wiki.techinc.nl/includes/api/ApiQueryBlockInfoTrait.php
Cindy Cicalese f6e1891c6f Use Authority and GroupPermissionLookup in Action API
Replaces calls directly to PermissionManager with calls to
the Authority object available from Context or the
GroupPermissionLookup service.

This patch does not address use of PermissionManager for
blocks.

Deprecations:
- ApiBase::checkUserRightsAny deprecated passing optional
User parameter
- ApiBase::checkTitleUserPermissions deprecated passing
LinkTarget as first parameter, takes PageIdentity instead

Bug: T271462
Bug: T271854
Change-Id: I5d7cac1c28a37e074750c46cda03283980a07fca
2021-02-23 14:31:14 +00:00

110 lines
2.8 KiB
PHP

<?php
/**
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License along
* with this program; if not, write to the Free Software Foundation, Inc.,
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
* http://www.gnu.org/copyleft/gpl.html
*
* @file
*/
use MediaWiki\Block\DatabaseBlock;
use MediaWiki\Permissions\Authority;
use Wikimedia\Rdbms\IDatabase;
/**
* @ingroup API
*/
trait ApiQueryBlockInfoTrait {
use ApiBlockInfoTrait;
/**
* Filters hidden users (where the user doesn't have the right to view them)
* Also adds relevant block information
*
* @param bool $showBlockInfo
* @return void
*/
private function addBlockInfoToQuery( $showBlockInfo ) {
$db = $this->getDB();
if ( $showBlockInfo ) {
$queryInfo = DatabaseBlock::getQueryInfo();
} else {
$queryInfo = [
'tables' => [ 'ipblocks' ],
'fields' => [ 'ipb_deleted' ],
'joins' => [],
];
}
$this->addTables( [ 'blk' => $queryInfo['tables'] ] );
$this->addFields( $queryInfo['fields'] );
$this->addJoinConds( $queryInfo['joins'] );
$this->addJoinConds( [
'blk' => [ 'LEFT JOIN', [
'ipb_user=user_id',
'ipb_expiry > ' . $db->addQuotes( $db->timestamp() ),
] ],
] );
// Don't show hidden names
if ( !$this->getAuthority()->isAllowed( 'hideuser' ) ) {
$this->addWhere( 'ipb_deleted = 0 OR ipb_deleted IS NULL' );
}
}
/***************************************************************************/
// region Methods required from ApiQueryBase
/** @name Methods required from ApiQueryBase */
/**
* @see ApiBase::getDB
* @return IDatabase
*/
abstract protected function getDB();
/**
* @see IContextSource::getAuthority
* @return Authority
*/
abstract public function getAuthority();
/**
* @see ApiQueryBase::addTables
* @param string|array $tables
* @param string|null $alias
*/
abstract protected function addTables( $tables, $alias = null );
/**
* @see ApiQueryBase::addFields
* @param array|string $fields
*/
abstract protected function addFields( $fields );
/**
* @see ApiQueryBase::addWhere
* @param string|array $conds
*/
abstract protected function addWhere( $conds );
/**
* @see ApiQueryBase::addJoinConds
* @param array $conds
*/
abstract protected function addJoinConds( $conds );
// endregion -- end of methods required from ApiQueryBase
}