Code Coverage |
||||||||||
Lines |
Functions and Methods |
Classes and Traits |
||||||||
| Total | |
0.00% |
0 / 14 |
|
0.00% |
0 / 2 |
CRAP | |
0.00% |
0 / 1 |
| RemoveUserRoleMembershipEndpoint | |
0.00% |
0 / 14 |
|
0.00% |
0 / 2 |
20 | |
0.00% |
0 / 1 |
| configure | |
0.00% |
0 / 2 |
|
0.00% |
0 / 1 |
2 | |||
| handle | |
0.00% |
0 / 12 |
|
0.00% |
0 / 1 |
12 | |||
| 1 | <?php |
| 2 | |
| 3 | namespace Olz\Roles\Endpoints; |
| 4 | |
| 5 | use Olz\Api\OlzRemoveRelationTypedEndpoint; |
| 6 | use PhpTypeScriptApi\HttpError; |
| 7 | |
| 8 | /** |
| 9 | * @phpstan-import-type OlzRoleMembershipIds from UserRoleMembershipEndpointTrait |
| 10 | * |
| 11 | * @extends OlzRemoveRelationTypedEndpoint<OlzRoleMembershipIds> |
| 12 | */ |
| 13 | class RemoveUserRoleMembershipEndpoint extends OlzRemoveRelationTypedEndpoint { |
| 14 | use UserRoleMembershipEndpointTrait; |
| 15 | |
| 16 | public function configure(): void { |
| 17 | parent::configure(); |
| 18 | $this->phpStanUtils->registerTypeImport(UserRoleMembershipEndpointTrait::class); |
| 19 | } |
| 20 | |
| 21 | protected function handle(mixed $input): mixed { |
| 22 | $role = $this->getRoleEntityById($input['ids']['roleId']); |
| 23 | $user = $this->getUserEntityById($input['ids']['userId']); |
| 24 | |
| 25 | $is_superior = $this->authUtils()->hasRoleEditPermission($input['ids']['roleId']); |
| 26 | $is_owner = $this->entityUtils()->canUpdateOlzEntity($role, null, 'roles'); |
| 27 | if (!$is_superior && !$is_owner) { |
| 28 | throw new HttpError(403, "Kein Zugriff!"); |
| 29 | } |
| 30 | |
| 31 | $role->removeUser($user); |
| 32 | $user->removeRole($role); |
| 33 | $this->entityManager()->persist($role); |
| 34 | $this->entityManager()->persist($user); |
| 35 | $this->entityManager()->flush(); |
| 36 | |
| 37 | return []; |
| 38 | } |
| 39 | } |