Chubbyphp\Security\Authorization\RoleAuthorization

Complexity

Total Complexity

10

Size/Duplication

Total Lines	71
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	2

Importance

Changes

0

5 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	4	1
A	isGranted()	0	11	3
A	getOwningRoles()	0	4	1
A	getNeededRoles()	0	4	2
A	checkRoles()	0	10	3

<?php

declare(strict_types=1);

namespace Chubbyphp\Security\Authorization;

use Chubbyphp\Security\UserInterface;

final class RoleAuthorization implements AuthorizationInterface
{
    /**
     * @var array
     */
    private $roleHierarchyResolver;

    /**
     * @param RoleHierarchyResolverInterface $roleHierarchyResolver
     */
    public function __construct(RoleHierarchyResolverInterface $roleHierarchyResolver)
    {
        $this->roleHierarchyResolver = $roleHierarchyResolver;

It seems like $roleHierarchyResolver of type object<Chubbyphp\Security\Authorization\RoleHierarchyResolverInterface> is incompatible with the declared type array of property $roleHierarchyResolver.

    }

    /**
     * @param UserInterface                  $user
     * @param mixed                          $attributes
     * @param OwnedByUserModelInterface|null $model
     *
     * @return bool
     */
    public function isGranted(UserInterface $user, $attributes, OwnedByUserModelInterface $model = null): bool
    {
        if (null !== $model && $user->getId() !== $model->getOwnedByUserId()) {
            return false;
        }

        $owningRoles = $this->getOwningRoles($user);
        $neededRoles = $this->getNeededRoles($attributes);

        return $this->checkRoles($owningRoles, $neededRoles);
    }

    /**
     * @param UserInterface $user
     *
     * @return array
     */
    private function getOwningRoles(UserInterface $user): array
    {
        return $this->roleHierarchyResolver->resolve($user->getRoles());

The method resolve cannot be called on $this->roleHierarchyResolver (of type array).

    }

    /**
     * @param mixed $attributes
     *
     * @return array
     */
    private function getNeededRoles($attributes): array
    {
        return is_scalar($attributes) ? [$attributes] : $attributes;
    }

    /**
     * @param array $owningRoles
     * @param array $neededRoles
     *
     * @return bool
     */
    private function checkRoles(array $owningRoles, array $neededRoles): bool
    {
        foreach ($neededRoles as $neededRole) {
            if (!in_array($neededRole, $owningRoles, true)) {
                return false;
            }
        }

        return true;
    }
}