$context =
$request->attributes->
get(PlatformRequest::ATTRIBUTE_CONTEXT_OBJECT
);
if (!
$context instanceof Context
) { throw ApiException::
missingPrivileges([]);
} foreach ($privileges as $privilege) { if ($privilege === 'app'
) { if ($context->
isAllowed('app.all'
)) { return;
} $privilege =
$this->
getAppPrivilege($request);
} if (!
$context->
isAllowed($privilege)) { throw ApiException::
missingPrivileges([$privilege]);
} } } private function getAppPrivilege(Request
$request): string
{ $actionId =
$request->
get('id'
);