[Bug]: Check if User is allowed to create a class when pasting (#691)

kingjia90 · web-flow · commit 8136685feddc · 2024-09-20T11:20:36.000+02:00
* draft: check if is allowed to create a class

* fix condition, otherwise blocks folders
diff --git a/src/Controller/Admin/DataObject/DataObjectController.php b/src/Controller/Admin/DataObject/DataObjectController.php
@@ -1880,7 +1880,8 @@ public function copyAction(Request $request): JsonResponse
             $target = DataObject::getById($targetId);
         }
 
-        if ($target->isAllowed('create')) {
+        $user = Tool\Admin::getCurrentUser();
+        if ($target->isAllowed('create') && ($source instanceof DataObject\Concrete ? $user->isAllowed($source->getClassId(), 'class') : true)) {
             $source = DataObject::getById($sourceId);
             if ($source != null) {
                 if ($source instanceof DataObject\Concrete && $latestVersion = $source->getLatestVersion()) {

Original file line number	Diff line number	Diff line change
`@@ -1880,7 +1880,8 @@ public function copyAction(Request $request): JsonResponse`
`1880`	`1880`	`$target = DataObject::getById($targetId);`
`1881`	`1881`	`}`
`1882`	`1882`
`1883`		`- if ($target->isAllowed('create')) {`
	`1883`	`+ $user = Tool\Admin::getCurrentUser();`
	`1884`	`+ if ($target->isAllowed('create') && ($source instanceof DataObject\Concrete ? $user->isAllowed($source->getClassId(), 'class') : true)) {`
`1884`	`1885`	`$source = DataObject::getById($sourceId);`
`1885`	`1886`	`if ($source != null) {`
`1886`	`1887`	`if ($source instanceof DataObject\Concrete && $latestVersion = $source->getLatestVersion()) {`