KMP PHP API Reference

DataConsoleController extends PlatformAdminAppController
in package

Application

Base controller for the isolated platform admin portal.

Constants

MOBILE_QUEUE_DEFAULT_PER_PAGE : int = 25
MOBILE_QUEUE_MAX_PER_PAGE : int = 50
VIEW_DATA_EVENT : string = 'KMP.plugins.callForViewData'
VIEW_PLUGIN_EVENT : string = 'KMP.plugins.callForViewCells'

Properties

$isCsvRequest : bool
$platformAdmin : array<string, mixed>|null
$pluginViewCells : array<string|int, mixed>
$pluginViewCellsEnabledForFragment : bool: Whether an intentionally fragment-style response still needs plugin view cells.

Methods

beforeFilter() : Response|null|void: Enforce fail-closed portal feature flag and platform-admin session auth.
beforeRender() : Response|null|void: Finalize view-only data after the action has run.
index() : void: Render an allowlisted, read-only platform data inspection surface.
initialize() : void: Load shared components: Authentication, Authorization, Flash.
isCsvRequest() : bool: Check if current request is for CSV export.
switchView() : Response: Switch between mobile and desktop view modes.
appSettingImageDataUri() : string|null: Resolve shared tenant branding for the online and cached mobile templates.
assertDeletableBackup() : void: Validate that a managed archive can be removed without interrupting active work.
assertSafeContextUrl() : string: Ensure URL is same-origin relative path + query only.
assertUsableBackup() : void: Validate completed encrypted backup metadata before a guarded action.
authorizeCurrentUrl() : void: Authorize the current URL/action via Authorization component.
backupPolicyRetentionDays() : int: Retention days from the global backup policy, with a safe fallback.
buildGridDataUrlFromPageContext() : string: Build grid-data URL preserving query string from page context.
consumeFlashForStream() : array<string, mixed>: Read flash from session and clear it for stream rendering.
enablePluginViewCellsForFragment() : void: Include route-matched plugin cells in an AJAX or other fragment response.
exportPlatformBackupRecoveryKey() : array{filename: string, content: string}: Export a platform database backup recovery-key package.
exportTenantBackupRecoveryKey() : array{filename: string, content: string}: Export a tenant backup recovery-key package.
getPageContextUrl() : string|null: Posted page context URL (path + query), validated.
isGridOriginRequest() : bool: Whether POST originated from a grid index (stay on list).
isLocked() : bool: Check whether a platform user lockout timestamp is still active.
matchesGridIndexPath() : bool: Whether page context path matches a grid index route pattern.
mobileQueuePagination() : array<string, int|bool>: Build shared pagination values for mobile actionable queues.
mobileQueuePaginationPayload() : array<string, int|bool>: Remove internal pagination values before sending the mobile JSON payload.
organizeViewCells() : array<string|int, mixed>: Organize view cells by type and display order.
platform() : Connection: Return the platform metadata connection.
recoveryKeyDownloadResponse() : Response: Return a recovery-key attachment that browsers and intermediary caches must not retain.
renderDataverseTableRowElement() : string: Render a single Dataverse grid row element (Turbo Stream replace target HTML).
renderTurboCloseModal() : Response: Render turbo-stream: flash + replace table frame with lazy reload src.
renderTurboFlashOnly() : Response: Render turbo-stream flash messages without forcing a grid or frame reload.
renderTurboReloadFrame() : Response: Stream that reloads an edit turbo-frame (validation errors).
renderTurboRemoveGridRow() : Response: Render turbo-stream: flash + remove a grid row (no longer matches current filters).
renderTurboReplaceGridRow() : Response: Render turbo-stream: flash + replace a single grid row by DOM id.
stageBackupDownload() : array{path: string, filename: string}: Stage and verify a backup for a streaming file response.
statusIsAllowed() : bool: Check whether a platform user status is allowed for authenticated access.
validateStepUpAction() : string: Validate typed confirmation, reason, and TOTP step-up for sensitive admin actions.
wantsTurboStreamRequest() : bool: Whether the client expects a turbo-stream response.
withPageContextQuery() : T: Run a callback with query params from the posted page context URL.
auditDataConsoleAccess() : void: Best-effort audit trail for each successful data console query.

MOBILE_QUEUE_DEFAULT_PER_PAGE


    public
        int
    MOBILE_QUEUE_DEFAULT_PER_PAGE
    = 25

Shared default page size for mobile actionable queues.

MOBILE_QUEUE_MAX_PER_PAGE


    public
        int
    MOBILE_QUEUE_MAX_PER_PAGE
    = 50

Shared maximum page size for mobile actionable queues.

VIEW_DATA_EVENT


    public
        string
    VIEW_DATA_EVENT
    = 'KMP.plugins.callForViewData'

Event for plugin view data enhancement

VIEW_PLUGIN_EVENT


    public
        string
    VIEW_PLUGIN_EVENT
    = 'KMP.plugins.callForViewCells'

Event for plugin view cell registration

$isCsvRequest


        protected
            bool
    $isCsvRequest
     = false

Whether current request is for CSV export (.csv extension)

$platformAdmin


        protected
            array<string, mixed>|null
    $platformAdmin
     = null

Authenticated platform admin context.

$pluginViewCells


        protected
            array<string|int, mixed>
    $pluginViewCells
     = []

View cells from plugins for current request

$pluginViewCellsEnabledForFragment

Whether an intentionally fragment-style response still needs plugin view cells.


        protected
            bool
    $pluginViewCellsEnabledForFragment
     = false

beforeFilter()

Enforce fail-closed portal feature flag and platform-admin session auth.


    public
                    beforeFilter(EventInterface $event) : Response|null|void

Parameters

$event : EventInterface: The beforeFilter event

Return values

Response|null|void

beforeRender()

Finalize view-only data after the action has run.


    public
                    beforeRender(EventInterface<string|int, Controller> $event) : Response|null|void

Deferring view cells prevents redirect-only requests from executing badge callbacks.

Parameters

$event : EventInterface<string|int, Controller>: Event.

Return values

Response|null|void

index()

Render an allowlisted, read-only platform data inspection surface.


    public
                    index() : void

initialize()

Load shared components: Authentication, Authorization, Flash.


    public
                    initialize() : void

isCsvRequest()

Check if current request is for CSV export.


    public
                    isCsvRequest() : bool

Return values

bool

switchView()

Switch between mobile and desktop view modes.


    public
                    switchView() : Response

Stores preference in session and redirects to appropriate interface. Mobile redirects to viewMobileCard, desktop to profile.

Return values

Response —

Redirect response

appSettingImageDataUri()

Resolve shared tenant branding for the online and cached mobile templates.


    protected
                    appSettingImageDataUri(string $settingName) : string|null

Parameters

$settingName : string

Return values

string|null

assertDeletableBackup()

Validate that a managed archive can be removed without interrupting active work.


    protected
                    assertDeletableBackup(array<string, mixed> $backup[, array<int, string> $allowedTypes = [TenantBackupService::BACKUP_TYPE, TenantBackupService::LEGACY_BACKUP_TYPE, 'pg_dump'] ]) : void

Parameters

$backup : array<string, mixed>
$allowedTypes : array<int, string> = [TenantBackupService::BACKUP_TYPE, TenantBackupService::LEGACY_BACKUP_TYPE, 'pg_dump']

assertSafeContextUrl()

Ensure URL is same-origin relative path + query only.


    protected
                    assertSafeContextUrl(string $url) : string

Parameters

$url : string

Return values

string

assertUsableBackup()

Validate completed encrypted backup metadata before a guarded action.


    protected
                    assertUsableBackup(array<string, mixed> $backup[, array<int, string> $allowedTypes = [TenantBackupService::BACKUP_TYPE, 'pg_dump'] ]) : void

Parameters

$backup : array<string, mixed>
$allowedTypes : array<int, string> = [TenantBackupService::BACKUP_TYPE, 'pg_dump']

authorizeCurrentUrl()

Authorize the current URL/action via Authorization component.


    protected
                    authorizeCurrentUrl() : void

backupPolicyRetentionDays()

Retention days from the global backup policy, with a safe fallback.


    protected
                    backupPolicyRetentionDays() : int

Return values

int

buildGridDataUrlFromPageContext()

Build grid-data URL preserving query string from page context.


    protected
                    buildGridDataUrlFromPageContext(string|null $pageContextUrl, array<string, mixed> $gridDataRoute) : string

Parameters

$pageContextUrl : string|null
$gridDataRoute : array<string, mixed>: Cake URL array for gridData action

Return values

string

consumeFlashForStream()

Read flash from session and clear it for stream rendering.


    protected
                    consumeFlashForStream() : array<string, mixed>

Return values

array<string, mixed>

enablePluginViewCellsForFragment()

Include route-matched plugin cells in an AJAX or other fragment response.


    protected
                    enablePluginViewCellsForFragment() : void

exportPlatformBackupRecoveryKey()

Export a platform database backup recovery-key package.


    protected
                    exportPlatformBackupRecoveryKey(array<string, mixed> $backup) : array{filename: string, content: string}

Parameters

$backup : array<string, mixed>: Backup metadata row

Return values

array{filename: string, content: string}

exportTenantBackupRecoveryKey()

Export a tenant backup recovery-key package.


    protected
                    exportTenantBackupRecoveryKey(array<string, mixed> $backup, array<string, mixed> $tenant) : array{filename: string, content: string}

Parameters

$backup : array<string, mixed>: Backup metadata row
$tenant : array<string, mixed>: Tenant metadata row

Return values

array{filename: string, content: string}

getPageContextUrl()

Posted page context URL (path + query), validated.


    protected
                    getPageContextUrl() : string|null

Return values

string|null

isGridOriginRequest()

Whether POST originated from a grid index (stay on list).


    protected
                    isGridOriginRequest(string|null $pageContextUrl) : bool

Parameters

$pageContextUrl : string|null

Return values

bool

isLocked()

Check whether a platform user lockout timestamp is still active.


    protected
                    isLocked(mixed $lockedUntil) : bool

Parameters

$lockedUntil : mixed

Return values

bool

matchesGridIndexPath()

Whether page context path matches a grid index route pattern.


    protected
                    matchesGridIndexPath(string|null $pageContextUrl, string $pathRegex) : bool

Parameters

$pageContextUrl : string|null
$pathRegex : string

Return values

bool

mobileQueuePagination()

Build shared pagination values for mobile actionable queues.


    protected
                    mobileQueuePagination(int $total) : array<string, int|bool>

Parameters

$total : int: Total actionable records

Return values

array<string, int|bool>

mobileQueuePaginationPayload()

Remove internal pagination values before sending the mobile JSON payload.


    protected
                    mobileQueuePaginationPayload(array<string, int|bool> $pagination) : array<string, int|bool>

Parameters

$pagination : array<string, int|bool>: Pagination data

Return values

array<string, int|bool>

organizeViewCells()

Organize view cells by type and display order.


    protected
                    organizeViewCells(array<string|int, mixed> $viewCells) : array<string|int, mixed>

Unused - view cells organized in ViewCellRegistry

Parameters

$viewCells : array<string|int, mixed>: Flat array of view cell configurations

Return values

array<string|int, mixed> —

Organized array grouped by type and sorted by order

platform()

Return the platform metadata connection.


    protected
                    platform() : Connection

Return values

Connection

recoveryKeyDownloadResponse()

Return a recovery-key attachment that browsers and intermediary caches must not retain.


    protected
                    recoveryKeyDownloadResponse(array{filename: string, content: string} $export) : Response

Parameters

$export : array{filename: string, content: string}: Recovery-key export

Return values

Response

renderDataverseTableRowElement()

Render a single Dataverse grid row element (Turbo Stream replace target HTML).


    protected
                    renderDataverseTableRowElement(array<string, mixed> $vars) : string

Parameters

$vars : array<string, mixed>: Element variables

Return values

string

renderTurboCloseModal()

Render turbo-stream: flash + replace table frame with lazy reload src.


    protected
                    renderTurboCloseModal(string $refreshFrame, array<string, mixed> $gridDataRoute[, string|null $pageContextUrl = null ][, array<string|int, mixed>|null $flashMessages = null ]) : Response

Parameters

$refreshFrame : string
$gridDataRoute : array<string, mixed>
$pageContextUrl : string|null = null
$flashMessages : array<string|int, mixed>|null = null

Return values

Response

renderTurboFlashOnly()

Render turbo-stream flash messages without forcing a grid or frame reload.


    protected
                    renderTurboFlashOnly([array<string|int, mixed>|null $flashMessages = null ]) : Response

Parameters

$flashMessages : array<string|int, mixed>|null = null

Return values

Response

renderTurboReloadFrame()

Stream that reloads an edit turbo-frame (validation errors).


    protected
                    renderTurboReloadFrame(string $frameId, string $frameSrc[, array<string|int, mixed>|null $flashMessages = null ]) : Response

Parameters

$frameId : string
$frameSrc : string
$flashMessages : array<string|int, mixed>|null = null

Return values

Response

renderTurboRemoveGridRow()

Render turbo-stream: flash + remove a grid row (no longer matches current filters).


    protected
                    renderTurboRemoveGridRow(string $rowDomId[, array<string|int, mixed>|null $flashMessages = null ]) : Response

Parameters

$rowDomId : string
$flashMessages : array<string|int, mixed>|null = null

Return values

Response

renderTurboReplaceGridRow()

Render turbo-stream: flash + replace a single grid row by DOM id.


    protected
                    renderTurboReplaceGridRow(string $rowDomId, string $rowHtml[, array<string|int, mixed>|null $flashMessages = null ]) : Response

Parameters

$rowDomId : string
$rowHtml : string
$flashMessages : array<string|int, mixed>|null = null

Return values

Response

stageBackupDownload()

Stage and verify a backup for a streaming file response.


    protected
                    stageBackupDownload(array<string, mixed> $backup, BackupArchiveStorageInterface $storage, string $filenamePrefix) : array{path: string, filename: string}

Parameters

$backup : array<string, mixed>
$storage : BackupArchiveStorageInterface
$filenamePrefix : string

Return values

array{path: string, filename: string}

statusIsAllowed()

Check whether a platform user status is allowed for authenticated access.


    protected
                    statusIsAllowed(string $status) : bool

Parameters

$status : string

Return values

bool

validateStepUpAction()

Validate typed confirmation, reason, and TOTP step-up for sensitive admin actions.


    protected
                    validateStepUpAction(string $expectedConfirmation) : string

Parameters

$expectedConfirmation : string

Return values

string

wantsTurboStreamRequest()

Whether the client expects a turbo-stream response.


    protected
                    wantsTurboStreamRequest() : bool

Return values

bool

withPageContextQuery()

Run a callback with query params from the posted page context URL.


    protected
                    withPageContextQuery(string|null $pageContextUrl, callable(): T $callback) : T

Parameters

$pageContextUrl : string|null
$callback : callable(): T

Return values

auditDataConsoleAccess()

Best-effort audit trail for each successful data console query.


    private
                    auditDataConsoleAccess(string $queryName, int $page, int $limit, int $rowCount) : void

Parameters

$queryName : string
$page : int
$limit : int
$rowCount : int

DataConsoleController extends PlatformAdminAppController in package Application

Table of Contents

Constants

Properties

Methods

Constants

MOBILE_QUEUE_DEFAULT_PER_PAGE

MOBILE_QUEUE_MAX_PER_PAGE

VIEW_DATA_EVENT

VIEW_PLUGIN_EVENT

Properties

$isCsvRequest

$platformAdmin

$pluginViewCells

$pluginViewCellsEnabledForFragment

Methods

beforeFilter()

Parameters

Return values

beforeRender()

Parameters

Return values

index()

initialize()

isCsvRequest()

Return values

switchView()

Return values

appSettingImageDataUri()

Parameters

Return values

assertDeletableBackup()

Parameters

assertSafeContextUrl()

Parameters

Tags

Return values

assertUsableBackup()

Parameters

authorizeCurrentUrl()

Tags

backupPolicyRetentionDays()

Return values

buildGridDataUrlFromPageContext()

Parameters

Return values

consumeFlashForStream()

Return values

enablePluginViewCellsForFragment()

exportPlatformBackupRecoveryKey()

Parameters

Return values

exportTenantBackupRecoveryKey()

Parameters

Return values

getPageContextUrl()

Return values

isGridOriginRequest()

Parameters

Return values

isLocked()

Parameters

Return values

matchesGridIndexPath()

Parameters

Return values

mobileQueuePagination()

Parameters

Return values

mobileQueuePaginationPayload()

Parameters

Return values

organizeViewCells()

Parameters

Return values

platform()

Return values

recoveryKeyDownloadResponse()

Parameters

Return values

DataConsoleController extends PlatformAdminAppController
in package

Application