delboy1978uk / passport

src/PassportControl.php

<?php

namespace Del\Passport;

use Del\Passport\Passport;
use Del\Passport\Entity\PassportRole;
use Del\Passport\Entity\Role;
use Doctrine\Common\Collections\ArrayCollection;
use Doctrine\Common\Collections\Collection;
use Doctrine\ORM\EntityManager;

class PassportControl
{
    public function __construct(
        private EntityManager $entityManager
    )
    {}

    public function isAuthorized(PassportInterface $passport, ResourceInterface $resource, string $roleName): bool
    {
        $entitlements = $passport->getEntitlements();

        foreach ($entitlements as $passportRole) {
            $role = $passportRole->getRole();

            if ($role->getRoleName() === 'superuser' || ($role->getRoleName() === $roleName
                && $role->getClass() === $resource->getResourceType()
                && $passportRole->getEntityId() === $resource->getResourceId()
            )) {
                return true;
            }
        }


        return false;
    }

    public function grantEntitlement(
        PassportInterface $passport,
        RoleInterface $role,
        ResourceInterface $resource = null,
        int $approvedBy = null,
    ): PassportRole {
        $userId = $passport->getUserId();
        $resource ? $resourceId = $resource->getResourceId() : null;
        $entitlement = new PassportRole();
        $entitlement->setUserId($userId);
        $entitlement->setRole($role);
        $resourceId ? $entitlement->setEntityId($resourceId) : null;

The variable $resourceId does not seem to be defined for all execution paths leading up to this point.

        $approvedBy ? $entitlement->setApprovedById($approvedBy) : null;
        $this->entityManager->persist($entitlement);
        $this->entityManager->flush();
        $passport->getEntitlements()->add($entitlement);

        return $entitlement;
    }

    public function revokeEntitlement(PassportRole $passportRole): bool
    {
        $this->entityManager->remove($passportRole);
        $this->entityManager->flush();

        return true;
    }

    public function createNewRole(RoleInterface $role): RoleInterface
    {
        $this->entityManager->persist($role);
        $this->entityManager->flush();

        return $role;
    }

    public function removeRole(RoleInterface $role): void
    {
        $this->entityManager->remove($role);
        $this->entityManager->flush();
    }

    public function findRole(string $name): ?Role
    {
        return $this->entityManager->getRepository(Role::class)->findOneBy([
            'roleName' => $name,
        ]);
    }

    public function findPassportRoles(Role $role, int $entityId): array
    {
        return $this->entityManager->getRepository(PassportRole::class)->findBy([
            'role' => $role,
            'entityId' => $entityId,
        ]);
    }

    public function findUserPassport(int $userId): Passport
    {
        $roles = $this->entityManager->getRepository(PassportRole::class)->findBy([
            'userId' => $userId,
        ]);

        return new Passport($userId, new ArrayCollection($roles));
    }

    public function hasPassportRole(PassportInterface $passport, string $roleName, ?int $entityId = null): bool
    {
        foreach ($passport->getEntitlements() as $entitlement) {
            if ($entitlement->getRole()->getRoleName() === $roleName && $entitlement->getEntityId() === $entityId) {
                return true;
            }
        }

        return false;
    }
}