PagePermissionRestriction.php

Go to the documentation of this file.

<?php
 
declare(strict_types=1);
 
/*
 * This file is part of the TYPO3 CMS project.
 *
 * It is free software; you can redistribute it and/or modify it under
 * the terms of the GNU General Public License, either version 2
 * of the License, or any later version.
 *
 * For the full copyright and license information, please read the
 * LICENSE.txt file that was distributed with this source code.
 *
 * The TYPO3 project - inspiring people to share!
 */
 
namespace ‪TYPO3\CMS\Core\Database\Query\Restriction;
 
use ‪TYPO3\CMS\Core\Context\UserAspect;
use ‪TYPO3\CMS\Core\Database\Query\Expression\CompositeExpression;
use ‪TYPO3\CMS\Core\Database\Query\Expression\ExpressionBuilder;
 
class ‪PagePermissionRestriction implements ‪QueryRestrictionInterface
{
    protected ‪$permissions;
 
    protected ‪$userAspect;
 
    public function ‪__construct(‪UserAspect ‪$userAspect, int ‪$permissions)
    {
        $this->permissions = ‪$permissions;
        $this->userAspect = ‪$userAspect;
    }
 
    public function ‪buildExpression(array $queriedTables, ‪ExpressionBuilder $expressionBuilder): ‪CompositeExpression
    {
        $constraints = [];
 
        foreach ($queriedTables as $tableAlias => $tableName) {
            if ($tableName !== 'pages') {
                continue;
            }
 
            $constraint = $this->‪buildUserConstraints($expressionBuilder, $tableAlias);
            if ($constraint) {
                $constraints[] = $expressionBuilder->‪and($constraint);
            }
        }
 
        return $expressionBuilder->‪and(...$constraints);
    }
 
    protected function ‪buildUserConstraints(ExpressionBuilder $expressionBuilder, string $tableAlias)
    {
        if (!$this->userAspect->isLoggedIn()) {
            return $expressionBuilder->comparison(1, ExpressionBuilder::EQ, 0);
        }
        if ($this->userAspect->isAdmin()) {
            return null;
        }
        // User permissions
        $constraint = $expressionBuilder->‪or(
            $expressionBuilder->comparison(
                $expressionBuilder->bitAnd($tableAlias . '.perms_everybody', $this->permissions),
                ExpressionBuilder::EQ,
                $this->permissions
            ),
            $expressionBuilder->and(
                $expressionBuilder->eq($tableAlias . '.perms_userid', $this->userAspect->get('id')),
                $expressionBuilder->comparison(
                    $expressionBuilder->bitAnd($tableAlias . '.perms_user', $this->permissions),
                    ExpressionBuilder::EQ,
                    $this->permissions
                )
            )
        );
 
        // User groups (if any are set)
        $groupIds = array_map(intval(...), $this->userAspect->getGroupIds());
        if (!empty($groupIds)) {
            $constraint = $constraint->with(
                $expressionBuilder->and(
                    $expressionBuilder->in(
                        $tableAlias . '.perms_groupid',
                        $groupIds
                    ),
                    $expressionBuilder->comparison(
                        $expressionBuilder->bitAnd($tableAlias . '.perms_group', $this->permissions),
                        ExpressionBuilder::EQ,
                        $this->permissions
                    )
                )
            );
        }
        return $constraint;
    }
}