Code Coverage |
||||||||||
Lines |
Functions and Methods |
Classes and Traits |
||||||||
| Total | |
0.00% |
0 / 12 |
|
0.00% |
0 / 1 |
CRAP | |
0.00% |
0 / 1 |
| AddUserRoleMembershipEndpoint | |
0.00% |
0 / 12 |
|
0.00% |
0 / 1 |
12 | |
0.00% |
0 / 1 |
| handle | |
0.00% |
0 / 12 |
|
0.00% |
0 / 1 |
12 | |||
| 1 | <?php |
| 2 | |
| 3 | namespace Olz\Roles\Endpoints; |
| 4 | |
| 5 | use Olz\Api\OlzAddRelationTypedEndpoint; |
| 6 | use PhpTypeScriptApi\HttpError; |
| 7 | |
| 8 | /** |
| 9 | * @phpstan-import-type OlzRoleMembershipIds from UserRoleMembershipEndpointTrait |
| 10 | * |
| 11 | * @extends OlzAddRelationTypedEndpoint<OlzRoleMembershipIds> |
| 12 | */ |
| 13 | class AddUserRoleMembershipEndpoint extends OlzAddRelationTypedEndpoint { |
| 14 | use UserRoleMembershipEndpointTrait; |
| 15 | |
| 16 | protected function handle(mixed $input): mixed { |
| 17 | $role = $this->getRoleEntityById($input['ids']['roleId']); |
| 18 | $user = $this->getUserEntityById($input['ids']['userId']); |
| 19 | |
| 20 | $is_superior = $this->authUtils()->hasRoleEditPermission($input['ids']['roleId']); |
| 21 | $is_owner = $this->entityUtils()->canUpdateOlzEntity($role, null, 'roles'); |
| 22 | if (!$is_superior && !$is_owner) { |
| 23 | throw new HttpError(403, "Kein Zugriff!"); |
| 24 | } |
| 25 | |
| 26 | $role->addUser($user); |
| 27 | $user->addRole($role); |
| 28 | $this->entityManager()->persist($role); |
| 29 | $this->entityManager()->persist($user); |
| 30 | $this->entityManager()->flush(); |
| 31 | |
| 32 | return []; |
| 33 | } |
| 34 | } |