refactor(core): centralize reserved system user identity

Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
This commit is contained in:
2026-08-28 19:35:00 -04:00
parent 9978c54431
commit 3c50de8ff4
+2 -2
View File
@@ -23,8 +23,8 @@ use KTXF\Resource\Identifier\EntityIdentifier;
use KTXF\Resource\Identifier\ResourceIdentifier; use KTXF\Resource\Identifier\ResourceIdentifier;
use KTXF\Resource\Identifier\ResourceIdentifiers; use KTXF\Resource\Identifier\ResourceIdentifiers;
use KTXF\Resource\Identifier\ServiceIdentifier; use KTXF\Resource\Identifier\ServiceIdentifier;
use KTXF\Mail\Provider\ProviderBaseInterface;
use KTXF\Resource\Provider\ResourceServiceLocationInterface; use KTXF\Resource\Provider\ResourceServiceLocationInterface;
use KTXF\Resource\SystemIdentity;
use KTXF\Routing\Attributes\AuthenticatedRoute; use KTXF\Routing\Attributes\AuthenticatedRoute;
use KTXM\MailManager\Manager; use KTXM\MailManager\Manager;
use Psr\Log\LoggerInterface; use Psr\Log\LoggerInterface;
@@ -86,7 +86,7 @@ class DefaultController extends ControllerAbstract {
// acting-user override: only the reserved system context is permitted, // acting-user override: only the reserved system context is permitted,
// gated on the system mail management permission // gated on the system mail management permission
if ($user !== null && $user !== $userId) { if ($user !== null && $user !== $userId) {
if ($user !== ProviderBaseInterface::USER_SYSTEM || !$this->identityContext->hasPermission('mail_manager.system')) { if ($user !== SystemIdentity::USER || !$this->identityContext->hasPermission('mail_manager.system')) {
return new JsonResponse([ return new JsonResponse([
'version' => $version, 'version' => $version,
'transaction' => $transaction, 'transaction' => $transaction,