vendor/pimcore/pimcore/bundles/AdminBundle/Controller/Admin/DataObject/DataObjectController.php line 742

Open in your IDE?
  1. <?php
  2. /**
  3.  * Pimcore
  4.  *
  5.  * This source file is available under two different licenses:
  6.  * - GNU General Public License version 3 (GPLv3)
  7.  * - Pimcore Enterprise License (PEL)
  8.  * Full copyright and license information is available in
  9.  * LICENSE.md which is distributed with this source code.
  10.  *
  11.  * @copyright  Copyright (c) Pimcore GmbH (http://www.pimcore.org)
  12.  * @license    http://www.pimcore.org/license     GPLv3 and PEL
  13.  */
  15. namespace Pimcore\Bundle\AdminBundle\Controller\Admin\DataObject;
  17. use Pimcore\Bundle\AdminBundle\Controller\Admin\ElementControllerBase;
  18. use Pimcore\Bundle\AdminBundle\Controller\Traits\AdminStyleTrait;
  19. use Pimcore\Bundle\AdminBundle\Controller\Traits\ApplySchedulerDataTrait;
  20. use Pimcore\Bundle\AdminBundle\Helper\GridHelperService;
  21. use Pimcore\Controller\Configuration\TemplatePhp;
  22. use Pimcore\Controller\EventedControllerInterface;
  23. use Pimcore\Controller\Traits\ElementEditLockHelperTrait;
  24. use Pimcore\Db;
  25. use Pimcore\Event\Admin\ElementAdminStyleEvent;
  26. use Pimcore\Event\AdminEvents;
  27. use Pimcore\Localization\LocaleServiceInterface;
  28. use Pimcore\Logger;
  29. use Pimcore\Model;
  30. use Pimcore\Model\DataObject;
  31. use Pimcore\Model\DataObject\ClassDefinition\Data\ManyToManyObjectRelation;
  32. use Pimcore\Model\DataObject\ClassDefinition\Data\Relations\AbstractRelations;
  33. use Pimcore\Model\DataObject\ClassDefinition\Data\ReverseManyToManyObjectRelation;
  34. use Pimcore\Model\Element;
  35. use Pimcore\Tool;
  36. use Symfony\Component\EventDispatcher\EventDispatcherInterface;
  37. use Symfony\Component\EventDispatcher\GenericEvent;
  38. use Symfony\Component\HttpFoundation\JsonResponse;
  39. use Symfony\Component\HttpFoundation\RedirectResponse;
  40. use Symfony\Component\HttpFoundation\Request;
  41. use Symfony\Component\HttpFoundation\Response;
  42. use Symfony\Component\HttpFoundation\Session\Attribute\AttributeBagInterface;
  43. use Symfony\Component\HttpKernel\Event\FilterControllerEvent;
  44. use Symfony\Component\HttpKernel\Event\FilterResponseEvent;
  45. use Symfony\Component\Routing\Annotation\Route;
  47. /**
  48.  * @Route("/object")
  49.  */
  50. class DataObjectController extends ElementControllerBase implements EventedControllerInterface
  51. {
  52.     use AdminStyleTrait;
  53.     use ElementEditLockHelperTrait;
  54.     use ApplySchedulerDataTrait;
  56.     /**
  57.      * @var DataObject\Service
  58.      */
  59.     protected $_objectService;
  61.     /**
  62.      * @var array
  63.      */
  64.     private $objectData;
  66.     /**
  67.      * @var array
  68.      */
  69.     private $metaData;
  71.     /**
  72.      * @Route("/tree-get-root", name="pimcore_admin_dataobject_dataobject_treegetroot", methods={"GET"})
  73.      *
  74.      * @param Request $request
  75.      *
  76.      * @return JsonResponse
  77.      */
  78.     public function treeGetRootAction(Request $request)
  79.     {
  80.         return parent::treeGetRootAction($request);
  81.     }
  83.     /**
  84.      * @Route("/delete-info", name="pimcore_admin_dataobject_dataobject_deleteinfo", methods={"GET"})
  85.      *
  86.      * @param Request $request
  87.      *
  88.      * @return JsonResponse
  89.      */
  90.     public function deleteInfoAction(Request $request)
  91.     {
  92.         return parent::deleteInfoAction($request);
  93.     }
  95.     /**
  96.      * @Route("/tree-get-childs-by-id", name="pimcore_admin_dataobject_dataobject_treegetchildsbyid", methods={"GET"})
  97.      *
  98.      * @param Request $request
  99.      * @param EventDispatcherInterface $eventDispatcher
  100.      *
  101.      * @return JsonResponse
  102.      */
  103.     public function treeGetChildsByIdAction(Request $request, EventDispatcherInterface $eventDispatcher)
  104.     {
  105.         $allParams = array_merge($request->request->all(), $request->query->all());
  107.         $filter = $request->get('filter');
  108.         $object = DataObject\AbstractObject::getById($request->get('node'));
  109.         $objectTypes = null;
  110.         $objects = [];
  111.         $cv = false;
  112.         $offset = 0;
  113.         $total = 0;
  114.         if ($object instanceof DataObject\Concrete) {
  115.             $class = $object->getClass();
  116.             if ($class->getShowVariants()) {
  117.                 $objectTypes = [DataObject\AbstractObject::OBJECT_TYPE_FOLDER, DataObject\AbstractObject::OBJECT_TYPE_OBJECT, DataObject\AbstractObject::OBJECT_TYPE_VARIANT];
  118.             }
  119.         }
  121.         if (!$objectTypes) {
  122.             $objectTypes = [DataObject\AbstractObject::OBJECT_TYPE_OBJECT, DataObject\AbstractObject::OBJECT_TYPE_FOLDER];
  123.         }
  125.         $filteredTotalCount = 0;
  126.         $limit = 0;
  128.         if ($object->hasChildren($objectTypes)) {
  129.             $limit = (int)$request->get('limit');
  130.             if (!is_null($filter)) {
  131.                 if (substr($filter, -1) != '*') {
  132.                     $filter .= '*';
  133.                 }
  134.                 $filter = str_replace('*', '%', $filter);
  136.                 $limit = 100;
  137.             } elseif (!$request->get('limit')) {
  138.                 $limit = 100000000;
  139.             }
  141.             $offset = (int)$request->get('start');
  143.             $childsList = new DataObject\Listing();
  144.             $condition = "objects.o_parentId = '" . $object->getId() . "'";
  146.             // custom views start
  147.             if ($request->get('view')) {
  148.                 $cv = Element\Service::getCustomViewById($request->get('view'));
  150.                 if ($cv['classes']) {
  151.                     $cvConditions = [];
  152.                     $cvClasses = explode(',', $cv['classes']);
  153.                     foreach ($cvClasses as $cvClass) {
  154.                         $cvConditions[] = "objects.o_classId = '" . $cvClass . "'";
  155.                     }
  157.                     $cvConditions[] = "objects.o_type = 'folder'";
  159.                     if (count($cvConditions) > 0) {
  160.                         $condition .= ' AND (' . implode(' OR ', $cvConditions) . ')';
  161.                     }
  162.                 }
  163.             }
  164.             // custom views end
  166.             if (!$this->getAdminUser()->isAdmin()) {
  167.                 $userIds = $this->getAdminUser()->getRoles();
  168.                 $userIds[] = $this->getAdminUser()->getId();
  169.                 $condition .= ' AND
  170.                 (
  171.                     (SELECT list FROM users_workspaces_object WHERE userId IN (' . implode(',', $userIds) . ') AND LOCATE(CONCAT(objects.o_path,objects.o_key),cpath)=1 ORDER BY LENGTH(cpath) DESC, FIELD(userId, '. $this->getAdminUser()->getId() .') DESC, list DESC LIMIT 1)=1
  172.                     OR
  173.                     (SELECT list FROM users_workspaces_object WHERE userId IN (' . implode(',', $userIds) . ') AND LOCATE(cpath,CONCAT(objects.o_path,objects.o_key))=1 ORDER BY LENGTH(cpath) DESC, FIELD(userId, '. $this->getAdminUser()->getId() .') DESC, list DESC LIMIT 1)=1
  174.                 )';
  175.             }
  177.             if (!is_null($filter)) {
  178.                 $db = Db::get();
  179.                 $condition .= ' AND CAST(objects.o_key AS CHAR CHARACTER SET utf8) COLLATE utf8_general_ci LIKE ' . $db->quote($filter);
  180.             }
  182.             $childsList->setCondition($condition);
  183.             $childsList->setLimit($limit);
  184.             $childsList->setOffset($offset);
  185.             if ($object->getChildrenSortBy() === 'index') {
  186.                 $childsList->setOrderKey('objects.o_index ASC', false);
  187.             } else {
  188.                 $childsList->setOrderKey(
  189.                     sprintf('CAST(objects.o_%s AS CHAR CHARACTER SET utf8) COLLATE utf8_general_ci ASC', $object->getChildrenSortBy()),
  190.                     false
  191.                 );
  192.             }
  193.             $childsList->setObjectTypes($objectTypes);
  195.             Element\Service::addTreeFilterJoins($cv, $childsList);
  197.             $beforeListLoadEvent = new GenericEvent($this, [
  198.                 'list' => $childsList,
  199.                 'context' => $allParams
  200.             ]);
  201.             $eventDispatcher->dispatch(AdminEvents::OBJECT_LIST_BEFORE_LIST_LOAD, $beforeListLoadEvent);
  202.             /** @var DataObject\Listing $childsList */
  203.             $childsList = $beforeListLoadEvent->getArgument('list');
  205.             $childs = $childsList->load();
  206.             $filteredTotalCount = $childsList->getTotalCount();
  208.             foreach ($childs as $child) {
  209.                 $tmpObject = $this->getTreeNodeConfig($child);
  211.                 if ($child->isAllowed('list')) {
  212.                     $objects[] = $tmpObject;
  213.                 }
  214.             }
  215.             //pagination for custom view
  216.             $total = $cv
  217.                 ? $filteredTotalCount
  218.                 : $object->getChildAmount(null, $this->getAdminUser());
  219.         }
  221.         //Hook for modifying return value - e.g. for changing permissions based on object data
  222.         //data need to wrapped into a container in order to pass parameter to event listeners by reference so that they can change the values
  223.         $event = new GenericEvent($this, [
  224.             'objects' => $objects,
  225.         ]);
  226.         $eventDispatcher->dispatch(AdminEvents::OBJECT_TREE_GET_CHILDREN_BY_ID_PRE_SEND_DATA, $event);
  227.         $objects = $event->getArgument('objects');
  229.         if ($limit) {
  230.             return $this->adminJson([
  231.                 'offset' => $offset,
  232.                 'limit' => $limit,
  233.                 'total' => $total,
  234.                 'overflow' => !is_null($filter) && ($filteredTotalCount > $limit),
  235.                 'nodes' => $objects,
  236.                 'fromPaging' => intval($request->get('fromPaging')),
  237.                 'filter' => $request->get('filter') ? $request->get('filter') : '',
  238.                 'inSearch' => intval($request->get('inSearch'))
  239.             ]);
  240.         }
  242.         return $this->adminJson($objects);
  243.     }
  245.     /**
  246.      * @param DataObject\AbstractObject $element
  247.      *
  248.      * @return array
  249.      */
  250.     protected function getTreeNodeConfig($element)
  251.     {
  252.         $child = $element;
  254.         $tmpObject = [
  255.             'id' => $child->getId(),
  256.             'idx' => intval($child->getIndex()),
  257.             'sortBy' => $child->getChildrenSortBy(),
  258.             'text' => htmlspecialchars($child->getKey()),
  259.             'type' => $child->getType(),
  260.             'path' => $child->getRealFullPath(),
  261.             'basePath' => $child->getRealPath(),
  262.             'elementType' => 'object',
  263.             'locked' => $child->isLocked(),
  264.             'lockOwner' => $child->getLocked() ? true : false
  265.         ];
  267.         $allowedTypes = [DataObject\AbstractObject::OBJECT_TYPE_OBJECT, DataObject\AbstractObject::OBJECT_TYPE_FOLDER];
  268.         if ($child instanceof DataObject\Concrete && $child->getClass()->getShowVariants()) {
  269.             $allowedTypes[] = DataObject\AbstractObject::OBJECT_TYPE_VARIANT;
  270.         }
  272.         $hasChildren = $child->hasChildren($allowedTypes);
  274.         $tmpObject['isTarget'] = false;
  275.         $tmpObject['allowDrop'] = false;
  276.         $tmpObject['allowChildren'] = false;
  278.         $tmpObject['leaf'] = !$hasChildren;
  280.         $tmpObject['isTarget'] = true;
  281.         if ($tmpObject['type'] != 'variant') {
  282.             $tmpObject['allowDrop'] = true;
  283.         }
  285.         $tmpObject['allowChildren'] = true;
  286.         $tmpObject['leaf'] = !$hasChildren;
  287.         $tmpObject['cls'] = 'pimcore_class_icon ';
  289.         if ($child instanceof DataObject\Concrete) {
  290.             $tmpObject['published'] = $child->isPublished();
  291.             $tmpObject['className'] = $child->getClass()->getName();
  293.             if (!$child->isPublished()) {
  294.                 $tmpObject['cls'] .= 'pimcore_unpublished ';
  295.             }
  297.             $tmpObject['allowVariants'] = $child->getClass()->getAllowVariants();
  298.         }
  300.         $this->addAdminStyle($child, ElementAdminStyleEvent::CONTEXT_TREE, $tmpObject);
  302.         $tmpObject['expanded'] = !$hasChildren;
  303.         $tmpObject['permissions'] = $child->getUserPermissions();
  305.         if ($child->isLocked()) {
  306.             $tmpObject['cls'] .= 'pimcore_treenode_locked ';
  307.         }
  308.         if ($child->getLocked()) {
  309.             $tmpObject['cls'] .= 'pimcore_treenode_lockOwner ';
  310.         }
  312.         if ($tmpObject['leaf']) {
  313.             $tmpObject['expandable'] = false;
  314.             $tmpObject['expanded'] = true;
  315.             $tmpObject['leaf'] = false;
  316.             $tmpObject['loaded'] = true;
  317.         }
  319.         return $tmpObject;
  320.     }
  322.     /**
  323.      * @Route("/get-id-path-paging-info", name="pimcore_admin_dataobject_dataobject_getidpathpaginginfo", methods={"GET"})
  324.      *
  325.      * @param Request $request
  326.      *
  327.      * @return JsonResponse
  328.      */
  329.     public function getIdPathPagingInfoAction(Request $request)
  330.     {
  331.         $path = $request->get('path');
  332.         $pathParts = explode('/', $path);
  333.         $id = array_pop($pathParts);
  335.         $limit = $request->get('limit');
  337.         if (empty($limit)) {
  338.             $limit = 30;
  339.         }
  341.         $data = [];
  343.         $targetObject = DataObject::getById($id);
  344.         $object = $targetObject;
  346.         while ($parent = $object->getParent()) {
  347.             $list = new DataObject\Listing();
  348.             $list->setCondition('o_parentId = ?', $parent->getId());
  349.             $list->setUnpublished(true);
  350.             $total = $list->getTotalCount();
  352.             $info = [
  353.                 'total' => $total
  354.             ];
  356.             if ($total > $limit) {
  357.                 $idList = $list->loadIdList();
  358.                 $position = array_search($object->getId(), $idList);
  359.                 $info['position'] = $position + 1;
  361.                 $info['page'] = ceil($info['position'] / $limit);
  362.                 $containsPaging = true;
  363.             }
  365.             $data[$parent->getId()] = $info;
  367.             $object = $parent;
  368.         }
  370.         return $this->adminJson($data);
  371.     }
  373.     /**
  374.      * @Route("/get", name="pimcore_admin_dataobject_dataobject_get", methods={"GET"})
  375.      *
  376.      * @param Request $request
  377.      * @param EventDispatcherInterface $eventDispatcher
  378.      *
  379.      * @return JsonResponse
  380.      *
  381.      * @throws \Exception
  382.      */
  383.     public function getAction(Request $request, EventDispatcherInterface $eventDispatcher)
  384.     {
  385.         $objectFromDatabase = DataObject\Concrete::getById((int)$request->get('id'));
  386.         if ($objectFromDatabase === null) {
  387.             return $this->adminJson(['success' => false, 'message' => 'element_not_found'], JsonResponse::HTTP_NOT_FOUND);
  388.         }
  389.         $objectFromDatabase = clone $objectFromDatabase;
  391.         // set the latest available version for editmode
  392.         $object = $this->getLatestVersion($objectFromDatabase);
  394.         // check for lock
  395.         if ($object->isAllowed('save') || $object->isAllowed('publish') || $object->isAllowed('unpublish') || $object->isAllowed('delete')) {
  396.             if (Element\Editlock::isLocked($request->get('id'), 'object')) {
  397.                 return $this->getEditLockResponse($request->get('id'), 'object');
  398.             }
  400.             Element\Editlock::lock($request->get('id'), 'object');
  401.         }
  403.         // we need to know if the latest version is published or not (a version), because of lazy loaded fields in $this->getDataForObject()
  404.         $objectFromVersion = $object !== $objectFromDatabase;
  406.         if ($object->isAllowed('view')) {
  407.             $objectData = [];
  409.             /** -------------------------------------------------------------
  410.              *   Load some general data from published object (if existing)
  411.              *  ------------------------------------------------------------- */
  412.             $objectData['idPath'] = Element\Service::getIdPath($objectFromDatabase);
  414.             $objectData['hasPreview'] = false;
  415.             if ($objectFromDatabase->getClass()->getPreviewUrl() || $objectFromDatabase->getClass()->getLinkGeneratorReference()) {
  416.                 $objectData['hasPreview'] = true;
  417.             }
  419.             $objectData['general'] = [];
  420.             $objectData['general']['objectFromVersion'] = $objectFromVersion;
  422.             $allowedKeys = ['o_published', 'o_key', 'o_id', 'o_creationDate', 'o_classId', 'o_className', 'o_type', 'o_parentId', 'o_userOwner'];
  423.             foreach ($objectFromDatabase->getObjectVars() as $key => $value) {
  424.                 if (in_array($key, $allowedKeys)) {
  425.                     $objectData['general'][$key] = $value;
  426.                 }
  427.             }
  428.             $objectData['general']['fullpath'] = $objectFromDatabase->getRealFullPath();
  429.             $objectData['general']['o_locked'] = $objectFromDatabase->isLocked();
  430.             $objectData['general']['php'] = [
  431.                 'classes' => array_merge([get_class($objectFromDatabase)], array_values(class_parents($objectFromDatabase))),
  432.                 'interfaces' => array_values(class_implements($objectFromDatabase))
  433.             ];
  434.             $objectData['general']['allowInheritance'] = $objectFromDatabase->getClass()->getAllowInherit();
  435.             $objectData['general']['allowVariants'] = $objectFromDatabase->getClass()->getAllowVariants();
  436.             $objectData['general']['showVariants'] = $objectFromDatabase->getClass()->getShowVariants();
  437.             $objectData['general']['showAppLoggerTab'] = $objectFromDatabase->getClass()->getShowAppLoggerTab();
  438.             if ($objectFromDatabase instanceof DataObject\Concrete) {
  439.                 $objectData['general']['linkGeneratorReference'] = $objectFromDatabase->getClass()->getLinkGeneratorReference();
  440.             }
  442.             $objectData['layout'] = $objectFromDatabase->getClass()->getLayoutDefinitions();
  443.             $objectData['userPermissions'] = $objectFromDatabase->getUserPermissions();
  444.             $objectVersions = Element\Service::getSafeVersionInfo($objectFromDatabase->getVersions());
  445.             $objectData['versions'] = array_splice($objectVersions, -1, 1);
  446.             $objectData['scheduledTasks'] = $objectFromDatabase->getScheduledTasks();
  448.             $objectData['childdata']['id'] = $objectFromDatabase->getId();
  449.             $objectData['childdata']['data']['classes'] = $this->prepareChildClasses($objectFromDatabase->getDao()->getClasses());
  450.             $objectData['childdata']['data']['general'] = $objectData['general'];
  451.             /** -------------------------------------------------------------
  452.              *   Load remaining general data from latest version
  453.              *  ------------------------------------------------------------- */
  454.             $allowedKeys = ['o_modificationDate', 'o_userModification'];
  455.             foreach ($object->getObjectVars() as $key => $value) {
  456.                 if (in_array($key, $allowedKeys)) {
  457.                     $objectData['general'][$key] = $value;
  458.                 }
  459.             }
  461.             $this->getDataForObject($object, $objectFromVersion);
  462.             $objectData['data'] = $this->objectData;
  463.             $objectData['metaData'] = $this->metaData;
  464.             $objectData['properties'] = Element\Service::minimizePropertiesForEditmode($object->getProperties());
  466.             // this used for the "this is not a published version" hint
  467.             // and for adding the published icon to version overview
  468.             $objectData['general']['versionDate'] = $objectFromDatabase->getModificationDate();
  469.             $objectData['general']['versionCount'] = $objectFromDatabase->getVersionCount();
  471.             $this->addAdminStyle($object, ElementAdminStyleEvent::CONTEXT_EDITOR, $objectData['general']);
  473.             $currentLayoutId = $request->get('layoutId', null);
  475.             $validLayouts = DataObject\Service::getValidLayouts($object);
  477.             //Fallback if $currentLayoutId is not set or empty string
  478.             //Uses first valid layout instead of admin layout when empty
  479.             $ok = false;
  480.             foreach ($validLayouts as $key => $layout) {
  481.                 if ($currentLayoutId == $layout->getId()) {
  482.                     $ok = true;
  483.                 }
  484.             }
  485.             if (!$ok) {
  486.                 if (count($validLayouts) > 0) {
  487.                     $currentLayoutId = reset($validLayouts)->getId();
  488.                 }
  489.             }
  491.             //master layout has id 0 so we check for is_null()
  492.             if ((is_null($currentLayoutId) || !strlen($currentLayoutId)) && !empty($validLayouts)) {
  493.                 if (count($validLayouts) == 1) {
  494.                     $firstLayout = reset($validLayouts);
  495.                     $currentLayoutId = $firstLayout->getId();
  496.                 } else {
  497.                     foreach ($validLayouts as $checkDefaultLayout) {
  498.                         if ($checkDefaultLayout->getDefault()) {
  499.                             $currentLayoutId = $checkDefaultLayout->getId();
  500.                         }
  501.                     }
  502.                 }
  503.             }
  504.             if (!empty($validLayouts)) {
  505.                 $objectData['validLayouts'] = [ ];
  507.                 foreach ($validLayouts as $validLayout) {
  508.                     $objectData['validLayouts'][] = ['id' => $validLayout->getId(), 'name' => $validLayout->getName()];
  509.                 }
  511.                 $user = Tool\Admin::getCurrentUser();
  513.                 if (!is_null($currentLayoutId)) {
  514.                     if ($currentLayoutId == '0' && !$user->isAdmin()) {
  515.                         $first = reset($validLayouts);
  516.                         $currentLayoutId = $first->getId();
  517.                     }
  518.                 }
  520.                 if ($currentLayoutId == -1 && $user->isAdmin()) {
  521.                     $layout = DataObject\Service::getSuperLayoutDefinition($object);
  522.                     $objectData['layout'] = $layout;
  523.                 } elseif (!empty($currentLayoutId)) {
  524.                     // check if user has sufficient rights
  525.                     if (is_array($validLayouts) && $validLayouts[$currentLayoutId]) {
  526.                         $customLayout = DataObject\ClassDefinition\CustomLayout::getById($currentLayoutId);
  528.                         $customLayoutDefinition = $customLayout->getLayoutDefinitions();
  529.                         $objectData['layout'] = $customLayoutDefinition;
  530.                     } else {
  531.                         $currentLayoutId = 0;
  532.                     }
  533.                 }
  535.                 $objectData['currentLayoutId'] = $currentLayoutId;
  536.             }
  538.             //Hook for modifying return value - e.g. for changing permissions based on object data
  539.             //data need to wrapped into a container in order to pass parameter to event listeners by reference so that they can change the values
  540.             $event = new GenericEvent($this, [
  541.                 'data' => $objectData,
  542.                 'object' => $object,
  543.             ]);
  545.             DataObject\Service::enrichLayoutDefinition($objectData['layout'], $object);
  546.             $eventDispatcher->dispatch(AdminEvents::OBJECT_GET_PRE_SEND_DATA, $event);
  547.             $data = $event->getArgument('data');
  549.             DataObject\Service::removeElementFromSession('object', $object->getId());
  551.             return $this->adminJson($data);
  552.         }
  554.         throw $this->createAccessDeniedHttpException();
  555.     }
  557.     /**
  558.      * @param DataObject\Concrete $object
  559.      * @param bool $objectFromVersion
  560.      */
  561.     private function getDataForObject(DataObject\Concrete $object, $objectFromVersion = false)
  562.     {
  563.         foreach ($object->getClass()->getFieldDefinitions(['object' => $object]) as $key => $def) {
  564.             $this->getDataForField($object, $key, $def, $objectFromVersion);
  565.         }
  566.     }
  568.     /**
  569.      * gets recursively attribute data from parent and fills objectData and metaData
  570.      *
  571.      * @param DataObject\Concrete $object
  572.      * @param string $key
  573.      * @param DataObject\ClassDefinition\Data $fielddefinition
  574.      * @param bool $objectFromVersion
  575.      * @param int $level
  576.      */
  577.     private function getDataForField($object, $key, $fielddefinition, $objectFromVersion, $level = 0)
  578.     {
  579.         $parent = DataObject\Service::hasInheritableParentObject($object);
  580.         $getter = 'get' . ucfirst($key);
  582.         // Editmode optimization for lazy loaded relations (note that this is just for AbstractRelations, not for all
  583.         // LazyLoadingSupportInterface types. It tries to optimize fetching the data needed for the editmode without
  584.         // loading the entire target element.
  585.         // ReverseManyToManyObjectRelation should go in there anyway (regardless if it a version or not),
  586.         // so that the values can be loaded.
  587.         if (
  588.             (!$objectFromVersion && $fielddefinition instanceof AbstractRelations)
  589.             || $fielddefinition instanceof ReverseManyToManyObjectRelation
  590.         ) {
  591.             $refId = null;
  593.             if ($fielddefinition instanceof ReverseManyToManyObjectRelation) {
  594.                 $refKey = $fielddefinition->getOwnerFieldName();
  595.                 $refClass = DataObject\ClassDefinition::getByName($fielddefinition->getOwnerClassName());
  596.                 if ($refClass) {
  597.                     $refId = $refClass->getId();
  598.                 }
  599.             } else {
  600.                 $refKey = $key;
  601.             }
  603.             $relations = $object->getRelationData($refKey, !$fielddefinition instanceof ReverseManyToManyObjectRelation, $refId);
  605.             if (empty($relations) && !empty($parent)) {
  606.                 $this->getDataForField($parent, $key, $fielddefinition, $objectFromVersion, $level + 1);
  607.             } else {
  608.                 $data = [];
  610.                 if ($fielddefinition instanceof DataObject\ClassDefinition\Data\ManyToOneRelation) {
  611.                     if (isset($relations[0])) {
  612.                         $data = $relations[0];
  613.                         $data['published'] = (bool)$data['published'];
  614.                     } else {
  615.                         $data = null;
  616.                     }
  617.                 } elseif (
  618.                     ($fielddefinition instanceof DataObject\ClassDefinition\Data\OptimizedAdminLoadingInterface && $fielddefinition->isOptimizedAdminLoading())
  619.                     || ($fielddefinition instanceof ManyToManyObjectRelation && !$fielddefinition->getVisibleFields() && !$fielddefinition instanceof DataObject\ClassDefinition\Data\AdvancedManyToManyObjectRelation)
  620.                 ) {
  621.                     foreach ($relations as $rkey => $rel) {
  622.                         $index = $rkey + 1;
  623.                         $rel['fullpath'] = $rel['path'];
  624.                         $rel['classname'] = $rel['subtype'];
  625.                         $rel['rowId'] = $rel['id'] . AbstractRelations::RELATION_ID_SEPARATOR . $index . AbstractRelations::RELATION_ID_SEPARATOR . $rel['type'];
  626.                         $rel['published'] = (bool)$rel['published'];
  627.                         $data[] = $rel;
  628.                     }
  629.                 } else {
  630.                     $fieldData = $object->$getter();
  631.                     $data = $fielddefinition->getDataForEditmode($fieldData, $object, ['objectFromVersion' => $objectFromVersion]);
  632.                 }
  633.                 $this->objectData[$key] = $data;
  634.                 $this->metaData[$key]['objectid'] = $object->getId();
  635.                 $this->metaData[$key]['inherited'] = $level != 0;
  636.             }
  637.         } else {
  638.             $fieldData = $object->$getter();
  639.             $isInheritedValue = false;
  641.             if ($fielddefinition instanceof DataObject\ClassDefinition\Data\CalculatedValue) {
  642.                 $fieldData = new DataObject\Data\CalculatedValue($fielddefinition->getName());
  643.                 $fieldData->setContextualData('object', null, null, null, null, null, $fielddefinition);
  644.                 $value = $fielddefinition->getDataForEditmode($fieldData, $object, ['objectFromVersion' => $objectFromVersion]);
  645.             } else {
  646.                 $value = $fielddefinition->getDataForEditmode($fieldData, $object, ['objectFromVersion' => $objectFromVersion]);
  647.             }
  649.             // following some exceptions for special data types (localizedfields, objectbricks)
  650.             if ($value && ($fieldData instanceof DataObject\Localizedfield || $fieldData instanceof DataObject\Classificationstore)) {
  651.                 // make sure that the localized field participates in the inheritance detection process
  652.                 $isInheritedValue = $value['inherited'];
  653.             }
  654.             if ($fielddefinition instanceof DataObject\ClassDefinition\Data\Objectbricks && is_array($value)) {
  655.                 // make sure that the objectbricks participate in the inheritance detection process
  656.                 foreach ($value as $singleBrickData) {
  657.                     if (!empty($singleBrickData['inherited'])) {
  658.                         $isInheritedValue = true;
  659.                     }
  660.                 }
  661.             }
  663.             if ($fielddefinition->isEmpty($fieldData) && !empty($parent)) {
  664.                 $this->getDataForField($parent, $key, $fielddefinition, $objectFromVersion, $level + 1);
  665.             } else {
  666.                 $isInheritedValue = $isInheritedValue || ($level != 0);
  667.                 $this->metaData[$key]['objectid'] = $object->getId();
  669.                 $this->objectData[$key] = $value;
  670.                 $this->metaData[$key]['inherited'] = $isInheritedValue;
  672.                 if ($isInheritedValue && !$fielddefinition->isEmpty($fieldData) && !$fielddefinition->supportsInheritance()) {
  673.                     $this->objectData[$key] = null;
  674.                     $this->metaData[$key]['inherited'] = false;
  675.                     $this->metaData[$key]['hasParentValue'] = true;
  676.                 }
  677.             }
  678.         }
  679.     }
  681.     /**
  682.      * @param Model\DataObject\ClassDefinition\Data $layout
  683.      * @param array $allowedView
  684.      * @param array $allowedEdit
  685.      */
  686.     protected function setLayoutPermission(&$layout, $allowedView, $allowedEdit)
  687.     {
  688.         if ($layout->{'fieldtype'} == 'localizedfields' || $layout->{'fieldtype'} == 'classificationstore') {
  689.             if (is_array($allowedView) && count($allowedView) > 0) {
  690.                 $haveAllowedViewDefault = null;
  691.                 if ($layout->{'fieldtype'} == 'localizedfields') {
  692.                     $haveAllowedViewDefault = isset($allowedView['default']);
  693.                     if ($haveAllowedViewDefault) {
  694.                         unset($allowedView['default']);
  695.                     }
  696.                 }
  697.                 if (!($haveAllowedViewDefault && count($allowedView) == 0)) {
  698.                     $layout->{'permissionView'} = Tool\Admin::reorderWebsiteLanguages(
  699.                         Tool\Admin::getCurrentUser(),
  700.                         array_keys($allowedView),
  701.                         true
  702.                     );
  703.                 }
  704.             }
  705.             if (is_array($allowedEdit) && count($allowedEdit) > 0) {
  706.                 $haveAllowedEditDefault = null;
  707.                 if ($layout->{'fieldtype'} == 'localizedfields') {
  708.                     $haveAllowedEditDefault = isset($allowedEdit['default']);
  709.                     if ($haveAllowedEditDefault) {
  710.                         unset($allowedEdit['default']);
  711.                     }
  712.                 }
  714.                 if (!($haveAllowedEditDefault && count($allowedEdit) == 0)) {
  715.                     $layout->{'permissionEdit'} = Tool\Admin::reorderWebsiteLanguages(
  716.                         Tool\Admin::getCurrentUser(),
  717.                         array_keys($allowedEdit),
  718.                         true
  719.                     );
  720.                 }
  721.             }
  722.         } else {
  723.             if (method_exists($layout, 'getChilds')) {
  724.                 $children = $layout->getChilds();
  725.                 if (is_array($children)) {
  726.                     foreach ($children as $child) {
  727.                         $this->setLayoutPermission($child, $allowedView, $allowedEdit);
  728.                     }
  729.                 }
  730.             }
  731.         }
  732.     }
  734.     /**
  735.      * @Route("/get-folder", name="pimcore_admin_dataobject_dataobject_getfolder", methods={"GET"})
  736.      *
  737.      * @param Request $request
  738.      * @param EventDispatcherInterface $eventDispatcher
  739.      *
  740.      * @return JsonResponse
  741.      */
  742.     public function getFolderAction(Request $request, EventDispatcherInterface $eventDispatcher)
  743.     {
  744.         // check for lock
  745.         if (Element\Editlock::isLocked($request->get('id'), 'object')) {
  746.             return $this->getEditLockResponse($request->get('id'), 'object');
  747.         }
  748.         Element\Editlock::lock($request->get('id'), 'object');
  750.         $object = DataObject::getById(intval($request->get('id')));
  751.         if ($object->isAllowed('view')) {
  752.             $objectData = [];
  754.             $objectData['general'] = [];
  755.             $objectData['idPath'] = Element\Service::getIdPath($object);
  756.             $allowedKeys = ['o_published', 'o_key', 'o_id', 'o_type', 'o_path', 'o_modificationDate', 'o_creationDate', 'o_userOwner', 'o_userModification'];
  757.             foreach ($object->getObjectVars() as $key => $value) {
  758.                 if (strstr($key, 'o_') && in_array($key, $allowedKeys)) {
  759.                     $objectData['general'][$key] = $value;
  760.                 }
  761.             }
  762.             $objectData['general']['fullpath'] = $object->getRealFullPath();
  764.             $objectData['general']['o_locked'] = $object->isLocked();
  766.             $objectData['properties'] = Element\Service::minimizePropertiesForEditmode($object->getProperties());
  767.             $objectData['userPermissions'] = $object->getUserPermissions();
  768.             $objectData['classes'] = $this->prepareChildClasses($object->getDao()->getClasses());
  770.             // grid-config
  771.             $configFile = PIMCORE_CONFIGURATION_DIRECTORY . '/object/grid/' . $object->getId() . '-user_' . $this->getAdminUser()->getId() . '.psf';
  772.             if (is_file($configFile)) {
  773.                 $gridConfig = Tool\Serialize::unserialize(file_get_contents($configFile));
  774.                 if ($gridConfig) {
  775.                     $selectedClassId = $gridConfig['classId'];
  777.                     foreach ($objectData['classes'] as $class) {
  778.                         if ($class['id'] == $selectedClassId) {
  779.                             $objectData['selectedClass'] = $selectedClassId;
  780.                             break;
  781.                         }
  782.                     }
  783.                 }
  784.             }
  786.             //Hook for modifying return value - e.g. for changing permissions based on object data
  787.             //data need to wrapped into a container in order to pass parameter to event listeners by reference so that they can change the values
  788.             $event = new GenericEvent($this, [
  789.                 'data' => $objectData,
  790.                 'object' => $object,
  791.             ]);
  792.             $eventDispatcher->dispatch(AdminEvents::OBJECT_GET_PRE_SEND_DATA, $event);
  793.             $objectData = $event->getArgument('data');
  795.             return $this->adminJson($objectData);
  796.         }
  798.         throw $this->createAccessDeniedHttpException();
  799.     }
  801.     /**
  802.      * @param DataObject\ClassDefinition[] $classes
  803.      *
  804.      * @return array
  805.      */
  806.     protected function prepareChildClasses($classes)
  807.     {
  808.         $reduced = [];
  809.         foreach ($classes as $class) {
  810.             $reduced[] = [
  811.                 'id' => $class->getId(),
  812.                 'name' => $class->getName(),
  813.                 'inheritance' => $class->getAllowInherit(),
  814.             ];
  815.         }
  817.         return $reduced;
  818.     }
  820.     /**
  821.      * @Route("/add", name="pimcore_admin_dataobject_dataobject_add", methods={"POST"})
  822.      *
  823.      * @param Request $request
  824.      *
  825.      * @return JsonResponse
  826.      */
  827.     public function addAction(Request $request)
  828.     {
  829.         $success = false;
  831.         $className = 'Pimcore\\Model\\DataObject\\' . ucfirst($request->get('className'));
  832.         $parent = DataObject::getById($request->get('parentId'));
  834.         $message = '';
  835.         $object = null;
  836.         if ($parent->isAllowed('create')) {
  837.             $intendedPath = $parent->getRealFullPath() . '/' . $request->get('key');
  839.             if (!DataObject\Service::pathExists($intendedPath)) {
  840.                 /** @var DataObject\Concrete $object */
  841.                 $object = $this->get('pimcore.model.factory')->build($className);
  842.                 $object->setOmitMandatoryCheck(true); // allow to save the object although there are mandatory fields
  844.                 if ($request->get('variantViaTree')) {
  845.                     $parentId = $request->get('parentId');
  846.                     $parent = DataObject\Concrete::getById($parentId);
  847.                     $object->setClassId($parent->getClass()->getId());
  848.                 } else {
  849.                     $object->setClassId($request->get('classId'));
  850.                 }
  852.                 $object->setClassName($request->get('className'));
  853.                 $object->setParentId($request->get('parentId'));
  854.                 $object->setKey($request->get('key'));
  855.                 $object->setCreationDate(time());
  856.                 $object->setUserOwner($this->getAdminUser()->getId());
  857.                 $object->setUserModification($this->getAdminUser()->getId());
  858.                 $object->setPublished(false);
  860.                 if ($request->get('objecttype') == DataObject\AbstractObject::OBJECT_TYPE_OBJECT
  861.                     || $request->get('objecttype') == DataObject\AbstractObject::OBJECT_TYPE_VARIANT) {
  862.                     $object->setType($request->get('objecttype'));
  863.                 }
  865.                 try {
  866.                     $object->save();
  867.                     $success = true;
  868.                 } catch (\Exception $e) {
  869.                     return $this->adminJson(['success' => false, 'message' => $e->getMessage()]);
  870.                 }
  871.             } else {
  872.                 $message = 'prevented creating object because object with same path+key already exists';
  873.                 Logger::debug($message);
  874.             }
  875.         } else {
  876.             $message = 'prevented adding object because of missing permissions';
  877.             Logger::debug($message);
  878.         }
  880.         if ($success && $object instanceof DataObject\AbstractObject) {
  881.             return $this->adminJson([
  882.                 'success' => $success,
  883.                 'id' => $object->getId(),
  884.                 'type' => $object->getType(),
  885.                 'message' => $message
  886.             ]);
  887.         } else {
  888.             return $this->adminJson([
  889.                 'success' => $success,
  890.                 'message' => $message
  891.             ]);
  892.         }
  893.     }
  895.     /**
  896.      * @Route("/add-folder", name="pimcore_admin_dataobject_dataobject_addfolder", methods={"POST"})
  897.      *
  898.      * @param Request $request
  899.      *
  900.      * @return JsonResponse
  901.      */
  902.     public function addFolderAction(Request $request)
  903.     {
  904.         $success = false;
  906.         $parent = DataObject::getById($request->get('parentId'));
  907.         if ($parent->isAllowed('create')) {
  908.             if (!DataObject\Service::pathExists($parent->getRealFullPath() . '/' . $request->get('key'))) {
  909.                 $folder = DataObject\Folder::create([
  910.                     'o_parentId' => $request->get('parentId'),
  911.                     'o_creationDate' => time(),
  912.                     'o_userOwner' => $this->getAdminUser()->getId(),
  913.                     'o_userModification' => $this->getAdminUser()->getId(),
  914.                     'o_key' => $request->get('key'),
  915.                     'o_published' => true
  916.                 ]);
  918.                 $folder->setCreationDate(time());
  919.                 $folder->setUserOwner($this->getAdminUser()->getId());
  920.                 $folder->setUserModification($this->getAdminUser()->getId());
  922.                 try {
  923.                     $folder->save();
  924.                     $success = true;
  925.                 } catch (\Exception $e) {
  926.                     return $this->adminJson(['success' => false, 'message' => $e->getMessage()]);
  927.                 }
  928.             }
  929.         } else {
  930.             Logger::debug('prevented creating object id because of missing permissions');
  931.         }
  933.         return $this->adminJson(['success' => $success]);
  934.     }
  936.     /**
  937.      * @Route("/delete", name="pimcore_admin_dataobject_dataobject_delete", methods={"DELETE"})
  938.      *
  939.      * @param Request $request
  940.      *
  941.      * @return JsonResponse
  942.      *
  943.      * @throws \Exception
  944.      */
  945.     public function deleteAction(Request $request)
  946.     {
  947.         if ($request->get('type') == 'childs') {
  948.             $parentObject = DataObject::getById($request->get('id'));
  950.             $list = new DataObject\Listing();
  951.             $list->setCondition('o_path LIKE ' . $list->quote($list->escapeLike($parentObject->getRealFullPath()) . '/%'));
  952.             $list->setLimit(intval($request->get('amount')));
  953.             $list->setOrderKey('LENGTH(o_path)', false);
  954.             $list->setOrder('DESC');
  956.             $deletedItems = [];
  957.             foreach ($list as $object) {
  958.                 $deletedItems[$object->getId()] = $object->getRealFullPath();
  959.                 if ($object->isAllowed('delete') && !$object->isLocked()) {
  960.                     $object->delete();
  961.                 }
  962.             }
  964.             return $this->adminJson(['success' => true, 'deleted' => $deletedItems]);
  965.         } elseif ($request->get('id')) {
  966.             $object = DataObject::getById($request->get('id'));
  967.             if ($object) {
  968.                 if (!$object->isAllowed('delete')) {
  969.                     throw $this->createAccessDeniedHttpException();
  970.                 } elseif ($object->isLocked()) {
  971.                     return $this->adminJson(['success' => false, 'message' => 'prevented deleting object, because it is locked: ID: ' . $object->getId()]);
  972.                 } else {
  973.                     $object->delete();
  974.                 }
  975.             }
  977.             // return true, even when the object doesn't exist, this can be the case when using batch delete incl. children
  978.             return $this->adminJson(['success' => true]);
  979.         }
  981.         return $this->adminJson(['success' => false]);
  982.     }
  984.     /**
  985.      * @Route("/change-children-sort-by", name="pimcore_admin_dataobject_dataobject_changechildrensortby", methods={"PUT"})
  986.      *
  987.      * @param Request $request
  988.      *
  989.      * @return JsonResponse
  990.      *
  991.      * @throws \Exception
  992.      */
  993.     public function changeChildrenSortByAction(Request $request)
  994.     {
  995.         $object = DataObject::getById($request->get('id'));
  996.         if ($object) {
  997.             $object->setChildrenSortBy($request->get('sortBy'));
  998.             $object->save();
  1000.             return $this->json(['success' => true]);
  1001.         }
  1003.         return $this->json(['success' => false, 'message' => 'Unable to change a sorting way of children items.']);
  1004.     }
  1006.     /**
  1007.      * @Route("/update", name="pimcore_admin_dataobject_dataobject_update", methods={"PUT"})
  1008.      *
  1009.      * @param Request $request
  1010.      *
  1011.      * @return JsonResponse
  1012.      *
  1013.      * @throws \Exception
  1014.      */
  1015.     public function updateAction(Request $request)
  1016.     {
  1017.         $success = false;
  1018.         $allowUpdate = true;
  1020.         $object = DataObject::getById($request->get('id'));
  1021.         if ($object instanceof DataObject\Concrete) {
  1022.             $object->setOmitMandatoryCheck(true);
  1023.         }
  1025.         // this prevents the user from renaming, relocating (actions in the tree) if the newest version isn't the published one
  1026.         // the reason is that otherwise the content of the newer not published version will be overwritten
  1027.         if ($object instanceof DataObject\Concrete) {
  1028.             $latestVersion = $object->getLatestVersion();
  1029.             if ($latestVersion && $latestVersion->getData()->getModificationDate() != $object->getModificationDate()) {
  1030.                 return $this->adminJson(['success' => false, 'message' => "You can't rename or relocate if there's a newer not published version"]);
  1031.             }
  1032.         }
  1034.         $values = $this->decodeJson($request->get('values'));
  1036.         if ($object->isAllowed('settings')) {
  1037.             if (isset($values['key']) && $values['key'] && $object->isAllowed('rename')) {
  1038.                 $object->setKey($values['key']);
  1039.             } elseif (!isset($values['key']) || $values['key'] != $object->getKey()) {
  1040.                 Logger::debug('prevented renaming object because of missing permissions ');
  1041.             }
  1043.             if (!empty($values['parentId'])) {
  1044.                 $parent = DataObject::getById($values['parentId']);
  1046.                 //check if parent is changed
  1047.                 if ($object->getParentId() != $parent->getId()) {
  1048.                     if (!$parent->isAllowed('create')) {
  1049.                         throw new \Exception('Prevented moving object - no create permission on new parent ');
  1050.                     }
  1052.                     $objectWithSamePath = DataObject::getByPath($parent->getRealFullPath() . '/' . $object->getKey());
  1054.                     if ($objectWithSamePath != null) {
  1055.                         $allowUpdate = false;
  1057.                         return $this->adminJson(['success' => false, 'message' => 'prevented creating object because object with same path+key already exists']);
  1058.                     }
  1060.                     if ($object->isLocked()) {
  1061.                         return $this->adminJson(['success' => false, 'message' => 'prevented moving object, because it is locked: ID: ' . $object->getId()]);
  1062.                     }
  1064.                     $object->setParentId($values['parentId']);
  1065.                 }
  1066.             }
  1068.             if (array_key_exists('locked', $values)) {
  1069.                 $object->setLocked($values['locked']);
  1070.             }
  1072.             if ($allowUpdate) {
  1073.                 $object->setModificationDate(time());
  1074.                 $object->setUserModification($this->getAdminUser()->getId());
  1076.                 try {
  1077.                     $isIndexUpdate = isset($values['index']) && is_int($values['index']);
  1079.                     if ($isIndexUpdate) {
  1080.                         // Ensure the update sort index is already available in the postUpdate eventListener
  1081.                         $object->setIndex($values['index']);
  1082.                     }
  1084.                     $object->save();
  1086.                     if ($isIndexUpdate) {
  1087.                         $this->updateIndexesOfObjectSiblings($object, $values['index']);
  1088.                     }
  1090.                     $success = true;
  1091.                 } catch (\Exception $e) {
  1092.                     Logger::error($e);
  1094.                     return $this->adminJson(['success' => false, 'message' => $e->getMessage()]);
  1095.                 }
  1096.             } else {
  1097.                 Logger::debug('prevented move of object, object with same path+key already exists in this location.');
  1098.             }
  1099.         } elseif ($object->isAllowed('rename') && $values['key']) {
  1100.             //just rename
  1101.             try {
  1102.                 $object->setKey($values['key']);
  1103.                 $object->save();
  1104.                 $success = true;
  1105.             } catch (\Exception $e) {
  1106.                 Logger::error($e);
  1108.                 return $this->adminJson(['success' => false, 'message' => $e->getMessage()]);
  1109.             }
  1110.         } else {
  1111.             Logger::debug('prevented update object because of missing permissions.');
  1112.         }
  1114.         return $this->adminJson(['success' => $success]);
  1115.     }
  1117.     /**
  1118.      * @param DataObject\AbstractObject $updatedObject
  1119.      * @param int $newIndex
  1120.      */
  1121.     protected function updateIndexesOfObjectSiblings(DataObject\AbstractObject $updatedObject, $newIndex)
  1122.     {
  1123.         $maxRetries = 5;
  1124.         for ($retries = 0; $retries < $maxRetries; $retries++) {
  1125.             try {
  1126.                 Db::get()->beginTransaction();
  1127.                 $updateLatestVersionIndex = function ($objectId, $modificationDate, $versionCount, $newIndex) {
  1128.                     if ($latestVersion = DataObject\Concrete::getLatestVersionByObjectIdAndLatestModificationDate(
  1129.                         $objectId, $modificationDate, $versionCount
  1130.                     )) {
  1132.                         // don't renew references (which means loading the target elements)
  1133.                         // Not needed as we just save a new version with the updated index
  1134.                         $object = $latestVersion->loadData(false);
  1135.                         if ($newIndex !== $object->getIndex()) {
  1136.                             $object->setIndex($newIndex);
  1137.                         }
  1138.                         $latestVersion->save();
  1139.                     }
  1140.                 };
  1142.                 $list = new DataObject\Listing();
  1143.                 $updatedObject->saveIndex($newIndex);
  1145.                 Db::get()->executeUpdate(
  1146.                     'UPDATE '.$list->getDao()->getTableName().' o,
  1147.                     (
  1148.                         SELECT newIndex, o_id FROM (SELECT @n := IF(@n = ? - 1,@n + 2,@n + 1) AS newIndex, o_id
  1149.                         FROM '.$list->getDao()->getTableName().',
  1150.                         (SELECT @n := -1) variable
  1151.                         WHERE o_id != ? AND o_parentId = ? AND o_type IN (\''.implode(
  1152.                         "','", [
  1153.                             DataObject\AbstractObject::OBJECT_TYPE_OBJECT,
  1154.                             DataObject\AbstractObject::OBJECT_TYPE_VARIANT,
  1155.                             DataObject\AbstractObject::OBJECT_TYPE_FOLDER
  1156.                         ]
  1157.                     ).'\')
  1158.                             ORDER BY o_index, o_id=?
  1159.                         ) tmp
  1160.                     ) order_table
  1161.                     SET o.o_index = order_table.newIndex
  1162.                     WHERE o.o_id=order_table.o_id',
  1163.                     [
  1164.                         $newIndex,
  1165.                         $updatedObject->getId(),
  1166.                         $updatedObject->getParentId(),
  1167.                         $updatedObject->getId()
  1168.                     ]
  1169.                 );
  1171.                 $db = Db::get();
  1172.                 $siblings = $db->fetchAll(
  1173.                     'SELECT o_id, o_modificationDate, o_versionCount FROM objects'
  1174.                     ." WHERE o_parentId = ? AND o_id != ? AND o_type IN ('object', 'variant','folder') ORDER BY o_index ASC",
  1175.                     [$updatedObject->getParentId(), $updatedObject->getId()]
  1176.                 );
  1177.                 $index = 0;
  1179.                 foreach ($siblings as $sibling) {
  1180.                     if ($index == $newIndex) {
  1181.                         $index++;
  1182.                     }
  1184.                     $updateLatestVersionIndex($sibling['o_id'], $sibling['o_modificationDate'], $sibling['o_versionCount'], $index);
  1185.                     $index++;
  1187.                     DataObject\AbstractObject::clearDependentCacheByObjectId($sibling['o_id']);
  1188.                 }
  1190.                 Db::get()->commit();
  1191.                 break;
  1192.             } catch (\Exception $e) {
  1193.                 Db::get()->rollBack();
  1195.                 // we try to start the transaction $maxRetries times again (deadlocks, ...)
  1196.                 if ($retries < ($maxRetries - 1)) {
  1197.                     $run = $retries + 1;
  1198.                     $waitTime = rand(1, 5) * 100000; // microseconds
  1199.                     Logger::warn('Unable to finish transaction (' . $run . ". run) because of the following reason '" . $e->getMessage() . "'. --> Retrying in " . $waitTime . ' microseconds ... (' . ($run + 1) . ' of ' . $maxRetries . ')');
  1201.                     usleep($waitTime); // wait specified time until we restart the transaction
  1202.                 } else {
  1203.                     // if the transaction still fail after $maxRetries retries, we throw out the exception
  1204.                     Logger::error('Finally giving up restarting the same transaction again and again, last message: ' . $e->getMessage());
  1205.                     throw $e;
  1206.                 }
  1207.             }
  1208.         }
  1209.     }
  1211.     /**
  1212.      * @Route("/save", name="pimcore_admin_dataobject_dataobject_save", methods={"POST", "PUT"})
  1213.      *
  1214.      * @param Request $request
  1215.      *
  1216.      * @return JsonResponse
  1217.      *
  1218.      * @throws \Exception
  1219.      */
  1220.     public function saveAction(Request $request)
  1221.     {
  1222.         $object = DataObject\Concrete::getById($request->get('id'));
  1223.         $originalModificationDate = $object->getModificationDate();
  1225.         // set the latest available version for editmode
  1226.         $object = $this->getLatestVersion($object);
  1227.         $object->setUserModification($this->getAdminUser()->getId());
  1229.         // data
  1230.         $data = [];
  1231.         if ($request->get('data')) {
  1232.             $data = $this->decodeJson($request->get('data'));
  1233.             foreach ($data as $key => $value) {
  1234.                 $fd = $object->getClass()->getFieldDefinition($key);
  1235.                 if ($fd) {
  1236.                     if ($fd instanceof DataObject\ClassDefinition\Data\Localizedfields) {
  1237.                         $user = Tool\Admin::getCurrentUser();
  1238.                         if (!$user->getAdmin()) {
  1239.                             $allowedLanguages = DataObject\Service::getLanguagePermissions($object, $user, 'lEdit');
  1240.                             if (!is_null($allowedLanguages)) {
  1241.                                 $allowedLanguages = array_keys($allowedLanguages);
  1242.                                 $submittedLanguages = array_keys($data[$key]);
  1243.                                 foreach ($submittedLanguages as $submittedLanguage) {
  1244.                                     if (!in_array($submittedLanguage, $allowedLanguages)) {
  1245.                                         unset($value[$submittedLanguage]);
  1246.                                     }
  1247.                                 }
  1248.                             }
  1249.                         }
  1250.                     }
  1252.                     if ($fd instanceof ReverseManyToManyObjectRelation) {
  1253.                         $remoteClass = DataObject\ClassDefinition::getByName($fd->getOwnerClassName());
  1254.                         $relations = $object->getRelationData($fd->getOwnerFieldName(), false, $remoteClass->getId());
  1255.                         $toAdd = $this->detectAddedRemoteOwnerRelations($relations, $value);
  1256.                         $toDelete = $this->detectDeletedRemoteOwnerRelations($relations, $value);
  1257.                         if (count($toAdd) > 0 or count($toDelete) > 0) {
  1258.                             $this->processRemoteOwnerRelations($object, $toDelete, $toAdd, $fd->getOwnerFieldName());
  1259.                         }
  1260.                     } else {
  1261.                         $object->setValue($key, $fd->getDataFromEditmode($value, $object));
  1262.                     }
  1263.                 }
  1264.             }
  1265.         }
  1267.         // general settings
  1268.         // @TODO: IS THIS STILL NECESSARY?
  1269.         if ($request->get('general')) {
  1270.             $general = $this->decodeJson($request->get('general'));
  1272.             // do not allow all values to be set, will cause problems (eg. icon)
  1273.             if (is_array($general) && count($general) > 0) {
  1274.                 foreach ($general as $key => $value) {
  1275.                     if (!in_array($key, ['o_id', 'o_classId', 'o_className', 'o_type', 'icon', 'o_userOwner', 'o_userModification', 'o_modificationDate'])) {
  1276.                         $object->setValue($key, $value);
  1277.                     }
  1278.                 }
  1279.             }
  1280.         }
  1282.         $this->assignPropertiesFromEditmode($request, $object);
  1283.         $this->applySchedulerDataToElement($request, $object);
  1285.         if ($request->get('task') == 'unpublish') {
  1286.             $object->setPublished(false);
  1287.         }
  1288.         if ($request->get('task') == 'publish') {
  1289.             $object->setPublished(true);
  1290.         }
  1292.         // unpublish and save version is possible without checking mandatory fields
  1293.         if ($request->get('task') == 'unpublish' || $request->get('task') == 'version') {
  1294.             $object->setOmitMandatoryCheck(true);
  1295.         }
  1297.         if (($request->get('task') == 'publish' && $object->isAllowed('publish')) || ($request->get('task') == 'unpublish' && $object->isAllowed('unpublish'))) {
  1298.             if ($data) {
  1299.                 if (!$this->performFieldcollectionModificationCheck($request, $object, $originalModificationDate, $data)) {
  1300.                     return $this->adminJson(['success' => false, 'message' => 'Could be that someone messed around with the fieldcollection in the meantime. Please reload and try again']);
  1301.                 }
  1302.             }
  1304.             $object->save();
  1305.             $treeData = $this->getTreeNodeConfig($object);
  1307.             $newObject = DataObject\AbstractObject::getById($object->getId(), true);
  1309.             return $this->adminJson([
  1310.                 'success' => true,
  1311.                 'general' => ['o_modificationDate' => $object->getModificationDate(),
  1312.                     'versionDate' => $newObject->getModificationDate(),
  1313.                     'versionCount' => $newObject->getVersionCount()
  1314.                 ],
  1315.                 'treeData' => $treeData
  1316.             ]);
  1317.         } elseif ($request->get('task') == 'session') {
  1318.             DataObject\Service::saveElementToSession($object);
  1320.             return $this->adminJson(['success' => true]);
  1321.         } elseif ($request->get('task') == 'scheduler') {
  1322.             if ($object->isAllowed('settings')) {
  1323.                 $object->saveScheduledTasks();
  1325.                 return $this->adminJson(['success' => true]);
  1326.             }
  1327.         } elseif ($object->isAllowed('save')) {
  1328.             if ($object->isPublished()) {
  1329.                 $object->saveVersion();
  1330.             } else {
  1331.                 $object->save();
  1332.             }
  1334.             $treeData = $this->getTreeNodeConfig($object);
  1336.             $newObject = DataObject\AbstractObject::getById($object->getId(), true);
  1338.             return $this->adminJson([
  1339.                 'success' => true,
  1340.                 'general' => ['o_modificationDate' => $object->getModificationDate(),
  1341.                     'versionDate' => $newObject->getModificationDate(),
  1342.                     'versionCount' => $newObject->getVersionCount()
  1343.                 ],
  1344.                 'treeData' => $treeData
  1345.             ]);
  1346.         }
  1348.         throw $this->createAccessDeniedHttpException();
  1349.     }
  1351.     /**
  1352.      * @param Request $request
  1353.      * @param DataObject\Concrete $object
  1354.      * @param int $originalModificationDate
  1355.      * @param array $data
  1356.      *
  1357.      * @return bool
  1358.      *
  1359.      * @throws \Exception
  1360.      */
  1361.     protected function performFieldcollectionModificationCheck(Request $request, DataObject\Concrete $object, $originalModificationDate, $data)
  1362.     {
  1363.         $modificationDate = $request->get('modificationDate');
  1364.         if ($modificationDate != $originalModificationDate) {
  1365.             $fielddefinitions = $object->getClass()->getFieldDefinitions();
  1366.             foreach ($fielddefinitions as $fd) {
  1367.                 if ($fd instanceof DataObject\ClassDefinition\Data\Fieldcollections) {
  1368.                     if (isset($data[$fd->getName()])) {
  1369.                         $allowedTypes = $fd->getAllowedTypes();
  1370.                         foreach ($allowedTypes as $type) {
  1371.                             /** @var DataObject\Fieldcollection\Definition $fdDef */
  1372.                             $fdDef = DataObject\Fieldcollection\Definition::getByKey($type);
  1373.                             $childDefinitions = $fdDef->getFieldDefinitions();
  1374.                             foreach ($childDefinitions as $childDef) {
  1375.                                 if ($childDef instanceof DataObject\ClassDefinition\Data\Localizedfields) {
  1376.                                     return false;
  1377.                                 }
  1378.                             }
  1379.                         }
  1380.                     }
  1381.                 }
  1382.             }
  1383.         }
  1385.         return true;
  1386.     }
  1388.     /**
  1389.      * @Route("/save-folder", name="pimcore_admin_dataobject_dataobject_savefolder", methods={"PUT"})
  1390.      *
  1391.      * @param Request $request
  1392.      *
  1393.      * @return JsonResponse
  1394.      */
  1395.     public function saveFolderAction(Request $request)
  1396.     {
  1397.         $object = DataObject::getById($request->get('id'));
  1399.         if (!$object) {
  1400.             throw $this->createNotFoundException('Object not found');
  1401.         }
  1403.         if ($object->isAllowed('publish')) {
  1404.             try {
  1405.                 // general settings
  1406.                 $general = $this->decodeJson($request->get('general'));
  1407.                 $object->setValues($general);
  1408.                 $object->setUserModification($this->getAdminUser()->getId());
  1410.                 $this->assignPropertiesFromEditmode($request, $object);
  1412.                 $object->save();
  1414.                 return $this->adminJson(['success' => true]);
  1415.             } catch (\Exception $e) {
  1416.                 return $this->adminJson(['success' => false, 'message' => $e->getMessage()]);
  1417.             }
  1418.         }
  1420.         throw $this->createAccessDeniedHttpException();
  1421.     }
  1423.     /**
  1424.      * @param Request $request
  1425.      * @param DataObject\AbstractObject $object
  1426.      */
  1427.     protected function assignPropertiesFromEditmode(Request $request, $object)
  1428.     {
  1429.         if ($request->get('properties')) {
  1430.             $properties = [];
  1431.             // assign inherited properties
  1432.             foreach ($object->getProperties() as $p) {
  1433.                 if ($p->isInherited()) {
  1434.                     $properties[$p->getName()] = $p;
  1435.                 }
  1436.             }
  1438.             $propertiesData = $this->decodeJson($request->get('properties'));
  1440.             if (is_array($propertiesData)) {
  1441.                 foreach ($propertiesData as $propertyName => $propertyData) {
  1442.                     $value = $propertyData['data'];
  1444.                     try {
  1445.                         $property = new Model\Property();
  1446.                         $property->setType($propertyData['type']);
  1447.                         $property->setName($propertyName);
  1448.                         $property->setCtype('object');
  1449.                         $property->setDataFromEditmode($value);
  1450.                         $property->setInheritable($propertyData['inheritable']);
  1452.                         $properties[$propertyName] = $property;
  1453.                     } catch (\Exception $e) {
  1454.                         Logger::err("Can't add " . $propertyName . ' to object ' . $object->getRealFullPath());
  1455.                     }
  1456.                 }
  1457.             }
  1458.             $object->setProperties($properties);
  1459.         }
  1460.     }
  1462.     /**
  1463.      * @Route("/publish-version", name="pimcore_admin_dataobject_dataobject_publishversion", methods={"POST"})
  1464.      *
  1465.      * @param Request $request
  1466.      *
  1467.      * @return JsonResponse
  1468.      */
  1469.     public function publishVersionAction(Request $request)
  1470.     {
  1471.         $version = Model\Version::getById($request->get('id'));
  1472.         $object = $version->loadData();
  1474.         $currentObject = DataObject::getById($object->getId());
  1475.         if ($currentObject->isAllowed('publish')) {
  1476.             $object->setPublished(true);
  1477.             $object->setUserModification($this->getAdminUser()->getId());
  1478.             try {
  1479.                 $object->save();
  1481.                 $this->addAdminStyle($object, ElementAdminStyleEvent::CONTEXT_TREE, $treeData);
  1483.                 return $this->adminJson(
  1484.                     [
  1485.                         'success' => true,
  1486.                         'general' => ['o_modificationDate' => $object->getModificationDate() ],
  1487.                         'treeData' => $treeData]
  1488.                 );
  1489.             } catch (\Exception $e) {
  1490.                 return $this->adminJson(['success' => false, 'message' => $e->getMessage()]);
  1491.             }
  1492.         }
  1494.         throw $this->createAccessDeniedHttpException();
  1495.     }
  1497.     /**
  1498.      * @Route("/preview-version", name="pimcore_admin_dataobject_dataobject_previewversion", methods={"GET"})
  1499.      *
  1500.      * @param Request $request
  1501.      * @TemplatePhp()
  1502.      *
  1503.      * @throws \Exception
  1504.      *
  1505.      * @return array
  1506.      */
  1507.     public function previewVersionAction(Request $request)
  1508.     {
  1509.         DataObject\AbstractObject::setDoNotRestoreKeyAndPath(true);
  1511.         $id = intval($request->get('id'));
  1512.         $version = Model\Version::getById($id);
  1513.         $object = $version->loadData();
  1515.         DataObject\AbstractObject::setDoNotRestoreKeyAndPath(false);
  1517.         if ($object) {
  1518.             if ($object->isAllowed('versions')) {
  1519.                 return ['object' => $object];
  1520.             } else {
  1521.                 throw $this->createAccessDeniedException('Permission denied, version id [' . $id . ']');
  1522.             }
  1523.         } else {
  1524.             throw $this->createNotFoundException('Version with id [' . $id . "] doesn't exist");
  1525.         }
  1526.     }
  1528.     /**
  1529.      * @Route("/diff-versions/from/{from}/to/{to}", name="pimcore_admin_dataobject_dataobject_diffversions", methods={"GET"})
  1530.      * @TemplatePhp()
  1531.      *
  1532.      * @param Request $request
  1533.      * @param int $from
  1534.      * @param int $to
  1535.      *
  1536.      * @return array
  1537.      *
  1538.      * @throws \Exception
  1539.      */
  1540.     public function diffVersionsAction(Request $request, $from, $to)
  1541.     {
  1542.         DataObject\AbstractObject::setDoNotRestoreKeyAndPath(true);
  1544.         $id1 = intval($from);
  1545.         $id2 = intval($to);
  1547.         $version1 = Model\Version::getById($id1);
  1548.         $object1 = $version1->loadData();
  1550.         $version2 = Model\Version::getById($id2);
  1551.         $object2 = $version2->loadData();
  1553.         DataObject\AbstractObject::setDoNotRestoreKeyAndPath(false);
  1555.         if ($object1 && $object2) {
  1556.             if ($object1->isAllowed('versions') && $object2->isAllowed('versions')) {
  1557.                 return [
  1558.                     'object1' => $object1,
  1559.                     'object2' => $object2
  1560.                 ];
  1561.             } else {
  1562.                 throw $this->createAccessDeniedException('Permission denied, version ids [' . $id1 . ', ' . $id2 . ']');
  1563.             }
  1564.         } else {
  1565.             throw $this->createNotFoundException('Version with ids [' . $id1 . ', ' . $id2 . "] doesn't exist");
  1566.         }
  1567.     }
  1569.     /**
  1570.      * @Route("/grid-proxy", name="pimcore_admin_dataobject_dataobject_gridproxy", methods={"GET", "POST", "PUT"})
  1571.      *
  1572.      * @param Request $request
  1573.      * @param EventDispatcherInterface $eventDispatcher
  1574.      * @param GridHelperService $gridHelperService
  1575.      * @param LocaleServiceInterface $localeService
  1576.      *
  1577.      * @return JsonResponse
  1578.      */
  1579.     public function gridProxyAction(
  1580.         Request $request,
  1581.         EventDispatcherInterface $eventDispatcher,
  1582.         GridHelperService $gridHelperService,
  1583.         LocaleServiceInterface $localeService
  1584.     ) {
  1585.         $allParams = array_merge($request->request->all(), $request->query->all());
  1587.         $filterPrepareEvent = new GenericEvent($this, [
  1588.             'requestParams' => $allParams
  1589.         ]);
  1590.         $eventDispatcher->dispatch(AdminEvents::OBJECT_LIST_BEFORE_FILTER_PREPARE, $filterPrepareEvent);
  1592.         $allParams = $filterPrepareEvent->getArgument('requestParams');
  1594.         $requestedLanguage = $allParams['language'] ?? null;
  1595.         if ($requestedLanguage) {
  1596.             if ($requestedLanguage != 'default') {
  1597.                 //                $this->get('translator')->setLocale($requestedLanguage);
  1598.                 $request->setLocale($requestedLanguage);
  1599.             }
  1600.         } else {
  1601.             $requestedLanguage = $request->getLocale();
  1602.         }
  1604.         if (isset($allParams['data']) && $allParams['data']) {
  1605.             $this->checkCsrfToken($request);
  1606.             if ($allParams['xaction'] == 'update') {
  1607.                 try {
  1608.                     $data = $this->decodeJson($allParams['data']);
  1610.                     // save
  1611.                     $object = DataObject::getById($data['id']);
  1613.                     if (!$object instanceof DataObject\Concrete) {
  1614.                         throw $this->createNotFoundException('Object not found');
  1615.                     }
  1617.                     $class = $object->getClass();
  1619.                     if (!$object->isAllowed('publish')) {
  1620.                         throw $this->createAccessDeniedException("Permission denied. You don't have the rights to save this object.");
  1621.                     }
  1623.                     $user = Tool\Admin::getCurrentUser();
  1624.                     $allLanguagesAllowed = false;
  1625.                     $languagePermissions = [];
  1626.                     if (!$user->isAdmin()) {
  1627.                         $languagePermissions = $object->getPermissions('lEdit', $user);
  1629.                         //sets allowed all languages modification when the lEdit column is empty
  1630.                         $allLanguagesAllowed = $languagePermissions['lEdit'] == '';
  1632.                         $languagePermissions = explode(',', $languagePermissions['lEdit']);
  1633.                     }
  1635.                     $objectData = [];
  1636.                     foreach ($data as $key => $value) {
  1637.                         $parts = explode('~', $key);
  1638.                         if (substr($key, 0, 1) == '~') {
  1639.                             $type = $parts[1];
  1640.                             $field = $parts[2];
  1641.                             $keyid = $parts[3];
  1643.                             if ($type == 'classificationstore') {
  1644.                                 $groupKeyId = explode('-', $keyid);
  1645.                                 $groupId = $groupKeyId[0];
  1646.                                 $keyid = $groupKeyId[1];
  1648.                                 $getter = 'get' . ucfirst($field);
  1649.                                 if (method_exists($object, $getter)) {
  1651.                                     /** @var Model\DataObject\ClassDefinition\Data\Classificationstore $csFieldDefinition */
  1652.                                     $csFieldDefinition = $object->getClass()->getFieldDefinition($field);
  1653.                                     $csLanguage = $requestedLanguage;
  1654.                                     if (!$csFieldDefinition->isLocalized()) {
  1655.                                         $csLanguage = 'default';
  1656.                                     }
  1658.                                     /** @var DataObject\Classificationstore $classificationStoreData */
  1659.                                     $classificationStoreData = $object->$getter();
  1661.                                     $keyConfig = DataObject\Classificationstore\KeyConfig::getById($keyid);
  1662.                                     if ($keyConfig) {
  1663.                                         $fieldDefinition = $keyDef = DataObject\Classificationstore\Service::getFieldDefinitionFromJson(
  1664.                                             json_decode($keyConfig->getDefinition()),
  1665.                                             $keyConfig->getType()
  1666.                                         );
  1667.                                         if ($fieldDefinition && method_exists($fieldDefinition, 'getDataFromGridEditor')) {
  1668.                                             $value = $fieldDefinition->getDataFromGridEditor($value, $object, []);
  1669.                                         }
  1670.                                     }
  1672.                                     $activeGroups = $classificationStoreData->getActiveGroups() ? $classificationStoreData->getActiveGroups() : [];
  1673.                                     $activeGroups[$groupId] = true;
  1674.                                     $classificationStoreData->setActiveGroups($activeGroups);
  1675.                                     $classificationStoreData->setLocalizedKeyValue($groupId, $keyid, $value, $csLanguage);
  1676.                                 }
  1677.                             }
  1678.                         } elseif (count($parts) > 1) {
  1679.                             $brickType = $parts[0];
  1680.                             $brickDescriptor = null;
  1682.                             if (strpos($brickType, '?') !== false) {
  1683.                                 $brickDescriptor = substr($brickType, 1);
  1684.                                 $brickDescriptor = json_decode($brickDescriptor, true);
  1685.                                 $brickType = $brickDescriptor['containerKey'];
  1686.                             }
  1687.                             $brickKey = $parts[1];
  1688.                             $brickField = DataObject\Service::getFieldForBrickType($object->getClass(), $brickType);
  1690.                             $fieldGetter = 'get' . ucfirst($brickField);
  1691.                             $brickGetter = 'get' . ucfirst($brickType);
  1692.                             $valueSetter = 'set' . ucfirst($brickKey);
  1694.                             $brick = $object->$fieldGetter()->$brickGetter();
  1695.                             if (empty($brick)) {
  1696.                                 $classname = '\\Pimcore\\Model\\DataObject\\Objectbrick\\Data\\' . ucfirst($brickType);
  1697.                                 $brickSetter = 'set' . ucfirst($brickType);
  1698.                                 $brick = new $classname($object);
  1699.                                 $object->$fieldGetter()->$brickSetter($brick);
  1700.                             }
  1702.                             if ($brickDescriptor) {
  1703.                                 $brickDefinition = Model\DataObject\Objectbrick\Definition::getByKey($brickType);
  1704.                                 /** @var DataObject\ClassDefinition\Data\Localizedfields $fieldDefinitionLocalizedFields */
  1705.                                 $fieldDefinitionLocalizedFields = $brickDefinition->getFieldDefinition('localizedfields');
  1706.                                 $fieldDefinition = $fieldDefinitionLocalizedFields->getFieldDefinition($brickKey);
  1707.                             } else {
  1708.                                 $fieldDefinition = $this->getFieldDefinitionFromBrick($brickType, $brickKey);
  1709.                             }
  1711.                             if ($fieldDefinition && method_exists($fieldDefinition, 'getDataFromGridEditor')) {
  1712.                                 $value = $fieldDefinition->getDataFromGridEditor($value, $object, []);
  1713.                             }
  1715.                             if ($brickDescriptor) {
  1716.                                 /** @var DataObject\Localizedfield $localizedFields */
  1717.                                 $localizedFields = $brick->getLocalizedfields();
  1718.                                 $localizedFields->setLocalizedValue($brickKey, $value);
  1719.                             } else {
  1720.                                 $brick->$valueSetter($value);
  1721.                             }
  1722.                         } else {
  1723.                             if (!$user->isAdmin() && $languagePermissions) {
  1724.                                 $fd = $class->getFieldDefinition($key);
  1725.                                 if (!$fd) {
  1726.                                     // try to get via localized fields
  1727.                                     $localized = $class->getFieldDefinition('localizedfields');
  1728.                                     if ($localized instanceof DataObject\ClassDefinition\Data\Localizedfields) {
  1729.                                         $field = $localized->getFieldDefinition($key);
  1730.                                         if ($field) {
  1731.                                             $currentLocale = $localeService->findLocale();
  1732.                                             if (!$allLanguagesAllowed && !in_array($currentLocale, $languagePermissions)) {
  1733.                                                 continue;
  1734.                                             }
  1735.                                         }
  1736.                                     }
  1737.                                 }
  1738.                             }
  1740.                             $fieldDefinition = $this->getFieldDefinition($class, $key);
  1741.                             if ($fieldDefinition && method_exists($fieldDefinition, 'getDataFromGridEditor')) {
  1742.                                 $value = $fieldDefinition->getDataFromGridEditor($value, $object, []);
  1743.                             }
  1745.                             $objectData[$key] = $value;
  1746.                         }
  1747.                     }
  1749.                     $object->setValues($objectData);
  1750.                     if ($object->getPublished() == false) {
  1751.                         $object->setOmitMandatoryCheck(true);
  1752.                     }
  1754.                     $object->save();
  1756.                     return $this->adminJson(['data' => DataObject\Service::gridObjectData($object, $allParams['fields'], $requestedLanguage), 'success' => true]);
  1757.                 } catch (\Exception $e) {
  1758.                     return $this->adminJson(['success' => false, 'message' => $e->getMessage()]);
  1759.                 }
  1760.             }
  1761.         } else {
  1762.             // get list of objects
  1763.             $list = $gridHelperService->prepareListingForGrid($allParams, $requestedLanguage, $this->getAdminUser());
  1765.             $beforeListLoadEvent = new GenericEvent($this, [
  1766.                 'list' => $list,
  1767.                 'context' => $allParams
  1768.             ]);
  1769.             $eventDispatcher->dispatch(AdminEvents::OBJECT_LIST_BEFORE_LIST_LOAD, $beforeListLoadEvent);
  1770.             /** @var DataObject\Listing\Concrete $list */
  1771.             $list = $beforeListLoadEvent->getArgument('list');
  1773.             $list->load();
  1775.             $objects = [];
  1776.             foreach ($list->getObjects() as $object) {
  1777.                 $o = DataObject\Service::gridObjectData($object, $allParams['fields'] ?? null, $requestedLanguage);
  1778.                 // Like for treeGetChildsByIdAction, so we respect isAllowed method which can be extended (object DI) for custom permissions, so relying only users_workspaces_object is insufficient and could lead security breach
  1779.                 if ($object->isAllowed('list')) {
  1780.                     $objects[] = $o;
  1781.                 }
  1782.             }
  1784.             $result = ['data' => $objects, 'success' => true, 'total' => $list->getTotalCount()];
  1786.             $afterListLoadEvent = new GenericEvent($this, [
  1787.                 'list' => $result,
  1788.                 'context' => $allParams
  1789.             ]);
  1790.             $eventDispatcher->dispatch(AdminEvents::OBJECT_LIST_AFTER_LIST_LOAD, $afterListLoadEvent);
  1791.             $result = $afterListLoadEvent->getArgument('list');
  1793.             return $this->adminJson($result);
  1794.         }
  1796.         return $this->adminJson(['success' => false]);
  1797.     }
  1799.     /**
  1800.      * @param DataObject\ClassDefinition $class
  1801.      * @param string $key
  1802.      *
  1803.      * @return DataObject\ClassDefinition\Data|null
  1804.      */
  1805.     protected function getFieldDefinition($class, $key)
  1806.     {
  1807.         $fieldDefinition = $class->getFieldDefinition($key);
  1808.         if ($fieldDefinition) {
  1809.             return $fieldDefinition;
  1810.         }
  1812.         $localized = $class->getFieldDefinition('localizedfields');
  1813.         if ($localized instanceof DataObject\ClassDefinition\Data\Localizedfields) {
  1814.             $fieldDefinition = $localized->getFieldDefinition($key);
  1815.         }
  1817.         return $fieldDefinition;
  1818.     }
  1820.     /**
  1821.      * @param string $brickType
  1822.      * @param string $key
  1823.      *
  1824.      * @return DataObject\ClassDefinition\Data|null
  1825.      */
  1826.     protected function getFieldDefinitionFromBrick($brickType, $key)
  1827.     {
  1828.         $brickDefinition = DataObject\Objectbrick\Definition::getByKey($brickType);
  1829.         $fieldDefinition = null;
  1830.         if ($brickDefinition) {
  1831.             $fieldDefinition = $brickDefinition->getFieldDefinition($key);
  1832.         }
  1834.         return $fieldDefinition;
  1835.     }
  1837.     /**
  1838.      * @Route("/copy-info", name="pimcore_admin_dataobject_dataobject_copyinfo", methods={"GET"})
  1839.      *
  1840.      * @param Request $request
  1841.      *
  1842.      * @return JsonResponse
  1843.      */
  1844.     public function copyInfoAction(Request $request)
  1845.     {
  1846.         $transactionId = time();
  1847.         $pasteJobs = [];
  1849.         Tool\Session::useSession(function (AttributeBagInterface $session) use ($transactionId) {
  1850.             $session->set($transactionId, ['idMapping' => []]);
  1851.         }, 'pimcore_copy');
  1853.         if ($request->get('type') == 'recursive' || $request->get('type') == 'recursive-update-references') {
  1854.             $object = DataObject::getById($request->get('sourceId'));
  1856.             // first of all the new parent
  1857.             $pasteJobs[] = [[
  1858.                 'url' => $this->generateUrl('pimcore_admin_dataobject_dataobject_copy'),
  1859.                 'method' => 'POST',
  1860.                 'params' => [
  1861.                     'sourceId' => $request->get('sourceId'),
  1862.                     'targetId' => $request->get('targetId'),
  1863.                     'type' => 'child',
  1864.                     'transactionId' => $transactionId,
  1865.                     'saveParentId' => true
  1866.                 ]
  1867.             ]];
  1869.             if ($object->hasChildren([DataObject\AbstractObject::OBJECT_TYPE_OBJECT, DataObject\AbstractObject::OBJECT_TYPE_FOLDER, DataObject\AbstractObject::OBJECT_TYPE_VARIANT])) {
  1870.                 // get amount of children
  1871.                 $list = new DataObject\Listing();
  1872.                 $list->setCondition('o_path LIKE ' . $list->quote($list->escapeLike($object->getRealFullPath()) . '/%'));
  1873.                 $list->setOrderKey('LENGTH(o_path)', false);
  1874.                 $list->setOrder('ASC');
  1875.                 $list->setObjectTypes([DataObject\AbstractObject::OBJECT_TYPE_OBJECT, DataObject\AbstractObject::OBJECT_TYPE_FOLDER, DataObject\AbstractObject::OBJECT_TYPE_VARIANT]);
  1876.                 $childIds = $list->loadIdList();
  1878.                 if (count($childIds) > 0) {
  1879.                     foreach ($childIds as $id) {
  1880.                         $pasteJobs[] = [[
  1881.                             'url' => $this->generateUrl('pimcore_admin_dataobject_dataobject_copy'),
  1882.                             'method' => 'POST',
  1883.                             'params' => [
  1884.                                 'sourceId' => $id,
  1885.                                 'targetParentId' => $request->get('targetId'),
  1886.                                 'sourceParentId' => $request->get('sourceId'),
  1887.                                 'type' => 'child',
  1888.                                 'transactionId' => $transactionId
  1889.                             ]
  1890.                         ]];
  1891.                     }
  1892.                 }
  1894.                 // add id-rewrite steps
  1895.                 if ($request->get('type') == 'recursive-update-references') {
  1896.                     for ($i = 0; $i < (count($childIds) + 1); $i++) {
  1897.                         $pasteJobs[] = [[
  1898.                             'url' => $this->generateUrl('pimcore_admin_dataobject_dataobject_copyrewriteids'),
  1899.                             'method' => 'PUT',
  1900.                             'params' => [
  1901.                                 'transactionId' => $transactionId,
  1902.                                 '_dc' => uniqid()
  1903.                             ]
  1904.                         ]];
  1905.                     }
  1906.                 }
  1907.             }
  1908.         } elseif ($request->get('type') == 'child' || $request->get('type') == 'replace') {
  1909.             // the object itself is the last one
  1910.             $pasteJobs[] = [[
  1911.                 'url' => $this->generateUrl('pimcore_admin_dataobject_dataobject_copy'),
  1912.                 'method' => 'POST',
  1913.                 'params' => [
  1914.                     'sourceId' => $request->get('sourceId'),
  1915.                     'targetId' => $request->get('targetId'),
  1916.                     'type' => $request->get('type'),
  1917.                     'transactionId' => $transactionId
  1918.                 ]
  1919.             ]];
  1920.         }
  1922.         return $this->adminJson([
  1923.             'pastejobs' => $pasteJobs
  1924.         ]);
  1925.     }
  1927.     /**
  1928.      * @Route("/copy-rewrite-ids", name="pimcore_admin_dataobject_dataobject_copyrewriteids", methods={"PUT"})
  1929.      *
  1930.      * @param Request $request
  1931.      *
  1932.      * @return JsonResponse
  1933.      *
  1934.      * @throws \Exception
  1935.      */
  1936.     public function copyRewriteIdsAction(Request $request)
  1937.     {
  1938.         $transactionId = $request->get('transactionId');
  1940.         $idStore = Tool\Session::useSession(function (AttributeBagInterface $session) use ($transactionId) {
  1941.             return $session->get($transactionId);
  1942.         }, 'pimcore_copy');
  1944.         if (!array_key_exists('rewrite-stack', $idStore)) {
  1945.             $idStore['rewrite-stack'] = array_values($idStore['idMapping']);
  1946.         }
  1948.         $id = array_shift($idStore['rewrite-stack']);
  1949.         $object = DataObject::getById($id);
  1951.         // create rewriteIds() config parameter
  1952.         $rewriteConfig = ['object' => $idStore['idMapping']];
  1954.         $object = DataObject\Service::rewriteIds($object, $rewriteConfig);
  1956.         $object->setUserModification($this->getAdminUser()->getId());
  1957.         $object->save();
  1959.         // write the store back to the session
  1960.         Tool\Session::useSession(function (AttributeBagInterface $session) use ($transactionId, $idStore) {
  1961.             $session->set($transactionId, $idStore);
  1962.         }, 'pimcore_copy');
  1964.         return $this->adminJson([
  1965.             'success' => true,
  1966.             'id' => $id
  1967.         ]);
  1968.     }
  1970.     /**
  1971.      * @Route("/copy", name="pimcore_admin_dataobject_dataobject_copy", methods={"POST"})
  1972.      *
  1973.      * @param Request $request
  1974.      *
  1975.      * @return JsonResponse
  1976.      */
  1977.     public function copyAction(Request $request)
  1978.     {
  1979.         $message = '';
  1980.         $sourceId = intval($request->get('sourceId'));
  1981.         $source = DataObject::getById($sourceId);
  1983.         $session = Tool\Session::get('pimcore_copy');
  1984.         $sessionBag = $session->get($request->get('transactionId'));
  1986.         $targetId = intval($request->get('targetId'));
  1987.         if ($request->get('targetParentId')) {
  1988.             $sourceParent = DataObject::getById($request->get('sourceParentId'));
  1990.             // this is because the key can get the prefix "_copy" if the target does already exists
  1991.             if ($sessionBag['parentId']) {
  1992.                 $targetParent = DataObject::getById($sessionBag['parentId']);
  1993.             } else {
  1994.                 $targetParent = DataObject::getById($request->get('targetParentId'));
  1995.             }
  1997.             $targetPath = preg_replace('@^' . preg_quote($sourceParent->getRealFullPath(), '@') . '@', $targetParent . '/', $source->getRealPath());
  1998.             $target = DataObject::getByPath($targetPath);
  1999.         } else {
  2000.             $target = DataObject::getById($targetId);
  2001.         }
  2003.         if ($target->isAllowed('create')) {
  2004.             $source = DataObject::getById($sourceId);
  2005.             if ($source != null) {
  2006.                 if ($source instanceof DataObject\Concrete && $latestVersion = $source->getLatestVersion()) {
  2007.                     $source = $latestVersion->loadData();
  2008.                     $source->setPublished(false); //as latest version is used which is not published
  2009.                 }
  2011.                 if ($request->get('type') == 'child') {
  2012.                     $newObject = $this->_objectService->copyAsChild($target, $source);
  2014.                     $sessionBag['idMapping'][(int)$source->getId()] = (int)$newObject->getId();
  2016.                     // this is because the key can get the prefix "_copy" if the target does already exists
  2017.                     if ($request->get('saveParentId')) {
  2018.                         $sessionBag['parentId'] = $newObject->getId();
  2019.                     }
  2020.                 } elseif ($request->get('type') == 'replace') {
  2021.                     $this->_objectService->copyContents($target, $source);
  2022.                 }
  2024.                 $session->set($request->get('transactionId'), $sessionBag);
  2025.                 Tool\Session::writeClose();
  2027.                 return $this->adminJson(['success' => true, 'message' => $message]);
  2028.             } else {
  2029.                 Logger::error("could not execute copy/paste, source object with id [ $sourceId ] not found");
  2031.                 return $this->adminJson(['success' => false, 'message' => 'source object not found']);
  2032.             }
  2033.         } else {
  2034.             throw $this->createAccessDeniedHttpException();
  2035.         }
  2036.     }
  2038.     /**
  2039.      * @Route("/preview", name="pimcore_admin_dataobject_dataobject_preview", methods={"GET"})
  2040.      *
  2041.      * @param Request $request
  2042.      *
  2043.      * @return Response|RedirectResponse
  2044.      */
  2045.     public function previewAction(Request $request)
  2046.     {
  2047.         $id = $request->get('id');
  2048.         $object = DataObject\Service::getElementFromSession('object', $id);
  2050.         if ($object instanceof DataObject\Concrete) {
  2051.             $url = $object->getClass()->getPreviewUrl();
  2052.             if ($url) {
  2053.                 // replace named variables
  2054.                 $vars = $object->getObjectVars();
  2055.                 foreach ($vars as $key => $value) {
  2056.                     if (!empty($value) && \is_scalar($value)) {
  2057.                         $url = str_replace('%' . $key, urlencode($value), $url);
  2058.                     } else {
  2059.                         if (strpos($url, '%' . $key) !== false) {
  2060.                             return new Response('No preview available, please ensure that all fields which are required for the preview are filled correctly.');
  2061.                         }
  2062.                     }
  2063.                 }
  2064.                 $url = str_replace('%_locale', $this->getAdminUser()->getLanguage(), $url);
  2065.             } elseif ($linkGenerator = $object->getClass()->getLinkGenerator()) {
  2066.                 $url = $linkGenerator->generate($object, ['preview' => true, 'context' => $this]);
  2067.             }
  2069.             if (!$url) {
  2070.                 return new Response("Preview not available, it seems that there's a problem with this object.");
  2071.             }
  2073.             // replace all remainaing % signs
  2074.             $url = str_replace('%', '%25', $url);
  2076.             $urlParts = parse_url($url);
  2078.             return $this->redirect($urlParts['path'] . '?pimcore_object_preview=' . $id . '&_dc=' . time() . (isset($urlParts['query']) ? '&' . $urlParts['query'] : ''));
  2079.         } else {
  2080.             return new Response("Preview not available, it seems that there's a problem with this object.");
  2081.         }
  2082.     }
  2084.     /**
  2085.      * @param  DataObject\Concrete $object
  2086.      * @param  array $toDelete
  2087.      * @param  array $toAdd
  2088.      * @param  string $ownerFieldName
  2089.      */
  2090.     protected function processRemoteOwnerRelations($object, $toDelete, $toAdd, $ownerFieldName)
  2091.     {
  2092.         $getter = 'get' . ucfirst($ownerFieldName);
  2093.         $setter = 'set' . ucfirst($ownerFieldName);
  2095.         foreach ($toDelete as $id) {
  2096.             $owner = DataObject::getById($id);
  2097.             //TODO: lock ?!
  2098.             if (method_exists($owner, $getter)) {
  2099.                 $currentData = $owner->$getter();
  2100.                 if (is_array($currentData)) {
  2101.                     for ($i = 0; $i < count($currentData); $i++) {
  2102.                         if ($currentData[$i]->getId() == $object->getId()) {
  2103.                             unset($currentData[$i]);
  2104.                             $owner->$setter($currentData);
  2105.                             $owner->setUserModification($this->getAdminUser()->getId());
  2106.                             $owner->save();
  2107.                             Logger::debug('Saved object id [ ' . $owner->getId() . ' ] by remote modification through [' . $object->getId() . '], Action: deleted [ ' . $object->getId() . " ] from [ $ownerFieldName]");
  2108.                             break;
  2109.                         }
  2110.                     }
  2111.                 }
  2112.             }
  2113.         }
  2115.         foreach ($toAdd as $id) {
  2116.             $owner = DataObject::getById($id);
  2117.             //TODO: lock ?!
  2118.             if (method_exists($owner, $getter)) {
  2119.                 $currentData = $owner->$getter();
  2120.                 $currentData[] = $object;
  2122.                 $owner->$setter($currentData);
  2123.                 $owner->setUserModification($this->getAdminUser()->getId());
  2124.                 $owner->save();
  2125.                 Logger::debug('Saved object id [ ' . $owner->getId() . ' ] by remote modification through [' . $object->getId() . '], Action: added [ ' . $object->getId() . " ] to [ $ownerFieldName ]");
  2126.             }
  2127.         }
  2128.     }
  2130.     /**
  2131.      * @param  array $relations
  2132.      * @param  array $value
  2133.      *
  2134.      * @return array
  2135.      */
  2136.     protected function detectDeletedRemoteOwnerRelations($relations, $value)
  2137.     {
  2138.         $originals = [];
  2139.         $changed = [];
  2140.         foreach ($relations as $r) {
  2141.             $originals[] = $r['dest_id'];
  2142.         }
  2143.         if (is_array($value)) {
  2144.             foreach ($value as $row) {
  2145.                 $changed[] = $row['id'];
  2146.             }
  2147.         }
  2148.         $diff = array_diff($originals, $changed);
  2150.         return $diff;
  2151.     }
  2153.     /**
  2154.      * @param  array $relations
  2155.      * @param  array $value
  2156.      *
  2157.      * @return array
  2158.      */
  2159.     protected function detectAddedRemoteOwnerRelations($relations, $value)
  2160.     {
  2161.         $originals = [];
  2162.         $changed = [];
  2163.         foreach ($relations as $r) {
  2164.             $originals[] = $r['dest_id'];
  2165.         }
  2166.         if (is_array($value)) {
  2167.             foreach ($value as $row) {
  2168.                 $changed[] = $row['id'];
  2169.             }
  2170.         }
  2171.         $diff = array_diff($changed, $originals);
  2173.         return $diff;
  2174.     }
  2176.     /**
  2177.      * @param  DataObject\Concrete $object
  2178.      *
  2179.      * @return DataObject\Concrete
  2180.      */
  2181.     protected function getLatestVersion(DataObject\Concrete $object)
  2182.     {
  2183.         $latestVersion = $object->getLatestVersion();
  2184.         if ($latestVersion) {
  2185.             $latestObj = $latestVersion->loadData();
  2186.             if ($latestObj instanceof DataObject\Concrete) {
  2187.                 $object = $latestObj;
  2188.             }
  2189.         }
  2191.         return $object;
  2192.     }
  2194.     /**
  2195.      * @param FilterControllerEvent $event
  2196.      */
  2197.     public function onKernelController(FilterControllerEvent $event)
  2198.     {
  2199.         $isMasterRequest = $event->isMasterRequest();
  2200.         if (!$isMasterRequest) {
  2201.             return;
  2202.         }
  2204.         // check permissions
  2205.         $this->checkPermission('objects');
  2207.         $this->_objectService = new DataObject\Service($this->getAdminUser());
  2208.     }
  2210.     /**
  2211.      * @param FilterResponseEvent $event
  2212.      */
  2213.     public function onKernelResponse(FilterResponseEvent $event)
  2214.     {
  2215.         // nothing to do
  2216.     }
  2217. }