vendor/sulu/sulu/src/Sulu/Bundle/WebsiteBundle/EventListener/SecurityListener.php line 46

Open in your IDE?
  1. <?php
  3. /*
  4. * This file is part of Sulu.
  5. *
  6. * (c) Sulu GmbH
  7. *
  8. * This source file is subject to the MIT license that is bundled
  9. * with this source code in the file LICENSE.
  10. */
  12. namespace Sulu\Bundle\WebsiteBundle\EventListener;
  14. use Sulu\Bundle\PageBundle\Document\BasePageDocument;
  15. use Sulu\Component\Content\Compat\Structure\PageBridge;
  16. use Sulu\Component\Security\Authorization\PermissionTypes;
  17. use Sulu\Component\Security\Authorization\SecurityCheckerInterface;
  18. use Sulu\Component\Security\Authorization\SecurityCondition;
  19. use Sulu\Component\Webspace\Analyzer\Attributes\RequestAttributes;
  20. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  21. use Symfony\Component\HttpKernel\Event\RequestEvent;
  22. use Symfony\Component\HttpKernel\KernelEvents;
  24. class SecurityListener implements EventSubscriberInterface
  25. {
  26. /**
  27. * @var SecurityCheckerInterface|null
  28. */
  29. private $securityChecker;
  31. public function __construct(
  32. ?SecurityCheckerInterface $securityChecker = null
  33. ) {
  34. $this->securityChecker = $securityChecker;
  35. }
  37. public static function getSubscribedEvents(): array
  38. {
  39. return [
  40. KernelEvents::REQUEST => [
  41. ['onKernelRequest', 7], // set the security listener after the firewall and after the routing listener
  42. ],
  43. ];
  44. }
  46. public function onKernelRequest(RequestEvent $event): void
  47. {
  48. $request = $event->getRequest();
  50. if (null === $this->securityChecker) {
  51. return;
  52. }
  54. $requestAttributes = $request->attributes->get('_sulu');
  55. if (!$requestAttributes instanceof RequestAttributes) {
  56. return;
  57. }
  59. $webspace = $requestAttributes->getAttribute('webspace');
  61. $structure = $request->attributes->get('structure');
  62. if (!$structure instanceof PageBridge) {
  63. return;
  64. }
  66. $document = $structure->getDocument();
  67. if (!$document instanceof BasePageDocument) {
  68. return;
  69. }
  71. if ($webspace->hasWebsiteSecurity()) {
  72. $this->securityChecker->checkPermission(
  73. new SecurityCondition(
  74. 'sulu.webspaces.' . $document->getWebspaceName(),
  75. $document->getLocale(),
  76. \get_class($document),
  77. $document->getUuid()
  78. ),
  79. PermissionTypes::VIEW
  80. );
  81. }
  82. }
  83. }