Files
espocrm/application/Espo/Core/Console/Commands/AclCheck.php
Yuri Kuznetsov 12a9afe2fe cs fix
2021-04-18 22:17:16 +03:00

134 lines
3.6 KiB
PHP

<?php
/************************************************************************
* This file is part of EspoCRM.
*
* EspoCRM - Open Source CRM application.
* Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
* Website: https://www.espocrm.com
*
* EspoCRM is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* EspoCRM is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with EspoCRM. If not, see http://www.gnu.org/licenses/.
*
* The interactive user interfaces in modified source and object code versions
* of this program must display Appropriate Legal Notices, as required under
* Section 5 of the GNU General Public License version 3.
*
* In accordance with Section 7(b) of the GNU General Public License version 3,
* these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
************************************************************************/
namespace Espo\Core\Console\Commands;
use Espo\Core\{
Portal\Application as PortalApplication,
Container,
Console\Command,
Console\Params,
Console\IO,
};
class AclCheck implements Command
{
protected $container;
public function __construct(Container $container)
{
$this->container = $container;
}
public function run(Params $params, IO $io): void
{
$options = $params->getOptions();
$userId = $options['userId'] ?? null;
$scope = $options['scope'] ?? null;
$id = $options['id'] ?? null;
$action = $options['action'] ?? null;
if (empty($userId)) {
return;
}
if (empty($scope)) {
return;
}
if (empty($id)) {
return;
}
$container = $this->container;
$entityManager = $container->get('entityManager');
$user = $entityManager->getEntity('User', $userId);
if (!$user) {
return;
}
if ($user->isPortal()) {
$portalIdList = $user->getLinkMultipleIdList('portals');
foreach ($portalIdList as $portalId) {
$application = new PortalApplication($portalId);
$containerPortal = $application->getContainer();
$entityManager = $containerPortal->get('entityManager');
$user = $entityManager->getEntity('User', $userId);
if (!$user) {
return;
}
$result = $this->check($user, $scope, $id, $action, $containerPortal);
if ($result) {
$io->write('true');;
return;
}
}
return;
}
if ($this->check($user, $scope, $id, $action, $container)) {
$io->write('true');
return;
}
}
protected function check($user, $scope, $id, $action, $container): bool
{
$entityManager = $container->get('entityManager');
$entity = $entityManager->getEntity($scope, $id);
if (!$entity) {
return false;
}
$aclManager = $container->get('aclManager');
if ($aclManager->check($user, $entity, $action)) {
return true;
}
return false;
}
}