Refactor authentication system (#2602)

Make auth configuration available via UI, remove FOSUserBundle and SAML-Bundle dependency
2021-06-10 15:34:13 +02:00
parent 286b63e2c8
commit 7f20cb045c
155 changed files with 5590 additions and 1802 deletions
--- a/src/Command/DemoteUserCommand.php
+++ b/src/Command/DemoteUserCommand.php
@@ -0,0 +1,63 @@
+<?php
+
+/*
+ * This file is part of the Kimai time-tracking app.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Command;
+
+use App\Entity\User;
+use App\User\UserService;
+use Symfony\Component\Console\Style\SymfonyStyle;
+
+class DemoteUserCommand extends AbstractRoleCommand
+{
+    /**
+     * {@inheritdoc}
+     */
+    protected function configure()
+    {
+        parent::configure();
+
+        $this
+            ->setName('kimai:user:demote')
+            ->setAliases(['fos:user:demote'])
+            ->setDescription('Demote a user by removing a role')
+            ->setHelp(
+                <<<'EOT'
+The <info>kimai:user:demote</info> command demotes a user by removing a role
+
+  <info>php %command.full_name% susan_super ROLE_TEAMLEAD</info>
+  <info>php %command.full_name% --super susan_super</info>
+EOT
+            );
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    protected function executeRoleCommand(UserService $manipulator, SymfonyStyle $output, User $user, bool $super, $role)
+    {
+        $username = $user->getUsername();
+        if ($super) {
+            if ($user->isSuperAdmin()) {
+                $user->setSuperAdmin(false);
+                $manipulator->updateUser($user);
+                $output->success(sprintf('Super administrator role has been removed from the user "%s".', $username));
+            } else {
+                $output->warning(sprintf('User "%s" doesn\'t have the super administrator role.', $username));
+            }
+        } else {
+            if ($user->hasRole($role)) {
+                $user->removeRole($role);
+                $manipulator->updateUser($user);
+                $output->success(sprintf('Role "%s" has been removed from user "%s".', $role, $username));
+            } else {
+                $output->warning(sprintf('User "%s" didn\'t have "%s" role.', $username, $role));
+            }
+        }
+    }
+}