Ecodev / felix

src/Acl/Assertion/IsOwner.php

<?php

declare(strict_types=1);

namespace Ecodev\Felix\Acl\Assertion;

use Ecodev\Felix\Model\CurrentUser;
use Ecodev\Felix\Model\HasOwner;
use Laminas\Permissions\Acl\Acl;
use Laminas\Permissions\Acl\Resource\ResourceInterface;
use Laminas\Permissions\Acl\Role\RoleInterface;

final class IsOwner implements NamedAssertion
{
    /**
     * Assert that the object belongs to the current user.
     *
     * @param \Ecodev\Felix\Acl\Acl $acl
     * @param ?string $privilege
     */
    public function assert(Acl $acl, ?RoleInterface $role = null, ?ResourceInterface $resource = null, $privilege = null): bool
    {
        /** @var HasOwner $object */
        $object = $resource->getInstance();

The method getInstance() does not exist on null.

        if (CurrentUser::get() && CurrentUser::get() === $object->getOwner()) {
            return true;
        }

        return $acl->reject('the object does not belong to the user');

The method reject() does not exist on Laminas\Permissions\Acl\Acl. It seems like you code against a sub-type of Laminas\Permissions\Acl\Acl such as Ecodev\Felix\Acl\Acl.

    }

    public function getName(): string
    {
        return _tr("l'objet m'appartient");
    }
}