vendor/kunstmaan/node-bundle/EventListener/SlugSecurityListener.php line 60

Open in your IDE?
  1. <?php
  3. namespace Kunstmaan\NodeBundle\EventListener;
  5. use Doctrine\ORM\EntityManager;
  6. use Kunstmaan\AdminBundle\Helper\Security\Acl\Permission\PermissionMap;
  7. use Kunstmaan\NodeBundle\Event\SlugSecurityEvent;
  8. use Kunstmaan\NodeBundle\Helper\NodeMenu;
  9. use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
  10. use Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface;
  11. use Symfony\Component\Security\Core\Exception\AccessDeniedException;
  13. class SlugSecurityListener
  14. {
  15.     /**
  16.      * @var AuthorizationCheckerInterface
  17.      */
  18.     protected $authorizationChecker;
  20.     /**
  21.      * @var EntityManager
  22.      */
  23.     protected $em;
  25.     /**
  26.      * @var NodeMenu
  27.      */
  28.     protected $nodeMenu;
  30.     /**
  31.      * @var bool
  32.      */
  33.     private $permissionsEnabled;
  35.     /**
  36.      * @param EntityManager                 $entityManager
  37.      * @param AuthorizationCheckerInterface $authorizationChecker
  38.      * @param NodeMenu                      $nodeMenu
  39.      */
  40.     public function __construct(
  41.         EntityManager $entityManager,
  42.         AuthorizationCheckerInterface $authorizationChecker,
  43.         NodeMenu $nodeMenu,
  44.         $permissionsEnabled = true
  45.     ) {
  46.         $this->em = $entityManager;
  47.         $this->authorizationChecker = $authorizationChecker;
  48.         $this->nodeMenu = $nodeMenu;
  49.         $this->permissionsEnabled = $permissionsEnabled;
  50.     }
  52.     /**
  53.      * Perform basic security checks
  54.      *
  55.      * @param SlugSecurityEvent $event
  56.      *
  57.      * @throws AccessDeniedException
  58.      * @throws NotFoundHttpException
  59.      */
  60.     public function onSlugSecurityEvent(SlugSecurityEvent $event)
  61.     {
  62.         $node = $event->getNode();
  63.         $nodeTranslation = $event->getNodeTranslation();
  64.         $request = $event->getRequest();
  66.         if ($this->permissionsEnabled && false === $this->authorizationChecker->isGranted(PermissionMap::PERMISSION_VIEW, $node)) {
  67.             throw new AccessDeniedException('You do not have sufficient rights to access this page.');
  68.         }
  70.         $isPreview = $request->attributes->get('preview');
  72.         if (!$isPreview && !$nodeTranslation->isOnline()) {
  73.             throw new NotFoundHttpException('The requested page is not online');
  74.         }
  76.         $nodeMenu = $this->nodeMenu;
  77.         $nodeMenu->setLocale($nodeTranslation->getLang());
  78.         $nodeMenu->setCurrentNode($node);
  79.         $nodeMenu->setIncludeOffline($isPreview);
  81.         $request->attributes->set('_nodeMenu', $nodeMenu);
  82.     }
  83. }