vendor/ibexa/workflow/src/lib/Event/Subscriber/WorkflowGuardSubscriber.php line 50

Open in your IDE?
  1. <?php
  3. /**
  4. * @copyright Copyright (C) Ibexa AS. All rights reserved.
  5. * @license For full copyright and license information view LICENSE file distributed with this source code.
  6. */
  7. declare(strict_types=1);
  9. namespace Ibexa\Workflow\Event\Subscriber;
  11. use Ibexa\Contracts\Core\Repository\PermissionResolver;
  12. use Ibexa\Contracts\Core\Repository\Values\Content\Content;
  13. use Ibexa\Contracts\Core\Repository\Values\Content\ContentCreateStruct;
  14. use Ibexa\Contracts\Workflow\Registry\WorkflowRegistryInterface;
  15. use Ibexa\Workflow\Value\WorkflowTransition;
  16. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  17. use Symfony\Component\Workflow\Event\GuardEvent;
  19. class WorkflowGuardSubscriber implements EventSubscriberInterface
  20. {
  21. /** @var \Ibexa\Contracts\Core\Repository\PermissionResolver */
  22. private $permissionResolver;
  24. /** @var \Ibexa\Contracts\Workflow\Registry\WorkflowRegistryInterface */
  25. private $workflowRegistry;
  27. /**
  28. * @param \Ibexa\Contracts\Core\Repository\PermissionResolver $permissionResolver
  29. * @param \Ibexa\Contracts\Workflow\Registry\WorkflowRegistryInterface $workflowRegistry
  30. */
  31. public function __construct(
  32. PermissionResolver $permissionResolver,
  33. WorkflowRegistryInterface $workflowRegistry
  34. ) {
  35. $this->permissionResolver = $permissionResolver;
  36. $this->workflowRegistry = $workflowRegistry;
  37. }
  39. public static function getSubscribedEvents(): array
  40. {
  41. return [
  42. 'workflow.guard' => ['onTransition', 0],
  43. ];
  44. }
  46. /**
  47. * @throws \Ibexa\Contracts\Core\Repository\Exceptions\BadStateException
  48. * @throws \Ibexa\Contracts\Core\Repository\Exceptions\InvalidArgumentException
  49. */
  50. public function onTransition(GuardEvent $event): void
  51. {
  52. $workflowName = $event->getWorkflowName();
  53. $subject = $event->getSubject();
  55. // guard is not needed for workflows not based on our content model
  56. if (
  57. (!$subject instanceof Content && !$subject instanceof ContentCreateStruct)
  58. || !$this->workflowRegistry->hasWorkflow($workflowName)
  59. ) {
  60. return;
  61. }
  63. $workflow = $this->workflowRegistry->getSupportedWorkflow(
  64. $workflowName,
  65. $subject
  66. );
  67. $workflowTransition = new WorkflowTransition([
  68. 'workflow' => $workflow->getName(),
  69. 'transition' => $event->getTransition()->getName(),
  70. ]);
  71. $permissionTargets = array_merge(
  72. [$workflowTransition],
  73. $subject instanceof ContentCreateStruct ? $subject->getLocationStructs() : []
  74. );
  76. $user = $this->permissionResolver->getCurrentUserReference();
  77. $marking = $workflow->getMarkingStore()->getMarking($subject);
  78. $context = $marking->getContext() ?? [];
  80. if (
  81. $this->permissionResolver->canUser('workflow', 'change_stage', $subject, $permissionTargets)
  82. && (
  83. !empty($context['reviewerId']) && $context['reviewerId'] == $user->getUserId()
  84. || empty($context['reviewerId'])
  85. )
  86. ) {
  87. return;
  88. }
  90. $event->setBlocked(true);
  91. }
  92. }
  94. class_alias(WorkflowGuardSubscriber::class, 'EzSystems\EzPlatformWorkflow\Event\Subscriber\WorkflowGuardSubscriber');