for testing and deploying your application
for finding and fixing issues
for empowering human code reviews
<?php
declare(strict_types=1);
namespace Application\Repository;
use Application\Model\User;
class TransactionLineRepository extends AbstractRepository implements LimitedAccessSubQueryInterface
{
/**
* Returns pure SQL to get ID of all objects that are accessible to given user.
*
* @param null|User $user
* @return string
*/
public function getAccessibleSubQuery(?User $user): string
if (!$user) {
return '-1';
}
if (in_array($user->getRole(), [User::ROLE_RESPONSIBLE, User::ROLE_ADMINISTRATOR], true)) {
return $this->getAllIdsQuery();
return 'SELECT transaction_line.id FROM transaction_line
JOIN account ON transaction_line.debit_id = account.id OR transaction_line.credit_id = account.id
WHERE account.owner_id = ' . $user->getId();
Ecodev /
my-ichtus
