chill-bundles/src/Bundle/ChillPersonBundle/Controller/AccompanyingPeriodWorkEvaluationDocumentMoveController.php

<?php

declare(strict_types=1);

/*
 * Chill is a software for social workers
 *
 * For the full copyright and license information, please view
 * the LICENSE file that was distributed with this source code.
 */

namespace Chill\PersonBundle\Controller;

use Chill\PersonBundle\Entity\AccompanyingPeriod\AccompanyingPeriodWorkEvaluation;
use Chill\PersonBundle\Entity\AccompanyingPeriod\AccompanyingPeriodWorkEvaluationDocument;
use Chill\PersonBundle\Security\Authorization\AccompanyingPeriodWorkVoter;
use Doctrine\ORM\EntityManagerInterface;
use Symfony\Component\HttpFoundation\JsonResponse;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
use Symfony\Component\Routing\Annotation\Route;
use Symfony\Component\Security\Core\Security;
use Symfony\Component\Serializer\Normalizer\AbstractNormalizer;
use Symfony\Component\Serializer\SerializerInterface;
use Sensio\Bundle\FrameworkExtraBundle\Configuration\ParamConverter;

readonly class AccompanyingPeriodWorkEvaluationDocumentMoveController
{
    public function __construct(
        private Security $security,
        private SerializerInterface $serializer,
        private EntityManagerInterface $entityManager,
    ) {}

    /**
     * @ParamConverter("document", options={"id": "document_id"})
     * @ParamConverter("evaluation", options={"id": "evaluation_id"})
     */
    #[Route('/api/1.0/person/accompanying-course-work-evaluation-document/{document_id}/evaluation/{evaluation_id}/move', methods: ['POST'])]
    public function moveToEvaluationApi(AccompanyingPeriodWorkEvaluationDocument $document, AccompanyingPeriodWorkEvaluation $evaluation): Response
    {
        $work = $evaluation->getAccompanyingPeriodWork();

        if (!$this->security->isGranted(AccompanyingPeriodWorkVoter::UPDATE, $work)) {
            throw new AccessDeniedHttpException('not allowed to edit this accompanying period work');
        }

        $document->setAccompanyingPeriodWorkEvaluation($evaluation);

        $this->entityManager->persist($document);
        $this->entityManager->flush();

        return new JsonResponse(
            $this->serializer->serialize($document, 'json', [AbstractNormalizer::GROUPS => ['read']]),
            json: true
        );
    }
}