danielebarchiesi@4: <?php
danielebarchiesi@4: 
danielebarchiesi@4: /**
danielebarchiesi@4:  * A generic Entity handler.
danielebarchiesi@4:  *
danielebarchiesi@4:  * The generic base implementation has a variety of overrides to workaround
danielebarchiesi@4:  * core's largely deficient entity handling.
danielebarchiesi@4:  */
danielebarchiesi@4: class EntityReference_SelectionHandler_Generic implements EntityReference_SelectionHandler {
danielebarchiesi@4: 
danielebarchiesi@4:   /**
danielebarchiesi@4:    * Implements EntityReferenceHandler::getInstance().
danielebarchiesi@4:    */
danielebarchiesi@4:   public static function getInstance($field, $instance = NULL, $entity_type = NULL, $entity = NULL) {
danielebarchiesi@4:     $target_entity_type = $field['settings']['target_type'];
danielebarchiesi@4: 
danielebarchiesi@4:     // Check if the entity type does exist and has a base table.
danielebarchiesi@4:     $entity_info = entity_get_info($target_entity_type);
danielebarchiesi@4:     if (empty($entity_info['base table'])) {
danielebarchiesi@4:       return EntityReference_SelectionHandler_Broken::getInstance($field, $instance);
danielebarchiesi@4:     }
danielebarchiesi@4: 
danielebarchiesi@4:     if (class_exists($class_name = 'EntityReference_SelectionHandler_Generic_' . $target_entity_type)) {
danielebarchiesi@4:       return new $class_name($field, $instance, $entity_type, $entity);
danielebarchiesi@4:     }
danielebarchiesi@4:     else {
danielebarchiesi@4:       return new EntityReference_SelectionHandler_Generic($field, $instance, $entity_type, $entity);
danielebarchiesi@4:     }
danielebarchiesi@4:   }
danielebarchiesi@4: 
danielebarchiesi@4:   protected function __construct($field, $instance = NULL, $entity_type = NULL, $entity = NULL) {
danielebarchiesi@4:     $this->field = $field;
danielebarchiesi@4:     $this->instance = $instance;
danielebarchiesi@4:     $this->entity_type = $entity_type;
danielebarchiesi@4:     $this->entity = $entity;
danielebarchiesi@4:   }
danielebarchiesi@4: 
danielebarchiesi@4:   /**
danielebarchiesi@4:    * Implements EntityReferenceHandler::settingsForm().
danielebarchiesi@4:    */
danielebarchiesi@4:   public static function settingsForm($field, $instance) {
danielebarchiesi@4:     $entity_info = entity_get_info($field['settings']['target_type']);
danielebarchiesi@4: 
danielebarchiesi@4:     // Merge-in default values.
danielebarchiesi@4:     $field['settings']['handler_settings'] += array(
danielebarchiesi@4:       'target_bundles' => array(),
danielebarchiesi@4:       'sort' => array(
danielebarchiesi@4:         'type' => 'none',
danielebarchiesi@4:       )
danielebarchiesi@4:     );
danielebarchiesi@4: 
danielebarchiesi@4:     if (!empty($entity_info['entity keys']['bundle'])) {
danielebarchiesi@4:       $bundles = array();
danielebarchiesi@4:       foreach ($entity_info['bundles'] as $bundle_name => $bundle_info) {
danielebarchiesi@4:         $bundles[$bundle_name] = $bundle_info['label'];
danielebarchiesi@4:       }
danielebarchiesi@4: 
danielebarchiesi@4:       $form['target_bundles'] = array(
danielebarchiesi@4:         '#type' => 'checkboxes',
danielebarchiesi@4:         '#title' => t('Target bundles'),
danielebarchiesi@4:         '#options' => $bundles,
danielebarchiesi@4:         '#default_value' => $field['settings']['handler_settings']['target_bundles'],
danielebarchiesi@4:         '#size' => 6,
danielebarchiesi@4:         '#multiple' => TRUE,
danielebarchiesi@4:         '#description' => t('The bundles of the entity type that can be referenced. Optional, leave empty for all bundles.'),
danielebarchiesi@4:         '#element_validate' => array('_entityreference_element_validate_filter'),
danielebarchiesi@4:       );
danielebarchiesi@4:     }
danielebarchiesi@4:     else {
danielebarchiesi@4:       $form['target_bundles'] = array(
danielebarchiesi@4:         '#type' => 'value',
danielebarchiesi@4:         '#value' => array(),
danielebarchiesi@4:       );
danielebarchiesi@4:     }
danielebarchiesi@4: 
danielebarchiesi@4:     $form['sort']['type'] = array(
danielebarchiesi@4:       '#type' => 'select',
danielebarchiesi@4:       '#title' => t('Sort by'),
danielebarchiesi@4:       '#options' => array(
danielebarchiesi@4:         'none' => t("Don't sort"),
danielebarchiesi@4:         'property' => t('A property of the base table of the entity'),
danielebarchiesi@4:         'field' => t('A field attached to this entity'),
danielebarchiesi@4:       ),
danielebarchiesi@4:       '#ajax' => TRUE,
danielebarchiesi@4:       '#limit_validation_errors' => array(),
danielebarchiesi@4:       '#default_value' => $field['settings']['handler_settings']['sort']['type'],
danielebarchiesi@4:     );
danielebarchiesi@4: 
danielebarchiesi@4:     $form['sort']['settings'] = array(
danielebarchiesi@4:       '#type' => 'container',
danielebarchiesi@4:       '#attributes' => array('class' => array('entityreference-settings')),
danielebarchiesi@4:       '#process' => array('_entityreference_form_process_merge_parent'),
danielebarchiesi@4:     );
danielebarchiesi@4: 
danielebarchiesi@4:     if ($field['settings']['handler_settings']['sort']['type'] == 'property') {
danielebarchiesi@4:       // Merge-in default values.
danielebarchiesi@4:       $field['settings']['handler_settings']['sort'] += array(
danielebarchiesi@4:         'property' => NULL,
danielebarchiesi@4:       );
danielebarchiesi@4: 
danielebarchiesi@4:       $form['sort']['settings']['property'] = array(
danielebarchiesi@4:         '#type' => 'select',
danielebarchiesi@4:         '#title' => t('Sort property'),
danielebarchiesi@4:         '#required' => TRUE,
danielebarchiesi@4:         '#options' => drupal_map_assoc($entity_info['schema_fields_sql']['base table']),
danielebarchiesi@4:         '#default_value' => $field['settings']['handler_settings']['sort']['property'],
danielebarchiesi@4:       );
danielebarchiesi@4:     }
danielebarchiesi@4:     elseif ($field['settings']['handler_settings']['sort']['type'] == 'field') {
danielebarchiesi@4:       // Merge-in default values.
danielebarchiesi@4:       $field['settings']['handler_settings']['sort'] += array(
danielebarchiesi@4:         'field' => NULL,
danielebarchiesi@4:       );
danielebarchiesi@4: 
danielebarchiesi@4:       $fields = array();
danielebarchiesi@4:       foreach (field_info_instances($field['settings']['target_type']) as $bundle_name => $bundle_instances) {
danielebarchiesi@4:         foreach ($bundle_instances as $instance_name => $instance_info) {
danielebarchiesi@4:           $field_info = field_info_field($instance_name);
danielebarchiesi@4:           foreach ($field_info['columns'] as $column_name => $column_info) {
danielebarchiesi@4:             $fields[$instance_name . ':' . $column_name] = t('@label (column @column)', array('@label' => $instance_info['label'], '@column' => $column_name));
danielebarchiesi@4:           }
danielebarchiesi@4:         }
danielebarchiesi@4:       }
danielebarchiesi@4: 
danielebarchiesi@4:       $form['sort']['settings']['field'] = array(
danielebarchiesi@4:         '#type' => 'select',
danielebarchiesi@4:         '#title' => t('Sort field'),
danielebarchiesi@4:         '#required' => TRUE,
danielebarchiesi@4:         '#options' => $fields,
danielebarchiesi@4:         '#default_value' => $field['settings']['handler_settings']['sort']['field'],
danielebarchiesi@4:       );
danielebarchiesi@4:     }
danielebarchiesi@4: 
danielebarchiesi@4:     if ($field['settings']['handler_settings']['sort']['type'] != 'none') {
danielebarchiesi@4:       // Merge-in default values.
danielebarchiesi@4:       $field['settings']['handler_settings']['sort'] += array(
danielebarchiesi@4:         'direction' => 'ASC',
danielebarchiesi@4:       );
danielebarchiesi@4: 
danielebarchiesi@4:       $form['sort']['settings']['direction'] = array(
danielebarchiesi@4:         '#type' => 'select',
danielebarchiesi@4:         '#title' => t('Sort direction'),
danielebarchiesi@4:         '#required' => TRUE,
danielebarchiesi@4:         '#options' => array(
danielebarchiesi@4:           'ASC' => t('Ascending'),
danielebarchiesi@4:           'DESC' => t('Descending'),
danielebarchiesi@4:         ),
danielebarchiesi@4:         '#default_value' => $field['settings']['handler_settings']['sort']['direction'],
danielebarchiesi@4:       );
danielebarchiesi@4:     }
danielebarchiesi@4: 
danielebarchiesi@4:     return $form;
danielebarchiesi@4:   }
danielebarchiesi@4: 
danielebarchiesi@4:   /**
danielebarchiesi@4:    * Implements EntityReferenceHandler::getReferencableEntities().
danielebarchiesi@4:    */
danielebarchiesi@4:   public function getReferencableEntities($match = NULL, $match_operator = 'CONTAINS', $limit = 0) {
danielebarchiesi@4:     $options = array();
danielebarchiesi@4:     $entity_type = $this->field['settings']['target_type'];
danielebarchiesi@4: 
danielebarchiesi@4:     $query = $this->buildEntityFieldQuery($match, $match_operator);
danielebarchiesi@4:     if ($limit > 0) {
danielebarchiesi@4:       $query->range(0, $limit);
danielebarchiesi@4:     }
danielebarchiesi@4: 
danielebarchiesi@4:     $results = $query->execute();
danielebarchiesi@4: 
danielebarchiesi@4:     if (!empty($results[$entity_type])) {
danielebarchiesi@4:       $entities = entity_load($entity_type, array_keys($results[$entity_type]));
danielebarchiesi@4:       foreach ($entities as $entity_id => $entity) {
danielebarchiesi@4:         list(,, $bundle) = entity_extract_ids($entity_type, $entity);
danielebarchiesi@4:         $options[$bundle][$entity_id] = check_plain($this->getLabel($entity));
danielebarchiesi@4:       }
danielebarchiesi@4:     }
danielebarchiesi@4: 
danielebarchiesi@4:     return $options;
danielebarchiesi@4:   }
danielebarchiesi@4: 
danielebarchiesi@4:   /**
danielebarchiesi@4:    * Implements EntityReferenceHandler::countReferencableEntities().
danielebarchiesi@4:    */
danielebarchiesi@4:   public function countReferencableEntities($match = NULL, $match_operator = 'CONTAINS') {
danielebarchiesi@4:     $query = $this->buildEntityFieldQuery($match, $match_operator);
danielebarchiesi@4:     return $query
danielebarchiesi@4:       ->count()
danielebarchiesi@4:       ->execute();
danielebarchiesi@4:   }
danielebarchiesi@4: 
danielebarchiesi@4:   /**
danielebarchiesi@4:    * Implements EntityReferenceHandler::validateReferencableEntities().
danielebarchiesi@4:    */
danielebarchiesi@4:   public function validateReferencableEntities(array $ids) {
danielebarchiesi@4:     if ($ids) {
danielebarchiesi@4:       $entity_type = $this->field['settings']['target_type'];
danielebarchiesi@4:       $query = $this->buildEntityFieldQuery();
danielebarchiesi@4:       $query->entityCondition('entity_id', $ids, 'IN');
danielebarchiesi@4:       $result = $query->execute();
danielebarchiesi@4:       if (!empty($result[$entity_type])) {
danielebarchiesi@4:         return array_keys($result[$entity_type]);
danielebarchiesi@4:       }
danielebarchiesi@4:     }
danielebarchiesi@4: 
danielebarchiesi@4:     return array();
danielebarchiesi@4:   }
danielebarchiesi@4: 
danielebarchiesi@4:   /**
danielebarchiesi@4:    * Implements EntityReferenceHandler::validateAutocompleteInput().
danielebarchiesi@4:    */
danielebarchiesi@4:   public function validateAutocompleteInput($input, &$element, &$form_state, $form) {
danielebarchiesi@4:       $entities = $this->getReferencableEntities($input, '=', 6);
danielebarchiesi@4:       if (empty($entities)) {
danielebarchiesi@4:         // Error if there are no entities available for a required field.
danielebarchiesi@4:         form_error($element, t('There are no entities matching "%value"', array('%value' => $input)));
danielebarchiesi@4:       }
danielebarchiesi@4:       elseif (count($entities) > 5) {
danielebarchiesi@4:         // Error if there are more than 5 matching entities.
danielebarchiesi@4:         form_error($element, t('Many entities are called %value. Specify the one you want by appending the id in parentheses, like "@value (@id)"', array(
danielebarchiesi@4:           '%value' => $input,
danielebarchiesi@4:           '@value' => $input,
danielebarchiesi@4:           '@id' => key($entities),
danielebarchiesi@4:         )));
danielebarchiesi@4:       }
danielebarchiesi@4:       elseif (count($entities) > 1) {
danielebarchiesi@4:         // More helpful error if there are only a few matching entities.
danielebarchiesi@4:         $multiples = array();
danielebarchiesi@4:         foreach ($entities as $id => $name) {
danielebarchiesi@4:           $multiples[] = $name . ' (' . $id . ')';
danielebarchiesi@4:         }
danielebarchiesi@4:         form_error($element, t('Multiple entities match this reference; "%multiple"', array('%multiple' => implode('", "', $multiples))));
danielebarchiesi@4:       }
danielebarchiesi@4:       else {
danielebarchiesi@4:         // Take the one and only matching entity.
danielebarchiesi@4:         return key($entities);
danielebarchiesi@4:       }
danielebarchiesi@4:   }
danielebarchiesi@4: 
danielebarchiesi@4:   /**
danielebarchiesi@4:    * Build an EntityFieldQuery to get referencable entities.
danielebarchiesi@4:    */
danielebarchiesi@4:   protected function buildEntityFieldQuery($match = NULL, $match_operator = 'CONTAINS') {
danielebarchiesi@4:     $query = new EntityFieldQuery();
danielebarchiesi@4:     $query->entityCondition('entity_type', $this->field['settings']['target_type']);
danielebarchiesi@4:     if (!empty($this->field['settings']['handler_settings']['target_bundles'])) {
danielebarchiesi@4:       $query->entityCondition('bundle', $this->field['settings']['handler_settings']['target_bundles'], 'IN');
danielebarchiesi@4:     }
danielebarchiesi@4:     if (isset($match)) {
danielebarchiesi@4:       $entity_info = entity_get_info($this->field['settings']['target_type']);
danielebarchiesi@4:       if (isset($entity_info['entity keys']['label'])) {
danielebarchiesi@4:         $query->propertyCondition($entity_info['entity keys']['label'], $match, $match_operator);
danielebarchiesi@4:       }
danielebarchiesi@4:     }
danielebarchiesi@4: 
danielebarchiesi@4:     // Add a generic entity access tag to the query.
danielebarchiesi@4:     $query->addTag($this->field['settings']['target_type'] . '_access');
danielebarchiesi@4:     $query->addTag('entityreference');
danielebarchiesi@4:     $query->addMetaData('field', $this->field);
danielebarchiesi@4:     $query->addMetaData('entityreference_selection_handler', $this);
danielebarchiesi@4: 
danielebarchiesi@4:     // Add the sort option.
danielebarchiesi@4:     if (!empty($this->field['settings']['handler_settings']['sort'])) {
danielebarchiesi@4:       $sort_settings = $this->field['settings']['handler_settings']['sort'];
danielebarchiesi@4:       if ($sort_settings['type'] == 'property') {
danielebarchiesi@4:         $query->propertyOrderBy($sort_settings['property'], $sort_settings['direction']);
danielebarchiesi@4:       }
danielebarchiesi@4:       elseif ($sort_settings['type'] == 'field') {
danielebarchiesi@4:         list($field, $column) = explode(':', $sort_settings['field'], 2);
danielebarchiesi@4:         $query->fieldOrderBy($field, $column, $sort_settings['direction']);
danielebarchiesi@4:       }
danielebarchiesi@4:     }
danielebarchiesi@4: 
danielebarchiesi@4:     return $query;
danielebarchiesi@4:   }
danielebarchiesi@4: 
danielebarchiesi@4:   /**
danielebarchiesi@4:    * Implements EntityReferenceHandler::entityFieldQueryAlter().
danielebarchiesi@4:    */
danielebarchiesi@4:   public function entityFieldQueryAlter(SelectQueryInterface $query) {
danielebarchiesi@4: 
danielebarchiesi@4:   }
danielebarchiesi@4: 
danielebarchiesi@4:   /**
danielebarchiesi@4:    * Helper method: pass a query to the alteration system again.
danielebarchiesi@4:    *
danielebarchiesi@4:    * This allow Entity Reference to add a tag to an existing query, to ask
danielebarchiesi@4:    * access control mechanisms to alter it again.
danielebarchiesi@4:    */
danielebarchiesi@4:   protected function reAlterQuery(SelectQueryInterface $query, $tag, $base_table) {
danielebarchiesi@4:     // Save the old tags and metadata.
danielebarchiesi@4:     // For some reason, those are public.
danielebarchiesi@4:     $old_tags = $query->alterTags;
danielebarchiesi@4:     $old_metadata = $query->alterMetaData;
danielebarchiesi@4: 
danielebarchiesi@4:     $query->alterTags = array($tag => TRUE);
danielebarchiesi@4:     $query->alterMetaData['base_table'] = $base_table;
danielebarchiesi@4:     drupal_alter(array('query', 'query_' . $tag), $query);
danielebarchiesi@4: 
danielebarchiesi@4:     // Restore the tags and metadata.
danielebarchiesi@4:     $query->alterTags = $old_tags;
danielebarchiesi@4:     $query->alterMetaData = $old_metadata;
danielebarchiesi@4:   }
danielebarchiesi@4: 
danielebarchiesi@4:   /**
danielebarchiesi@4:    * Implements EntityReferenceHandler::getLabel().
danielebarchiesi@4:    */
danielebarchiesi@4:   public function getLabel($entity) {
danielebarchiesi@4:     return entity_label($this->field['settings']['target_type'], $entity);
danielebarchiesi@4:   }
danielebarchiesi@4: 
danielebarchiesi@4:   /**
danielebarchiesi@4:    * Ensure a base table exists for the query.
danielebarchiesi@4:    *
danielebarchiesi@4:    * If we have a field-only query, we want to assure we have a base-table
danielebarchiesi@4:    * so we can later alter the query in entityFieldQueryAlter().
danielebarchiesi@4:    *
danielebarchiesi@4:    * @param $query
danielebarchiesi@4:    *   The Select query.
danielebarchiesi@4:    *
danielebarchiesi@4:    * @return
danielebarchiesi@4:    *   The alias of the base-table.
danielebarchiesi@4:    */
danielebarchiesi@4:   public function ensureBaseTable(SelectQueryInterface $query) {
danielebarchiesi@4:     $tables = $query->getTables();
danielebarchiesi@4: 
danielebarchiesi@4:     // Check the current base table.
danielebarchiesi@4:     foreach ($tables as $table) {
danielebarchiesi@4:       if (empty($table['join'])) {
danielebarchiesi@4:         $alias = $table['alias'];
danielebarchiesi@4:         break;
danielebarchiesi@4:       }
danielebarchiesi@4:     }
danielebarchiesi@4: 
danielebarchiesi@4:     if (strpos($alias, 'field_data_') !== 0) {
danielebarchiesi@4:       // The existing base-table is the correct one.
danielebarchiesi@4:       return $alias;
danielebarchiesi@4:     }
danielebarchiesi@4: 
danielebarchiesi@4:     // Join the known base-table.
danielebarchiesi@4:     $target_type = $this->field['settings']['target_type'];
danielebarchiesi@4:     $entity_info = entity_get_info($target_type);
danielebarchiesi@4:     $id = $entity_info['entity keys']['id'];
danielebarchiesi@4:     // Return the alias of the table.
danielebarchiesi@4:     return $query->innerJoin($target_type, NULL, "$target_type.$id = $alias.entity_id");
danielebarchiesi@4:   }
danielebarchiesi@4: }
danielebarchiesi@4: 
danielebarchiesi@4: /**
danielebarchiesi@4:  * Override for the Node type.
danielebarchiesi@4:  *
danielebarchiesi@4:  * This only exists to workaround core bugs.
danielebarchiesi@4:  */
danielebarchiesi@4: class EntityReference_SelectionHandler_Generic_node extends EntityReference_SelectionHandler_Generic {
danielebarchiesi@4:   public function entityFieldQueryAlter(SelectQueryInterface $query) {
danielebarchiesi@4:     // Adding the 'node_access' tag is sadly insufficient for nodes: core
danielebarchiesi@4:     // requires us to also know about the concept of 'published' and
danielebarchiesi@4:     // 'unpublished'. We need to do that as long as there are no access control
danielebarchiesi@4:     // modules in use on the site. As long as one access control module is there,
danielebarchiesi@4:     // it is supposed to handle this check.
danielebarchiesi@4:     if (!user_access('bypass node access') && !count(module_implements('node_grants'))) {
danielebarchiesi@4:       $base_table = $this->ensureBaseTable($query);
danielebarchiesi@4:       $query->condition("$base_table.status", NODE_PUBLISHED);
danielebarchiesi@4:     }
danielebarchiesi@4:   }
danielebarchiesi@4: }
danielebarchiesi@4: 
danielebarchiesi@4: /**
danielebarchiesi@4:  * Override for the User type.
danielebarchiesi@4:  *
danielebarchiesi@4:  * This only exists to workaround core bugs.
danielebarchiesi@4:  */
danielebarchiesi@4: class EntityReference_SelectionHandler_Generic_user extends EntityReference_SelectionHandler_Generic {
danielebarchiesi@4:   public function buildEntityFieldQuery($match = NULL, $match_operator = 'CONTAINS') {
danielebarchiesi@4:     $query = parent::buildEntityFieldQuery($match, $match_operator);
danielebarchiesi@4: 
danielebarchiesi@4:     // The user entity doesn't have a label column.
danielebarchiesi@4:     if (isset($match)) {
danielebarchiesi@4:       $query->propertyCondition('name', $match, $match_operator);
danielebarchiesi@4:     }
danielebarchiesi@4: 
danielebarchiesi@4:     // Adding the 'user_access' tag is sadly insufficient for users: core
danielebarchiesi@4:     // requires us to also know about the concept of 'blocked' and
danielebarchiesi@4:     // 'active'.
danielebarchiesi@4:     if (!user_access('administer users')) {
danielebarchiesi@4:       $query->propertyCondition('status', 1);
danielebarchiesi@4:     }
danielebarchiesi@4:     return $query;
danielebarchiesi@4:   }
danielebarchiesi@4: 
danielebarchiesi@4:   public function entityFieldQueryAlter(SelectQueryInterface $query) {
danielebarchiesi@4:     if (user_access('administer users')) {
danielebarchiesi@4:       // In addition, if the user is administrator, we need to make sure to
danielebarchiesi@4:       // match the anonymous user, that doesn't actually have a name in the
danielebarchiesi@4:       // database.
danielebarchiesi@4:       $conditions = &$query->conditions();
danielebarchiesi@4:       foreach ($conditions as $key => $condition) {
danielebarchiesi@4:         if ($key !== '#conjunction' && is_string($condition['field']) && $condition['field'] === 'users.name') {
danielebarchiesi@4:           // Remove the condition.
danielebarchiesi@4:           unset($conditions[$key]);
danielebarchiesi@4: 
danielebarchiesi@4:           // Re-add the condition and a condition on uid = 0 so that we end up
danielebarchiesi@4:           // with a query in the form:
danielebarchiesi@4:           //    WHERE (name LIKE :name) OR (:anonymous_name LIKE :name AND uid = 0)
danielebarchiesi@4:           $or = db_or();
danielebarchiesi@4:           $or->condition($condition['field'], $condition['value'], $condition['operator']);
danielebarchiesi@4:           // Sadly, the Database layer doesn't allow us to build a condition
danielebarchiesi@4:           // in the form ':placeholder = :placeholder2', because the 'field'
danielebarchiesi@4:           // part of a condition is always escaped.
danielebarchiesi@4:           // As a (cheap) workaround, we separately build a condition with no
danielebarchiesi@4:           // field, and concatenate the field and the condition separately.
danielebarchiesi@4:           $value_part = db_and();
danielebarchiesi@4:           $value_part->condition('anonymous_name', $condition['value'], $condition['operator']);
danielebarchiesi@4:           $value_part->compile(Database::getConnection(), $query);
danielebarchiesi@4:           $or->condition(db_and()
danielebarchiesi@4:             ->where(str_replace('anonymous_name', ':anonymous_name', (string) $value_part), $value_part->arguments() + array(':anonymous_name' => format_username(user_load(0))))
danielebarchiesi@4:             ->condition('users.uid', 0)
danielebarchiesi@4:           );
danielebarchiesi@4:           $query->condition($or);
danielebarchiesi@4:         }
danielebarchiesi@4:       }
danielebarchiesi@4:     }
danielebarchiesi@4:   }
danielebarchiesi@4: }
danielebarchiesi@4: 
danielebarchiesi@4: /**
danielebarchiesi@4:  * Override for the Comment type.
danielebarchiesi@4:  *
danielebarchiesi@4:  * This only exists to workaround core bugs.
danielebarchiesi@4:  */
danielebarchiesi@4: class EntityReference_SelectionHandler_Generic_comment extends EntityReference_SelectionHandler_Generic {
danielebarchiesi@4:   public function entityFieldQueryAlter(SelectQueryInterface $query) {
danielebarchiesi@4:     // Adding the 'comment_access' tag is sadly insufficient for comments: core
danielebarchiesi@4:     // requires us to also know about the concept of 'published' and
danielebarchiesi@4:     // 'unpublished'.
danielebarchiesi@4:     if (!user_access('administer comments')) {
danielebarchiesi@4:       $base_table = $this->ensureBaseTable($query);
danielebarchiesi@4:       $query->condition("$base_table.status", COMMENT_PUBLISHED);
danielebarchiesi@4:     }
danielebarchiesi@4: 
danielebarchiesi@4:     // The Comment module doesn't implement any proper comment access,
danielebarchiesi@4:     // and as a consequence doesn't make sure that comments cannot be viewed
danielebarchiesi@4:     // when the user doesn't have access to the node.
danielebarchiesi@4:     $tables = $query->getTables();
danielebarchiesi@4:     $base_table = key($tables);
danielebarchiesi@4:     $node_alias = $query->innerJoin('node', 'n', '%alias.nid = ' . $base_table . '.nid');
danielebarchiesi@4:     // Pass the query to the node access control.
danielebarchiesi@4:     $this->reAlterQuery($query, 'node_access', $node_alias);
danielebarchiesi@4: 
danielebarchiesi@4:     // Alas, the comment entity exposes a bundle, but doesn't have a bundle column
danielebarchiesi@4:     // in the database. We have to alter the query ourself to go fetch the
danielebarchiesi@4:     // bundle.
danielebarchiesi@4:     $conditions = &$query->conditions();
danielebarchiesi@4:     foreach ($conditions as $key => &$condition) {
danielebarchiesi@4:       if ($key !== '#conjunction' && is_string($condition['field']) && $condition['field'] === 'node_type') {
danielebarchiesi@4:         $condition['field'] = $node_alias . '.type';
danielebarchiesi@4:         foreach ($condition['value'] as &$value) {
danielebarchiesi@4:           if (substr($value, 0, 13) == 'comment_node_') {
danielebarchiesi@4:             $value = substr($value, 13);
danielebarchiesi@4:           }
danielebarchiesi@4:         }
danielebarchiesi@4:         break;
danielebarchiesi@4:       }
danielebarchiesi@4:     }
danielebarchiesi@4: 
danielebarchiesi@4:     // Passing the query to node_query_node_access_alter() is sadly
danielebarchiesi@4:     // insufficient for nodes.
danielebarchiesi@4:     // @see EntityReferenceHandler_node::entityFieldQueryAlter()
danielebarchiesi@4:     if (!user_access('bypass node access') && !count(module_implements('node_grants'))) {
danielebarchiesi@4:       $query->condition($node_alias . '.status', 1);
danielebarchiesi@4:     }
danielebarchiesi@4:   }
danielebarchiesi@4: }
danielebarchiesi@4: 
danielebarchiesi@4: /**
danielebarchiesi@4:  * Override for the File type.
danielebarchiesi@4:  *
danielebarchiesi@4:  * This only exists to workaround core bugs.
danielebarchiesi@4:  */
danielebarchiesi@4: class EntityReference_SelectionHandler_Generic_file extends EntityReference_SelectionHandler_Generic {
danielebarchiesi@4:   public function entityFieldQueryAlter(SelectQueryInterface $query) {
danielebarchiesi@4:     // Core forces us to know about 'permanent' vs. 'temporary' files.
danielebarchiesi@4:     $tables = $query->getTables();
danielebarchiesi@4:     $base_table = key($tables);
danielebarchiesi@4:     $query->condition('status', FILE_STATUS_PERMANENT);
danielebarchiesi@4: 
danielebarchiesi@4:     // Access control to files is a very difficult business. For now, we are not
danielebarchiesi@4:     // going to give it a shot.
danielebarchiesi@4:     // @todo: fix this when core access control is less insane.
danielebarchiesi@4:     return $query;
danielebarchiesi@4:   }
danielebarchiesi@4: 
danielebarchiesi@4:   public function getLabel($entity) {
danielebarchiesi@4:     // The file entity doesn't have a label. More over, the filename is
danielebarchiesi@4:     // sometimes empty, so use the basename in that case.
danielebarchiesi@4:     return $entity->filename !== '' ? $entity->filename : basename($entity->uri);
danielebarchiesi@4:   }
danielebarchiesi@4: }
danielebarchiesi@4: 
danielebarchiesi@4: /**
danielebarchiesi@4:  * Override for the Taxonomy term type.
danielebarchiesi@4:  *
danielebarchiesi@4:  * This only exists to workaround core bugs.
danielebarchiesi@4:  */
danielebarchiesi@4: class EntityReference_SelectionHandler_Generic_taxonomy_term extends EntityReference_SelectionHandler_Generic {
danielebarchiesi@4:   public function entityFieldQueryAlter(SelectQueryInterface $query) {
danielebarchiesi@4:     // The Taxonomy module doesn't implement any proper taxonomy term access,
danielebarchiesi@4:     // and as a consequence doesn't make sure that taxonomy terms cannot be viewed
danielebarchiesi@4:     // when the user doesn't have access to the vocabulary.
danielebarchiesi@4:     $base_table = $this->ensureBaseTable($query);
danielebarchiesi@4:     $vocabulary_alias = $query->innerJoin('taxonomy_vocabulary', 'n', '%alias.vid = ' . $base_table . '.vid');
danielebarchiesi@4:     $query->addMetadata('base_table', $vocabulary_alias);
danielebarchiesi@4:     // Pass the query to the taxonomy access control.
danielebarchiesi@4:     $this->reAlterQuery($query, 'taxonomy_vocabulary_access', $vocabulary_alias);
danielebarchiesi@4: 
danielebarchiesi@4:     // Also, the taxonomy term entity exposes a bundle, but doesn't have a bundle
danielebarchiesi@4:     // column in the database. We have to alter the query ourself to go fetch
danielebarchiesi@4:     // the bundle.
danielebarchiesi@4:     $conditions = &$query->conditions();
danielebarchiesi@4:     foreach ($conditions as $key => &$condition) {
danielebarchiesi@4:       if ($key !== '#conjunction' && is_string($condition['field']) && $condition['field'] === 'vocabulary_machine_name') {
danielebarchiesi@4:         $condition['field'] = $vocabulary_alias . '.machine_name';
danielebarchiesi@4:         break;
danielebarchiesi@4:       }
danielebarchiesi@4:     }
danielebarchiesi@4:   }
danielebarchiesi@4: 
danielebarchiesi@4:   /**
danielebarchiesi@4:    * Implements EntityReferenceHandler::getReferencableEntities().
danielebarchiesi@4:    */
danielebarchiesi@4:   public function getReferencableEntities($match = NULL, $match_operator = 'CONTAINS', $limit = 0) {
danielebarchiesi@4:     if ($match || $limit) {
danielebarchiesi@4:       return parent::getReferencableEntities($match , $match_operator, $limit);
danielebarchiesi@4:     }
danielebarchiesi@4: 
danielebarchiesi@4:     $options = array();
danielebarchiesi@4:     $entity_type = $this->field['settings']['target_type'];
danielebarchiesi@4: 
danielebarchiesi@4:     // We imitate core by calling taxonomy_get_tree().
danielebarchiesi@4:     $entity_info = entity_get_info('taxonomy_term');
danielebarchiesi@4:     $bundles = !empty($this->field['settings']['handler_settings']['target_bundles']) ? $this->field['settings']['handler_settings']['target_bundles'] : array_keys($entity_info['bundles']);
danielebarchiesi@4: 
danielebarchiesi@4:     foreach ($bundles as $bundle) {
danielebarchiesi@4:       if ($vocabulary = taxonomy_vocabulary_machine_name_load($bundle)) {
danielebarchiesi@4:         if ($terms = taxonomy_get_tree($vocabulary->vid, 0)) {
danielebarchiesi@4:           foreach ($terms as $term) {
danielebarchiesi@4:             $options[$vocabulary->machine_name][$term->tid] = str_repeat('-', $term->depth) . check_plain($term->name);
danielebarchiesi@4:           }
danielebarchiesi@4:         }
danielebarchiesi@4:       }
danielebarchiesi@4:     }
danielebarchiesi@4: 
danielebarchiesi@4:     return $options;
danielebarchiesi@4:   }
danielebarchiesi@4: }