github-mirror/framework
2
0
Fork 0
mirror of https://github.com/flarum/framework.git synced 2024-11-29 21:11:55 +08:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Only grant a permission for a sub-tag if that permission is granted for its parent too

Browse Source 
Previously if a parent tag was restricted but none of its sub-tags were, the sub-tags would be visible and the parent tag would be loaded in the tag list as a result. This adds permission logic so that sub-tags automatically assume the permissions of their parent as a minimum.

Fixes flarum/core#833
This commit is contained in:
Toby Zerner 2016-02-27 18:06:59 +10:30
parent 1d697a6318
commit 577e51f7ad
1 changed files with 30 additions and 23 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

53
extensions/tags/src/Tag.php
View File

@ -13,6 +13,7 @@ namespace Flarum\Tags;
use Flarum\Core\Discussion;
use Flarum\Core\Permission;
use Flarum\Core\Support\ScopeVisibilityTrait;
use Flarum\Core\User;
use Flarum\Database\AbstractModel;
class Tag extends AbstractModel
@ -119,23 +120,34 @@ class Tag extends AbstractModel
}
/**
* @param $user
* @param $permission
* @param User $user
* @param string $permission
* @param bool $condition
* @return array
*/
public static function getIdsWhereCan($user, $permission)
protected static function getIdsWherePermission(User $user, $permission, $condition = true)
{
static $tags;
if (! $tags) {
$tags = static::all();
$tags = static::with('parent')->get();
}
$ids = [];
$hasGlobalPermission = $user->hasPermission($permission);
$canForTag = function (Tag $tag) use ($user, $permission, $hasGlobalPermission) {
return ($hasGlobalPermission && ! $tag->is_restricted) || $user->hasPermission('tag'.$tag->id.'.'.$permission);
};
foreach ($tags as $tag) {
if (($hasGlobalPermission && ! $tag->is_restricted) || $user->hasPermission('tag'.$tag->id.'.'.$permission)) {
$can = $canForTag($tag);
if ($can && $tag->parent_id) {
$can = $canForTag($tag->parent);
}
if ($can === $condition) {
$ids[] = $tag->id;
}
}
@ -144,27 +156,22 @@ class Tag extends AbstractModel
}
/**
* @param $user
* @param $permission
* @param User $user
* @param string $permission
* @return array
*/
public static function getIdsWhereCannot($user, $permission)
public static function getIdsWhereCan(User $user, $permission)
{
static $tags;
return static::getIdsWherePermission($user, $permission, true);
}
if (! $tags) {
$tags = static::all();
}
$ids = [];
$hasGlobalPermission = $user->hasPermission($permission);
foreach ($tags as $tag) {
if (($tag->is_restricted || ! $hasGlobalPermission) && ! $user->hasPermission('tag'.$tag->id.'.'.$permission)) {
$ids[] = $tag->id;
}
}
return $ids;
/**
* @param User $user
* @param string $permission
* @return array
*/
public static function getIdsWhereCannot(User $user, $permission)
{
return static::getIdsWherePermission($user, $permission, false);
}
}