diff --git a/Classes/Controller/PermissionController.php b/Classes/Controller/PermissionController.php index 5c30245..d4f9836 100644 --- a/Classes/Controller/PermissionController.php +++ b/Classes/Controller/PermissionController.php @@ -18,6 +18,7 @@ namespace HOV\MaskPermissions\Controller; use Psr\Http\Message\ResponseInterface; +use TYPO3\CMS\Core\Localization\LanguageService; use TYPO3\CMS\Core\Type\ContextualFeedbackSeverity; use HOV\MaskPermissions\Permissions\MaskPermissions; use TYPO3\CMS\Backend\Template\ModuleTemplateFactory; @@ -75,6 +76,67 @@ public function updateAction(): ResponseInterface } else { $this->addFlashMessage('Update failed.', '', ContextualFeedbackSeverity::ERROR); } + return $this->redirect('index'); + } + + public function selectMasksAction(): ResponseInterface + { + $groupUid = (int)$this->request->getArgument('group'); + $group = $this->backendUserGroupRepository->findByUid($groupUid); + if (!$group) { + $this->addFlashMessage('Group not found', '', ContextualFeedbackSeverity::ERROR); + return $this->redirect('index'); + } + + $maskElements = $this->getAvailableMaskCTypes(); + $selectedMaskElements = $this->permissionUpdater->getSelectedMasks($groupUid); + + $moduleTemplate = $this->moduleTemplateFactory->create($this->request); + + if (method_exists($moduleTemplate, 'assign')) { + $moduleTemplate->assignMultiple([ + 'group' => $group, + 'maskElements' => $maskElements, + 'selectedMaskElements' => $selectedMaskElements, + ]); + } + return $moduleTemplate->renderResponse('Permission/SelectMasks'); + } + + public function saveMasksAction(): ResponseInterface + { + $groupUid = (int)$this->request->getArgument('group'); + $selected = $this->request->hasArgument('selected') ? $this->request->getArgument('selected') : []; + + $success = $this->permissionUpdater->update($groupUid, $selected); + if ($success) { + $this->addFlashMessage('MASK permissions saved.', '', ContextualFeedbackSeverity::OK); + } else { + $this->addFlashMessage('MASK permissions save failed.', '', ContextualFeedbackSeverity::ERROR); + } + return $this->redirect('index'); } + + protected function getAvailableMaskCTypes(): array + { + $maskElements = []; + $cTypes = $GLOBALS['TCA']['tt_content']['columns']['CType']['config']['items']; + foreach ($cTypes ?? [] as $type) { + $label = $type[0] ?? $type['label']; + $value = $type[1] ?? $type['value']; + if ($value !== '--div--') { + $maskElements[$value] = $this->getLanguageService()->sL($label); + } + } + $maskElements = array_filter($maskElements, function ($key) { + return strpos($key, 'mask_') === 0; + }, ARRAY_FILTER_USE_KEY); + return $maskElements; + } + + protected function getLanguageService(): LanguageService + { + return $GLOBALS['LANG']; + } } diff --git a/Classes/Permissions/MaskPermissions.php b/Classes/Permissions/MaskPermissions.php index 2962f67..7528502 100644 --- a/Classes/Permissions/MaskPermissions.php +++ b/Classes/Permissions/MaskPermissions.php @@ -47,7 +47,7 @@ public function __construct(TableDefinitionCollection $tableDefinitionCollection 'editlock' ]; - public function update(int $groupUid = 0): bool + public function update(int $groupUid = 0, array $selected = []): bool { $maskConfig = $this->getMaskConfig(); if ($maskConfig === []) { @@ -98,7 +98,7 @@ public function update(int $groupUid = 0): bool // Update explicit_allowdeny $explicitAllowDeny = $result['explicit_allowdeny'] ?? ''; $explicitAllowDeny = GeneralUtility::trimExplode(',', $explicitAllowDeny); - $explicitAllowDeny = array_merge($explicitAllowDeny, $this->getMaskExplicitAllow()); + $explicitAllowDeny = array_merge($explicitAllowDeny, $this->getMaskExplicitAllow($selected)); $explicitAllowDeny = array_unique($explicitAllowDeny); $explicitAllowDeny = implode(',', $explicitAllowDeny); @@ -230,7 +230,7 @@ protected function getMaskAdditionalTableModify(): array return $additionalTableModify; } - protected function getMaskExplicitAllow(): array + protected function getMaskExplicitAllow(array $selected = []): array { $explicitAllow = []; $allow = ''; @@ -238,7 +238,13 @@ protected function getMaskExplicitAllow(): array $allow = ':ALLOW'; } foreach ($this->tableDefinitionCollection->getTable('tt_content')->elements as $elementDefinition) { - $explicitAllow[] = 'tt_content:CType:' . AffixUtility::addMaskCTypePrefix($elementDefinition->key) . $allow; + if ($selected) { + if (in_array(AffixUtility::addMaskCTypePrefix($elementDefinition->key), $selected)) { + $explicitAllow[] = 'tt_content:CType:' . AffixUtility::addMaskCTypePrefix($elementDefinition->key) . $allow; + } + } else { + $explicitAllow[] = 'tt_content:CType:' . AffixUtility::addMaskCTypePrefix($elementDefinition->key) . $allow; + } } return $explicitAllow; } @@ -272,4 +278,34 @@ protected function getConditionForDifferentTypo3Version($column, $table, $elemen } return $fieldType === FieldType::PALETTE; } + + /** + * Get selected masks for a specific backend user group. + * + * @param int $groupId The UID of the backend user group. + * @return array An associative array of selected masks. + */ + public function getSelectedMasks($groupId): array + { + $queryBuilder = $this->getQueryBuilder('be_groups'); + $result = $queryBuilder + ->select('explicit_allowdeny') + ->from('be_groups') + ->where($queryBuilder->expr()->eq('uid', $queryBuilder->createNamedParameter($groupId, Connection::PARAM_INT))) + ->executeQuery() + ->fetchOne(); + + if ($result) { + $masks = GeneralUtility::trimExplode(',', $result); + $filteredMasks = array_filter(array_map(function ($item) { + if (strpos($item, 'mask_') !== false) { + return substr($item, strpos($item, 'mask_')); + } + return null; + }, $masks), fn($item) => !is_null($item)); + + return array_combine($filteredMasks, $filteredMasks); + } + return []; + } } diff --git a/Configuration/Backend/Modules.php b/Configuration/Backend/Modules.php index e340021..45fba8f 100644 --- a/Configuration/Backend/Modules.php +++ b/Configuration/Backend/Modules.php @@ -13,6 +13,8 @@ \HOV\MaskPermissions\Controller\PermissionController::class => [ 'index', 'update', + 'selectMasks', + 'saveMasks', ], ], ], diff --git a/Resources/Private/Partials/Form.html b/Resources/Private/Partials/Form.html index 4532302..ec1bdc7 100644 --- a/Resources/Private/Partials/Form.html +++ b/Resources/Private/Partials/Form.html @@ -22,6 +22,7 @@

Mask Permissions

+