TYPO3-translation/cms-core
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

TYPO3 v15 dev-main snapshot ()

Browse Source
This commit is contained in:
wappler
2026-08-10 22:31:09 +02:00
commit af8cc155b5
6818 changed files with 642608 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Classes/DataHandling/PagePermissionAssembler.php
+119
View File
@@ -0,0 +1,119 @@
<?php
declare(strict_types=1);
/*
* This file is part of the TYPO3 CMS project.
*
* It is free software; you can redistribute it and/or modify it under
* the terms of the GNU General Public License, either version 2
* of the License, or any later version.
*
* For the full copyright and license information, please read the
* LICENSE.txt file that was distributed with this source code.
*
* The TYPO3 project - inspiring people to share!
*/
namespace TYPO3\CMS\Core\DataHandling;
use TYPO3\CMS\Backend\Utility\BackendUtility;
use TYPO3\CMS\Core\Type\Bitmask\Permission;
use TYPO3\CMS\Core\Utility\GeneralUtility;
use TYPO3\CMS\Core\Utility\MathUtility;
/**
* Class to determine and set proper permissions to a new (or copied) page.
*
* The following order applies:
* - defaultPermissions as defined in this class.
* - TYPO3_CONF_VARS[BE][defaultPermissions]
* - Page TSconfig va TCEMAIN.permissions
*
* @internal Implements a DataHandler detail. Should only be used by the TYPO3 Core.
*/
readonly class PagePermissionAssembler
{
/**
* Set default permissions of a new page, considering defaults and pageTsConfig overrides.
*
* @param array $fieldArray the field array to be used
* @param int $pid the parent page ID
* @param int $backendUserId the owner of the page to be set
* @param int $backendUserGroupId the owner group of the page to be set
* @return array the enriched field array
*/
public function applyDefaults(array $fieldArray, int $pid, int $backendUserId, int $backendUserGroupId): array
{
$fieldArray['perms_userid'] = $backendUserId;
$fieldArray['perms_groupid'] = $backendUserGroupId;
$fieldArray['perms_user'] = $this->assemblePermissions($GLOBALS['TYPO3_CONF_VARS']['BE']['defaultPermissions']['user'] ?? 'show,edit,delete,new,editcontent');
$fieldArray['perms_group'] = $this->assemblePermissions($GLOBALS['TYPO3_CONF_VARS']['BE']['defaultPermissions']['group'] ?? 'show,edit,new,editcontent');
$fieldArray['perms_everybody'] = $this->assemblePermissions($GLOBALS['TYPO3_CONF_VARS']['BE']['defaultPermissions']['everybody'] ?? '');
// @todo: It's kinda ugly pageTS is fetched here on demand. Together with the 'fetch parent page' code in
// setTSconfigPermissions(), we should think about changing the API to have these things hand
// over instead.
$TSConfig = BackendUtility::getPagesTSconfig($pid)['TCEMAIN.'] ?? [];
if (isset($TSConfig['permissions.']) && is_array($TSConfig['permissions.'])) {
return $this->setTSconfigPermissions($fieldArray, $TSConfig['permissions.']);
}
return $fieldArray;
}
/**
* Setting up perms_* fields in $fieldArray based on TSconfig input
* Used for new pages and pages that are copied.
*
* @param array $fieldArray Field Array, returned with modifications
* @param array $tsconfig TSconfig properties
* @return array Modified Field Array
*/
protected function setTSconfigPermissions(array $fieldArray, array $tsconfig): array
{
$parentPermissions = [];
if (in_array('copyFromParent', $tsconfig, true)) {
// @todo: Dislocated! The API should be changed to have a potential parent record hand over.
$parentPermissions = BackendUtility::getRecordWSOL('pages', $fieldArray['pid'], 'uid,perms_userid,perms_groupid,perms_user,perms_group,perms_everybody') ?? [];
}
if ((string)($tsconfig['userid'] ?? '') !== '' && ($tsconfig['userid'] !== 'copyFromParent' || isset($parentPermissions['perms_userid']))) {
$fieldArray['perms_userid'] = $tsconfig['userid'] === 'copyFromParent' ? (int)$parentPermissions['perms_userid'] : (int)$tsconfig['userid'];
}
if ((string)($tsconfig['groupid'] ?? '') !== '' && ($tsconfig['groupid'] !== 'copyFromParent' || isset($parentPermissions['perms_groupid']))) {
$fieldArray['perms_groupid'] = $tsconfig['groupid'] === 'copyFromParent' ? (int)$parentPermissions['perms_groupid'] : (int)$tsconfig['groupid'];
}
if ((string)($tsconfig['user'] ?? '') !== '' && ($tsconfig['user'] !== 'copyFromParent' || isset($parentPermissions['perms_user']))) {
$fieldArray['perms_user'] = $tsconfig['user'] === 'copyFromParent' ? (int)$parentPermissions['perms_user'] : $this->assemblePermissions($tsconfig['user']);
}
if ((string)($tsconfig['group'] ?? '') !== '' && ($tsconfig['group'] !== 'copyFromParent' || isset($parentPermissions['perms_group']))) {
$fieldArray['perms_group'] = $tsconfig['group'] === 'copyFromParent' ? (int)$parentPermissions['perms_group'] : $this->assemblePermissions($tsconfig['group']);
}
if ((string)($tsconfig['everybody'] ?? '') !== '' && ($tsconfig['everybody'] !== 'copyFromParent' || isset($parentPermissions['perms_everybody']))) {
$fieldArray['perms_everybody'] = $tsconfig['everybody'] === 'copyFromParent' ? (int)$parentPermissions['perms_everybody'] : $this->assemblePermissions($tsconfig['everybody']);
}
return $fieldArray;
}
/**
* Calculates the bit value of the permissions given in a string, comma-separated.
*
* Even though not documented, it seems to be possible having int values in
* $GLOBALS['TYPO3_CONF_VARS']['BE']['defaultPermissions']['...'] as bit mask
* already. To not break anything, this is kept for now.
*/
protected function assemblePermissions(int|string $listOfPermissions): int
{
// Already set as integer, so this one is used.
if (MathUtility::canBeInterpretedAsInteger($listOfPermissions)) {
return (int)$listOfPermissions;
}
$keyArr = GeneralUtility::trimExplode(',', $listOfPermissions, true);
$value = 0;
$permissionMap = Permission::getMap();
foreach ($keyArr as $key) {
if ($key && isset($permissionMap[$key])) {
$value |= $permissionMap[$key];
}
}
return $value;
}
}