Limoncello\Tests\Auth\Authorization\PolicyEnforcement\Data\Policies\Comments

Complexity

Total Complexity

9

Size/Duplication

Total Lines	103
Duplicated Lines	19.42 %

Coupling/Cohesion

Components	1
Dependencies	8

Importance

Changes

0

<?php namespace Limoncello\Tests\Auth\Authorization\PolicyEnforcement\Data\Policies;
abstract class Comments extends General
{
    /** Operation identity */
    const RESOURCE_TYPE = 'comments';

    /**
     * @return PolicyInterface
     */
    public static function getPolicies()
    {
        return (new Policy([
            static::onIndex(),
            static::onRead(),
            static::onCreate(),
            static::onUpdate(),
            static::onDelete(),
        ], RuleAlgorithm::permitOverrides())
        )
            ->setTarget(static::target(ContextProperties::PARAM_RESOURCE_TYPE, static::RESOURCE_TYPE))
            ->setName('Comments');
    }

    /**
     * @return RuleInterface
     */
    protected static function onIndex()
    {
        return (new Rule())->setTarget(static::targetOperationIndex())->setName('index');
    }

    /**
     * @return RuleInterface
     */
    protected static function onRead()
    {
        return (new Rule())->setTarget(static::targetOperationRead())->setName('read');
    }

    /**
     * @return RuleInterface
     */
    protected static function onCreate()
    {
        $obligation = new Obligation(EvaluationEnum::PERMIT, [PolicyEnforcementTest::class, 'markObligationAsCalled']);
        $advice     = new Advice(EvaluationEnum::PERMIT, [PolicyEnforcementTest::class, 'markAdviceAsCalled']);

        return (new Rule())->setTarget(static::targetMulti([
            ContextProperties::PARAM_OPERATION         => static::OPERATION_CREATE,
            ContextProperties::PARAM_USER_IS_SIGNED_IN => true,
        ]))->setName('create')->setObligations([$obligation])->setAdvice([$advice]);
    }

    /**
     * @return RuleInterface
     */
    protected static function onUpdate()
    {
        return (new Rule())
            ->setTarget(static::targetMulti([
                ContextProperties::PARAM_OPERATION         => static::OPERATION_UPDATE,
                ContextProperties::PARAM_USER_IS_SIGNED_IN => true,
            ]))
            ->setCondition(static::conditionIsCommentOwnerOrAdmin())
            ->setName('update');
    }

    /**
     * @return MethodInterface
     */
    protected static function conditionIsCommentOwnerOrAdmin()
    {
        return new Logical([static::class, 'isCommentOwnerOrAdmin']);
    }

    /**
     * @return RuleInterface
     */
    protected static function onDelete()
    {
        return (new Rule())
            ->setTarget(static::targetMulti([
                ContextProperties::PARAM_OPERATION         => static::OPERATION_DELETE,
                ContextProperties::PARAM_USER_IS_SIGNED_IN => true,
            ]))
            ->setCondition(static::conditionIsCommentOwnerOrAdmin())
            ->setName('delete');
    }

    /**
     * @param ContextInterface $context
     *
     * @return bool
     */
    public static function isCommentOwnerOrAdmin(ContextInterface $context)
    {
        $commentId = $context->get(ContextProperties::PARAM_RESOURCE_IDENTITY);
        // for testing purposes let's pretend current user is owner of comment with ID 123
        $isOwner = $commentId === 123;
        $result  = $isOwner === true || static::isAdmin($context) === true;

        return $result;
    }
}