type Query {
    eventFavoritesReport: [EventFavoritesReportItem]
        @resolver(class: "Mironsoft\\Event\\Model\\Resolver\\EventFavoritesReport")
        @doc(description: "Admin-only report of favorite counts per event")
}

type EventFavoritesReportItem @doc(description: "One row of the favorites report") {
    event_id: Int!
    title: String!
    favorite_count: Int!
}

<?xml version="1.0"?>
<config xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xsi:noNamespaceSchemaLocation="urn:magento:framework:Acl/etc/acl.xsd">
    <acl>
        <resources>
            <resource id="Magento_Backend::admin">
                <resource id="Mironsoft_Event::event" title="Event Management">
                    <resource id="Mironsoft_Event::event_report"
                              title="View Favorites Report"/>
                </resource>
            </resource>
        </resources>
    </acl>
</config>

<?php

declare(strict_types=1);

namespace Mironsoft\Event\Model\Resolver;

use Magento\Authorization\Model\UserContextInterface;
use Magento\Framework\Authorization\AuthorizationInterface;
use Magento\Framework\GraphQl\Config\Element\Field;
use Magento\Framework\GraphQl\Exception\GraphQlAuthorizationException;
use Magento\Framework\GraphQl\Query\ResolverInterface;
use Magento\Framework\GraphQl\Schema\Type\ResolveInfo;

/**
 * Resolves the eventFavoritesReport query field, restricted to admin users
 * holding the Mironsoft_Event::event_report ACL resource.
 */
class EventFavoritesReport implements ResolverInterface
{
    private const ACL_RESOURCE = 'Mironsoft_Event::event_report';

    /**
     * @param AuthorizationInterface $authorization Checks ACL resources for the current admin user
     */
    public function __construct(
        private readonly AuthorizationInterface $authorization,
    ) {
    }

    /**
     * Returns favorite counts per event, restricted to authorized admin users.
     *
     * @param Field $field Resolved GraphQL field configuration
     * @param mixed $context Resolver context, expected to carry an admin token
     * @param ResolveInfo $info GraphQL resolve tree info
     * @param array|null $value Parent resolver's value, unused for a top-level field
     * @param array|null $args Arguments passed to this field
     * @return array<int, array<string, mixed>>
     * @throws GraphQlAuthorizationException
     */
    public function resolve(
        Field $field,
        $context,
        ResolveInfo $info,
        ?array $value = null,
        ?array $args = null
    ): array {
        if ($context->getUserType() !== UserContextInterface::USER_TYPE_ADMIN
            || !$this->authorization->isAllowed(self::ACL_RESOURCE)
        ) {
            throw new GraphQlAuthorizationException(
                __('You are not authorized to view the favorites report.')
            );
        }

        // ... Report-Daten laden und als EventFavoritesReportItem[] zurueckgeben
        return [];
    }
}