get(ConfigManagerInterface::class), $container->get(EntityTypeBundleInfoInterface::class), $target_entity_type, ); } /** * {@inheritdoc} */ public function apply(string $configName, mixed $value): void { $role = $this->configManager->loadConfigEntityByName($configName); if (!($role instanceof RoleInterface)) { throw new ConfigActionException(sprintf("Cannot determine role from %s", $configName)); } assert(is_string($value) || is_array($value)); [$permissions, $except_bundles] = self::parseValue($value); if (empty($permissions) || !Inspector::assertAllMatch('%bundle', $permissions, TRUE)) { throw new ConfigActionException(sprintf("The permissions provided %s must be an array of strings that contain '%%bundle'.", var_export($value, TRUE))); } $bundles = $this->entityTypeBundleInfo->getBundleInfo($this->targetEntityType); foreach (array_keys($bundles) as $bundle_id) { if (in_array($bundle_id, $except_bundles, TRUE)) { continue; } /** @var string[] $actual_permissions */ $actual_permissions = str_replace('%bundle', $bundle_id, $permissions); array_walk($actual_permissions, $role->grantPermission(...)); } $role->save(); } /** * Parses the value supplied to ::apply(). * * @param string|array $value * One of: * - A single string (a permission template). * - An array of strings (several permission templates). * - An array with a `permissions` element, and an optional `except` * element, either of which can be an array or a string. `except` accepts * a single bundle, or a list of bundles, to exclude from the permissions * being granted. * * @return array, array|string>> * An indexed array with two elements: the array of permissions to grant, * and the list of bundles to ignore. */ private static function parseValue(string|array $value): array { if (is_string($value)) { return [[$value], []]; } if (array_is_list($value)) { return [$value, []]; } $permissions = $value['permissions'] ?? []; $except_bundles = $value['except'] ?? []; return [(array) $permissions, (array) $except_bundles]; } }