chill-bundles/src/Bundle/ChillDocStoreBundle/Service/WorkflowStoredObjectPermissionHelper.php

<?php

declare(strict_types=1);

/*
 * Chill is a software for social workers
 *
 * For the full copyright and license information, please view
 * the LICENSE file that was distributed with this source code.
 */

namespace Chill\DocStoreBundle\Service;

use Chill\MainBundle\Entity\Workflow\EntityWorkflowSignatureStateEnum;
use Chill\MainBundle\Workflow\EntityWorkflowManager;
use Symfony\Component\Security\Core\Security;
use Symfony\Component\Workflow\Registry;

/**
 * Check if an object, associated with a workflow, is blocked, or not, by this workflow.
 */
class WorkflowStoredObjectPermissionHelper
{
    public function __construct(
        private readonly Security $security,
        private readonly EntityWorkflowManager $entityWorkflowManager,
        private readonly Registry $registry,
    ) {}

    /**
     * Return true if the user is allowed to update the given object.
     *
     * Return false if some workflow block the edition of the object.
     */
    public function notBlockedByWorkflow(object $entity): bool
    {
        $entityWorkflows = $this->entityWorkflowManager->findByRelatedEntity($entity);
        $currentUser = $this->security->getUser();

        $usersInvolved = [];
        $entityWorkflowsNotFinalizedPositive = [];
        foreach ($entityWorkflows as $entityWorkflow) {
            // as soon as there is one signatured applyied, we are not able to
            // edit the document any more
            foreach ($entityWorkflow->getSteps() as $step) {
                foreach ($step->getSignatures() as $signature) {
                    if (EntityWorkflowSignatureStateEnum::SIGNED === $signature->getState()) {
                        return false;
                    }
                }
            }

            if ($entityWorkflow->isFinal()) {
                $workflow = $this->registry->get($entityWorkflow, $entityWorkflow->getWorkflowName());
                $marking = $workflow->getMarkingStore()->getMarking($entityWorkflow);
                foreach ($marking->getPlaces() as $place => $active) {
                    $metadata = $workflow->getMetadataStore()->getPlaceMetadata($place);
                    if ($metadata['isFinalPositive'] ?? true) {
                        return false;
                    }
                }
            } else {
                $entityWorkflowsNotFinalizedPositive[] = $entityWorkflow;
                foreach ($entityWorkflow->getSteps() as $step) {
                    foreach ($step->getAllDestUser()->toArray() as $user) {
                        $usersInvolved[] = $user;
                    }
                }
            }
        }

        // if there isn't any user, but a workflow, blocked
        if ([] !== $entityWorkflowsNotFinalizedPositive) {
            if ([] === $usersInvolved) {
                return false;
            }

            return in_array($currentUser, $usersInvolved, true);
        }

        return true;
    }
}