custom/plugins/PickwareWms/vendor/pickware/mobile-app-auth-bundle/src/Model/Subscriber/MobileAppAuthAclRoleWriteRestrictor.php line 32

Open in your IDE?
  1. <?php
  2. /*
  3.  * Copyright (c) Pickware GmbH. All rights reserved.
  4.  * This file is part of software that is released under a proprietary license.
  5.  * You must not copy, modify, distribute, make publicly available, or execute
  6.  * its contents or parts thereof without express permission by the copyright
  7.  * holder, unless otherwise permitted by law.
  8.  */
  10. declare(strict_types=1);
  12. namespace Pickware\MobileAppAuthBundle\Model\Subscriber;
  14. use Pickware\MobileAppAuthBundle\Installation\Steps\UpsertMobileAppAclRoleInstallationStep;
  15. use Shopware\Core\Framework\Api\Acl\Role\AclRoleDefinition;
  16. use Shopware\Core\Framework\Api\Acl\Role\AclUserRoleDefinition;
  17. use Shopware\Core\Framework\DataAbstractionLayer\Write\Validation\PreWriteValidationEvent;
  18. use Shopware\Core\Framework\Validation\WriteConstraintViolationException;
  19. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  20. use Symfony\Component\Validator\ConstraintViolation;
  21. use Symfony\Component\Validator\ConstraintViolationList;
  23. class MobileAppAuthAclRoleWriteRestrictor implements EventSubscriberInterface
  24. {
  25.     private const ERROR_CODE_NAMESPACE = 'PICKWARE_MOBILE_APP_AUTH_BUNDLE__WRITE_RESTRICTOR';
  27.     public static function getSubscribedEvents(): array
  28.     {
  29.         return [PreWriteValidationEvent::class => 'restrictWriteOnMobileAppAuthRole'];
  30.     }
  32.     public function restrictWriteOnMobileAppAuthRole(PreWriteValidationEvent $event): void
  33.     {
  34.         $commands = $event->getCommands();
  35.         $violations = new ConstraintViolationList();
  37.         foreach ($commands as $command) {
  38.             $className = $command->getDefinition()->getClass();
  39.             if (!(
  40.                     $className === AclRoleDefinition::class
  41.                     && $command->getPrimaryKey()['id'] === UpsertMobileAppAclRoleInstallationStep::MOBILE_APP_ACL_ROLE_ID_BIN
  42.                 ) && !(
  43.                     $className == AclUserRoleDefinition::class
  44.                     && $command->getPrimaryKey()['acl_role_id'] === UpsertMobileAppAclRoleInstallationStep::MOBILE_APP_ACL_ROLE_ID_BIN
  45.             )) {
  46.                 continue;
  47.             }
  49.             $entityName = $command->getDefinition()->getEntityName();
  50.             $message = 'The pickware mobile app auth acl role should not be deleted, updated or assigned to a user.';
  51.             $violations->add(new ConstraintViolation(
  52.                 $message,
  53.                 $message,
  54.                 [],
  55.                 null,
  56.                 '/',
  57.                 null,
  58.                 null,
  59.                 sprintf(
  60.                     '%s__%s',
  61.                     self::ERROR_CODE_NAMESPACE,
  62.                     mb_strtoupper($entityName),
  63.                 ),
  64.             ));
  65.         }
  67.         if ($violations->count() > 0) {
  68.             $event->getExceptions()->add(new WriteConstraintViolationException($violations));
  69.         }
  70.     }
  71. }