vendor/shopware/core/Framework/Plugin/Subscriber/PluginAclPrivilegesSubscriber.php line 36

Open in your IDE?
  1. <?php declare(strict_types=1);
  3. namespace Shopware\Core\Framework\Plugin\Subscriber;
  5. use Shopware\Core\Framework\Api\Acl\Role\AclRoleDefinition;
  6. use Shopware\Core\Framework\Api\Acl\Role\AclRoleEntity;
  7. use Shopware\Core\Framework\Api\Acl\Role\AclRoleEvents;
  8. use Shopware\Core\Framework\DataAbstractionLayer\Event\EntityLoadedEvent;
  9. use Shopware\Core\Framework\Log\Package;
  10. use Shopware\Core\Framework\Plugin\KernelPluginCollection;
  11. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  13. /**
  14. * @deprecated tag:v6.5.0 - reason:becomes-internal - EventSubscribers will become internal in v6.5.0
  15. */
  16. #[Package('core')]
  17. class PluginAclPrivilegesSubscriber implements EventSubscriberInterface
  18. {
  19. private KernelPluginCollection $plugins;
  21. /**
  22. * @internal
  23. */
  24. public function __construct(KernelPluginCollection $plugins)
  25. {
  26. $this->plugins = $plugins;
  27. }
  29. public static function getSubscribedEvents(): array
  30. {
  31. return [
  32. AclRoleEvents::ACL_ROLE_LOADED_EVENT => 'onAclRoleLoaded',
  33. ];
  34. }
  36. public function onAclRoleLoaded(EntityLoadedEvent $event): void
  37. {
  38. if (!$event->getDefinition() instanceof AclRoleDefinition) {
  39. return;
  40. }
  42. /** @var AclRoleEntity[] $aclRoles */
  43. $aclRoles = $event->getEntities();
  45. if (!$aclRoles) {
  46. return;
  47. }
  49. $additionalRolePrivileges = $this->getAdditionalRolePrivileges();
  51. foreach ($additionalRolePrivileges as $additionalRole => $additionalPrivileges) {
  52. foreach ($aclRoles as $aclRole) {
  53. if ($additionalRole === AclRoleDefinition::ALL_ROLE_KEY || \in_array($additionalRole, $aclRole->getPrivileges(), true)) {
  54. $newPrivileges = array_values(array_unique(array_merge($aclRole->getPrivileges(), $additionalPrivileges)));
  55. $aclRole->setPrivileges($newPrivileges);
  56. }
  57. }
  58. }
  59. }
  61. /**
  62. * returns a unique, merged array of all role privileges to be added by plugins
  63. *
  64. * @return array<string, list<string>>
  65. */
  66. private function getAdditionalRolePrivileges(): array
  67. {
  68. $rolePrivileges = [];
  70. foreach ($this->plugins->getActives() as $plugin) {
  71. $rolePrivileges = array_replace_recursive($rolePrivileges, $plugin->enrichPrivileges());
  72. }
  74. return $rolePrivileges;
  75. }
  76. }