3 +--------------------------------------------------------------------+
5 +--------------------------------------------------------------------+
6 | Copyright CiviCRM LLC (c) 2004-2020 |
7 +--------------------------------------------------------------------+
8 | This file is a part of CiviCRM. |
10 | CiviCRM is free software; you can copy, modify, and distribute it |
11 | under the terms of the GNU Affero General Public License |
12 | Version 3, 19 November 2007 and the CiviCRM Licensing Exception. |
14 | CiviCRM is distributed in the hope that it will be useful, but |
15 | WITHOUT ANY WARRANTY; without even the implied warranty of |
16 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. |
17 | See the GNU Affero General Public License for more details. |
19 | You should have received a copy of the GNU Affero General Public |
20 | License and the CiviCRM Licensing Exception along |
21 | with this program; if not, contact CiviCRM LLC |
22 | at info[AT]civicrm[DOT]org. If you have questions about the |
23 | GNU Affero General Public License or the licensing of CiviCRM, |
24 | see the CiviCRM license FAQ at http://civicrm.org/licensing |
25 +--------------------------------------------------------------------+
31 * @copyright CiviCRM LLC https://civicrm.org/licensing
39 class CRM_Core_Permission_Drupal8
extends CRM_Core_Permission_DrupalBase
{
42 * Given a permission string, check for access requirements
45 * The permission to check.
51 public function check($str, $userId = NULL) {
52 $str = $this->translatePermission($str, 'Drupal', [
53 'view user account' => 'access user profiles',
56 if ($str == CRM_Core_Permission
::ALWAYS_DENY_PERMISSION
) {
59 if ($str == CRM_Core_Permission
::ALWAYS_ALLOW_PERMISSION
) {
62 $acct = $userId ? \Drupal\user\Entity\User
::load($userId) : \Drupal
::currentUser();
63 return $acct->hasPermission($str);
67 * Get all the contact emails for users that have a specific permission.
69 * @param string $permissionName
70 * Name of the permission we are interested in.
73 * a comma separated list of email addresses
75 public function permissionEmails($permissionName) {
78 if (isset($_cache[$permissionName])) {
79 return $_cache[$permissionName];
82 $role_ids = array_map(
83 function (\Drupal\user\RoleInterface
$role) {
85 }, user_roles(TRUE, $permissionName)
87 $users = \Drupal
::entityTypeManager()->getStorage('user')->loadByProperties(['roles' => $role_ids]);
88 $uids = array_keys($users);
90 $_cache[$permissionName] = self
::getContactEmails($uids);
91 return $_cache[$permissionName];
97 public function upgradePermissions($permissions) {
98 $civicrm_perms = array_keys(CRM_Core_Permission
::getCorePermissions());
99 if (empty($civicrm_perms)) {
100 throw new CRM_Core_Exception("Cannot upgrade permissions: permission list missing");
103 $roles = user_roles(TRUE);
104 foreach ($roles as $role) {
105 foreach ($civicrm_perms as $permission) {
106 $role->revokePermission($permission);