Application\Acl\Assertion\IsOwner

Complexity

Total Complexity

3

Size/Duplication

Total Lines	22
Duplicated Lines	0 %

Test Coverage

Coverage

80%

Importance

Changes

0

1 Method

Rating	Name	Duplication	Size	Complexity
A	assert()	0	10	3

<?php

declare(strict_types=1);

namespace Application\Acl\Assertion;

use Application\Model\AbstractModel;
use Application\Model\User;
use Zend\Permissions\Acl\Acl;
use Zend\Permissions\Acl\Assertion\AssertionInterface;
use Zend\Permissions\Acl\Resource\ResourceInterface;
use Zend\Permissions\Acl\Role\RoleInterface;

class IsOwner implements AssertionInterface
{
    /**
     * Assert that the object belongs to the current user
     *
     * @param \Application\Acl\Acl $acl
     * @param RoleInterface $role
     * @param ResourceInterface $resource
     * @param string $privilege
     *
     * @return bool
     */
    public function assert(Acl $acl, RoleInterface $role = null, ResourceInterface $resource = null, $privilege = null)
    {
        /** @var AbstractModel $object */
        $object = $resource->getInstance();

The method getInstance() does not exist on Zend\Permissions\Acl\Resource\ResourceInterface. It seems like you code against a sub-type of Zend\Permissions\Acl\Resource\ResourceInterface such as Application\Acl\ModelResource.

The method getInstance() does not exist on null.

        if (User::getCurrent() && User::getCurrent() === $object->getOwner()) {
            return true;
        }

        return $acl->reject('the object does not belong to the user');

The method reject() does not exist on Zend\Permissions\Acl\Acl. Are you sure you never get this type here, but always one of the subclasses?

    }
}