AuthorizationConstraint.php

Go to the documentation of this file.

<?php
namespace MediaWiki\EditPage\Constraint;
 
use MediaWiki\EditPage\EditPageStatus;
use MediaWiki\Page\PageIdentity;
use MediaWiki\Permissions\Authority;
use MediaWiki\Permissions\PermissionStatus;
 
class AuthorizationConstraint extends EditConstraint {
 
    public function __construct(
        private readonly Authority $performer,
        private readonly PageIdentity $target,
        private readonly bool $new,
    ) {
    }
 
    public function checkConstraint(): EditPageStatus {
        $status = PermissionStatus::newEmpty();
 
        if ( $this->new && !$this->performer->authorizeWrite( 'create', $this->target, $status ) ) {
            return $this->castPermissionStatus( $status );
        }
 
        if ( !$this->performer->authorizeWrite( 'edit', $this->target, $status ) ) {
            return $this->castPermissionStatus( $status );
        }
 
        return $this->castPermissionStatus( $status );
    }
 
    private function castPermissionStatus( PermissionStatus $status ): EditPageStatus {
        if ( $status->isGood() ) {
            return EditPageStatus::cast( $status );
        }
 
        // Report the most specific errors first
        if ( $status->isBlocked() ) {
            $value = self::AS_BLOCKED_PAGE_FOR_USER;
        } elseif ( $status->isRateLimitExceeded() ) {
            $value = self::AS_RATE_LIMITED;
        } elseif ( $status->getPermission() === 'create' ) {
            $value = self::AS_NO_CREATE_PERMISSION;
        } elseif ( !$this->performer->isRegistered() ) {
            $value = self::AS_READ_ONLY_PAGE_ANON;
        } else {
            $value = self::AS_READ_ONLY_PAGE_LOGGED;
        }
 
        return EditPageStatus::cast( $status )
            ->setErrorFunction( $status->throwErrorPageError( ... ) )
            ->setResult( false, $value );
    }
 
}