PageOwnerCanEditGatekeeper.php

Go to the documentation of this file.

<?php

namespace Elgg\Router\Middleware;

use Elgg\Exceptions\Http\EntityPermissionsException;
use Elgg\Router\Route;

class PageOwnerCanEditGatekeeper {

    public function __invoke(\Elgg\Request $request) {
        $this->assertAccess($request);
    }
    
    protected function assertAccess(\Elgg\Request $request, string $type = '', string $subtype = '') {
        
        $route = $request->getHttpRequest()->getRoute();
        if (!$route instanceof Route) {
            return;
        }
        
        // force detection of page owner for legacy routes
        $route->setDefault('_detect_page_owner', true);
        
        $page_owner = $route->resolvePageOwner();
        if (!$page_owner instanceof \ElggEntity) {
            return;
        }
        
        if (!$page_owner->canEdit()) {
            throw new EntityPermissionsException();
        }
        
        if (!empty($type) && $page_owner->getType() !== $type) {
            throw new EntityPermissionsException();
        }
        
        if (!empty($subtype) && $page_owner->getSubtype() !== $subtype) {
            throw new EntityPermissionsException();
        }
    }
}