Merge pull request #1132 from meyerbaptiste/fix_normalizer_ignored_attributes

Fix ignoring attributes for the abstract item normalizer

Author: dunglas

src/Serializer/AbstractItemNormalizer.php

@@ -132,8 +132,9 @@ protected function getAllowedAttributes($classOrObject, array $context, $attribu
             $propertyMetadata = $this->propertyMetadataFactory->create($context['resource_class'], $propertyName, $options);
 
             if (
-                (isset($context['api_normalize']) && $propertyMetadata->isReadable()) ||
-                (isset($context['api_denormalize']) && $propertyMetadata->isWritable())
+                $this->isAllowedAttribute($classOrObject, $propertyName, null, $context) &&
+                ((isset($context['api_normalize']) && $propertyMetadata->isReadable()) ||
+                (isset($context['api_denormalize']) && $propertyMetadata->isWritable()))
             ) {
                 $allowedAttributes[] = $propertyName;
             }

tests/Serializer/AbstractItemNormalizerTest.php

@@ -76,18 +76,22 @@ public function testNormalize()
 
         $dummy = new Dummy();
         $dummy->setName('foo');
+        $dummy->setAlias('ignored');
         $dummy->setRelatedDummy($relatedDummy);
         $dummy->relatedDummies->add(new RelatedDummy());
 
         $propertyNameCollectionFactoryProphecy = $this->prophesize(PropertyNameCollectionFactoryInterface::class);
         $propertyNameCollectionFactoryProphecy->create(Dummy::class, [])->willReturn(
-            new PropertyNameCollection(['name', 'relatedDummy', 'relatedDummies'])
+            new PropertyNameCollection(['name', 'alias', 'relatedDummy', 'relatedDummies'])
         )->shouldBeCalled();
 
         $propertyMetadataFactoryProphecy = $this->prophesize(PropertyMetadataFactoryInterface::class);
         $propertyMetadataFactoryProphecy->create(Dummy::class, 'name', [])->willReturn(
             new PropertyMetadata(new Type(Type::BUILTIN_TYPE_STRING), '', true)
         )->shouldBeCalled();
+        $propertyMetadataFactoryProphecy->create(Dummy::class, 'alias', [])->willReturn(
+            new PropertyMetadata(new Type(Type::BUILTIN_TYPE_STRING), '', true)
+        )->shouldBeCalled();
         $propertyMetadataFactoryProphecy->create(Dummy::class, 'relatedDummy', [])->willReturn(
             new PropertyMetadata(new Type(Type::BUILTIN_TYPE_OBJECT, false, RelatedDummy::class), '', true, false, false)
         )->shouldBeCalled();
@@ -134,6 +138,7 @@ public function testNormalize()
             $propertyAccesorProphecy->reveal(),
         ]);
         $normalizer->setSerializer($serializerProphecy->reveal());
+        $normalizer->setIgnoredAttributes(['alias']);
 
         $this->assertEquals([
             'name' => 'foo',