Merge branch 'AC-11439' into cia-2.4.8-beta1-develop-bugfix-05292024

Author: pawan-adobe-security

app/code/Magento/Reports/Controller/Adminhtml/Report/Review.php

@@ -3,6 +3,7 @@
  * Copyright © Magento, Inc. All rights reserved.
  * See COPYING.txt for license details.
  */
+declare(strict_types=1);
 
 /**
  * Review reports admin controller
@@ -11,24 +12,29 @@
  */
 namespace Magento\Reports\Controller\Adminhtml\Report;
 
+use Magento\Backend\App\Action;
+use Magento\Backend\App\Action\Context;
+use Magento\Framework\App\Response\Http\FileFactory;
+
 /**
+ * phpcs:disable Magento2.Classes.AbstractApi
  * @api
  * @since 100.0.2
  */
-abstract class Review extends \Magento\Backend\App\Action
+abstract class Review extends Action
 {
     /**
-     * @var \Magento\Framework\App\Response\Http\FileFactory
+     * @var FileFactory
      */
     protected $_fileFactory;
 
     /**
-     * @param \Magento\Backend\App\Action\Context $context
-     * @param \Magento\Framework\App\Response\Http\FileFactory $fileFactory
+     * @param Context $context
+     * @param FileFactory $fileFactory
      */
     public function __construct(
-        \Magento\Backend\App\Action\Context $context,
-        \Magento\Framework\App\Response\Http\FileFactory $fileFactory
+        Context $context,
+        FileFactory $fileFactory
     ) {
         $this->_fileFactory = $fileFactory;
         parent::__construct($context);
@@ -54,16 +60,20 @@ public function _initAction()
      */
     protected function _isAllowed()
     {
-        switch ($this->getRequest()->getActionName()) {
-            case 'customer':
-                return $this->_authorization->isAllowed('Magento_Reports::review_customer');
-                break;
-            case 'product':
-                return $this->_authorization->isAllowed('Magento_Reports::review_product');
-                break;
-            default:
-                return $this->_authorization->isAllowed('Magento_Reports::review');
-                break;
-        }
+        return match ($this->getRequest()->getActionName()) {
+            'exportCustomerCsv',
+            'exportCustomerExcel',
+            'customer' =>
+                $this->_authorization->isAllowed('Magento_Reports::review_customer'),
+            'exportProductCsv',
+            'exportProductExcel',
+            'exportProductDetailCsv',
+            'exportProductDetailExcel',
+            'productDetail',
+            'product' =>
+                $this->_authorization->isAllowed('Magento_Reports::review_product'),
+            default =>
+                $this->_authorization->isAllowed('Magento_Reports::review'),
+        };
     }
 }