看板初始化提交

2026-06-01 21:23:12 -07:00
commit 54a842f4ab
2104 changed files with 241695 additions and 0 deletions
@@ -0,0 +1,46 @@
+<?php
+
+namespace Kanboard\Api\Authorization;
+
+use JsonRPC\Exception\AccessDeniedException;
+use Kanboard\Core\Security\Role;
+
+/**
+ * Class CommentAuthorization
+ *
+ * @package Kanboard\Api\Authorization
+ * @author  Frederic Guillot
+ */
+class CommentAuthorization extends ProjectAuthorization
+{
+    public function check($class, $method, $comment_id)
+    {
+        if ($this->userSession->isLogged()) {
+            $this->checkProjectPermission($class, $method, $this->commentModel->getProjectId($comment_id));
+            $this->checkCommentAccess($comment_id);
+        }
+    }
+
+    /**
+     * @param $comment_id ID of the comment to check
+     * @return void
+     * @throws AccessDeniedException
+     */
+    protected function checkCommentAccess($comment_id)
+    {
+        if (empty($comment_id)) {
+            throw new AccessDeniedException('Comment Not Found');
+        }
+
+        $commentVisibility = $this->commentModel->getVisibility($comment_id);
+        $userRole = $this->userSession->getRole();
+
+        if ($userRole === Role::APP_MANAGER && $commentVisibility === Role::APP_ADMIN) {
+            throw new AccessDeniedException('Comment Access Denied');
+        }
+
+        if ($userRole === Role::APP_USER && $commentVisibility !== Role::APP_USER) {
+            throw new AccessDeniedException('Comment Access Denied');
+        }
+    }
+}