NonPublicResourceProtector.php

Go to the documentation of this file.

<?php
 
namespace Drupal\dkan_non_public\Plugin\DataModifier;
 
use Drupal\Core\Database\Connection;
use Drupal\Core\Plugin\ContainerFactoryPluginInterface;
use Drupal\Core\Routing\RouteMatchInterface;
use Drupal\dkan_common\Plugin\DataModifierBase;
use Symfony\Component\DependencyInjection\ContainerInterface;
 
class NonPublicResourceProtector extends DataModifierBase implements ContainerFactoryPluginInterface {
 
  private $schemasToModify = [
    'dataset',
    'distribution',
  ];
 
  private $routeMatch;
 
  private $database;
 
  public function __construct(array $configuration, $plugin_id, $plugin_definition, Connection $database, RouteMatchInterface $routeMatch) {
    parent::__construct($configuration, $plugin_id, $plugin_definition);
    $this->configuration = $configuration;
    $this->pluginId = $plugin_id;
    $this->pluginDefinition = $plugin_definition;
    $this->database = $database;
    $this->routeMatch = $routeMatch;
  }
 
  public static function create(ContainerInterface $container, array $configuration, $plugin_id, $plugin_definition) {
    return new static(
      $configuration,
      $plugin_id,
      $plugin_definition,
      $container->get('database'),
      $container->get('current_route_match')
    );
  }
 
  public function requiresModification(string $schema, $data) {
    return in_array($schema, $this->schemasToModify)
      && !$this->alternateEndpoint()
      && $this->accessLevel($schema, $data) === 'non-public';
  }
 
  private function alternateEndpoint() {
    $routeName = $this->routeMatch->getRouteName();
    return strpos($routeName, 'dkan_alt_api.') === 0;
  }
 
  private function accessLevel(string $schema, $data) : string {
    // For distributions, check their parent dataset's access level.
    if ('distribution' === $schema) {
      return $this->parentDatasetAccessLevel($data);
    }
    return $this->datasetAccessLevel($data);
  }
 
  private function datasetAccessLevel($data) {
    if (is_string($data)) {
      $data = json_decode($data);
    }
    return $data->accessLevel;
  }
 
  private function parentDatasetAccessLevel($dist) {
    $identifier = $this->getIdentifier($dist);
    $parentDataset = $this->getParentDataset($identifier);
    return $this->datasetAccessLevel($parentDataset);
  }
 
  private function getIdentifier($dist) : string {
    if (is_string($dist)) {
      if ($decoded = json_decode($dist)) {
        $dist = $decoded;
      }
      else {
        return $dist;
      }
    }
    return $dist->identifier;
  }
 
  private function getParentDataset($identifier) {
    $datasets = $this->database->select('node__field_json_metadata', 'm')
      ->condition('m.field_json_metadata_value', '%accessLevel%', 'LIKE')
      ->condition('m.field_json_metadata_value', "%{$identifier}%", 'LIKE')
      ->fields('m', ['field_json_metadata_value'])
      ->execute()
      ->fetchCol();
 
    return reset($datasets);
  }
 
  public function modify(string $schema, $data) {
    if ('distribution' === $schema) {
      return $this->protectDistribution($data);
    }
    return $this->protectDataset($data);
  }
 
  private function protectDataset($dataset) {
    if (is_string($dataset)) {
      $datasetObj = json_decode($dataset);
      $datasetObj = $this->protectDatasetObject($datasetObj);
      return json_encode($datasetObj);
    }
    return $this->protectDatasetObject($dataset);
  }
 
  private function protectDatasetObject($dataset) {
    if (isset($dataset->distribution) && is_array($dataset->distribution)) {
      foreach ($dataset->distribution as $key => &$dist) {
        $dataset->distribution[$key] = $this->protectDistributionObject($dist);
      }
    }
    return $dataset;
  }
 
  private function protectDistribution($dist) {
    if (is_string($dist)) {
      $distObj = json_decode($dist);
      $distObj = $this->protectDistributionObject($distObj);
      return json_encode($distObj);
    }
    return $this->protectDistributionObject($dist);
  }
 
  private function protectDistributionObject($dist) {
    unset($dist);
    return (object) ['title' => $this->message()];
  }
 
}