src/AppBundle/Controller/ui/RoleController.php line 41

Open in your IDE?
  1. <?php
  3. namespace AppBundle\Controller\ui;
  5. use Psr\Container\ContainerInterface;
  6. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  7. use Symfony\Component\HttpFoundation\Request;
  8. use Symfony\Component\HttpFoundation\Response;
  9. use Symfony\Component\Routing\Annotation\Route;
  10. use Psr\Log\LoggerInterface;
  11. use AppBundle\Service\HttpHelper;
  12. use AppBundle\Service\PdoHelper;
  13. use AppBundle\CSPro\CSProResponse;
  14. use AppBundle\CSPro\RolesRepository;
  15. use AppBundle\CSPro\User\RolePermissions;
  16. use AppBundle\CSPro\User\RoleDictionaryPermissions;
  17. use AppBundle\CSPro\User\Role;
  19. class RoleController extends AbstractController implements TokenAuthenticatedController {
  21.     private $rolesRepository;
  23.     public function __construct(private HttpHelper $client, private PdoHelper $pdo, private LoggerInterface $logger) {
  24.         
  25.     }
  27.     //overrider the setcontainer to get access to container parameters and initiailize the roles repository
  28.     public function setContainer(ContainerInterface $container = null): ?ContainerInterface {
  29.         $this->rolesRepository = new RolesRepository($this->pdo, $this->logger);
  30.         return parent::setContainer($container);
  31.     }
  33.     #[Route('/roles', name: 'roles', methods: ['GET'])]
  34.     public function viewRoleListAction(Request $request): Response {
  36.         $this->denyAccessUnlessGranted('ROLE_ROLES_ALL');
  37.         return $this->render('roles.twig', []);
  38.     }
  40.     #[Route('/getRoles', name: 'get-roles', methods: ['GET'])]
  41.     public function getRoles(Request $request): Response {
  43.         $this->denyAccessUnlessGranted('ROLE_ROLES_ALL');
  45.         $roles = $this->rolesRepository->getRoles();
  46.         $this->logger->debug((is_countable($roles) ? count($roles) : 0) . ' the roles are' . json_encode($roles, JSON_THROW_ON_ERROR));
  48.         $response = new Response(json_encode($roles, JSON_THROW_ON_ERROR));
  49.         $response->headers->set('Content-Length', strlen($response->getContent()));
  50.         return $response;
  51.     }
  53.     #[Route('/getDictionaryPermissions', name: 'get-dictionary-permissions', methods: ['GET'])]
  54.     public function getDictionaryPermissions(Request $request): Response {
  55.         $this->denyAccessUnlessGranted('ROLE_ROLES_ALL');
  57.         $rowNumber = $request->get('rowNumber');
  59.         if (isset($rowNumber)) {
  60.             $roles = $this->rolesRepository->getRoles();
  61.             //$this->logger->error('getRoles() = ' . print_r($roles, true));
  62.             // Get dictionaryPermissions for the role at rowNumber
  63.             $dictionaryPermissions = $roles[$rowNumber]->rolePermissions->dictionaryPermissions;
  64.         } else {
  65.             $role = $this->rolesRepository->getNewRole();
  66.             $dictionaryPermissions = $role->rolePermissions->dictionaryPermissions;
  67.         }
  69.         $indexedDictionaryPermissions = [];
  70.         foreach ($dictionaryPermissions as $dp) {
  71.             // Convert associative array to indexed array, so DataTable's row container is indexed
  72.             $indexedDictionaryPermissions[] = $dp;
  73.         }
  75.         $response = new Response(json_encode($indexedDictionaryPermissions, JSON_THROW_ON_ERROR));
  76.         $response->headers->set('Content-Length', strlen($response->getContent()));
  77.         return $response;
  78.     }
  80.     #[Route('/addRole', name: 'add-role', methods: ['POST'])]
  81.     public function addRole(Request $request): CSProResponse {
  82.         $this->denyAccessUnlessGranted('ROLE_ROLES_ALL');
  84.         $roleName = $request->get('roleName');
  85.         $dataPermission = $request->get('dataPermission');
  86.         $reportsPermission = $request->get('reportsPermission');
  87.         $appsPermission = $request->get('appsPermission');
  88.         $usersPermission = $request->get('usersPermission');
  89.         $rolesPermission = $request->get('rolesPermission');
  90.         $dictionaryPermissions = $request->get('dictionaryPermissions');
  91.         $settingsPermission = $request->get('settingsPermissions');
  93.         is_array($dictionaryPermissions) ?: $dictionaryPermissions = [];
  95.         $role = new Role();
  96.         $role->name = $roleName;
  97.         $dataPermission === "true" ? $role->rolePermissions->setPermission(RolePermissions::DATA_ALL, true) : $role->rolePermissions->setPermission(RolePermissions::DATA_ALL, false);
  98.         $reportsPermission === "true" ? $role->rolePermissions->setPermission(RolePermissions::REPORTS_ALL, true) : $role->rolePermissions->setPermission(RolePermissions::REPORTS_ALL, false);
  99.         $appsPermission === "true" ? $role->rolePermissions->setPermission(RolePermissions::APPS_ALL, true) : $role->rolePermissions->setPermission(RolePermissions::APPS_ALL, false);
  100.         $usersPermission === "true" ? $role->rolePermissions->setPermission(RolePermissions::USERS_ALL, true) : $role->rolePermissions->setPermission(RolePermissions::USERS_ALL, false);
  101.         $rolesPermission === "true" ? $role->rolePermissions->setPermission(RolePermissions::ROLES_ALL, true) : $role->rolePermissions->setPermission(RolePermissions::ROLES_ALL, false);
  102.         $settingsPermission === "true" ? $role->rolePermissions->setPermission(RolePermissions::SETTINGS_ALL, true) : $role->rolePermissions->setPermission(RolePermissions::SETTINGS_ALL, false);
  104.         foreach ($dictionaryPermissions as $dp) {
  105.             $roleDictPermission = new RoleDictionaryPermissions($dp['dictionaryname'], $dp['dictionaryId'], $dp['syncUpload'], $dp['syncDownload'], $dp['dictionarylabel']);
  106.             $role->rolePermissions->setDictionaryPermission($roleDictPermission);
  107.         }
  109.         try {
  110.             $result = $this->rolesRepository->addRole($role);
  111.             if ($result === true)
  112.                 return new CSProResponse(json_encode("Added $roleName", JSON_THROW_ON_ERROR), CSProResponse::HTTP_OK);
  113.             else
  114.                 return new CSProResponse(json_encode("Failed to add $roleName", JSON_THROW_ON_ERROR), CSProResponse::HTTP_INTERNAL_SERVER_ERROR);
  115.         } catch (\Exception $e) {
  116.             $result['code'] = 500;
  117.             $duplicateErrMsg = 'Integrity constraint violation: 1062';
  118.             if (strpos($e->getMessage(), $duplicateErrMsg)) {
  119.                 $result['description'] = "Role name `$roleName` already in use";
  120.             } else {
  121.                 $result['description'] = "Failed to add role: $roleName";
  122.             }
  123.             $response = new CSProResponse();
  124.             $response->setError($result['code'], 'add_role_error', $result ['description']);
  125.             return $response;
  126.         }
  127.     }
  129.     #[Route('/editRole', name: 'edit-role', methods: ['POST'])]
  130.     public function editRole(Request $request): CSProResponse {
  131.         $this->denyAccessUnlessGranted('ROLE_ROLES_ALL');
  133.         $roleId = $request->get('roleId');
  134.         $roleName = $request->get('roleName');
  135.         $dataPermission = $request->get('dataPermission');
  136.         $reportsPermission = $request->get('reportsPermission');
  137.         $appsPermission = $request->get('appsPermission');
  138.         $usersPermission = $request->get('usersPermission');
  139.         $rolesPermission = $request->get('rolesPermission');
  140.         $dictionaryPermissions = $request->get('dictionaryPermissions');
  141.         $settingsPermission = $request->get('settingsPermission');
  143.         $role = new Role();
  144.         $role->name = $roleName;
  145.         $role->id = $roleId;
  146.         $dataPermission === "true" ? $role->rolePermissions->setPermission(RolePermissions::DATA_ALL, true) : $role->rolePermissions->setPermission(RolePermissions::DATA_ALL, false);
  147.         $reportsPermission === "true" ? $role->rolePermissions->setPermission(RolePermissions::REPORTS_ALL, true) : $role->rolePermissions->setPermission(RolePermissions::REPORTS_ALL, false);
  148.         $appsPermission === "true" ? $role->rolePermissions->setPermission(RolePermissions::APPS_ALL, true) : $role->rolePermissions->setPermission(RolePermissions::APPS_ALL, false);
  149.         $usersPermission === "true" ? $role->rolePermissions->setPermission(RolePermissions::USERS_ALL, true) : $role->rolePermissions->setPermission(RolePermissions::USERS_ALL, false);
  150.         $rolesPermission === "true" ? $role->rolePermissions->setPermission(RolePermissions::ROLES_ALL, true) : $role->rolePermissions->setPermission(RolePermissions::ROLES_ALL, false);
  151.         $settingsPermission === "true" ? $role->rolePermissions->setPermission(RolePermissions::SETTINGS_ALL, true) : $role->rolePermissions->setPermission(RolePermissions::SETTINGS_ALL, false);
  153.         foreach ($dictionaryPermissions as $dp) {
  154.             //$this->logger->error($dp['dictionaryname']);
  155.             //$this->logger->error($dp['dictionaryId']);
  156.             //$this->logger->error($dp['syncUpload']);
  157.             //$this->logger->error($dp['syncDownload']);
  159.             $roleDictPermission = new RoleDictionaryPermissions($dp['dictionaryname'], $dp['dictionaryId'], $dp['syncUpload'], $dp['syncDownload'], $dp['dictionarylabel']);
  160.             $role->rolePermissions->setDictionaryPermission($roleDictPermission);
  161.             //$this->logger->error('Check dictionary permissions: ' . print_r($role->rolePermissions->getDictionaryPermissions($dp['dictionaryname']), true));
  162.         }
  164.         try {
  165.             // $this->logger->debug('printing role ' . print_r($role, true));
  166.             $result = $this->rolesRepository->saveRole($role);
  167.             if ($result === true)
  168.                 return new CSProResponse(json_encode("Saved permissions for $roleName", JSON_THROW_ON_ERROR), CSProResponse::HTTP_OK);
  169.             else
  170.                 return new CSProResponse(json_encode("Failed to save permissions for $roleName", JSON_THROW_ON_ERROR), CSProResponse::HTTP_INTERNAL_SERVER_ERROR);
  171.         } catch (\Exception) {
  172.             $result['code'] = 500;
  173.             $result['description'] = "Failed to save permissions for $roleName";
  174.             $response = new CSProResponse();
  175.             $response->setError($result['code'], 'save_permissions_error', $result ['description']);
  176.             return $response;
  177.         }
  178.     }
  180.     #[Route('/deleteRole', name: 'delete-role', methods: ['DELETE'])]
  181.     public function DeleteRole(Request $request): Response {
  183.         $this->denyAccessUnlessGranted('ROLE_ROLES_ALL');
  185.         $result = [];
  186.         $roleName = $request->get('roleName');
  187.         $roleId = $request->get('roleId');
  189.         $count = $this->rolesRepository->deleteRole($roleId, $roleName);
  191.         if ($count) {
  192.             $result['description'] = 'Deleted role ' . $roleName;
  193.             $this->logger->debug($result['description']);
  194.             $response = new Response(json_encode($result['description'], JSON_THROW_ON_ERROR), Response::HTTP_OK);
  195.         } else {
  196.             $result['description'] = 'Failed deleting role ' . $roleName;
  197.             $response = new Response(json_encode($result['description'], JSON_THROW_ON_ERROR), Response::HTTP_NOT_FOUND);
  198.         }
  199.         $response->headers->set('Content-Length', strlen($response->getContent()));
  200.         return $response;
  201.     }
  203. }