WorkflowDefinitionsControllerPolicy
in package
implements
BeforePolicyInterface
Controller-level policy for WorkflowDefinitionsController.
All actions are admin-only; requires super user or explicit policy grant.
Table of Contents
Interfaces
- BeforePolicyInterface
Methods
- before() : ResultInterface|bool|null
- Allow super users to bypass action-specific checks.
- canAdd() : bool
- Check access to create workflow definitions.
- canAppSettings() : bool
- App-setting names are workflow designer metadata, so index access is sufficient.
- canCompareVersions() : bool
- Check access to compare workflow versions.
- canCreateDraft() : bool
- Check access to create a workflow draft.
- canDesigner() : bool
- Check access to the workflow designer.
- canIndex() : bool
- Check access to the workflow definition index.
- canLoadVersion() : bool
- Check access to load a workflow version.
- canMigrateInstances() : bool
- Check access to migrate active workflow instances.
- canPublish() : bool
- Check access to publish a workflow definition.
- canRegistry() : bool
- Check access to the workflow registry.
- canSave() : bool
- Check access to save a workflow definition.
- canToggleActive() : bool
- Check access to activate or deactivate a workflow definition.
- canVersions() : bool
- Check access to workflow versions.
- _hasPolicyForUrl() : bool
- Check if user has explicit policy grant for a URL action.
Methods
before()
Allow super users to bypass action-specific checks.
public
before(IdentityInterface|null $user, mixed $resource, string $action) : ResultInterface|bool|null
Parameters
- $user : IdentityInterface|null
- $resource : mixed
- $action : string
Return values
ResultInterface|bool|nullcanAdd()
Check access to create workflow definitions.
public
canAdd(KmpIdentityInterface $user, mixed $resource) : bool
Parameters
- $user : KmpIdentityInterface
- $resource : mixed
Return values
boolcanAppSettings()
App-setting names are workflow designer metadata, so index access is sufficient.
public
canAppSettings(KmpIdentityInterface $user, mixed $resource) : bool
Parameters
- $user : KmpIdentityInterface
- $resource : mixed
Return values
boolcanCompareVersions()
Check access to compare workflow versions.
public
canCompareVersions(KmpIdentityInterface $user, mixed $resource) : bool
Parameters
- $user : KmpIdentityInterface
- $resource : mixed
Return values
boolcanCreateDraft()
Check access to create a workflow draft.
public
canCreateDraft(KmpIdentityInterface $user, mixed $resource) : bool
Parameters
- $user : KmpIdentityInterface
- $resource : mixed
Return values
boolcanDesigner()
Check access to the workflow designer.
public
canDesigner(KmpIdentityInterface $user, mixed $resource) : bool
Parameters
- $user : KmpIdentityInterface
- $resource : mixed
Return values
boolcanIndex()
Check access to the workflow definition index.
public
canIndex(KmpIdentityInterface $user, mixed $resource) : bool
Parameters
- $user : KmpIdentityInterface
- $resource : mixed
Return values
boolcanLoadVersion()
Check access to load a workflow version.
public
canLoadVersion(KmpIdentityInterface $user, mixed $resource) : bool
Parameters
- $user : KmpIdentityInterface
- $resource : mixed
Return values
boolcanMigrateInstances()
Check access to migrate active workflow instances.
public
canMigrateInstances(KmpIdentityInterface $user, mixed $resource) : bool
Parameters
- $user : KmpIdentityInterface
- $resource : mixed
Return values
boolcanPublish()
Check access to publish a workflow definition.
public
canPublish(KmpIdentityInterface $user, mixed $resource) : bool
Parameters
- $user : KmpIdentityInterface
- $resource : mixed
Return values
boolcanRegistry()
Check access to the workflow registry.
public
canRegistry(KmpIdentityInterface $user, mixed $resource) : bool
Parameters
- $user : KmpIdentityInterface
- $resource : mixed
Return values
boolcanSave()
Check access to save a workflow definition.
public
canSave(KmpIdentityInterface $user, mixed $resource) : bool
Parameters
- $user : KmpIdentityInterface
- $resource : mixed
Return values
boolcanToggleActive()
Check access to activate or deactivate a workflow definition.
public
canToggleActive(KmpIdentityInterface $user, mixed $resource) : bool
Parameters
- $user : KmpIdentityInterface
- $resource : mixed
Return values
boolcanVersions()
Check access to workflow versions.
public
canVersions(KmpIdentityInterface $user, mixed $resource) : bool
Parameters
- $user : KmpIdentityInterface
- $resource : mixed
Return values
bool_hasPolicyForUrl()
Check if user has explicit policy grant for a URL action.
private
_hasPolicyForUrl(KmpIdentityInterface $user, string $method, mixed $resource) : bool
Parameters
- $user : KmpIdentityInterface
- $method : string
- $resource : mixed