Lines 100.00% 17 / 17
Functions and Methods 100.00% 1 / 1
Classes and Traits 100.00% 1 / 1
Name Lines Functions and Methods CRAP Classes and Traits
UseraccountListByDepartments 100.00% 17 / 17 100.00% 1 / 1 3 100.00% 1 / 1
 readResponse 100.00% 17 / 17 100.00% 1 / 1 3
1<?php
2
3/**
4 * @package ZMS API
5 * @copyright BerlinOnline Stadtportal GmbH & Co. KG
6 **/
7
8namespace BO\Zmsbackend\Useraccount\Api;
9
10use BO\Mellon\Validator;
11use BO\Slim\Render;
12use BO\Zmsbackend\Useraccount\Service\Useraccount;
13use Psr\Http\Message\RequestInterface;
14use Psr\Http\Message\ResponseInterface;
15
16class UseraccountListByDepartments extends \BO\Zmsbackend\Api\BaseController
17{
18    /**
19     * @SuppressWarnings(Param)
20     * @return \Psr\Http\Message\ResponseInterface
21     */
22    #[\Override]
23    public function readResponse(
24        RequestInterface $request,
25        ResponseInterface $response,
26        array $args
27    ) {
28        $workstation = (new \BO\Zmsbackend\Helper\User($request, 1))->checkPermissions('useraccount');
29        $parameters = $request->getParams();
30
31        $rawIds = array_map('trim', explode(',', $args['ids']));
32        $rawIds = array_filter($rawIds, 'strlen');
33        $requestedDepartmentIds = \BO\Zmsbackend\Helper\User::normalizeDepartmentIds($rawIds);
34
35        $departmentIds = [];
36        if ($workstation->getUseraccount()->isSuperUser()) {
37            // Superusers can access all departments; no need to validate via DB here
38            $departmentIds = $requestedDepartmentIds;
39        } else {
40            // Non-superusers must go through \BO\Zmsbackend\Helper\User::checkDepartments for access checks
41            $departments = \BO\Zmsbackend\Helper\User::checkDepartments($requestedDepartmentIds);
42            foreach ($departments as $department) {
43                $departmentIds[] = $department->id;
44            }
45        }
46
47        $useraccountList = (new \BO\Zmsbackend\Useraccount\Service\Useraccount())->readSearchByDepartmentIds($departmentIds, $parameters, 0, $workstation);
48
49        $message = \BO\Zmsbackend\Api\Response\Message::create($request);
50        $message->data = $useraccountList;
51
52        $response = Render::withLastModified($response, time(), '0');
53        $response = Render::withJson($response, $message, 200);
54
55        return $response;
56    }
57}