Code Coverage
 
Lines
Functions and Methods
Classes and Traits
Total
78.72% covered (warning)
78.72%
37 / 47
0.00% covered (danger)
0.00%
0 / 1
CRAP
0.00% covered (danger)
0.00%
0 / 1
UseraccountListByRole
78.72% covered (warning)
78.72%
37 / 47
0.00% covered (danger)
0.00%
0 / 1
12.17
0.00% covered (danger)
0.00%
0 / 1
 readResponse
78.72% covered (warning)
78.72%
37 / 47
0.00% covered (danger)
0.00%
0 / 1
12.17
1<?php
2
3/**
4 * @package Zmsadmin
5 * @copyright BerlinOnline Stadtportal GmbH & Co. KG
6 **/
7
8namespace BO\Zmsadmin;
9
10use BO\Slim\Render;
11use BO\Zmsentities\Collection\UseraccountList;
12use BO\Zmsentities\Collection\RoleList;
13use BO\Zmsentities\Exception\UserAccountMissingRights;
14use BO\Zmsentities\Exception\UserAccountAccessRightsFailed;
15use Psr\Http\Message\RequestInterface;
16use Psr\Http\Message\ResponseInterface;
17
18class UseraccountListByRole extends BaseController
19{
20    private const SUPERUSER_ONLY_ROLES = [
21        'system_admin',
22        'audit_viewer',
23    ];
24    /**
25     * @SuppressWarnings(Param)
26     * @return ResponseInterface
27     */
28    #[\Override]
29    public function readResponse(
30        RequestInterface $request,
31        ResponseInterface $response,
32        array $args
33    ) {
34        $roleName = $args['roleName'];
35        $workstation = \App::$http->readGetResult('/workstation/', ['resolveReferences' => 1])->getEntity();
36        if (! $workstation->getUseraccount()->hasPermissions(['useraccount'])) {
37            throw new UserAccountMissingRights();
38        }
39
40        if (
41            ! $workstation->getUseraccount()->isSuperUser()
42            && in_array($roleName, self::SUPERUSER_ONLY_ROLES, true)
43        ) {
44            throw new UserAccountAccessRightsFailed();
45        }
46
47        $success = $request->getAttribute('validator')->getParameter('success')->isString()->getValue();
48        $ownerList = \App::$http->readGetResult('/owner/', array('resolveReferences' => 2))->getCollection();
49
50        $useraccountList = new UseraccountList();
51        if ($workstation->getUseraccount()->isSuperUser()) {
52            $useraccountList = \App::$http
53                ->readGetResult('/role/' . $roleName . '/useraccount/', ['resolveReferences' => 0])
54                ->getCollection();
55        } else {
56            $workstation = \App::$http->readGetResult('/workstation/', ['resolveReferences' => 2])->getEntity();
57            $departmentList = $workstation->getUseraccount()->getDepartmentList();
58            $departmentListIds = $departmentList->getIds();
59
60            if (!empty($departmentListIds)) {
61                $useraccountList = \App::$http
62                    ->readGetResult(
63                        '/role/' . $roleName . '/department/' . implode(',', $departmentListIds) . '/useraccount/',
64                        ['resolveReferences' => 0]
65                    )
66                    ->getCollection();
67            }
68        }
69
70        $roleList = new RoleList();
71        $roleLabel = $roleName;
72
73        $roleResult = \App::$http->readGetResult('/roles/', []);
74        if ($roleResult && $roleResult->getCollection() !== null) {
75            $roleList = $roleResult->getCollection();
76
77            foreach ($roleList as $role) {
78                if ($role->name === $roleName) {
79                    $roleLabel = $role->description ?: $role->name;
80                    break;
81                }
82            }
83        }
84
85        return Render::withHtml(
86            $response,
87            'page/useraccountList.twig',
88            array(
89                'title' => 'Nutzer',
90                'roleLabel' => $roleLabel,
91                'roleList' => $roleList,
92                'menuActive' => 'useraccount',
93                'workstation' => $workstation,
94                'useraccountListByRole' => $useraccountList,
95                'ownerlist' => $ownerList,
96                'success' => $success,
97            )
98        );
99    }
100}