forbid link unlink for one relationships

2023-10-26 17:24:33 +03:00
parent ad1804fa3c
commit 6d576de211
1 changed files with 17 additions and 0 deletions
@@ -1520,6 +1520,23 @@ class Service implements Crud,
     */
    protected function processForbiddenLinkEditCheck(string $link): void
    {
+        $type = $this->entityManager
+            ->getDefs()
+            ->getEntity($this->entityType)
+            ->tryGetRelation($link)
+            ?->getType();
+
+        if (
+            $type &&
+            !in_array($type, [
+                Entity::MANY_MANY,
+                Entity::HAS_MANY,
+                Entity::HAS_CHILDREN,
+            ])
+        ) {
+            throw new Forbidden("Only manyMany, hasMany & hasChildren relations are allowed.");
+        }
+
        $forbiddenLinkList = $this->acl
            ->getScopeForbiddenLinkList($this->entityType, AclTable::ACTION_EDIT);