vendor/ibexa/workflow/src/lib/Event/Subscriber/WorkflowGuardSubscriber.php line 50

Open in your IDE?
  1. <?php
  3. /**
  4.  * @copyright Copyright (C) Ibexa AS. All rights reserved.
  5.  * @license For full copyright and license information view LICENSE file distributed with this source code.
  6.  */
  7. declare(strict_types=1);
  9. namespace Ibexa\Workflow\Event\Subscriber;
  11. use Ibexa\Contracts\Core\Repository\PermissionResolver;
  12. use Ibexa\Contracts\Core\Repository\Values\Content\Content;
  13. use Ibexa\Contracts\Core\Repository\Values\Content\ContentCreateStruct;
  14. use Ibexa\Contracts\Workflow\Registry\WorkflowRegistryInterface;
  15. use Ibexa\Workflow\Value\WorkflowTransition;
  16. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  17. use Symfony\Component\Workflow\Event\GuardEvent;
  19. class WorkflowGuardSubscriber implements EventSubscriberInterface
  20. {
  21.     /** @var \Ibexa\Contracts\Core\Repository\PermissionResolver */
  22.     private $permissionResolver;
  24.     /** @var \Ibexa\Contracts\Workflow\Registry\WorkflowRegistryInterface */
  25.     private $workflowRegistry;
  27.     /**
  28.      * @param \Ibexa\Contracts\Core\Repository\PermissionResolver $permissionResolver
  29.      * @param \Ibexa\Contracts\Workflow\Registry\WorkflowRegistryInterface $workflowRegistry
  30.      */
  31.     public function __construct(
  32.         PermissionResolver $permissionResolver,
  33.         WorkflowRegistryInterface $workflowRegistry
  34.     ) {
  35.         $this->permissionResolver = $permissionResolver;
  36.         $this->workflowRegistry = $workflowRegistry;
  37.     }
  39.     public static function getSubscribedEvents(): array
  40.     {
  41.         return [
  42.             'workflow.guard' => ['onTransition', 0],
  43.         ];
  44.     }
  46.     /**
  47.      * @throws \Ibexa\Contracts\Core\Repository\Exceptions\BadStateException
  48.      * @throws \Ibexa\Contracts\Core\Repository\Exceptions\InvalidArgumentException
  49.      */
  50.     public function onTransition(GuardEvent $event): void
  51.     {
  52.         $workflowName = $event->getWorkflowName();
  53.         $subject = $event->getSubject();
  55.         // guard is not needed for workflows not based on our content model
  56.         if (
  57.             (!$subject instanceof Content && !$subject instanceof ContentCreateStruct)
  58.             || !$this->workflowRegistry->hasWorkflow($workflowName)
  59.         ) {
  60.             return;
  61.         }
  63.         $workflow = $this->workflowRegistry->getSupportedWorkflow(
  64.             $workflowName,
  65.             $subject
  66.         );
  67.         $workflowTransition = new WorkflowTransition([
  68.             'workflow' => $workflow->getName(),
  69.             'transition' => $event->getTransition()->getName(),
  70.         ]);
  71.         $permissionTargets = array_merge(
  72.             [$workflowTransition],
  73.             $subject instanceof ContentCreateStruct ? $subject->getLocationStructs() : []
  74.         );
  76.         $user = $this->permissionResolver->getCurrentUserReference();
  77.         $marking = $workflow->getMarkingStore()->getMarking($subject);
  78.         $context = $marking->getContext() ?? [];
  80.         if (
  81.             $this->permissionResolver->canUser('workflow', 'change_stage', $subject, $permissionTargets)
  82.             && (
  83.                 !empty($context['reviewerId']) && $context['reviewerId'] == $user->getUserId()
  84.                 || empty($context['reviewerId'])
  85.             )
  86.         ) {
  87.             return;
  88.         }
  90.         $event->setBlocked(true);
  91.     }
  92. }
  94. class_alias(WorkflowGuardSubscriber::class, 'EzSystems\EzPlatformWorkflow\Event\Subscriber\WorkflowGuardSubscriber');