added team permissions (#996)

2019-08-16 01:22:33 +02:00
parent 9611646bc6
commit 561ec3b1e9
124 changed files with 4122 additions and 362 deletions
--- a/src/Controller/TeamController.php
+++ b/src/Controller/TeamController.php
@@ -0,0 +1,185 @@
+<?php
+
+/*
+ * This file is part of the Kimai time-tracking app.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Controller;
+
+use App\Entity\Team;
+use App\Form\TeamCustomerForm;
+use App\Form\TeamEditForm;
+use App\Form\TeamProjectForm;
+use App\Form\Toolbar\TeamToolbarForm;
+use App\Repository\Query\TeamQuery;
+use App\Repository\TeamRepository;
+use Doctrine\ORM\ORMException;
+use Sensio\Bundle\FrameworkExtraBundle\Configuration\Security;
+use Symfony\Component\Form\FormInterface;
+use Symfony\Component\HttpFoundation\RedirectResponse;
+use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\Routing\Annotation\Route;
+
+/**
+ * @Route(path="/admin/teams")
+ * @Security("is_granted('view_team')")
+ */
+class TeamController extends AbstractController
+{
+    /**
+     * @var TeamRepository
+     */
+    private $repository;
+
+    public function __construct(TeamRepository $repository)
+    {
+        $this->repository = $repository;
+    }
+
+    /**
+     * @Route(path="/", defaults={"page": 1}, name="admin_team", methods={"GET"})
+     * @Route(path="/page/{page}", requirements={"page": "[1-9]\d*"}, name="admin_team_paginated", methods={"GET"})
+     *
+     * @param TeamRepository $repository
+     * @param Request $request
+     * @param int $page
+     * @return Response
+     */
+    public function listTeams(TeamRepository $repository, Request $request, $page)
+    {
+        $query = new TeamQuery();
+        $query->setPage($page);
+        $query->setOrderBy('name');
+
+        $form = $this->getToolbarForm($query);
+        $form->setData($query);
+        $form->submit($request->query->all(), false);
+
+        $teams = $repository->getPagerfantaForQuery($query);
+
+        return $this->render('team/index.html.twig', [
+            'teams' => $teams,
+            'query' => $query,
+            'showFilter' => $query->isDirty(),
+            'toolbarForm' => $form->createView(),
+        ]);
+    }
+
+    /**
+     * @Route(path="/create", name="admin_team_create", methods={"GET", "POST"})
+     * @Security("is_granted('create_team')")
+     *
+     * @param Request $request
+     * @return RedirectResponse|Response
+     */
+    public function createTeam(Request $request)
+    {
+        return $this->renderEditScreen(new Team(), $request);
+    }
+
+    /**
+     * @Route(path="/{id}/edit", name="admin_team_edit", methods={"GET", "POST"})
+     * @Security("is_granted('edit', team)")
+     */
+    public function editAction(Team $team, Request $request)
+    {
+        return $this->renderEditScreen($team, $request);
+    }
+
+    private function renderEditScreen(Team $team, Request $request): Response
+    {
+        $customerForm = null;
+        $projectForm = null;
+
+        if ($team->getId() === null) {
+            $url = $this->generateUrl('admin_team_create');
+        } else {
+            $url = $this->generateUrl('admin_team_edit', ['id' => $team->getId()]);
+        }
+
+        $editForm = $this->createForm(TeamEditForm::class, $team, [
+            'action' => $url,
+            'method' => 'POST',
+        ]);
+
+        if ($request->isMethod('POST') && (null !== ($editFormValues = $request->get($editForm->getName())))) {
+            $editForm->submit($editFormValues, true);
+
+            if ($editForm->isValid()) {
+                try {
+                    // make sure that the teamlead is always part of the team, otherwise permission checks
+                    // and filtering might not work as expected!
+                    $team->addUser($team->getTeamLead());
+
+                    $this->repository->saveTeam($team);
+                    $this->flashSuccess('action.update.success');
+
+                    return $this->redirectToRoute('admin_team_edit', ['id' => $team->getId()]);
+                } catch (ORMException $ex) {
+                    $this->flashError('action.update.error', ['%reason%' => $ex->getMessage()]);
+                }
+            }
+        }
+
+        if (null !== $team->getId()) {
+            $customerForm = $this->createForm(TeamCustomerForm::class, $team, [
+                'method' => 'POST',
+            ]);
+
+            if ($request->isMethod('POST') && (null !== ($customerFormValues = $request->get($customerForm->getName())))) {
+                $customerForm->submit($customerFormValues, true);
+
+                if ($customerForm->isValid()) {
+                    try {
+                        $this->repository->saveTeam($team);
+                        $this->flashSuccess('action.update.success');
+
+                        return $this->redirectToRoute('admin_team_edit', ['id' => $team->getId()]);
+                    } catch (ORMException $ex) {
+                        $this->flashError('action.update.error', ['%reason%' => $ex->getMessage()]);
+                    }
+                }
+            }
+
+            $projectForm = $this->createForm(TeamProjectForm::class, $team, [
+                'method' => 'POST',
+            ]);
+
+            if ($request->isMethod('POST') && (null !== ($projectFormValues = $request->get($projectForm->getName())))) {
+                $projectForm->submit($projectFormValues, true);
+
+                if ($projectForm->isValid()) {
+                    try {
+                        $this->repository->saveTeam($team);
+                        $this->flashSuccess('action.update.success');
+
+                        return $this->redirectToRoute('admin_team_edit', ['id' => $team->getId()]);
+                    } catch (ORMException $ex) {
+                        $this->flashError('action.update.error', ['%reason%' => $ex->getMessage()]);
+                    }
+                }
+            }
+        }
+
+        return $this->render('team/edit.html.twig', [
+            'team' => $team,
+            'form' => $editForm->createView(),
+            'customerForm' => $customerForm ? $customerForm->createView() : null,
+            'projectForm' => $projectForm ? $projectForm->createView() : null,
+        ]);
+    }
+
+    private function getToolbarForm(TeamQuery $query): FormInterface
+    {
+        return $this->createForm(TeamToolbarForm::class, $query, [
+            'action' => $this->generateUrl('admin_team', [
+                'page' => $query->getPage(),
+            ]),
+            'method' => 'GET',
+        ]);
+    }
+}