tao-test/app/taoItems/migrations/Version202108030710512141_taoItems.php

76 lines
2.5 KiB
PHP
Raw Normal View History

2022-08-29 20:14:13 +02:00
<?php
/**
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation; under version 2
* of the License (non-upgradable).
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
*
* Copyright (c) 2021 (original work) Open Assessment Technologies SA;
*/
declare(strict_types=1);
namespace oat\taoItems\migrations;
use Doctrine\DBAL\Schema\Schema;
use oat\taoItems\model\user\TaoItemsRoles;
use oat\tao\scripts\update\OntologyUpdater;
use oat\tao\scripts\tools\migrations\AbstractMigration;
use oat\tao\scripts\tools\accessControl\SetRolesAccess;
final class Version202108030710512141_taoItems extends AbstractMigration
{
private const CONFIG = [
SetRolesAccess::CONFIG_RULES => [
TaoItemsRoles::ITEM_IMPORTER => [
['ext' => 'taoItems', 'mod' => 'ItemImport', 'act' => 'index'],
],
TaoItemsRoles::ITEM_DELETER => [
['ext' => 'taoItems', 'mod' => 'Items', 'act' => 'deleteItem'],
['ext' => 'taoItems', 'mod' => 'Items', 'act' => 'moveInstance'],
],
TaoItemsRoles::ITEM_CONTENT_CREATOR => [
['ext' => 'taoItems', 'mod' => 'ItemContent', 'act' => 'fileExists'],
['ext' => 'taoItems', 'mod' => 'ItemContent', 'act' => 'upload'],
],
],
];
public function getDescription(): string
{
return 'Configure permissions for Item Importer, Deleter and content creator role';
}
public function up(Schema $schema): void
{
OntologyUpdater::syncModels();
$setRolesAccess = $this->propagate(new SetRolesAccess());
$setRolesAccess(
[
'--' . SetRolesAccess::OPTION_CONFIG,
self::CONFIG,
]
);
}
public function down(Schema $schema): void
{
$setRolesAccess = $this->propagate(new SetRolesAccess());
$setRolesAccess([
'--' . SetRolesAccess::OPTION_REVOKE,
'--' . SetRolesAccess::OPTION_CONFIG, self::CONFIG,
]);
}
}