1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374 |
- <?php
- /*
- * This file is part of the Sonata Project package.
- *
- * (c) Thomas Rabaix <thomas.rabaix@sonata-project.org>
- *
- * For the full copyright and license information, please view the LICENSE
- * file that was distributed with this source code.
- */
- namespace Sonata\AdminBundle\Util;
- use Sonata\AdminBundle\Admin\AdminInterface;
- use Sonata\AdminBundle\Security\Handler\AclSecurityHandlerInterface;
- use Symfony\Component\Console\Output\OutputInterface;
- use Symfony\Component\Security\Acl\Domain\UserSecurityIdentity;
- /**
- * @author Thomas Rabaix <thomas.rabaix@sonata-project.org>
- */
- abstract class ObjectAclManipulator implements ObjectAclManipulatorInterface
- {
- /**
- * Configure the object ACL for the passed object identities.
- *
- * @param OutputInterface $output
- * @param AdminInterface $admin
- * @param \Traversable $oids a collection of ObjectIdentityInterface implementations
- * @param UserSecurityIdentity $securityIdentity
- *
- * @throws \Exception
- *
- * @return array [countAdded, countUpdated]
- */
- public function configureAcls(OutputInterface $output, AdminInterface $admin, \Traversable $oids, UserSecurityIdentity $securityIdentity = null)
- {
- $countAdded = 0;
- $countUpdated = 0;
- $securityHandler = $admin->getSecurityHandler();
- if (!$securityHandler instanceof AclSecurityHandlerInterface) {
- $output->writeln(sprintf('Admin `%s` is not configured to use ACL : <info>ignoring</info>', $admin->getCode()));
- return array(0, 0);
- }
- $acls = $securityHandler->findObjectAcls($oids);
- foreach ($oids as $oid) {
- if ($acls->contains($oid)) {
- $acl = $acls->offsetGet($oid);
- ++$countUpdated;
- } else {
- $acl = $securityHandler->createAcl($oid);
- ++$countAdded;
- }
- if (!is_null($securityIdentity)) {
- // add object owner
- $securityHandler->addObjectOwner($acl, $securityIdentity);
- }
- $securityHandler->addObjectClassAces($acl, $securityHandler->buildSecurityInformation($admin));
- try {
- $securityHandler->updateAcl($acl);
- } catch (\Exception $e) {
- $output->writeln(sprintf('Error saving ObjectIdentity (%s, %s) ACL : %s <info>ignoring</info>', $oid->getIdentifier(), $oid->getType(), $e->getMessage()));
- }
- }
- return array($countAdded, $countUpdated);
- }
- }
|