Differential D7751 Diff 17531 src/applications/phragment/controller/PhragmentPolicyController.php

Changeset View

Standalone View

src/applications/phragment/controller/PhragmentPolicyController.php

This file was added.

				<?php

				final class PhragmentPolicyController extends PhragmentController {

				epriestleyUnsubmitted Not Done Inline Actions Instead, we should write `PhabricatorEdgeConfig::TYPE_FILE_HAS_OBJECT` edges for these files, which guarantee visibility if you can see an object the file is attached to. These are also visible in the Files UI so it's easier to keep track of things. epriestley: Instead, we should write `PhabricatorEdgeConfig::TYPE_FILE_HAS_OBJECT` edges for these files…
				private $dblob;

				public function willProcessRequest(array $data) {
				$this->dblob = idx($data, "dblob", "");
				}

				public function processRequest() {
				$request = $this->getRequest();
				$viewer = $request->getUser();

				$parents = $this->loadParentFragments($this->dblob);
				if ($parents === null) {
				return new Aphront404Response();
				}
				$fragment = idx($parents, count($parents) - 1, null);

				$error_view = null;

				if ($request->isFormPost()) {
				$errors = array();

				$v_view_policy = $request->getStr('viewPolicy');
				$v_edit_policy = $request->getStr('editPolicy');
				$v_replace_children = $request->getBool('replacePoliciesOnChildren');
				$v_set_file_policy = $request->getBool('setFilePolicies');

				$fragment->setViewPolicy($v_view_policy);
				$fragment->setEditPolicy($v_edit_policy);

				$fragment->save();

				if ($v_set_file_policy) {
				$versions = id(new PhragmentFragmentVersionQuery())
				->setViewer($viewer)
				->withFragmentPHIDs(array($fragment->getPHID()))
				->execute();
				$file_phids = mpull($versions, 'getFilePHID');

				$files = id(new PhabricatorFileQuery())
				->setViewer($viewer)
				->withPHIDs($file_phids)
				->execute();
				foreach ($files as $file) {
				$file->setViewPolicy($v_view_policy);
				$file->save();
				}
				}

				if ($v_replace_children) {
				// If you can edit a fragment, you can forcibly set the policies
				// on child fragments, regardless of whether you can see them or not.
				$children = id(new PhragmentFragmentQuery())
				->setViewer(PhabricatorUser::getOmnipotentUser())
				->withLeadingPath($fragment->getPath().'/')
				->execute();
				$children_phids = mpull($children, 'getPHID');

				$fragment->openTransaction();
				foreach ($children as $child) {
				$child->setViewPolicy($v_view_policy);
				$child->setEditPolicy($v_edit_policy);
				$child->save();
				}
				$fragment->saveTransaction();

				if ($v_set_file_policy) {
				$versions = id(new PhragmentFragmentVersionQuery())
				->setViewer($viewer)
				->withFragmentPHIDs($children_phids)
				->execute();
				$file_phids = mpull($versions, 'getFilePHID');

				$files = id(new PhabricatorFileQuery())
				->setViewer($viewer)
				->withPHIDs($file_phids)
				->execute();
				foreach ($files as $file) {
				$file->setViewPolicy($v_view_policy);
				$file->save();
				}
				}
				}

				return id(new AphrontRedirectResponse())
				->setURI('/phragment/browse/'.$fragment->getPath());
				}

				$policies = id(new PhabricatorPolicyQuery())
				->setViewer($viewer)
				->setObject($fragment)
				->execute();

				$form = id(new AphrontFormView())
				->setUser($viewer)
				->appendChild(
				id(new AphrontFormPolicyControl())
				->setName('viewPolicy')
				->setPolicyObject($fragment)
				->setCapability(PhabricatorPolicyCapability::CAN_VIEW)
				->setPolicies($policies))
				->appendChild(
				id(new AphrontFormPolicyControl())
				->setName('editPolicy')
				->setPolicyObject($fragment)
				->setCapability(PhabricatorPolicyCapability::CAN_EDIT)
				->setPolicies($policies))
				->appendChild(
				id(new AphrontFormCheckboxControl())
				->addCheckbox(
				'replacePoliciesOnChildren',
				'true',
				pht(
				'Replace policies on child fragments with '.
				'the policies above.'))
				->addCheckbox(
				'setFilePolicies',
				'true',
				pht(
				'Replace policies on files associated with all versions '.
				'of this fragment. You must have view access to the files '.
				'to be able to set their policies.')))
				->appendChild(
				id(new AphrontFormSubmitControl())
				->setValue(pht('Save Fragment Policies'))
				->addCancelButton(
				$this->getApplicationURI('browse/'.$fragment->getPath())));

				$crumbs = $this->buildApplicationCrumbsWithPath($parents);
				$crumbs->addCrumb(
				id(new PhabricatorCrumbView())
				->setName(pht('Edit Fragment Policies')));

				$box = id(new PHUIObjectBoxView())
				->setHeaderText(pht('Edit Fragment Policies: %s', $fragment->getPath()))
				->setValidationException(null)
				->setForm($form);

				return $this->buildApplicationPage(
				array(
				$crumbs,
				$box),
				array(
				'title' => pht('Edit Fragment Policies'),
				'device' => true));
				}

				}