support custom fields for timesheets, customers, projects and activities (#871)

src/API/ProjectController.php

@@ -12,7 +12,8 @@ declare(strict_types=1);
 namespace App\API;
 
 use App\Entity\Project;
-use App\Form\ProjectEditForm;
+use App\Event\ProjectMetaDefinitionEvent;
+use App\Form\API\ProjectApiEditForm;
 use App\Repository\ProjectRepository;
 use App\Repository\Query\ProjectQuery;
 use FOS\RestBundle\Controller\Annotations as Rest;
@@ -22,6 +23,7 @@ use FOS\RestBundle\View\View;
 use FOS\RestBundle\View\ViewHandlerInterface;
 use Sensio\Bundle\FrameworkExtraBundle\Configuration\Security;
 use Swagger\Annotations as SWG;
+use Symfony\Component\EventDispatcher\EventDispatcherInterface;
 use Symfony\Component\HttpFoundation\Request;
 use Symfony\Component\HttpFoundation\Response;
 use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
@@ -37,20 +39,20 @@ class ProjectController extends BaseApiController
      * @var ProjectRepository
      */
     protected $repository;
-
     /**
      * @var ViewHandlerInterface
      */
     protected $viewHandler;
-
     /**
-     * @param ViewHandlerInterface $viewHandler
-     * @param ProjectRepository $repository
+     * @var EventDispatcherInterface
      */
-    public function __construct(ViewHandlerInterface $viewHandler, ProjectRepository $repository)
+    protected $dispatcher;
+
+    public function __construct(ViewHandlerInterface $viewHandler, ProjectRepository $repository, EventDispatcherInterface $dispatcher)
     {
         $this->viewHandler = $viewHandler;
         $this->repository = $repository;
+        $this->dispatcher = $dispatcher;
     }
 
     /**
@@ -117,10 +119,18 @@ class ProjectController extends BaseApiController
      */
     public function getAction($id)
     {
+        /** @var Project $data */
         $data = $this->repository->find($id);
+
         if (null === $data) {
             throw new NotFoundException();
         }
+
+        // make sure the fields are properly setup and we know, which meta fields
+        // should be exposed and which not
+        $event = new ProjectMetaDefinitionEvent($data);
+        $this->dispatcher->dispatch(ProjectMetaDefinitionEvent::class, $event);
+
         $view = new View($data, 200);
         $view->getContext()->setGroups(['Default', 'Entity', 'Project']);
 
@@ -159,9 +169,7 @@ class ProjectController extends BaseApiController
 
         $project = new Project();
 
-        $form = $this->createForm(ProjectEditForm::class, $project, [
-            'csrf_protection' => false,
-        ]);
+        $form = $this->createForm(ProjectApiEditForm::class, $project);
 
         $form->submit($request->request->all());
 
@@ -223,9 +231,7 @@ class ProjectController extends BaseApiController
             throw new AccessDeniedHttpException('User cannot update project');
         }
 
-        $form = $this->createForm(ProjectEditForm::class, $project, [
-            'csrf_protection' => false,
-        ]);
+        $form = $this->createForm(ProjectApiEditForm::class, $project);
 
         $form->setData($project);
         $form->submit($request->request->all(), false);