Security update for permissions_by_term

[yaffs-website] / web / modules / contrib / permissions_by_term / src / Service / NodeEntityBundleInfo.php

diff --git a/web/modules/contrib/permissions_by_term/src/Service/NodeEntityBundleInfo.php b/web/modules/contrib/permissions_by_term/src/Service/NodeEntityBundleInfo.php
new file mode 100644 (file)
index 0000000..a0b7940
--- /dev/null
+++ b/web/modules/contrib/permissions_by_term/src/Service/NodeEntityBundleInfo.php
@@ -0,0 +1,129 @@
+<?php
+
+namespace Drupal\permissions_by_term\Service;
+
+use Drupal\Core\Template\TwigEnvironment;
+use Drupal\user\Entity\Role;
+use Drupal\user\Entity\User;
+use Drupal\Core\Database\Connection;
+use PDO;
+
+/**
+ * Class Info
+ *
+ * @package Drupal\permissions_by_term\Service
+ */
+class NodeEntityBundleInfo {
+
+  /**
+   * @var AccessStorage
+   */
+  private $accessStorage;
+
+  /**
+   * @var Term
+   */
+  private $term;
+
+  /**
+   * @var TwigEnvironment
+   */
+  private $twig;
+
+  /**
+   * @var Connection
+   */
+  private $database;
+
+  /**
+   * Info constructor.
+   *
+   * @param AccessStorage   $accessStorage
+   * @param Term            $term
+   * @param TwigEnvironment $twig
+   * @param Connection      $database
+   */
+  public function __construct(
+    AccessStorage $accessStorage,
+    Term $term,
+    TwigEnvironment $twig,
+    Connection $database
+  ) {
+    $this->accessStorage = $accessStorage;
+    $this->term = $term;
+    $this->twig = $twig;
+    $this->database = $database;
+  }
+
+  /**
+   * @param string   $viewFilePath
+   * @param int|null $nid
+   * @return string
+   */
+  public function renderNodeDetails($viewFilePath, $nid = null) {
+    $roles = null;
+    $users = null;
+
+    if (!empty($nid)) {
+      $tids = $this->term->getTidsByNid($nid);
+      if (!empty($tids)) {
+        $uids = $this->accessStorage->getUserTermPermissionsByTids($tids);
+        $rids = $this->accessStorage->getRoleTermPermissionsByTids($tids);
+      }
+    }
+
+    if (!empty($rids)) {
+      $roles = Role::loadMultiple($rids);
+    }
+
+    if (!empty($uids)) {
+      $users = User::loadMultiple($uids);
+    }
+
+    $template = $this->twig->loadTemplate($viewFilePath);
+
+    return $template->render(['roles' => $roles, 'users' => $users]);
+
+  }
+
+  /**
+   * @return array
+   */
+  public function getPermissions()
+  {
+    $returnArray = null;
+
+    $permittedUsers = $this->database->select('permissions_by_term_user', 'pu')
+      ->fields('pu', ['uid', 'tid'])
+      ->execute()
+      ->fetchAll();
+
+    $permittedRoles = $this->database->select('permissions_by_term_role', 'pr')
+      ->fields('pr', ['rid', 'tid'])
+      ->execute()
+      ->fetchAll();
+
+    if (!empty($permittedRoles)) {
+      $returnArray['roleLabels'] = [];
+      foreach ($permittedRoles as $permittedRole) {
+        $role = Role::load($permittedRole->rid);
+        if (!empty($role)) {
+          $returnArray['roleLabels'][$permittedRole->tid][] = $role->label();
+        }
+      }
+    }
+
+    if (!empty($permittedUsers)) {
+      $returnArray['userDisplayNames'] = [];
+      foreach ($permittedUsers as $permittedUser) {
+        $user = User::load($permittedUser->uid);
+        if (!empty($user)) {
+          $returnArray['userDisplayNames'][$permittedUser->tid][] = $user->getDisplayName();
+        }
+      }
+    }
+
+    return $returnArray;
+  }
+
+}
\ No newline at end of file