fs
7a222f0b1f
Fix 5 broken FQCN references (runtime errors) where core pages referenced non-existent MintyPHP\Service\Audit\AuditMetadataEnricher and SystemAuditService. Add AuditMetadataEnricherInterface with NullAuditMetadataEnricher fallback so deactivating the audit module no longer crashes core edit pages. Move audit search resources from core Search*Provider files into the module via a new AuditSearchResourceProvider implementing the existing SearchResourceProvider contract. Add module-specific purge permissions (audit.api.purge, audit.imports.purge) replacing core ABILITY_ADMIN_SETTINGS_UPDATE. Also fixes: session key prefix convention, hardcoded English string, $_SERVER superglobal fallback, and manifest schema drift (i18n_path, group in ui_slots). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
60 lines
2.3 KiB
PHP
60 lines
2.3 KiB
PHP
<?php
|
|
|
|
namespace MintyPHP\Module\Audit;
|
|
|
|
use MintyPHP\Service\Access\AuthorizationDecision;
|
|
use MintyPHP\Service\Access\AuthorizationPolicyInterface;
|
|
use MintyPHP\Service\Access\PermissionService;
|
|
|
|
final class AuditAuthorizationPolicy implements AuthorizationPolicyInterface
|
|
{
|
|
public const ABILITY_API_AUDIT_VIEW = 'audit.api.view';
|
|
public const ABILITY_API_AUDIT_PURGE = 'audit.api.purge';
|
|
public const ABILITY_SYSTEM_AUDIT_VIEW = 'audit.system.view';
|
|
public const ABILITY_SYSTEM_AUDIT_PURGE = 'audit.system.purge';
|
|
public const ABILITY_IMPORTS_AUDIT_VIEW = 'audit.imports.view';
|
|
public const ABILITY_IMPORTS_AUDIT_PURGE = 'audit.imports.purge';
|
|
public const ABILITY_USER_LIFECYCLE_VIEW = 'audit.user_lifecycle.view';
|
|
public const ABILITY_USER_LIFECYCLE_RESTORE = 'audit.user_lifecycle.restore';
|
|
|
|
private const ABILITY_PERMISSION_MAP = [
|
|
self::ABILITY_API_AUDIT_VIEW => 'api_audit.view',
|
|
self::ABILITY_API_AUDIT_PURGE => 'audit.api.purge',
|
|
self::ABILITY_SYSTEM_AUDIT_VIEW => 'system_audit.view',
|
|
self::ABILITY_SYSTEM_AUDIT_PURGE => 'system_audit.purge',
|
|
self::ABILITY_IMPORTS_AUDIT_VIEW => 'imports.audit.view',
|
|
self::ABILITY_IMPORTS_AUDIT_PURGE => 'audit.imports.purge',
|
|
self::ABILITY_USER_LIFECYCLE_VIEW => 'user_lifecycle_audit.view',
|
|
self::ABILITY_USER_LIFECYCLE_RESTORE => 'users.lifecycle_restore',
|
|
];
|
|
|
|
public function __construct(
|
|
private readonly PermissionService $permissionService
|
|
) {
|
|
}
|
|
|
|
public function supports(string $ability): bool
|
|
{
|
|
return isset(self::ABILITY_PERMISSION_MAP[$ability]);
|
|
}
|
|
|
|
public function authorize(string $ability, array $context = []): AuthorizationDecision
|
|
{
|
|
$actorUserId = (int) ($context['actor_user_id'] ?? 0);
|
|
if ($actorUserId <= 0) {
|
|
return AuthorizationDecision::deny(403, 'forbidden');
|
|
}
|
|
|
|
$permissionKey = self::ABILITY_PERMISSION_MAP[$ability] ?? null;
|
|
if ($permissionKey === null) {
|
|
return AuthorizationDecision::deny(403, 'forbidden');
|
|
}
|
|
|
|
if (!$this->permissionService->userHas($actorUserId, $permissionKey)) {
|
|
return AuthorizationDecision::deny(403, 'forbidden');
|
|
}
|
|
|
|
return AuthorizationDecision::allow();
|
|
}
|
|
}
|