TYPO3 v15 dev-main snapshot ()

2026-08-10 22:31:00 +02:00
commit f9941541b7
1178 changed files with 135377 additions and 0 deletions
@@ -0,0 +1,117 @@
+<?php
+
+declare(strict_types=1);
+
+/*
+ * This file is part of the TYPO3 CMS project.
+ *
+ * It is free software; you can redistribute it and/or modify it under
+ * the terms of the GNU General Public License, either version 2
+ * of the License, or any later version.
+ *
+ * For the full copyright and license information, please read the
+ * LICENSE.txt file that was distributed with this source code.
+ *
+ * The TYPO3 project - inspiring people to share!
+ */
+
+namespace TYPO3\CMS\Backend\Security\SudoMode\Access;
+
+/**
+ * Representation of a table or table column that
+ * shall be handled during the sudo mode process.
+ *
+ * @internal
+ */
+class TableAccessSubject implements AccessSubjectInterface
+{
+    /**
+     * The table column subject, e.g. `tx_foo`, `tx_foo.bar` or `tx_foo.bar.123`
+     */
+    protected string $subject;
+
+    /**
+     * The distinct lifetime type, e.g. XS, S, M, L, XL
+     */
+    protected AccessLifetime $lifetime;
+
+    /**
+     * If given, grants access to same-group sudo mode subjects.
+     */
+    protected ?string $group;
+
+    /**
+     * If true, the subject may only be used once and requires a new grant for the same task.
+     */
+    protected bool $once;
+
+    public static function fromArray(array $data): static
+    {
+        $subject = $data['subject'] ?? null;
+        $lifetime = AccessLifetime::tryFrom($data['lifetime']);
+        $group = $data['group'] ?? null;
+        $once = $data['once'] ?? null;
+        if (!is_string($subject)) {
+            throw new \LogicException('Property subject must be of type string', 1743646793);
+        }
+        if ($lifetime === null) {
+            throw new \LogicException('Property lifetime cannot be resolved', 1743646794);
+        }
+        if ($group !== null && !is_string($group)) {
+            throw new \LogicException('Property group must be of type string, or omitted', 1743646795);
+        }
+        if ($once !== null && !is_bool($once)) {
+            throw new \LogicException('Property once must be of type bool, or omitted', 1743646796);
+        }
+        return new static($subject, $lifetime, $group, $once);
+    }
+
+    final public function __construct(
+        string $subject,
+        ?AccessLifetime $lifetime = null,
+        ?string $group = null,
+        ?bool $once = null,
+    ) {
+        $this->subject = $subject;
+        $this->lifetime = $lifetime ?? AccessLifetime::veryShort;
+        $this->group = $group;
+        $this->once = $once;
+    }
+
+    public function jsonSerialize(): array
+    {
+        return [
+            'class' => self::class,
+            'identity' => $this->getIdentity(),
+            'subject' => $this->subject,
+            'lifetime' => $this->lifetime->value,
+            'group' => $this->group,
+            'once' => $this->once,
+        ];
+    }
+
+    public function getIdentity(): string
+    {
+        return sprintf('table:%s', $this->subject);
+    }
+
+    public function getSubject(): string
+    {
+        return $this->subject;
+    }
+
+    public function getGroup(): ?string
+    {
+        return $this->group;
+    }
+
+    public function getLifetime(): AccessLifetime
+    {
+        return $this->lifetime;
+    }
+
+    public function isOnce(): bool
+    {
+        return $this->once;
+    }
+}