ISSUE-345: check manage campaigns privilege

Author: tatevikg1

src/Messaging/Controller/CampaignController.php

@@ -5,6 +5,7 @@
 namespace PhpList\RestBundle\Messaging\Controller;
 
 use OpenApi\Attributes as OA;
+use PhpList\Core\Domain\Identity\Model\PrivilegeFlag;
 use PhpList\Core\Domain\Messaging\Model\Filter\MessageFilter;
 use PhpList\Core\Domain\Messaging\Model\Message;
 use PhpList\Core\Domain\Messaging\Service\MessageManager;
@@ -219,6 +220,9 @@ public function getMessage(
     public function createMessage(Request $request, MessageNormalizer $normalizer): JsonResponse
     {
         $authUser = $this->requireAuthentication($request);
+        if (!$authUser->getPrivileges()->has(PrivilegeFlag::Campaigns)) {
+            throw $this->createAccessDeniedException('You are not allowed to create campaigns.');
+        }
 
         /** @var CreateMessageRequest $createMessageRequest */
         $createMessageRequest = $this->validator->validate($request, CreateMessageRequest::class);
@@ -290,6 +294,9 @@ public function updateMessage(
         #[MapEntity(mapping: ['messageId' => 'id'])] ?Message $message = null,
     ): JsonResponse {
         $authUser = $this->requireAuthentication($request);
+        if (!$authUser->getPrivileges()->has(PrivilegeFlag::Campaigns)) {
+            throw $this->createAccessDeniedException('You are not allowed to update campaigns.');
+        }
 
         if (!$message) {
             throw $this->createNotFoundException('Campaign not found.');
@@ -348,7 +355,10 @@ public function deleteMessage(
         Request $request,
         #[MapEntity(mapping: ['messageId' => 'id'])] ?Message $message = null
     ): JsonResponse {
-        $this->requireAuthentication($request);
+        $authUser = $this->requireAuthentication($request);
+        if (!$authUser->getPrivileges()->has(PrivilegeFlag::Campaigns)) {
+            throw $this->createAccessDeniedException('You are not allowed to delete campaigns.');
+        }
 
         if (!$message) {
             throw $this->createNotFoundException('Campaign not found.');