From e9b699f0d02348e559327d3b751beb0dca655b9d Mon Sep 17 00:00:00 2001
From: Fabien Potencier <fabien@potencier.org>
Date: Sun, 13 Feb 2022 09:42:20 +0100
Subject: [PATCH] Add 26.4: Restricting Comments exposed by the API

---
 .../FilterPublishedCommentQueryExtension.php  | 26 +++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 src/Api/FilterPublishedCommentQueryExtension.php

diff --git a/src/Api/FilterPublishedCommentQueryExtension.php b/src/Api/FilterPublishedCommentQueryExtension.php
new file mode 100644
index 0000000..ff34d74
--- /dev/null
+++ b/src/Api/FilterPublishedCommentQueryExtension.php
@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Api;
+
+use ApiPlatform\Core\Bridge\Doctrine\Orm\Extension\QueryCollectionExtensionInterface;
+use ApiPlatform\Core\Bridge\Doctrine\Orm\Extension\QueryItemExtensionInterface;
+use ApiPlatform\Core\Bridge\Doctrine\Orm\Util\QueryNameGeneratorInterface;
+use App\Entity\Comment;
+use Doctrine\ORM\QueryBuilder;
+
+class FilterPublishedCommentQueryExtension implements QueryCollectionExtensionInterface, QueryItemExtensionInterface
+{
+    public function applyToCollection(QueryBuilder $qb, QueryNameGeneratorInterface $queryNameGenerator, string $resourceClass, string $operationName = null)
+    {
+        if (Comment::class === $resourceClass) {
+            $qb->andWhere(sprintf("%s.state = 'published'", $qb->getRootAliases()[0]));
+        }
+    }
+
+    public function applyToItem(QueryBuilder $qb, QueryNameGeneratorInterface $queryNameGenerator, string $resourceClass, array $identifiers, string $operationName = null, array $context = [])
+    {
+        if (Comment::class === $resourceClass) {
+            $qb->andWhere(sprintf("%s.state = 'published'", $qb->getRootAliases()[0]));
+        }
+    }
+}