app, $request, $response); if (!$this->app->accountManager->get($request->getHeader()->getAccount())->hasPermission( PermissionType::READ, $this->app->orgId, $this->app->appName, self::MODULE_ID, PermissionState::SETTINGS) ) { $view->setTemplate('/Web/Backend/Error/403_inline'); $response->getHeader()->setStatusCode(RequestStatusCode::R_403); return $view; } $settings = $this->app->appSettings->get([ 1000000009, 1000000019, 1000000020, 1000000021, 1000000022, 1000000023, 1000000027, 1000000028, ]); $view->setTemplate('/Modules/Admin/Theme/Backend/settings-general'); $view->addData('nav', $this->app->moduleManager->get('Navigation')->createNavigationMid(1000104001, $request, $response)); $view->setData('oname', $settings[1000000009]); $view->setData('country', $settings[1000000019]); $view->setData('timezone', $settings[1000000021]); $view->setData('timeformat', $settings[1000000022]); $view->setData('language', $settings[1000000020]); $view->setData('currency', $settings[1000000023]); $view->setData('decimal_point', $settings[1000000027]); $view->setData('thousands_sep', $settings[1000000028]); $view->setData('countries', $settings[1000000028]); return $view; } /** * @param RequestAbstract $request Request * @param ResponseAbstract $response Response * @param mixed $data Generic data * * @return \Serializable * * @since 1.0.0 * @codeCoverageIgnore */ public function viewAccountList(RequestAbstract $request, ResponseAbstract $response, $data = null) : \Serializable { $view = new View($this->app, $request, $response); if (!$this->app->accountManager->get($request->getHeader()->getAccount())->hasPermission( PermissionType::READ, $this->app->orgId, $this->app->appName, self::MODULE_ID, PermissionState::ACCOUNT) ) { $view->setTemplate('/Web/Backend/Error/403_inline'); $response->getHeader()->setStatusCode(RequestStatusCode::R_403); return $view; } $view->setTemplate('/Modules/Admin/Theme/Backend/accounts-list'); $view->addData('nav', $this->app->moduleManager->get('Navigation')->createNavigationMid(1000104001, $request, $response)); $view->setData('list:elements', AccountMapper::getNewest(50)); $view->setData('list:count', 1); return $view; } /** * @param RequestAbstract $request Request * @param ResponseAbstract $response Response * @param mixed $data Generic data * * @return \Serializable * * @since 1.0.0 * @codeCoverageIgnore */ public function viewAccountSettings(RequestAbstract $request, ResponseAbstract $response, $data = null) : \Serializable { $view = new View($this->app, $request, $response); if (!$this->app->accountManager->get($request->getHeader()->getAccount())->hasPermission( PermissionType::READ, $this->app->orgId, $this->app->appName, self::MODULE_ID, PermissionState::ACCOUNT) ) { $view->setTemplate('/Web/Backend/Error/403_inline'); $response->getHeader()->setStatusCode(RequestStatusCode::R_403); return $view; } $view->setTemplate('/Modules/Admin/Theme/Backend/accounts-single'); $view->addData('nav', $this->app->moduleManager->get('Navigation')->createNavigationMid(1000104001, $request, $response)); $view->addData('account', AccountMapper::get((int) $request->getData('id'))); $permissions = AccountPermissionMapper::getFor((int) $request->getData('id'), 'account'); if (!isset($permissions) || $permissions instanceof NullAccountPermission) { $permissions = []; } elseif (!is_array($permissions)) { $permissions = [$permissions]; } $view->addData('permissions', $permissions); return $view; } /** * @param RequestAbstract $request Request * @param ResponseAbstract $response Response * @param mixed $data Generic data * * @return \Serializable * * @since 1.0.0 * @codeCoverageIgnore */ public function viewAccountCreate(RequestAbstract $request, ResponseAbstract $response, $data = null) : \Serializable { $view = new View($this->app, $request, $response); if (!$this->app->accountManager->get($request->getHeader()->getAccount())->hasPermission( PermissionType::CREATE, $this->app->orgId, $this->app->appName, self::MODULE_ID, PermissionState::ACCOUNT) ) { $view->setTemplate('/Web/Backend/Error/403_inline'); $response->getHeader()->setStatusCode(RequestStatusCode::R_403); return $view; } $view->setTemplate('/Modules/Admin/Theme/Backend/accounts-create'); $view->addData('nav', $this->app->moduleManager->get('Navigation')->createNavigationMid(1000104001, $request, $response)); return $view; } /** * @param RequestAbstract $request Request * @param ResponseAbstract $response Response * @param mixed $data Generic data * * @return \Serializable * * @since 1.0.0 * @codeCoverageIgnore */ public function viewGroupList(RequestAbstract $request, ResponseAbstract $response, $data = null) : \Serializable { $view = new View($this->app, $request, $response); if (!$this->app->accountManager->get($request->getHeader()->getAccount())->hasPermission( PermissionType::READ, $this->app->orgId, $this->app->appName, self::MODULE_ID, PermissionState::GROUP) ) { $view->setTemplate('/Web/Backend/Error/403_inline'); $response->getHeader()->setStatusCode(RequestStatusCode::R_403); return $view; } $view->setTemplate('/Modules/Admin/Theme/Backend/groups-list'); $view->addData('nav', $this->app->moduleManager->get('Navigation')->createNavigationMid(1000103001, $request, $response)); $view->setData('list:elements', GroupMapper::getAll()); return $view; } /** * @param RequestAbstract $request Request * @param ResponseAbstract $response Response * @param mixed $data Generic data * * @return \Serializable * * @since 1.0.0 * @codeCoverageIgnore */ public function viewGroupSettings(RequestAbstract $request, ResponseAbstract $response, $data = null) : \Serializable { $view = new View($this->app, $request, $response); if (!$this->app->accountManager->get($request->getHeader()->getAccount())->hasPermission( PermissionType::MODIFY, $this->app->orgId, $this->app->appName, self::MODULE_ID, PermissionState::GROUP) ) { $view->setTemplate('/Web/Backend/Error/403_inline'); $response->getHeader()->setStatusCode(RequestStatusCode::R_403); return $view; } $view->setTemplate('/Modules/Admin/Theme/Backend/groups-single'); $view->addData('nav', $this->app->moduleManager->get('Navigation')->createNavigationMid(1000103001, $request, $response)); $view->addData('group', GroupMapper::get((int) $request->getData('id'))); $permissions = GroupPermissionMapper::getFor((int) $request->getData('id'), 'group'); if (!isset($permissions) || $permissions instanceof NullGroupPermission) { $permissions = []; } elseif (!is_array($permissions)) { $permissions = [$permissions]; } $view->addData('permissions', $permissions); return $view; } /** * @param RequestAbstract $request Request * @param ResponseAbstract $response Response * @param mixed $data Generic data * * @return \Serializable * * @since 1.0.0 * @codeCoverageIgnore */ public function viewGroupCreate(RequestAbstract $request, ResponseAbstract $response, $data = null) : \Serializable { $view = new View($this->app, $request, $response); if (!$this->app->accountManager->get($request->getHeader()->getAccount())->hasPermission( PermissionType::CREATE, $this->app->orgId, $this->app->appName, self::MODULE_ID, PermissionState::GROUP) ) { $view->setTemplate('/Web/Backend/Error/403_inline'); $response->getHeader()->setStatusCode(RequestStatusCode::R_403); return $view; } $view->setTemplate('/Modules/Admin/Theme/Backend/groups-create'); $view->addData('nav', $this->app->moduleManager->get('Navigation')->createNavigationMid(1000103001, $request, $response)); return $view; } /** * @param RequestAbstract $request Request * @param ResponseAbstract $response Response * @param mixed $data Generic data * * @return \Serializable * * @since 1.0.0 * @codeCoverageIgnore */ public function viewModuleList(RequestAbstract $request, ResponseAbstract $response, $data = null) : \Serializable { $view = new View($this->app, $request, $response); if (!$this->app->accountManager->get($request->getHeader()->getAccount())->hasPermission( PermissionType::READ, $this->app->orgId, $this->app->appName, self::MODULE_ID, PermissionState::MODULE) ) { $view->setTemplate('/Web/Backend/Error/403_inline'); $response->getHeader()->setStatusCode(RequestStatusCode::R_403); return $view; } $view->setTemplate('/Modules/Admin/Theme/Backend/modules-list'); return $view; } /** * @param RequestAbstract $request Request * @param ResponseAbstract $response Response * @param mixed $data Generic data * * @return \Serializable * * @since 1.0.0 * @codeCoverageIgnore */ public function viewModuleProfile(RequestAbstract $request, ResponseAbstract $response, $data = null) : \Serializable { $view = new View($this->app, $request, $response); if (!$this->app->accountManager->get($request->getHeader()->getAccount())->hasPermission( PermissionType::READ, $this->app->orgId, $this->app->appName, self::MODULE_ID, PermissionState::MODULE) ) { $view->setTemplate('/Web/Backend/Error/403_inline'); $response->getHeader()->setStatusCode(RequestStatusCode::R_403); return $view; } $view->setTemplate('/Modules/Admin/Theme/Backend/modules-single'); return $view; } /** * @param RequestAbstract $request Request * @param ResponseAbstract $response Response * @param mixed $data Generic data * * @return void * * @since 1.0.0 */ public function apiSettingsGet(RequestAbstract $request, ResponseAbstract $response, $data = null) /* : void */ { if (!$this->app->accountManager->get($request->getHeader()->getAccount())->hasPermission( PermissionType::READ, $this->app->orgId, $this->app->appName, self::MODULE_ID, PermissionState::SETTINGS) ) { $response->set('settings_read', null); $response->getHeader()->setStatusCode(RequestStatusCode::R_403); return; } $response->set($request->__toString(), $this->app->appSettings->get((int) $request->getData('id'))); } /** * @param RequestAbstract $request Request * @param ResponseAbstract $response Response * @param mixed $data Generic data * * @return void * * @since 1.0.0 */ public function apiSettingsSet(RequestAbstract $request, ResponseAbstract $response, $data = null) /* : void */ { if (!$this->app->accountManager->get($request->getHeader()->getAccount())->hasPermission( PermissionType::MODIFY, $this->app->orgId, $this->app->appName, self::MODULE_ID, PermissionState::SETTINGS) ) { $response->set('settings_update', null); $response->getHeader()->setStatusCode(RequestStatusCode::R_403); return; } $success = $this->app->appSettings->set( json_decode((string) $request->getData('settings'), true), true ); $response->set($request->__toString(), $success); } /** * @param RequestAbstract $request Request * @param ResponseAbstract $response Response * @param mixed $data Generic data * * @return void * * @since 1.0.0 */ public function apiGroupGet(RequestAbstract $request, ResponseAbstract $response, $data = null) /* : void */ { if (!$this->app->accountManager->get($request->getHeader()->getAccount())->hasPermission( PermissionType::READ, $this->app->orgId, $this->app->appName, self::MODULE_ID, PermissionState::GROUP) ) { $response->set('group_read', null); $response->getHeader()->setStatusCode(RequestStatusCode::R_403); return; } $group = GroupMapper::get((int) $request->getData('id')); $response->set($request->__toString(), $group->jsonSerialize()); } /** * @param RequestAbstract $request Request * @param ResponseAbstract $response Response * @param mixed $data Generic data * * @return void * * @since 1.0.0 */ public function apiGroupSet(RequestAbstract $request, ResponseAbstract $response, $data = null) /* : void */ { if (!$this->app->accountManager->get($request->getHeader()->getAccount())->hasPermission( PermissionType::MODIFY, $this->app->orgId, $this->app->appName, self::MODULE_ID, PermissionState::GROUP) ) { $response->set('group_update', null); $response->getHeader()->setStatusCode(RequestStatusCode::R_403); return; } $group = GroupMapper::get((int) $request->getData('id')); $group->setName((string) ($request->getData('name') ?? $group->getName())); $group->setDescription(Markdown::parse((string) ($request->getData('description') ?? $group->getDescription()))); $group->setDescriptionRaw((string) ($request->getData('description') ?? $group->getDescriptionRaw())); GroupMapper::update($group); $response->set($request->__toString(), $group->jsonSerialize()); } /** * @param RequestAbstract $request Request * * @return array * * @since 1.0.0 */ private function validateGroupCreate(RequestAbstract $request) : array { $val = []; if ( ($val['name'] = empty($request->getData('name'))) || ($val['status'] = ( $request->getData('status') === null || !GroupStatus::isValidValue((int) $request->getData('status')) )) ) { return $val; } return []; } /** * @param RequestAbstract $request Request * @param ResponseAbstract $response Response * @param mixed $data Generic data * * @return void * * @since 1.0.0 */ public function apiGroupCreate(RequestAbstract $request, ResponseAbstract $response, $data = null) /* : void */ { if (!$this->app->accountManager->get($request->getHeader()->getAccount())->hasPermission( PermissionType::CREATE, $this->app->orgId, $this->app->appName, self::MODULE_ID, PermissionState::GROUP) ) { $response->set('group_create', null); $response->getHeader()->setStatusCode(RequestStatusCode::R_403); return; } if (!empty($val = $this->validateGroupCreate($request))) { $response->set('group_create', new FormValidation($val)); return; } $group = $this->createGroupFromRequest($request); GroupMapper::create($group); $response->set($request->__toString(), $group->jsonSerialize()); } /** * @param RequestAbstract $request Request * * @return Group * * @since 1.0.0 */ private function createGroupFromRequest(RequestAbstract $request) : Group { $group = new Group(); $group->setCreatedBy($request->getHeader()->getAccount()); $group->setName((string) ($request->getData('name') ?? '')); $group->setStatus((int) ($request->getData('status') ?? GroupStatus::INACTIVE)); $group->setDescription(Markdown::parse((string) ($request->getData('description') ?? ''))); $group->setDescriptionRaw((string) ($request->getData('description') ?? '')); return $group; } /** * @param RequestAbstract $request Request * @param ResponseAbstract $response Response * @param mixed $data Generic data * * @return void * * @since 1.0.0 */ public function apiGroupDelete(RequestAbstract $request, ResponseAbstract $response, $data = null) /* : void */ { if (!$this->app->accountManager->get($request->getHeader()->getAccount())->hasPermission( PermissionType::DELETE, $this->app->orgId, $this->app->appName, self::MODULE_ID, PermissionState::GROUP) ) { $response->set('group_delete', null); $response->getHeader()->setStatusCode(RequestStatusCode::R_403); return; } $group = GroupMapper::get((int) $request->getData('id')); $status = GroupMapper::delete($group); $response->set($request->__toString(), $status); } /** * @param RequestAbstract $request Request * @param ResponseAbstract $response Response * @param mixed $data Generic data * * @return void * * @since 1.0.0 */ public function apiAccountGet(RequestAbstract $request, ResponseAbstract $response, $data = null) /* : void */ { if (!$this->app->accountManager->get($request->getHeader()->getAccount())->hasPermission( PermissionType::READ, $this->app->orgId, $this->app->appName, self::MODULE_ID, PermissionState::ACCOUNT) ) { $response->set('account_read', null); $response->getHeader()->setStatusCode(RequestStatusCode::R_403); return; } $account = AccountMapper::get((int) $request->getData('id')); $response->set($request->__toString(), $account->jsonSerialize()); } /** * @param RequestAbstract $request Request * @param ResponseAbstract $response Response * @param mixed $data Generic data * * @return void * * @since 1.0.0 */ public function apiAccountFind(RequestAbstract $request, ResponseAbstract $response, $data = null) /* : void */ { if (!$this->app->accountManager->get($request->getHeader()->getAccount())->hasPermission( PermissionType::READ, $this->app->orgId, $this->app->appName, self::MODULE_ID, PermissionState::ACCOUNT) ) { $response->set('account_find', null); $response->getHeader()->setStatusCode(RequestStatusCode::R_403); return; } $response->getHeader()->set('Content-Type', MimeType::M_JSON . '; charset=utf-8', true); $response->set($request->__toString(), array_values(AccountMapper::find((string) ($request->getData('search') ?? '')))); } /** * @param RequestAbstract $request Request * * @return array * * @since 1.0.0 */ private function validateAccountCreate(RequestAbstract $request) : array { // todo: validate email correctness $val = []; if ( ($val['login'] = empty($request->getData('login'))) || ($val['name1'] = empty($request->getData('name1'))) || ($val['type'] = !AccountType::isValidValue((int) $request->getData('type'))) || ($val['status'] = !AccountStatus::isValidValue((int) $request->getData('status'))) ) { return $val; } return []; } /** * @param RequestAbstract $request Request * @param ResponseAbstract $response Response * @param mixed $data Generic data * * @return void * * @since 1.0.0 */ public function apiAccountCreate(RequestAbstract $request, ResponseAbstract $response, $data = null) /* : void */ { if (!$this->app->accountManager->get($request->getHeader()->getAccount())->hasPermission( PermissionType::CREATE, $this->app->orgId, $this->app->appName, self::MODULE_ID, PermissionState::ACCOUNT) ) { $response->set('account_create', null); $response->getHeader()->setStatusCode(RequestStatusCode::R_403); return; } if (!empty($val = $this->validateAccountCreate($request))) { $response->set('account_create', new FormValidation($val)); return; } $account = $this->createAccountFromRequest($request); AccountMapper::create($account); $response->set($request->__toString(), $account->jsonSerialize()); } /** * @param RequestAbstract $request Request * * @return Account * * @since 1.0.0 */ private function createAccountFromRequest(RequestAbstract $request) : Account { $account = new Account(); $account->setStatus((int) ($request->getData('status') ?? AccountStatus::INACTIVE)); $account->setType((int) ($request->getData('type') ?? AccountType::USER)); $account->setName((string) ($request->getData('login') ?? '')); $account->setName1((string) ($request->getData('name1') ?? '')); $account->setName2((string) ($request->getData('name2') ?? '')); $account->setName3((string) ($request->getData('name3') ?? '')); $account->setEmail((string) ($request->getData('email') ?? '')); $account->generatePassword((string) ($request->getData('password') ?? '')); return $account; } /** * @param RequestAbstract $request Request * @param ResponseAbstract $response Response * @param mixed $data Generic data * * @return void * * @since 1.0.0 */ public function apiAccountDelete(RequestAbstract $request, ResponseAbstract $response, $data = null) /* : void */ { if (!$this->app->accountManager->get($request->getHeader()->getAccount())->hasPermission( PermissionType::DELETE, $this->app->orgId, $this->app->appName, self::MODULE_ID, PermissionState::ACCOUNT) ) { $response->set('account_delete', null); $response->getHeader()->setStatusCode(RequestStatusCode::R_403); return; } $account = AccountMapper::get((int) ($request->getData('id'))); $status = AccountMapper::delete($account); $response->set($request->__toString(), $status); } /** * @param RequestAbstract $request Request * @param ResponseAbstract $response Response * @param mixed $data Generic data * * @return void * * @since 1.0.0 */ public function apiAccountUpdate(RequestAbstract $request, ResponseAbstract $response, $data = null) /* : void */ { if (!$this->app->accountManager->get($request->getHeader()->getAccount())->hasPermission( PermissionType::MODIFY, $this->app->orgId, $this->app->appName, self::MODULE_ID, PermissionState::ACCOUNT) ) { $response->set('account_update', null); $response->getHeader()->setStatusCode(RequestStatusCode::R_403); return; } $account = AccountMapper::get((int) ($request->getData('id'))); $account->setName((string) ($request->getData('login') ?? $account->getName())); $account->setName1((string) ($request->getData('name1') ?? $account->getName1())); $account->setName2((string) ($request->getData('name2') ?? $account->getName2())); $account->setName3((string) ($request->getData('name3') ?? $account->getName3())); $account->setEmail((string) ($request->getData('email') ?? $account->getEmail())); $account->setStatus((int) ($request->getData('status') ?? $account->getStatus())); $account->setType((int) ($request->getData('type') ?? $account->getType())); $status = AccountMapper::update($account); $response->set($request->__toString(), $account->jsonSerialize()); } /** * @param RequestAbstract $request Request * @param ResponseAbstract $response Response * @param mixed $data Generic data * * @return void * * @since 1.0.0 */ public function apiModuleStatusUpdate(RequestAbstract $request, ResponseAbstract $response, $data = null) /* : void */ { $module = $request->getData('module'); $status = $request->getData('status'); if (!$module || !$status) { // todo: create failure response } switch ($status) { case 'activate': $done = $this->app->moduleManager->activate($module); break; case 'deactivate': $done = $this->app->moduleManager->deactivate($module); break; case 'install': $done = $this->app->moduleManager->install($module); break; case 'uninstall': //$done = $this->app->moduleManager->uninstall($module); $done = true; break; default: $done = false; } $response->set('module', [$status => $done, 'module' => $module]); } }