Chill-project/chill-bundles
6
0
Fork 0
mirror of https://gitlab.com/Chill-Projet/chill-bundles.git synced 2025-06-07 18:44:08 +00:00
Code Issues Actions Projects Releases Wiki Activity

Implement StoredObject permissions WOPI AuthorizationManager.php

Browse Source
This commit is contained in:
Julie Lenaerts 2024-07-02 15:39:31 +02:00
parent 3262a1dd02
commit 345f379650
1 changed files with 9 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
src/Bundle/ChillWopiBundle/src/Service/Wopi/AuthorizationManager.php
View File

@ -12,6 +12,7 @@ declare(strict_types=1);
namespace Chill\WopiBundle\Service\Wopi;
use ChampsLibres\WopiLib\Contract\Entity\Document;
use Chill\DocStoreBundle\Security\Authorization\StoredObjectRoleEnum;
use Chill\MainBundle\Entity\User;
use Lexik\Bundle\JWTAuthenticationBundle\Services\JWTTokenManagerInterface;
use Psr\Http\Message\RequestInterface;
@ -60,12 +61,17 @@ class AuthorizationManager implements \ChampsLibres\WopiBundle\Contracts\Authori
public function userCanPresent(string $accessToken, Document $document, RequestInterface $request): bool
{
return $this->isTokenValid($accessToken, $document, $request);
if ($this->security->isGranted(StoredObjectRoleEnum::SEE->value, $document)) {
return $this->isTokenValid($accessToken, $document, $request);
}
return false;
}
public function userCanRead(string $accessToken, Document $document, RequestInterface $request): bool
{
if ($this->security->isGranted('SEE', $document)) {
if ($this->security->isGranted(StoredObjectRoleEnum::SEE->value, $document)) {
return $this->isTokenValid($accessToken, $document, $request);
}
@ -79,7 +85,7 @@ class AuthorizationManager implements \ChampsLibres\WopiBundle\Contracts\Authori
public function userCanWrite(string $accessToken, Document $document, RequestInterface $request): bool
{
if ($this->security->isGranted('EDIT', $document)) {
if ($this->security->isGranted(StoredObjectRoleEnum::EDIT->value, $document)) {
return $this->isTokenValid($accessToken, $document, $request);
}