Merge pull request #226 from cakephp/3.x-scope-params

3.x: add ability to add multiple optional parameters to table scopes

docs/en/3-0-migration-guide.rst

@@ -0,0 +1,27 @@
+3.0 Migration Guide
+###################
+
+Authorization 3.0 contains new features and a few breaking changes.
+
+Breaking Changes
+================
+
+The following interfaces now have appropriate parameter and return types added:
+
+- ``AuthorizationServiceInterface``
+- ``IdentityInterface``
+- ``BeforePolicyInterface``
+- ``RequestPolicyInterface.php``
+- ``ResolverInterface``
+
+Multiple optional arguments for ``applyScope``
+----------------------------------------------
+
+``IdentityInterface::applyScope`` as well as ``AuthorizationServiceInterface::applyScope``
+allow multiple optional arguments to be added.
+
+Removed methods
+---------------
+
+- ``AuthorizationService::resultTypeCheck`` - has been replaced with an ``assert()`` call
+

src/AuthorizationService.php

@@ -106,13 +106,13 @@ protected function performCheck(?IdentityInterface $user, string $action, mixed
     /**
      * @inheritDoc
      */
-    public function applyScope(?IdentityInterface $user, string $action, $resource): mixed
+    public function applyScope(?IdentityInterface $user, string $action, mixed $resource, mixed ...$optionalArgs): mixed
     {
         $this->authorizationChecked = true;
         $policy = $this->resolver->getPolicy($resource);
         $handler = $this->getScopeHandler($policy, $action);
 
-        return $handler($user, $resource);
+        return $handler($user, $resource, ...$optionalArgs);
     }
 
     /**

src/AuthorizationServiceInterface.php

@@ -60,9 +60,15 @@ public function canResult(?IdentityInterface $user, string $action, mixed $resou
      * @param \Authorization\IdentityInterface|null $user The user to check permissions for.
      * @param string $action The action/operation being performed.
      * @param mixed $resource The resource being operated on.
+     * @param mixed $optionalArgs Multiple additional arguments which are passed to the scope
      * @return mixed The modified resource.
      */
-    public function applyScope(?IdentityInterface $user, string $action, mixed $resource): mixed;
+    public function applyScope(
+        ?IdentityInterface $user,
+        string $action,
+        mixed $resource,
+        mixed ...$optionalArgs
+    ): mixed;
 
     /**
      * Return a boolean based on whether or not this object

src/Controller/Component/AuthorizationComponent.php

@@ -151,9 +151,10 @@ protected function performCheck(
      *
      * @param mixed $resource The resource to apply a scope to.
      * @param string|null $action The action to apply a scope for.
+     * @param mixed $optionalArgs Multiple additional arguments which are passed to the scope
      * @return mixed
      */
-    public function applyScope(mixed $resource, ?string $action = null): mixed
+    public function applyScope(mixed $resource, ?string $action = null, mixed ...$optionalArgs): mixed
     {
         $request = $this->getController()->getRequest();
         if ($action === null) {
@@ -164,7 +165,7 @@ public function applyScope(mixed $resource, ?string $action = null): mixed
             throw new MissingIdentityException('Identity must exist for applyScope() call.');
         }
 
-        return $identity->applyScope($action, $resource);
+        return $identity->applyScope($action, $resource, ...$optionalArgs);
     }
 
     /**

src/IdentityDecorator.php

@@ -76,9 +76,9 @@ public function canResult(string $action, $resource): ResultInterface
     /**
      * @inheritDoc
      */
-    public function applyScope(string $action, $resource): mixed
+    public function applyScope(string $action, mixed $resource, mixed ...$optionalArgs): mixed
     {
-        return $this->authorization->applyScope($this, $action, $resource);
+        return $this->authorization->applyScope($this, $action, $resource, ...$optionalArgs);
     }
 
     /**

src/IdentityInterface.php

@@ -53,9 +53,10 @@ public function canResult(string $action, mixed $resource): ResultInterface;
      *
      * @param string $action The action/operation being performed.
      * @param mixed $resource The resource being operated on.
+     * @param mixed $optionalArgs Multiple additional arguments which are passed to the scope
      * @return mixed The modified resource.
      */
-    public function applyScope(string $action, mixed $resource): mixed;
+    public function applyScope(string $action, mixed $resource, mixed ...$optionalArgs): mixed;
 
     /**
      * Get the decorated identity

tests/TestCase/AuthorizationServiceTest.php

@@ -21,10 +21,13 @@
 use Authorization\Policy\BeforePolicyInterface;
 use Authorization\Policy\Exception\MissingMethodException;
 use Authorization\Policy\MapResolver;
+use Authorization\Policy\OrmResolver;
 use Authorization\Policy\Result;
 use Authorization\Policy\ResultInterface;
+use Cake\Datasource\QueryInterface;
 use Cake\TestSuite\TestCase;
 use TestApp\Model\Entity\Article;
+use TestApp\Model\Table\ArticlesTable;
 use TestApp\Policy\ArticlePolicy;
 use TestApp\Policy\MagicCallPolicy;
 
@@ -173,6 +176,38 @@ public function testApplyScopeMethodMissing()
         $result = $service->applyScope($user, 'nope', $article);
     }
 
+    public function testApplyScopeAdditionalArguments()
+    {
+        $service = new AuthorizationService(new OrmResolver());
+        $user = new IdentityDecorator($service, [
+            'id' => 9,
+            'role' => 'admin',
+        ]);
+
+        $articles = new ArticlesTable();
+        $query = $this->createMock(QueryInterface::class);
+        $query->method('getRepository')
+            ->willReturn($articles);
+
+        $query->expects($this->exactly(2))
+            ->method('where')
+            ->with([
+                'identity_id' => 9,
+                'firstArg' => 'first argument',
+                'secondArg' => false,
+            ])
+            ->willReturn($query);
+
+        $result = $service->applyScope($user, 'additionalArguments', $query, 'first argument', false);
+        $this->assertInstanceOf(QueryInterface::class, $result);
+        $this->assertSame($query, $result);
+
+        // Test with named args as well
+        $result = $service->applyScope($user, 'additionalArguments', $query, firstArg: 'first argument', secondArg: false);
+        $this->assertInstanceOf(QueryInterface::class, $result);
+        $this->assertSame($query, $result);
+    }
+
     public function testBeforeFalse()
     {
         $entity = new Article();

tests/TestCase/Controller/Component/AuthorizationComponentTest.php

@@ -284,6 +284,28 @@ public function testApplyScopExplicitAction()
         $this->assertSame($query, $result);
     }
 
+    public function testApplyScopeAdditionalArguments()
+    {
+        $articles = new ArticlesTable();
+        $query = $this->createMock(QueryInterface::class);
+        $query->method('getRepository')
+            ->willReturn($articles);
+
+        $query->expects($this->once())
+            ->method('where')
+            ->with([
+                'identity_id' => 1,
+                'firstArg' => 'first argument',
+                'secondArg' => false,
+            ])
+            ->willReturn($query);
+
+        $result = $this->Auth->applyScope($query, 'additionalArguments', 'first argument', false);
+
+        $this->assertInstanceOf(QueryInterface::class, $result);
+        $this->assertSame($query, $result);
+    }
+
     public function testAuthorizeSuccessCheckExplicitAction()
     {
         $article = new Article(['user_id' => 1]);

tests/TestCase/IdentityDecoratorTest.php

@@ -67,6 +67,19 @@ public function testApplyScopeDelegation()
         $this->assertTrue($identity->applyScope('update', $resource));
     }
 
+    public function testApplyScopeAdditionalParams()
+    {
+        $resource = new stdClass();
+        $auth = $this->createMock(AuthorizationServiceInterface::class);
+        $identity = new IdentityDecorator($auth, ['id' => 1]);
+
+        $auth->expects($this->once())
+            ->method('applyScope')
+            ->with($identity, 'update', $resource, 'first argument', false)
+            ->will($this->returnValue(true));
+        $this->assertTrue($identity->applyScope('update', $resource, 'first argument', false));
+    }
+
     public function testCall()
     {
         $data = new Article(['id' => 1]);

tests/test_app/TestApp/Policy/ArticlesTablePolicy.php

@@ -36,4 +36,13 @@ public function scopeModify(IdentityInterface $user, QueryInterface $query)
             'identity_id' => $user['id'],
         ]);
     }
+
+    public function scopeAdditionalArguments(IdentityInterface $user, QueryInterface $query, $firstArg, $secondArg)
+    {
+        return $query->where([
+            'identity_id' => $user['id'],
+            'firstArg' => $firstArg,
+            'secondArg' => $secondArg,
+        ]);
+    }
 }