FSi\Bundle\AdminSecurityBundle\EventListener\PreventDeletingCurrentUser

Complexity

Total Complexity

9

Size/Duplication

Total Lines	77
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

5 Methods

Rating	Name	Duplication	Size	Complexity
A	getSubscribedEvents()	0	4	1
A	setRedirectResponse()	0	5	1
A	__construct()	0	8	1
A	preventDeletingCurrentUser()	0	24	4
A	getRedirectUrl()	0	8	2

<?php

/**
 * (c) FSi sp. z o.o. <info@fsi.pl>
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */

declare(strict_types=1);

namespace FSi\Bundle\AdminSecurityBundle\EventListener;

use FSi\Bundle\AdminBundle\Admin\Element;
use FSi\Bundle\AdminBundle\Event\BatchEvents;
use FSi\Bundle\AdminBundle\Event\FormEvent;
use FSi\Bundle\AdminBundle\Message\FlashMessages;
use FSi\Bundle\AdminSecurityBundle\Doctrine\Admin\UserElement;
use FSi\Bundle\AdminSecurityBundle\Security\User\UserInterface;
use Symfony\Component\EventDispatcher\EventSubscriberInterface;
use Symfony\Component\HttpFoundation\RedirectResponse;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\Routing\RouterInterface;
use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;

class PreventDeletingCurrentUser implements EventSubscriberInterface
{
    /**
     * @var TokenStorageInterface
     */
    private $tokenStorage;

    /**
     * @var RouterInterface
     */
    private $router;

    /**
     * @var FlashMessages
     */
    private $flashMessages;

    public function __construct(
        TokenStorageInterface $tokenStorage,
        RouterInterface $router,
        FlashMessages $flashMessages
    ) {
        $this->tokenStorage = $tokenStorage;
        $this->router = $router;
        $this->flashMessages = $flashMessages;
    }

    public static function getSubscribedEvents(): array
    {
        return [
            BatchEvents::BATCH_OBJECTS_PRE_APPLY => 'preventDeletingCurrentUser',
        ];
    }

    public function preventDeletingCurrentUser(FormEvent $event): void
    {
        $element = $event->getElement();
        if (false === $element instanceof UserElement) {
            return;
        }

        $user = $this->tokenStorage->getToken()->getUser();
        $request = $event->getRequest();
        $indexes = $request->get('indexes', []);

        foreach ($indexes as $index) {
            /** @var UserInterface $entity */
            $entity = $element->getDataIndexer()->getData($index);

            if ($user === $entity) {
                $this->setRedirectResponse($event);
                $this->flashMessages->error(
                    'admin.user_list.message.delete_current_user',
                    [],
                    'FSiAdminSecurity'
                );

                return;
            }
        }
    }

    private function setRedirectResponse(FormEvent $event): void
    {
        $event->stopPropagation();

The function Symfony\Component\EventDispatcher\Event::stopPropagation() has been deprecated: since Symfony 4.3, use "Symfony\Contracts\EventDispatcher\Event" instead

        $redirectUrl = $this->getRedirectUrl($event->getElement(), $event->getRequest());
        $event->setResponse(new RedirectResponse($redirectUrl));
    }

    private function getRedirectUrl(Element $element, Request $request): string
    {
        $redirectUrl = $request->get('redirect_uri');
        if (null === $redirectUrl) {
            return $this->router->generate($element->getRoute(), $element->getRouteParameters());
        }

        return $redirectUrl;
    }
}