AC-12448: Enhancement on Admin cart functionality

Author: rizwankhgl

app/code/Magento/Customer/Controller/Adminhtml/Cart/Product/Composite/Cart.php

@@ -12,6 +12,7 @@
 use Magento\Quote\Model\Quote\Item;
 use Magento\Quote\Model\QuoteFactory;
 use Magento\Quote\Model\ResourceModel\QuoteItemRetriever;
+use Magento\Framework\AuthorizationInterface;
 
 /**
  * Catalog composite product configuration controller
@@ -60,21 +61,30 @@ abstract class Cart extends \Magento\Backend\App\Action
      * @var QuoteItemRetriever
      */
     private $quoteItemRetriever;
+
+    /**
+     * @var AuthorizationInterface
+     */
+    protected $_authorization;
+
     /**
      * @param Action\Context $context
      * @param CartRepositoryInterface $quoteRepository
      * @param QuoteFactory $quoteFactory
      * @param QuoteItemRetriever $quoteItemRetriever
+     * @param AuthorizationInterface $authorization
      */
     public function __construct(
         Action\Context $context,
         CartRepositoryInterface $quoteRepository,
         QuoteFactory $quoteFactory,
-        QuoteItemRetriever $quoteItemRetriever
+        QuoteItemRetriever $quoteItemRetriever,
+        AuthorizationInterface $authorization
     ) {
         $this->quoteRepository = $quoteRepository;
         $this->quoteFactory = $quoteFactory;
         $this->quoteItemRetriever = $quoteItemRetriever;
+        $this->_authorization = $authorization;
         parent::__construct($context);
     }
 
@@ -112,4 +122,13 @@ protected function _initData()
 
         return $this;
     }
+
+    /**
+     * @inheritdoc
+     */
+    protected function _isAllowed()
+    {
+        return $this->_authorization->isAllowed(self::ADMIN_RESOURCE)
+            && $this->_authorization->isAllowed('Magento_Cart::cart');
+    }
 }

app/code/Magento/Customer/Controller/Adminhtml/Index/Cart.php

@@ -3,6 +3,8 @@
  * Copyright © Magento, Inc. All rights reserved.
  * See COPYING.txt for license details.
  */
+declare(strict_types=1);
+
 namespace Magento\Customer\Controller\Adminhtml\Index;
 
 use Magento\Backend\App\Action\Context;
@@ -43,6 +45,7 @@
  *
  * @SuppressWarnings(PHPMD.CouplingBetweenObjects)
  * @deprecated 101.0.0
+ * @see no alternatives
  */
 class Cart extends BaseAction implements HttpGetActionInterface, HttpPostActionInterface
 {
@@ -55,6 +58,13 @@ class Cart extends BaseAction implements HttpGetActionInterface, HttpPostActionI
      */
     private $storeManager;
 
+    /**
+     * Authorization level of a basic admin cart
+     *
+     * @see _isAllowed()
+     */
+    public const ADMIN_RESOURCE = 'Magento_Cart::cart';
+
     /**
      * Constructor
      *

app/code/Magento/Customer/Controller/Adminhtml/Index/Carts.php

@@ -3,10 +3,23 @@
  * Copyright © Magento, Inc. All rights reserved.
  * See COPYING.txt for license details.
  */
+declare(strict_types=1);
+
 namespace Magento\Customer\Controller\Adminhtml\Index;
 
-class Carts extends \Magento\Customer\Controller\Adminhtml\Index
+use Magento\Customer\Controller\Adminhtml\Index as BaseAction;
+use Magento\Framework\App\Action\HttpGetActionInterface;
+use Magento\Framework\App\Action\HttpPostActionInterface as HttpPostActionInterface;
+
+class Carts extends BaseAction implements HttpGetActionInterface, HttpPostActionInterface
 {
+    /**
+     * Authorization level of a basic admin cart
+     *
+     * @see _isAllowed()
+     */
+    public const ADMIN_RESOURCE = 'Magento_Cart::cart';
+
     /**
      * Get shopping carts from all websites for specified client
      *

dev/tests/static/testsuite/Magento/Test/Integrity/_files/blacklist/undeclared_dependency/ce.php

@@ -1,10 +1,13 @@
 <?php
 /**
- * Black list for the @see \Magento\Test\Integrity\DependencyTest::testUndeclared()
- *
  * Copyright © Magento, Inc. All rights reserved.
  * See COPYING.txt for license details.
+ *
+ * Black list for the @see \Magento\Test\Integrity\DependencyTest::testUndeclared()
  */
 return [
     'app/code/Magento/Paypal/Model/AbstractConfig.php' => ['Magento\Cart'],
+    'app/code/Magento/Customer/Controller/Adminhtml/Index/Cart.php' => ['Magento\Cart'],
+    'app/code/Magento/Customer/Controller/Adminhtml/Cart/Product/Composite/Cart.php' => ['Magento\Cart'],
+    'app/code/Magento/Customer/Controller/Adminhtml/Index/Carts.php' => ['Magento\Cart'],
 ];