BlockPermissionChecker.php

Go to the documentation of this file.

<?php
 
namespace MediaWiki\Block;
 
use MediaWiki\Permissions\PermissionManager;
use MediaWiki\User\UserIdentity;
use User;
 
class BlockPermissionChecker {
    private $target;
 
    private $targetType = null;
 
    private $performer;
 
    private $permissionManager;
 
    public function __construct(
        PermissionManager $permissionManager,
        $target,
        User $performer
    ) {
        $this->permissionManager = $permissionManager;
        list( $this->target, $this->targetType ) = AbstractBlock::parseTarget( $target );
        $this->performer = $performer;
    }
 
    public function checkBlockPermissions() {
        $block = $this->performer->getBlock();
        if ( !$block ) {
            // User is not blocked, process as normal
            return true;
        }
 
        if ( !$block->isSitewide() ) {
            // T208965: Partially blocked admins should have full access
            return true;
        }
 
        if (
            $this->target instanceof UserIdentity &&
            $this->target->getId() === $this->performer->getId()
        ) {
            // Blocked admin is trying to alter their own block
 
            // Self-blocked admins can always remove or alter their block
            if ( $this->performer->blockedBy() === $this->performer->getName() ) {
                return true;
            }
 
            // Users with 'unblockself' right can unblock themselves or alter their own block
            if ( $this->permissionManager->userHasRight( $this->performer, 'unblockself' ) ) {
                return true;
            } else {
                return 'ipbnounblockself';
            }
        }
 
        if (
            $this->target instanceof UserIdentity &&
            $this->performer->blockedBy() === $this->target->getName()
        ) {
            // T150826: Blocked admins can always block the admin who blocked them
            return true;
        }
 
        // User is blocked and no exception took effect
        return 'ipbblocked';
    }
}