Application\Acl\Assertion\IsOwnerOrResponsible

Complexity

Total Complexity

11

Size/Duplication

Total Lines	56
Duplicated Lines	0 %

Test Coverage

Coverage

54.17%

Importance

Changes

0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	getName()	0	3	1
B	assert()	0	40	10

<?php

declare(strict_types=1);

namespace Application\Acl\Assertion;

use Application\Model\AbstractModel;
use Application\Model\Card;
use Application\Model\Change;
use Application\Model\Collection;
use Application\Model\User;
use Ecodev\Felix\Acl\Assertion\NamedAssertion;
use Ecodev\Felix\Acl\ModelResource;
use Laminas\Permissions\Acl\Acl;
use Laminas\Permissions\Acl\Resource\ResourceInterface;
use Laminas\Permissions\Acl\Role\RoleInterface;

class IsOwnerOrResponsible implements NamedAssertion
{
    public function getName(): string
    {
        return "l'objet m'appartient ou j'en suis responsable";
    }

    /**
     * Assert that the object belongs to the current user, or belong to a collection that the user is responsible of.
     *
     * @param \Application\Acl\Acl $acl
     * @param ModelResource $resource
     * @param string $privilege
     *
     * @return bool
     */
    public function assert(Acl $acl, ?RoleInterface $role = null, ?ResourceInterface $resource = null, $privilege = null)
    {
        /** @var AbstractModel $object */
        $object = $resource->getInstance();

The method getInstance() does not exist on Laminas\Permissions\Acl\Resource\ResourceInterface. It seems like you code against a sub-type of Laminas\Permissions\Acl\Resource\ResourceInterface such as Ecodev\Felix\Acl\ModelResource.

The method getInstance() does not exist on null.

        // Without user no chance to be the owner
        if (!User::getCurrent()) {
            return $acl->reject('it is not himself');

The method reject() does not exist on Laminas\Permissions\Acl\Acl. It seems like you code against a sub-type of Laminas\Permissions\Acl\Acl such as Ecodev\Felix\Acl\Acl.

        }

        if (User::getCurrent() === $object->getOwner()) {
            return true;
        }

        // If not direct owner, look for indirect collection responsible
        /** @var Collection[] $collections */
        $collections = [];
        if ($object instanceof Collection) {
            $collections = [$object];
        } elseif ($object instanceof Card) {
            $collections = $object->getCollections();
        } elseif ($object instanceof Change) {
            $original = $object->getOriginal();
            if ($original) {
                $collections = $original->getCollections()->toArray();
            }

            $suggestion = $object->getSuggestion();
            if ($suggestion) {
                $collections = array_merge($collections, $suggestion->getCollections()->toArray());
            }
        }

        foreach ($collections as $collection) {
            if ($collection->getUsers()->contains(User::getCurrent())) {
                return true;
            }
        }

        return $acl->reject('it is not the owner, nor one of the responsible');
    }
}