Version 1

[yaffs-website] / web / modules / contrib / permissions_by_term / src / KernelEventListener.php

diff --git a/web/modules/contrib/permissions_by_term/src/KernelEventListener.php b/web/modules/contrib/permissions_by_term/src/KernelEventListener.php
new file mode 100644 (file)
index 0000000..276583d
--- /dev/null
+++ b/web/modules/contrib/permissions_by_term/src/KernelEventListener.php
@@ -0,0 +1,116 @@
+<?php
+
+namespace Drupal\permissions_by_term;
+
+use Symfony\Component\EventDispatcher\EventSubscriberInterface;
+use Symfony\Component\HttpKernel\KernelEvents;
+use Symfony\Component\HttpFoundation\JsonResponse;
+use Symfony\Component\HttpKernel\Event\FilterResponseEvent;
+use Symfony\Component\HttpKernel\Event\GetResponseEvent;
+use Symfony\Component\HttpFoundation\RedirectResponse;
+use Symfony\Component\HttpFoundation\Request;
+
+/**
+ * Class KernelEventListener.
+ *
+ * @package Drupal\permissions_by_term
+ */
+class KernelEventListener implements EventSubscriberInterface
+{
+
+  /**
+   * Instantiating of objects on class construction.
+   */
+  public function __construct()
+  {
+    $this->accessCheckService = \Drupal::service('permissions_by_term.access_check');
+    $this->accessStorageService = \Drupal::service('permissions_by_term.access_storage');
+  }
+
+  /**
+   * Access restriction on kernel request.
+   */
+  public function onKernelRequest(GetResponseEvent $event)
+  {
+    // Restricts access to nodes (views/edit).
+    if ($this->canRequestGetNode($event->getRequest())) {
+      $nid = $event->getRequest()->attributes->get('node')->get('nid')->getValue()['0']['value'];
+      if (!$this->accessCheckService->canUserAccessByNodeId($nid)) {
+        $this->sendUserToAccessDeniedPage();
+      }
+    }
+
+    // Restrict access to taxonomy terms by autocomplete list.
+    if ($event->getRequest()->attributes->get('target_type') == 'taxonomy_term' &&
+      $event->getRequest()->attributes->get('_route') == 'system.entity_autocomplete') {
+      $query_string = $event->getRequest()->get('q');
+      $query_string = trim($query_string);
+
+      $tid = $this->accessStorageService->getTermIdByName($query_string);
+      if (!$this->accessCheckService->isAccessAllowedByDatabase($tid)) {
+        $this->sendUserToAccessDeniedPage();
+      }
+    }
+  }
+
+  /**
+   * Restricts access on kernel response.
+   */
+  public function onKernelResponse(FilterResponseEvent $event) {
+    $this->restrictTermAccessAtAutoCompletion($event);
+  }
+
+  /**
+   * Restricts access to terms on AJAX auto completion.
+   */
+  private function restrictTermAccessAtAutoCompletion(FilterResponseEvent $event) {
+    if ($event->getRequest()->attributes->get('target_type') == 'taxonomy_term' &&
+      $event->getRequest()->attributes->get('_route') == 'system.entity_autocomplete'
+    ) {
+      $json_suggested_terms = $event->getResponse()->getContent();
+      $suggested_terms = json_decode($json_suggested_terms);
+      $allowed_terms = [];
+      foreach ($suggested_terms as $term) {
+        $tid = $this->accessStorageService->getTermIdByName($term->label);
+        if ($this->accessCheckService->isAccessAllowedByDatabase($tid)) {
+          $allowed_terms[] = [
+            'value' => $term->value,
+            'label' => $term->label,
+          ];
+        }
+      }
+
+      $json_response = new JsonResponse($allowed_terms);
+      $event->setResponse($json_response);
+    }
+  }
+
+  /**
+   * The subscribed events.
+   */
+  public static function getSubscribedEvents()
+  {
+    return [
+      KernelEvents::REQUEST => 'onKernelRequest',
+      KernelEvents::RESPONSE => 'onKernelResponse',
+    ];
+  }
+
+  private function canRequestGetNode(Request $request) {
+    if (method_exists($request->attributes, 'get') && !empty($request->attributes->get('node'))) {
+      if (method_exists($request->attributes->get('node'), 'get')) {
+        return TRUE;
+      }
+    }
+
+    return FALSE;
+  }
+
+  private function sendUserToAccessDeniedPage() {
+    $redirect_url = new \Drupal\Core\Url('system.403');
+    $response = new RedirectResponse($redirect_url->toString());
+    $response->send();
+    return $response;
+  }
+
+}