80 lines
2.7 KiB
PHP
80 lines
2.7 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
/**
|
||
|
|
* This program is free software; you can redistribute it and/or
|
||
|
|
* modify it under the terms of the GNU General Public License
|
||
|
|
* as published by the Free Software Foundation; under version 2
|
||
|
|
* of the License (non-upgradable).
|
||
|
|
*
|
||
|
|
* This program is distributed in the hope that it will be useful,
|
||
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||
|
|
* GNU General Public License for more details.
|
||
|
|
*
|
||
|
|
* You should have received a copy of the GNU General Public License
|
||
|
|
* along with this program; if not, write to the Free Software
|
||
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
||
|
|
*
|
||
|
|
* Copyright (c) 2021 (original work) Open Assessment Technologies SA;
|
||
|
|
*/
|
||
|
|
|
||
|
|
declare(strict_types=1);
|
||
|
|
|
||
|
|
namespace oat\taoItems\migrations;
|
||
|
|
|
||
|
|
use taoItems_actions_Items;
|
||
|
|
use Doctrine\DBAL\Schema\Schema;
|
||
|
|
use oat\taoItems\model\user\TaoItemsRoles;
|
||
|
|
use oat\tao\scripts\update\OntologyUpdater;
|
||
|
|
use oat\tao\model\accessControl\ActionAccessControl;
|
||
|
|
use oat\tao\scripts\tools\migrations\AbstractMigration;
|
||
|
|
use oat\tao\scripts\tools\accessControl\SetRolesAccess;
|
||
|
|
|
||
|
|
final class Version202104130808062141_taoItems extends AbstractMigration
|
||
|
|
{
|
||
|
|
private const CONFIG = [
|
||
|
|
SetRolesAccess::CONFIG_RULES => [
|
||
|
|
TaoItemsRoles::ITEM_CLASS_NAVIGATOR => [
|
||
|
|
['ext' => 'taoItems', 'mod' => 'Items', 'act' => 'editClassLabel'],
|
||
|
|
['ext' => 'taoItems', 'mod' => 'Items', 'act' => 'getOntologyData'],
|
||
|
|
['ext' => 'taoItems', 'mod' => 'Items', 'act' => 'index'],
|
||
|
|
],
|
||
|
|
TaoItemsRoles::ITEM_CLASS_CREATOR => [
|
||
|
|
['ext' => 'taoItems', 'mod' => 'Items', 'act' => 'addSubClass'],
|
||
|
|
],
|
||
|
|
],
|
||
|
|
SetRolesAccess::CONFIG_PERMISSIONS => [
|
||
|
|
taoItems_actions_Items::class => [
|
||
|
|
'editClassLabel' => [
|
||
|
|
TaoItemsRoles::ITEM_CLASS_NAVIGATOR => ActionAccessControl::READ,
|
||
|
|
TaoItemsRoles::ITEM_CLASS_EDITOR => ActionAccessControl::WRITE,
|
||
|
|
],
|
||
|
|
],
|
||
|
|
],
|
||
|
|
];
|
||
|
|
|
||
|
|
public function getDescription(): string
|
||
|
|
{
|
||
|
|
return 'Create new item class roles and assign permissions to them';
|
||
|
|
}
|
||
|
|
|
||
|
|
public function up(Schema $schema): void
|
||
|
|
{
|
||
|
|
OntologyUpdater::syncModels();
|
||
|
|
|
||
|
|
$setRolesAccess = $this->propagate(new SetRolesAccess());
|
||
|
|
$setRolesAccess([
|
||
|
|
'--' . SetRolesAccess::OPTION_CONFIG, self::CONFIG,
|
||
|
|
]);
|
||
|
|
}
|
||
|
|
|
||
|
|
public function down(Schema $schema): void
|
||
|
|
{
|
||
|
|
$setRolesAccess = $this->propagate(new SetRolesAccess());
|
||
|
|
$setRolesAccess([
|
||
|
|
'--' . SetRolesAccess::OPTION_REVOKE,
|
||
|
|
'--' . SetRolesAccess::OPTION_CONFIG, self::CONFIG,
|
||
|
|
]);
|
||
|
|
}
|
||
|
|
}
|