Chill-project/chill-bundles
6
0
Fork 0
mirror of https://gitlab.com/Chill-Projet/chill-bundles.git synced 2025-06-13 13:54:23 +00:00
Code Issues Actions Projects Releases Wiki Activity

Implement permissions for WOPI

Browse Source
This commit is contained in:
Julie Lenaerts 2024-07-01 15:23:07 +02:00
parent fb743b522d
commit 8c92d11722
1 changed files with 11 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
src/Bundle/ChillWopiBundle/src/Service/Wopi/AuthorizationManager.php
View File

@ -65,7 +65,11 @@ class AuthorizationManager implements \ChampsLibres\WopiBundle\Contracts\Authori
public function userCanRead(string $accessToken, Document $document, RequestInterface $request): bool public function userCanRead(string $accessToken, Document $document, RequestInterface $request): bool
{ {
return $this->isTokenValid($accessToken, $document, $request); if ($this->security->isGranted('SEE', $document)) {
return $this->isTokenValid($accessToken, $document, $request);
}
return false;
} }
public function userCanRename(string $accessToken, Document $document, RequestInterface $request): bool public function userCanRename(string $accessToken, Document $document, RequestInterface $request): bool
@ -75,6 +79,11 @@ class AuthorizationManager implements \ChampsLibres\WopiBundle\Contracts\Authori
public function userCanWrite(string $accessToken, Document $document, RequestInterface $request): bool public function userCanWrite(string $accessToken, Document $document, RequestInterface $request): bool
{ {
return $this->isTokenValid($accessToken, $document, $request); if ($this->security->isGranted('EDIT', $document)) {
return $this->isTokenValid($accessToken, $document, $request);
}
return false;
} }
} }