StoreDocumentFilter.php

<?php
 
namespace Bitrix\Catalog\Access\Filter;
 
use Bitrix\Catalog\Access\Permission\PermissionDictionary;
use Bitrix\Catalog\StoreDocumentElementTable;
use Bitrix\Catalog\StoreDocumentTable;
use Bitrix\Main\Access\Filter\AbstractAccessFilter;
use Bitrix\Main\Access\Filter\UnknownEntityException;
use Bitrix\Main\Loader;
use Bitrix\Main\SystemException;
use Bitrix\Sale\Internals\ShipmentItemTable;
use Bitrix\Sale\Internals\ShipmentTable;
 
class StoreDocumentFilter extends AbstractAccessFilter
{
    public function getFilter(string $entity, array $params = []): array
    {
        $action = (string)($params['action'] ?? '');
        if (empty($action))
        {
            throw new SystemException('No action is set in the parameters');
        }
 
        Loader::includeModule('sale');
 
        $this->validateEntity($entity);
 
        if ($this->user->isAdmin())
        {
            return [];
        }
 
        if ($entity === StoreDocumentTable::class)
        {
            return $this->getDocumentFilter($action);
        }
 
        if ($entity === StoreDocumentElementTable::class)
        {
            return $this->getElementFilter($action);
        }
 
        if ($entity === ShipmentTable::class)
        {
            return $this->getShipmentFilter($action);
        }
 
        if ($entity === ShipmentItemTable::class)
        {
            return $this->getShipmentItemFilter($action);
        }
    }
 
    private function validateEntity(string $entity): void
    {
        $available = [
            StoreDocumentTable::class,
            StoreDocumentElementTable::class,
            ShipmentTable::class,
            ShipmentItemTable::class,
        ];
 
        if (!in_array($entity, $available, true))
        {
            throw new UnknownEntityException($entity, $this);
        }
    }
 
    private function getDocumentFilter(string $action): ?array
    {
        $types = array_filter(
            PermissionDictionary::getAvailableStoreDocuments(),
            fn(string $docType) => $this->controller->check($action, null, ['value' => $docType])
        );
 
        if (empty($types))
        {
            return [
                '=ID' => null,
            ];
        }
 
        return [
            '=DOC_TYPE' => $types,
        ];
    }
 
    private function getElementFilter(string $action): ?array
    {
        $types = array_filter(
            PermissionDictionary::getAvailableStoreDocuments(),
            fn(string $docType) => $this->controller->check($action, null, ['value' => $docType])
        );
 
        if (empty($types))
        {
            return [
                '=ID' => null,
            ];
        }
 
        return [
            '=DOCUMENT.DOC_TYPE' => $types,
        ];
    }
 
    private function getShipmentFilter(string $action): ?array
    {
        $can = $this->controller->check($action, null, ['value' => StoreDocumentTable::TYPE_SALES_ORDERS]);
        if (!$can)
        {
            return [
                '=ID' => null,
            ];
        }
 
        return [];
    }
 
    private function getShipmentItemFilter(string $action): ?array
    {
        // identical checks
        return $this->getShipmentFilter($action);
    }
}