mirror of
https://gitlab.com/Chill-Projet/chill-bundles.git
synced 2026-04-16 10:59:31 +00:00
Julien Fastré
7b00006943
- Implemented `StoredObjectLockApiController` with endpoint to remove locks from stored objects. - Added access control checks and validation for lock existence before removal. - Wrote `StoredObjectLockApiControllerTest` to cover access denial, lock absence, and successful lock removal scenarios. - Utilized `MockClock` in test cases to accurately simulate time-based behaviors.
48 lines
1.7 KiB
PHP
48 lines
1.7 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
/*
|
|
* Chill is a software for social workers
|
|
*
|
|
* For the full copyright and license information, please view
|
|
* the LICENSE file that was distributed with this source code.
|
|
*/
|
|
|
|
namespace Chill\DocStoreBundle\Controller;
|
|
|
|
use Chill\DocStoreBundle\Entity\StoredObject;
|
|
use Chill\DocStoreBundle\Security\Authorization\StoredObjectRoleEnum;
|
|
use Chill\DocStoreBundle\Service\Lock\StoredObjectLockManager;
|
|
use Symfony\Component\Clock\ClockInterface;
|
|
use Symfony\Component\HttpFoundation\Response;
|
|
use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
|
|
use Symfony\Component\HttpKernel\Exception\PreconditionFailedHttpException;
|
|
use Symfony\Component\Routing\Annotation\Route;
|
|
use Symfony\Component\Security\Core\Security;
|
|
|
|
final readonly class StoredObjectLockApiController
|
|
{
|
|
public function __construct(
|
|
private Security $security,
|
|
private StoredObjectLockManager $storedObjectLockManager,
|
|
private ClockInterface $clock,
|
|
) {}
|
|
|
|
#[Route('/api/1.0/doc-store/stored-object/{uuid}/lock', name: 'chill_docstore_storedobjectlock_removelock', methods: ['DELETE'])]
|
|
public function removeLock(StoredObject $storedObject): Response
|
|
{
|
|
if (!$this->security->isGranted(StoredObjectRoleEnum::EDIT->value, $storedObject)) {
|
|
throw new AccessDeniedHttpException();
|
|
}
|
|
|
|
if (!$this->storedObjectLockManager->hasLock($storedObject)) {
|
|
throw new PreconditionFailedHttpException('No lock found for this stored object');
|
|
}
|
|
|
|
$this->storedObjectLockManager->deleteLock($storedObject, $this->clock->now());
|
|
|
|
return new Response(null, Response::HTTP_NO_CONTENT);
|
|
}
|
|
}
|