118 lines
3.2 KiB
PHP
118 lines
3.2 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
/*
|
|
* This file is part of the TYPO3 CMS project.
|
|
*
|
|
* It is free software; you can redistribute it and/or modify it under
|
|
* the terms of the GNU General Public License, either version 2
|
|
* of the License, or any later version.
|
|
*
|
|
* For the full copyright and license information, please read the
|
|
* LICENSE.txt file that was distributed with this source code.
|
|
*
|
|
* The TYPO3 project - inspiring people to share!
|
|
*/
|
|
|
|
namespace TYPO3\CMS\Backend\Security\SudoMode\Access;
|
|
|
|
/**
|
|
* Representation of a table or table column that
|
|
* shall be handled during the sudo mode process.
|
|
*
|
|
* @internal
|
|
*/
|
|
class TableAccessSubject implements AccessSubjectInterface
|
|
{
|
|
/**
|
|
* The table column subject, e.g. `tx_foo`, `tx_foo.bar` or `tx_foo.bar.123`
|
|
*/
|
|
protected string $subject;
|
|
|
|
/**
|
|
* The distinct lifetime type, e.g. XS, S, M, L, XL
|
|
*/
|
|
protected AccessLifetime $lifetime;
|
|
|
|
/**
|
|
* If given, grants access to same-group sudo mode subjects.
|
|
*/
|
|
protected ?string $group;
|
|
|
|
/**
|
|
* If true, the subject may only be used once and requires a new grant for the same task.
|
|
*/
|
|
protected bool $once;
|
|
|
|
public static function fromArray(array $data): static
|
|
{
|
|
$subject = $data['subject'] ?? null;
|
|
$lifetime = AccessLifetime::tryFrom($data['lifetime']);
|
|
$group = $data['group'] ?? null;
|
|
$once = $data['once'] ?? null;
|
|
if (!is_string($subject)) {
|
|
throw new \LogicException('Property subject must be of type string', 1743646793);
|
|
}
|
|
if ($lifetime === null) {
|
|
throw new \LogicException('Property lifetime cannot be resolved', 1743646794);
|
|
}
|
|
if ($group !== null && !is_string($group)) {
|
|
throw new \LogicException('Property group must be of type string, or omitted', 1743646795);
|
|
}
|
|
if ($once !== null && !is_bool($once)) {
|
|
throw new \LogicException('Property once must be of type bool, or omitted', 1743646796);
|
|
}
|
|
return new static($subject, $lifetime, $group, $once);
|
|
}
|
|
|
|
final public function __construct(
|
|
string $subject,
|
|
?AccessLifetime $lifetime = null,
|
|
?string $group = null,
|
|
?bool $once = null,
|
|
) {
|
|
$this->subject = $subject;
|
|
$this->lifetime = $lifetime ?? AccessLifetime::veryShort;
|
|
$this->group = $group;
|
|
$this->once = $once;
|
|
}
|
|
|
|
public function jsonSerialize(): array
|
|
{
|
|
return [
|
|
'class' => self::class,
|
|
'identity' => $this->getIdentity(),
|
|
'subject' => $this->subject,
|
|
'lifetime' => $this->lifetime->value,
|
|
'group' => $this->group,
|
|
'once' => $this->once,
|
|
];
|
|
}
|
|
|
|
public function getIdentity(): string
|
|
{
|
|
return sprintf('table:%s', $this->subject);
|
|
}
|
|
|
|
public function getSubject(): string
|
|
{
|
|
return $this->subject;
|
|
}
|
|
|
|
public function getGroup(): ?string
|
|
{
|
|
return $this->group;
|
|
}
|
|
|
|
public function getLifetime(): AccessLifetime
|
|
{
|
|
return $this->lifetime;
|
|
}
|
|
|
|
public function isOnce(): bool
|
|
{
|
|
return $this->once;
|
|
}
|
|
}
|