diff --git a/src/lib/Limitation/UserGroupLimitationType.php b/src/lib/Limitation/UserGroupLimitationType.php index 3f7eb1390f..b3a81bf837 100644 --- a/src/lib/Limitation/UserGroupLimitationType.php +++ b/src/lib/Limitation/UserGroupLimitationType.php @@ -190,10 +190,15 @@ public function getCriterion(APILimitationValue $value, APIUserReference $curren } $groupIds = []; - $currentUserLocations = $this->persistence->locationHandler()->loadLocationsByContent($currentUser->getUserId()); - if (!empty($currentUserLocations)) { - foreach ($currentUserLocations as $currentUserLocation) { - $groupIds[] = $currentUserLocation->parentId; + $locationHandler = $this->persistence->locationHandler(); + $currentUserLocations = $locationHandler->loadLocationsByContent($currentUser->getUserId()); + foreach ($currentUserLocations as $currentUserLocation) { + try { + $parentLocation = $locationHandler->load($currentUserLocation->parentId); + $groupIds[] = $parentLocation->contentId; + } catch (NotFoundException $e) { + // there is no need for any action - carrying on with checking other user locations + continue; } } diff --git a/tests/integration/Core/Limitation/UserGroupLimitationTest.php b/tests/integration/Core/Limitation/UserGroupLimitationTest.php new file mode 100644 index 0000000000..630c6ed30d --- /dev/null +++ b/tests/integration/Core/Limitation/UserGroupLimitationTest.php @@ -0,0 +1,93 @@ +getRepository(); + + $user = $this->createUserWithPolicies('test_user', $this->getPermissions()); + $userGroups = $repository->getUserService()->loadUserGroupsOfUser($user); + $userGroupIds = array_column($userGroups, 'id'); + + $repository->getPermissionResolver()->setCurrentUserReference($user); + + $parentFolder = $this->createFolder( + ['eng-US' => 'Parent folder'], + 2 + ); + $childFolder = $this->createFolder( + ['eng-US' => 'Child folder'], + $parentFolder->contentInfo->getMainLocationId() + ); + + $this->refreshSearch($repository); + + $query = new LocationQuery(); + $query->filter = new Criterion\LogicalAnd([ + new Criterion\ContentTypeId(self::FOLDER_CONTENT_TYPE_ID), + new Criterion\UserMetadata('group', 'in', $userGroupIds), + ]); + + $results = $repository->getSearchService()->findLocations($query)->searchHits; + $resultLocationIds = array_map(static function (SearchHit $hit): int { + /** @var \Ibexa\Contracts\Core\Repository\Values\Content\Location $location */ + $location = $hit->valueObject; + + return $location->id; + }, $results); + + self::assertContains($parentFolder->contentInfo->getMainLocationId(), $resultLocationIds); + self::assertContains($childFolder->contentInfo->getMainLocationId(), $resultLocationIds); + } + + /** + * @return array> + */ + private function getPermissions(): array + { + return [ + [ + 'module' => 'content', + 'function' => 'create', + ], + [ + 'module' => 'content', + 'function' => 'publish', + ], + [ + 'module' => 'content', + 'function' => 'read', + 'limitations' => [ + new LocationLimitation(['limitationValues' => [2]]), + ], + ], + [ + 'module' => 'content', + 'function' => 'read', + 'limitations' => [ + new ContentTypeLimitation(['limitationValues' => [self::FOLDER_CONTENT_TYPE_ID]]), + new UserGroupLimitation(['limitationValues' => [1]]), + ], + ], + ]; + } +}