $relation && (int)$this->group->get('SCRUM_MASTER_ID') === (int)$relation->get('USER_ID') ); } protected function checkScrum(): bool { return ( $this->group->get('PROJECT') && (int)$this->group->get('SCRUM_MASTER_ID') > 0 ); } protected function checkClosedGroup(): bool { return ( !$this->group->get('CLOSED') \|\| \Bitrix\Socialnetwork\Item\Workgroup::canWorkWithClosedWorkgroups() ); } protected function canCurrentUserModify(): bool { return ( $this->isCurrentUserModuleAdmin \|\| $this->checkOwnerOrScrumMaster($this->currentUserRelation) ); } protected function canCurrentUserInitiate(): bool { return ( $this->isCurrentUserModuleAdmin \|\| ( $this->group->get('INITIATE_PERMS') === UserToGroupTable::ROLE_OWNER && $this->currentUserRelation->get('ROLE') === UserToGroupTable::ROLE_OWNER ) \|\| ( $this->group->get('INITIATE_PERMS') === UserToGroupTable::ROLE_MODERATOR && in_array($this->currentUserRelation->get('ROLE'), [ UserToGroupTable::ROLE_OWNER, UserToGroupTable::ROLE_MODERATOR ], true) ) \|\| ( $this->group->get('INITIATE_PERMS') === UserToGroupTable::ROLE_USER && in_array($this->currentUserRelation->get('ROLE'), UserToGroupTable::getRolesMember(), true) ) \|\| $this->checkScrumMaster($this->currentUserRelation) ); } protected function canCurrentProcessRequestsIn(): bool { return ( $this->canCurrentUserInitiate() && $this->currentUserRelation && in_array($this->currentUserRelation->get('ROLE'), [ UserToGroupTable::ROLE_OWNER, UserToGroupTable::ROLE_MODERATOR ], true) ); } }

| ver. 1.4 | Github | . | PHP 7.4.33 | Generation time: 0.25 | proxy | phpinfo | Settings