ezsystems / ezpublish-kernel

     *

     * @return APIRoleDraft if the authenticated user is not allowed to remove a policy

     */

    public function removePolicyByRoleDraft(APIRoleDraft $roleDraft, PolicyDraft $policyDraft)

    {

        if ($this->repository->hasAccess('role', 'update') !== true) {

            throw new UnauthorizedException('role', 'update');

        }

        if ($policyDraft->roleId != $roleDraft->id) {

            throw new InvalidArgumentException('$policy', 'Policy does not belong to the given role');

        }

        $this->internalDeletePolicy($policyDraft);

        return $this->loadRoleDraft($roleDraft->id);

    }

    /**

     * Updates the limitations of a policy. The module and function cannot be changed and

     *

     * @return \eZ\Publish\API\Repository\Values\User\Role the updated role

     */

    public function removePolicy(APIRole $role, APIPolicy $policy)

    {

        if ($this->repository->hasAccess('role', 'update') !== true) {

            throw new UnauthorizedException('role', 'update');

        }

        if ($policy->roleId != $role->id) {

            throw new InvalidArgumentException('$policy', 'Policy does not belong to the given role');

        }

        $this->internalDeletePolicy($policy);

        return $this->loadRole($role->id);

    }

    /**

     * Deletes a policy.