first draft

app/config/config.yml

@@ -0,0 +1,88 @@
+# This is the main configuration file of your application. It stores all the
+# common options for every execution environment ('prod', 'dev', 'test').
+
+# To avoid creating configuration files that are too long, we first import some
+# files that define the values for important parts of the application,
+# such as the security component and the dependency injection services
+imports:
+    - { resource: parameters.yml }
+    - { resource: security.yml }
+    - { resource: services.yml }
+
+# These are the configuration parameters that define the application's behavior
+# and which are independent from the underlying technical infrastructure
+# See http://symfony.com/doc/current/best_practices/configuration.html#application-related-configuration
+parameters:
+    # This parameter defines the codes of the locales (languages) enabled in the application
+    app_locales: en|de
+    app.notifications.email_sender: "%mailer_from%"
+
+# Basic configuration for the Symfony framework features
+framework:
+    # Uncomment the 'ide' option to turn all of the file paths in an exception
+    # page into clickable links that open the given file using your favorite IDE.
+    # Supported values are 'textmate', 'macvim', 'emacs' and 'sublime' shortcuts
+    # and any custom configuration string, such as: "phpstorm://open?file=%%f&line=%%l"
+    # See http://symfony.com/doc/current/reference/configuration/framework.html#ide
+    ide: sublime
+
+    # When using the HTTP Cache, ESI allows to render page fragments separately
+    # and with different cache configurations for each fragment
+    # http://symfony.com/doc/current/book/http_cache.html#edge-side-includes
+    esi:             { enabled: true }
+    translator:      { fallback: "%locale%" }
+    secret:          "%secret%"
+    router:
+        resource: "%kernel.root_dir%/config/routing.yml"
+        strict_requirements: ~
+    form:            ~
+    csrf_protection: ~
+    validation:      { enable_annotations: true }
+    templating:
+        engines: ['twig']
+    default_locale:  "%locale%"
+    trusted_hosts:   ~
+    trusted_proxies: ~
+    session:
+        handler_id:  session.handler.native_file
+        save_path:   "%kernel.root_dir%/../var/sessions/%kernel.environment%"
+    fragments:       ~
+    http_method_override: true
+    assets: ~
+
+# Twig Configuration (used for rendering application templates)
+twig:
+    debug:            "%kernel.debug%"
+    strict_variables: "%kernel.debug%"
+    form_themes:
+        - "bootstrap_3_layout.html.twig"
+        - "form/fields.html.twig"
+
+# Assetic Configuration (used for managing web assets: CSS, JavaScript, Sass, etc.)
+assetic:
+    debug:          "%kernel.debug%"
+    use_controller: false
+    bundles:        [ ]
+    filters:
+        cssrewrite: ~
+        jsqueeze: ~
+        scssphp:
+            # the formatter must be the FQCN (don't use the 'compressed' value)
+            formatter: "Leafo\\ScssPhp\\Formatter\\Compressed"
+
+# Doctrine Configuration (used to access databases and manipulate their information)
+doctrine:
+    dbal:
+        url: "%database_url%"
+
+    orm:
+        auto_generate_proxy_classes: "%kernel.debug%"
+        auto_mapping: true
+
+# Swiftmailer Configuration (used to send emails)
+swiftmailer:
+    transport: "%mailer_transport%"
+    host:      "%mailer_host%"
+    username:  "%mailer_user%"
+    password:  "%mailer_password%"
+    spool:     { type: memory }

app/config/config_dev.yml

@@ -0,0 +1,42 @@
+imports:
+    - { resource: config.yml }
+
+framework:
+    router:
+        resource: "%kernel.root_dir%/config/routing_dev.yml"
+        strict_requirements: true
+    profiler: { only_exceptions: false }
+
+web_profiler:
+    toolbar: '%kernel.debug%'
+    intercept_redirects: false
+
+monolog:
+    handlers:
+        main:
+            type:   stream
+            path:   "%kernel.logs_dir%/%kernel.environment%.log"
+            level:  info
+        console:
+            type:   console
+            bubble: false
+        # uncomment to get logging in your browser
+        # you may have to allow bigger header sizes in your Web server configuration
+        #firephp:
+        #    type:   firephp
+        #    level:  info
+        #chromephp:
+        #    type:   chromephp
+        #    level:  info
+
+assetic:
+    use_controller: true
+
+#swiftmailer:
+#    delivery_address: me@example.com
+
+services:
+    twig.text_extension:
+        class: Twig_Extensions_Extension_Text
+        tags:
+            - name: twig.extension

app/config/config_prod.yml

@@ -0,0 +1,25 @@
+imports:
+    - { resource: config.yml }
+
+#framework:
+#    cache:
+#        system: cache.adapter.apcu
+
+#doctrine:
+#    orm:
+#        metadata_cache_driver: apc
+#        result_cache_driver: apc
+#        query_cache_driver: apc
+
+monolog:
+    handlers:
+        main:
+            type:         fingers_crossed
+            action_level: error
+            handler:      nested
+        nested:
+            type:  stream
+            path:  "%kernel.logs_dir%/%kernel.environment%.log"
+            level: debug
+        console:
+            type:  console

app/config/config_test.yml

@@ -0,0 +1,31 @@
+imports:
+    - { resource: config_dev.yml }
+
+framework:
+    test: ~
+    session:
+        storage_id: session.storage.mock_file
+    profiler:
+        collect: false
+
+web_profiler:
+    toolbar: false
+    intercept_redirects: false
+
+swiftmailer:
+    disable_delivery: true
+
+# It's recommended to use a separate database for tests. This allows to have a
+# fixed and known set of data fixtures, it simplifies the code of tests and it
+# makes them more robust.
+# In this case we just need to define a different path for the application database.
+doctrine:
+    dbal:
+        database_url: 'sqlite:///%kernel.root_dir%/data/timesheet_test.sqlite'
+
+# this configuration simplifies testing URLs protected by the security mechanism
+# See http://symfony.com/doc/current/cookbook/testing/http_authentication.html
+security:
+    firewalls:
+        secured_area:
+            http_basic: ~

app/config/parameters.yml.dist

@@ -0,0 +1,35 @@
+# This file defines the canonical configuration parameters of the application.
+# Symfony uses this file as a template to generate the real app/config/parameters.yml
+# used by the application.
+# See http://symfony.com/doc/current/best_practices/configuration.html#canonical-parameters
+parameters:
+
+    # Define the database connection string
+    database_url: 'sqlite:///%kernel.root_dir%/data/timesheet.sqlite'
+    # database_url: 'mysql://root:pass@127.0.0.1:3306/timesheet'
+
+    # You can prefix all your tables to pevent collision with other software
+    database_prefix: kimai_
+
+    # You can create the database and load the sample data from the command line:
+    #
+    # php bin/console doctrine:database:create
+    # php bin/console doctrine:schema:create
+    # php bin/console doctrine:fixtures:load
+
+    # If you don't use a real mail server, you can send emails via your Gmail account.
+    # see http://symfony.com/doc/current/cookbook/email/gmail.html
+    mailer_transport:  smtp
+    mailer_host:       127.0.0.1
+    mailer_user:       ~
+    mailer_password:   ~
+    mailer_from:       anonymous@example.com
+
+    # The code of the default language used by the application ('en' = English)
+    locale: en
+
+    # The 'secret' value is a random string of characters, numbers and symbols
+    # used internally by Symfony in several places (CSRF tokens, URI signing,
+    # 'Remember Me' functionality, etc.)
+    # see: http://symfony.com/doc/current/reference/configuration/framework.html#secret
+    secret: 'some_secret_not_really_secure_change_this_later'

app/config/routing.yml

@@ -0,0 +1,34 @@
+# These first lines load the all routes defined as @Route() annotations in any
+# controller defined inside the src/AppBundle/Controller/ directory. Controllers
+# are loaded recursively, so you can separate them into subdirectories.
+# If you don't like to add annotations in your applications, you can also define
+# the routes in YAML, XML or PHP files.
+# See http://symfony.com/doc/current/book/routing.html
+app:
+    resource: '@AppBundle/Controller/'
+    type:     annotation
+    prefix:   /{_locale}
+    requirements:
+        _locale: '%app_locales%'
+    defaults:
+        _locale: '%locale%'
+
+timesheet:
+    resource: '@TimesheetBundle/Controller/'
+    type:     annotation
+    prefix:   /{_locale}
+    requirements:
+        _locale: '%app_locales%'
+    defaults:
+        _locale: '%locale%'
+
+# These lines define a route using YAML configuration. The controller used by
+# the route (FrameworkBundle:Template:template) is a convenient shortcut when
+# the template can be rendered without executing any logic in your own controller.
+# See http://symfony.com/doc/current/cookbook/templating/render_without_controller.html
+homepage:
+    path: /{_locale}
+    defaults:
+        _controller: FrameworkBundle:Redirect:redirect
+        route: timesheet
+        permanent: true

app/config/routing_dev.yml

@@ -0,0 +1,26 @@
+# this imports the routes used to display the web debug toolbar at the bottom of each page
+_wdt:
+    resource: "@WebProfilerBundle/Resources/config/routing/wdt.xml"
+    prefix:   /_wdt
+
+# this imports the routes needed to display the Symfony Profiler information
+_profiler:
+    resource: "@WebProfilerBundle/Resources/config/routing/profiler.xml"
+    prefix:   /_profiler
+
+# this imports the route used to test error pages. Just browse the following URL:
+# /{_locale}/_error/{status_code}.{format}
+# (e.g. /en/_error/404, /en/_error/403.json, /fr/_error/500.xml)
+# See http://symfony.com/doc/current/cookbook/controller/error_pages.html#testing-error-pages-during-development
+_errors:
+    resource: "@TwigBundle/Resources/config/routing/errors.xml"
+    prefix:   /{_locale}/_error
+    requirements:
+        _locale: '%app_locales%'
+    defaults:
+        _locale: '%locale%'
+
+# this loads the main routing file, which usually defines the routes available
+# in any environment (production, development, etc.)
+_main:
+    resource: routing.yml

app/config/security.yml

@@ -0,0 +1,54 @@
+security:
+    encoders:
+        # Our user class and the algorithm we'll use to encode passwords
+        # http://symfony.com/doc/current/book/security.html#encoding-the-user-s-password
+        AppBundle\Entity\User: bcrypt
+
+    providers:
+        # in this example, users are stored via Doctrine in the database
+        # To see the users at src/AppBundle/DataFixtures/ORM/LoadFixtures.php
+        # To load users from somewhere else: http://symfony.com/doc/current/cookbook/security/custom_provider.html
+        database_users:
+            entity: { class: AppBundle:User, property: username }
+
+    # http://symfony.com/doc/current/book/security.html#firewalls-authentication
+    firewalls:
+        secured_area:
+            # this firewall applies to all URLs
+            pattern: ^/
+
+            # but the firewall does not require login on every page
+            # denying access is done in access_control or in your controllers
+            anonymous: ~
+
+            # This allows the user to login by submitting a username and password
+            # Reference: http://symfony.com/doc/current/cookbook/security/form_login_setup.html
+            form_login:
+                # The route name that the login form submits to
+                check_path: security_login
+                # The name of the route where the login form lives
+                # When the user tries to access a protected page, they are redirected here
+                login_path: security_login
+                # Secure the login form against CSRF
+                # Reference: http://symfony.com/doc/current/cookbook/security/csrf_in_login_form.html
+                csrf_token_generator: security.csrf.token_manager
+
+            logout:
+                # The route name the user can go to in order to logout
+                path: security_logout
+                # The name of the route to redirect to after logging out
+                target: timesheet
+
+    role_hierarchy:
+        ROLE_USER:        ROLE_CUSTOMER
+        ROLE_TEAMLEAD:    ROLE_USER
+        ROLE_ADMIN:       ROLE_TEAMLEAD
+        ROLE_SUPER_ADMIN: [ROLE_ADMIN]
+
+    access_control:
+        # this is a catch-all for the admin area
+        # additional security lives in the controllers
+        - { path: '^/(%app_locales%)$', role: IS_AUTHENTICATED_FULLY }
+        - { path: '^/(%app_locales%)/login', role: IS_AUTHENTICATED_ANONYMOUSLY }
+        - { path: '^/(%app_locales%)/admin', roles: ROLE_ADMIN }
+

app/config/services.yml

@@ -0,0 +1,63 @@
+services:
+    # First we define some basic services to make these utilities available in
+    # the entire application
+    slugger:
+        class: AppBundle\Utils\Slugger
+
+    markdown:
+        class: AppBundle\Utils\Markdown
+
+    # Twig extensions that create new filters and functions for our views
+    app.twig.app_extension:
+        public:    false
+        class:     AppBundle\Twig\Extensions
+        arguments: ['@markdown', '%app_locales%']
+        tags:
+            - { name: twig.extension }
+
+    app.twig.intl_extension:
+        public: false
+        class:  Twig_Extensions_Extension_Intl
+        tags:
+            - { name: twig.extension }
+
+    app.redirect_to_preferred_locale_listener:
+        class: AppBundle\EventListener\RedirectToPreferredLocaleListener
+        arguments: ['@router', '%app_locales%', '%locale%']
+        tags:
+            - { name: kernel.event_listener, event: kernel.request, method: onKernelRequest }
+
+    app.menu_builder:
+        class: AppBundle\Menu\MenuBuilder
+        arguments: ["@knp_menu.factory", "@event_dispatcher", "@security.authorization_checker"]
+        tags:
+            - { name: knp_menu.menu_builder, method: createMainMenu, alias: main }
+            - { name: knp_menu.menu_builder, method: createAdminMenu, alias: admin }
+
+    app.tableprefix_subscriber:
+        class: AppBundle\Doctrine\TablePrefixSubscriber
+        arguments: [%database_prefix%]
+        tags:
+            - { name: doctrine.event_subscriber }
+
+    timesheet.configure_menu_listener:
+        class: TimesheetBundle\EventListener\Menu
+        tags:
+          - { name: kernel.event_listener, event: app.main_menu_configure, method: onMainMenuConfigure }
+          - { name: kernel.event_listener, event: app.admin_menu_configure, method: onAdminMenuConfigure }
+
+    # Uncomment the following lines to define a service for the Post Doctrine repository.
+    # It's not mandatory to create these services, but if you use repositories a lot,
+    # these services simplify your code:
+    #
+    # app.post_repository:
+    #     class:     Doctrine\ORM\EntityRepository
+    #     factory:   ['@doctrine.orm.entity_manager', getRepository]
+    #     arguments: [AppBundle\Entity\Post]
+    #
+    # // traditional code inside a controller
+    # $entityManager = $this->getDoctrine()->getManager();
+    # $posts = $entityManager->getRepository('AppBundle:Post')->findAll();
+    #
+    # // same code using repository services
+    # $posts = $this->get('app.post_repository')->findAll();