Tleckie\Acl\Permissions\ResolverInterface

Complexity

Total Complexity

8

Size/Duplication

Total Lines	61
Duplicated Lines	0 %

Importance

Changes

0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	isAllowed()	0	20	2
A	check()	0	25	6

<?php

namespace Tleckie\Acl\Permissions;

use Tleckie\Acl\Acl\PermissionTypeEnum;

/**
 * Class ResolverInterface
 *
 * @package Tleckie\Acl\Permissions
 * @author  Teodoro Leckie Westberg <teodoroleckie@gmail.com>
 */
class ResolverInterface implements PermissionResolverInterface
{
    /**
     * @inheritdoc
     */
    public function isAllowed(
        array &$rules,
        string $role,
        string $resource,
        string $privilege = null
    ): bool {
        return !$this->check(
            PermissionTypeEnum::DENY(),
            $rules,
            $role,
            $resource,
            $privilege
        )
            &&
            $this->check(
                PermissionTypeEnum::ALLOW(),
                $rules,
                $role,
                $resource,
                $privilege
            );
    }

    /**
     * @param string      $type
     * @param array       $rules
     * @param string      $role
     * @param string      $resource
     * @param string|null $privilege
     * @return bool
     */
    private function check(
        string $type,
        array &$rules,
        string $role,
        string $resource,
        string $privilege = null
    ): bool {
        $item = &$rules['roles'];

        if (isset($item[$role][$type][$resource][$privilege])) {
            return true;
        }

        foreach ($item[$role]['parents'] ?? [] as $parent => $value) {
            if ($this->check($type, $rules, $parent, $resource, $privilege)) {
                return true;
            }
        }

        if (isset($item[$role][$type][$resource]) &&
            !count($item[$role][$type][$resource])) {
            return true;
        }

        return false;
    }
}