permission.php

См. документацию.

<?php
namespace Bitrix\Rest\APAuth;
 
use Bitrix\Main;
use Bitrix\Main\ArgumentException;
use Bitrix\Main\ObjectPropertyException;
use Bitrix\Main\ORM;
use Bitrix\Main\ORM\Data\Internal\DeleteByFilterTrait;
use Bitrix\Main\SystemException;
use Bitrix\Rest\Preset\EventController;

class PermissionTable extends ORM\Data\DataManager
{
    use DeleteByFilterTrait;
 
    protected static $deniedPermission = array(
        'rating', 'entity', 'placement', 'landing_cloud', \CRestUtil::GLOBAL_SCOPE
    );

    public static function getTableName()
    {
        return 'b_rest_ap_permission';
    }

    public static function getMap()
    {
        return array(
            'ID' => array(
                'data_type' => 'integer',
                'primary' => true,
                'autocomplete' => true,
            ),
            'PASSWORD_ID' => array(
                'data_type' => 'integer',
                'required' => true,
            ),
            'PERM' => array(
                'data_type' => 'string',
                'required' => true,
            ),
        );
    }
 
    public static function onPasswordDelete(Main\Entity\Event $event)
    {
        $data = $event->getParameter("id");
        static::deleteByPasswordId($data['ID']);
    }

    public static function deleteByPasswordId($passwordId)
    {
        $dbRes = static::getList(
            array(
                'filter' => array
                (
                    '=PASSWORD_ID' => $passwordId,
                ),
                'select' => array('ID')
            )
        );
        while($perm = $dbRes->fetch())
        {
            static::delete($perm['ID']);
        }
    }
 
    public static function cleanPermissionList(array $permissionList)
    {
        foreach($permissionList as $key => $perm)
        {
            if(in_array($perm, static::$deniedPermission))
            {
                unset($permissionList[$key]);
            }
        }
 
        return array_values($permissionList);
    }
 
    public static function onAfterAdd(Main\Entity\Event $event)
    {
        EventController::onAfterAddApPermission($event);
    }
}