added team permissions (#996)

src/Controller/CustomerController.php

@@ -13,6 +13,7 @@ use App\Configuration\FormConfiguration;
 use App\Entity\Customer;
 use App\Event\CustomerMetaDefinitionEvent;
 use App\Form\CustomerEditForm;
+use App\Form\CustomerTeamPermissionForm;
 use App\Form\Toolbar\CustomerToolbarForm;
 use App\Form\Type\CustomerType;
 use App\Repository\CustomerRepository;
@@ -71,14 +72,11 @@ class CustomerController extends AbstractController
      * @Route(path="/", defaults={"page": 1}, name="admin_customer", methods={"GET"})
      * @Route(path="/page/{page}", requirements={"page": "[1-9]\d*"}, name="admin_customer_paginated", methods={"GET"})
      * @Security("is_granted('view_customer')")
-     *
-     * @param int $page
-     * @param Request $request
-     * @return Response
      */
     public function indexAction($page, Request $request)
     {
         $query = new CustomerQuery();
+        $query->setCurrentUser($this->getUser());
         $query->setPage($page);
 
         $form = $this->getToolbarForm($query);
@@ -98,9 +96,6 @@ class CustomerController extends AbstractController
     /**
      * @Route(path="/create", name="admin_customer_create", methods={"GET", "POST"})
      * @Security("is_granted('create_customer')")
-     *
-     * @param Request $request
-     * @return RedirectResponse|Response
      */
     public function createAction(Request $request)
     {
@@ -117,12 +112,39 @@ class CustomerController extends AbstractController
         return $this->renderCustomerForm($customer, $request);
     }
 
+    /**
+     * @Route(path="/{id}/permissions", name="admin_customer_permissions", methods={"GET", "POST"})
+     * @Security("is_granted('permissions', customer)")
+     */
+    public function teamPermissions(Customer $customer, Request $request)
+    {
+        $form = $this->createForm(CustomerTeamPermissionForm::class, $customer, [
+            'action' => $this->generateUrl('admin_customer_permissions', ['id' => $customer->getId()]),
+            'method' => 'POST',
+        ]);
+
+        $form->handleRequest($request);
+
+        if ($form->isSubmitted() && $form->isValid()) {
+            try {
+                $this->getRepository()->saveCustomer($customer);
+                $this->flashSuccess('action.update.success');
+
+                return $this->redirectToRoute('admin_customer');
+            } catch (ORMException $ex) {
+                $this->flashError('action.update.error', ['%reason%' => $ex->getMessage()]);
+            }
+        }
+
+        return $this->render('customer/permissions.html.twig', [
+            'customer' => $customer,
+            'form' => $form->createView()
+        ]);
+    }
+
     /**
      * @Route(path="/{id}/budget", name="admin_customer_budget", methods={"GET"})
      * @Security("is_granted('budget', customer)")
-     *
-     * @param Customer $customer
-     * @return Response
      */
     public function budgetAction(Customer $customer)
     {
@@ -135,10 +157,6 @@ class CustomerController extends AbstractController
     /**
      * @Route(path="/{id}/edit", name="admin_customer_edit", methods={"GET", "POST"})
      * @Security("is_granted('edit', customer)")
-     *
-     * @param Customer $customer
-     * @param Request $request
-     * @return RedirectResponse|Response
      */
     public function editAction(Customer $customer, Request $request)
     {
@@ -148,10 +166,6 @@ class CustomerController extends AbstractController
     /**
      * @Route(path="/{id}/delete", name="admin_customer_delete", methods={"GET", "POST"})
      * @Security("is_granted('delete', customer)")
-     *
-     * @param Customer $customer
-     * @param Request $request
-     * @return RedirectResponse|Response
      */
     public function deleteAction(Customer $customer, Request $request)
     {
@@ -169,6 +183,7 @@ class CustomerController extends AbstractController
                 'query_builder' => function (CustomerRepository $repo) use ($customer) {
                     $query = new CustomerFormTypeQuery();
                     $query->setCustomerToIgnore($customer);
+                    $query->setUser($this->getUser());
 
                     return $repo->getQueryBuilderForFormType($query);
                 },
@@ -229,11 +244,7 @@ class CustomerController extends AbstractController
         ]);
     }
 
-    /**
-     * @param CustomerQuery $query
-     * @return FormInterface
-     */
-    protected function getToolbarForm(CustomerQuery $query)
+    protected function getToolbarForm(CustomerQuery $query): FormInterface
     {
         return $this->createForm(CustomerToolbarForm::class, $query, [
             'action' => $this->generateUrl('admin_customer', [
@@ -243,11 +254,7 @@ class CustomerController extends AbstractController
         ]);
     }
 
-    /**
-     * @param Customer $customer
-     * @return FormInterface
-     */
-    private function createEditForm(Customer $customer)
+    private function createEditForm(Customer $customer): FormInterface
     {
         if ($customer->getId() === null) {
             $url = $this->generateUrl('admin_customer_create');