Initial commit

custom/Espo/Modules/Advanced/Classes/Acl/BpmnFlowNode/AccessChecker.php

@@ -0,0 +1,46 @@
+<?php
+/***********************************************************************************
+ * The contents of this file are subject to the Extension License Agreement
+ * ("Agreement") which can be viewed at
+ * https://www.espocrm.com/extension-license-agreement/.
+ * By copying, installing downloading, or using this file, You have unconditionally
+ * agreed to the terms and conditions of the Agreement, and You may not use this
+ * file except in compliance with the Agreement. Under the terms of the Agreement,
+ * You shall not license, sublicense, sell, resell, rent, lease, lend, distribute,
+ * redistribute, market, publish, commercialize, or otherwise transfer rights or
+ * usage to the software or any modified version or derivative work of the software
+ * created by or for you.
+ *
+ * Copyright (C) 2015-2025 EspoCRM, Inc.
+ *
+ * License ID: 19bc86a68a7bb01f458cb391d43a9212
+ ************************************************************************************/
+
+namespace Espo\Modules\Advanced\Classes\Acl\BpmnFlowNode;
+
+use Espo\Core\Acl\AccessChecker as AccessCheckerInterface;
+use Espo\Core\Acl\AccessReadChecker;
+use Espo\Core\Acl\ScopeData;
+use Espo\Core\AclManager;
+use Espo\Entities\User;
+use Espo\Modules\Advanced\Entities\BpmnProcess;
+
+class AccessChecker implements AccessCheckerInterface, AccessReadChecker
+{
+    private AclManager $aclManager;
+
+    public function __construct(AclManager $aclManager)
+    {
+        $this->aclManager = $aclManager;
+    }
+
+    public function check(User $user, ScopeData $data): bool
+    {
+        return $this->aclManager->checkScope($user, BpmnProcess::ENTITY_TYPE);
+    }
+
+    public function checkRead(User $user, ScopeData $data): bool
+    {
+        return false;
+    }
+}

custom/Espo/Modules/Advanced/Classes/Acl/BpmnProcess/OwnershipChecker.php

@@ -0,0 +1,66 @@
+<?php
+
+namespace Espo\Modules\Advanced\Classes\Acl\BpmnProcess;
+
+use Espo\Core\Acl\DefaultOwnershipChecker;
+use Espo\Core\Acl\OwnershipOwnChecker;
+use Espo\Core\Acl\OwnershipTeamChecker;
+use Espo\Core\ORM\Entity as CoreEntity;
+use Espo\Entities\User;
+use Espo\Modules\Advanced\Entities\BpmnProcess;
+use Espo\ORM\Entity;
+use Espo\ORM\EntityManager;
+
+/**
+ * @implements OwnershipOwnChecker<BpmnProcess>
+ * @implements OwnershipTeamChecker<BpmnProcess>
+ */
+class OwnershipChecker implements OwnershipOwnChecker, OwnershipTeamChecker
+{
+    private DefaultOwnershipChecker $defaultOwnershipChecker;
+    private EntityManager $entityManager;
+
+    public function __construct(
+        DefaultOwnershipChecker $defaultOwnershipChecker,
+        EntityManager $entityManager
+    ) {
+        $this->defaultOwnershipChecker = $defaultOwnershipChecker;
+        $this->entityManager = $entityManager;
+    }
+
+    /**
+     * @param BpmnProcess $entity
+     */
+    public function checkOwn(User $user, Entity $entity): bool
+    {
+        if (!$entity->getParentProcessId() || $entity->getParentProcessId() === $entity->getId()) {
+            return $this->defaultOwnershipChecker->checkOwn($user, $entity);
+        }
+
+        $parent = $this->entityManager->getEntityById(BpmnProcess::ENTITY_TYPE, $entity->getParentProcessId());
+
+        if (!$parent instanceof CoreEntity) {
+            return false;
+        }
+
+        return $this->defaultOwnershipChecker->checkOwn($user, $parent);
+    }
+
+    /**
+     * @param BpmnProcess $entity
+     */
+    public function checkTeam(User $user, Entity $entity): bool
+    {
+        if (!$entity->getParentProcessId() || $entity->getParentProcessId() === $entity->getId()) {
+            return $this->defaultOwnershipChecker->checkTeam($user, $entity);
+        }
+
+        $parent = $this->entityManager->getEntityById(BpmnProcess::ENTITY_TYPE, $entity->getParentProcessId());
+
+        if (!$parent instanceof CoreEntity) {
+            return false;
+        }
+
+        return $this->defaultOwnershipChecker->checkTeam($user, $parent);
+    }
+}

custom/Espo/Modules/Advanced/Classes/Acl/Report/AccessChecker.php

@@ -0,0 +1,61 @@
+<?php
+/***********************************************************************************
+ * The contents of this file are subject to the Extension License Agreement
+ * ("Agreement") which can be viewed at
+ * https://www.espocrm.com/extension-license-agreement/.
+ * By copying, installing downloading, or using this file, You have unconditionally
+ * agreed to the terms and conditions of the Agreement, and You may not use this
+ * file except in compliance with the Agreement. Under the terms of the Agreement,
+ * You shall not license, sublicense, sell, resell, rent, lease, lend, distribute,
+ * redistribute, market, publish, commercialize, or otherwise transfer rights or
+ * usage to the software or any modified version or derivative work of the software
+ * created by or for you.
+ *
+ * Copyright (C) 2015-2025 EspoCRM, Inc.
+ *
+ * License ID: 19bc86a68a7bb01f458cb391d43a9212
+ ************************************************************************************/
+
+namespace Espo\Modules\Advanced\Classes\Acl\Report;
+
+use Espo\Core\Acl\AccessEntityCREDChecker;
+use Espo\Core\Acl\DefaultAccessChecker;
+use Espo\Core\Acl\ScopeData;
+use Espo\Core\Acl\Traits\DefaultAccessCheckerDependency;
+use Espo\Core\AclManager;
+use Espo\Entities\User;
+use Espo\Modules\Advanced\Entities\Report;
+use Espo\ORM\Entity;
+
+/**
+ * @implements AccessEntityCREDChecker<Report>
+ */
+class AccessChecker implements AccessEntityCREDChecker
+{
+    use DefaultAccessCheckerDependency;
+
+    private AclManager $aclManager;
+
+    public function __construct(
+        DefaultAccessChecker $defaultAccessChecker,
+        AclManager $aclManager
+    ) {
+        $this->defaultAccessChecker = $defaultAccessChecker;
+        $this->aclManager = $aclManager;
+    }
+
+    /**
+     * @param Report $entity
+     */
+    public function checkEntityRead(User $user, Entity $entity, ScopeData $data): bool
+    {
+        if (
+            $entity->getTargetEntityType() &&
+            !$this->aclManager->checkScope($user, $entity->getTargetEntityType())
+        ) {
+            return false;
+        }
+
+        return $this->defaultAccessChecker->checkEntityRead($user, $entity, $data);
+    }
+}