chill-bundles/src/Bundle/ChillDocStoreBundle/Controller/DocumentPersonController.php

<?php

/**
 * Chill is a software for social workers
 *
 * For the full copyright and license information, please view
 * the LICENSE file that was distributed with this source code.
 */

namespace Chill\DocStoreBundle\Controller;

use Chill\DocStoreBundle\Entity\PersonDocument;
use Chill\DocStoreBundle\Form\PersonDocumentType;
use Chill\DocStoreBundle\Security\Authorization\PersonDocumentVoter;
use Chill\MainBundle\Security\Authorization\AuthorizationHelper;
use Chill\PersonBundle\Entity\Person;
use Chill\PersonBundle\Privacy\PrivacyEvent;
use Chill\PersonBundle\Security\Authorization\PersonVoter;
use DateTime;
use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
use Symfony\Component\EventDispatcher\EventDispatcherInterface;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\Routing\Annotation\Route;
use Symfony\Component\Security\Core\Role\Role;
use Symfony\Component\Translation\TranslatorInterface;

/**
 * Class DocumentPersonController.
 *
 * @Route("/{_locale}/person/{person}/document")
 *
 * TODO faire un controller abstrait ?
 */
class DocumentPersonController extends AbstractController
{
    /**
     * @var AuthorizationHelper
     */
    protected $authorizationHelper;

    /**
     * @var EventDispatcherInterface
     */
    protected $eventDispatcher;

    /**
     * @var TranslatorInterface
     */
    protected $translator;

    /**
     * DocumentPersonController constructor.
     */
    public function __construct(
        TranslatorInterface $translator,
        EventDispatcherInterface $eventDispatcher,
        AuthorizationHelper $authorizationHelper
    ) {
        $this->translator = $translator;
        $this->eventDispatcher = $eventDispatcher;
        $this->authorizationHelper = $authorizationHelper;
    }

    /**
     * @Route("/{id}", name="person_document_delete", methods="DELETE")
     */
    public function delete(Request $request, Person $person, PersonDocument $document): Response
    {
        $this->denyAccessUnlessGranted('CHILL_PERSON_SEE', $person);
        $this->denyAccessUnlessGranted('CHILL_PERSON_DOCUMENT_DELETE', $document);

        if ($this->isCsrfTokenValid('delete' . $document->getId(), $request->request->get('_token'))) {
            $em = $this->getDoctrine()->getManager();
            $em->remove($document);
            $em->flush();
        }

        return $this->redirectToRoute(
            'person_document_index',
            ['person' => $person->getId()]
        );
    }

    /**
     * @Route("/{id}/edit", name="person_document_edit", methods="GET|POST")
     */
    public function edit(Request $request, Person $person, PersonDocument $document): Response
    {
        $this->denyAccessUnlessGranted('CHILL_PERSON_SEE', $person);
        $this->denyAccessUnlessGranted('CHILL_PERSON_DOCUMENT_UPDATE', $document);

        $document->setUser($this->getUser());
        $document->setDate(new DateTime('Now'));

        $form = $this->createForm(
            PersonDocumentType::class,
            $document,
            [
                'center' => $document->getCenter(),
                'role' => new Role('CHILL_PERSON_DOCUMENT_UPDATE'),
            ]
        );
        $form->handleRequest($request);

        if ($form->isSubmitted() && $form->isValid()) {
            $this->getDoctrine()->getManager()->flush();

            $this->addFlash('success', $this->translator->trans('The document is successfully updated'));

            $event = new PrivacyEvent($person, [
                'element_class' => PersonDocument::class,
                'element_id' => $document->getId(),
                'action' => 'update',
            ]);
            $this->eventDispatcher->dispatch(PrivacyEvent::PERSON_PRIVACY_EVENT, $event);

            return $this->redirectToRoute(
                'person_document_edit',
                ['id' => $document->getId(), 'person' => $person->getId()]
            );
        }

        if ($form->isSubmitted() && !$form->isValid()) {
            $this->addFlash('error', $this->translator->trans('This form contains errors'));
        }

        $event = new PrivacyEvent($person, [
            'element_class' => PersonDocument::class,
            'element_id' => $document->getId(),
            'action' => 'edit',
        ]);
        $this->eventDispatcher->dispatch(PrivacyEvent::PERSON_PRIVACY_EVENT, $event);

        return $this->render(
            'ChillDocStoreBundle:PersonDocument:edit.html.twig',
            [
                'document' => $document,
                'form' => $form->createView(),
                'person' => $person,
            ]
        );
    }

    /**
     * @Route("/", name="person_document_index", methods="GET")
     */
    public function index(Person $person): Response
    {
        $em = $this->getDoctrine()->getManager();

        if (null === $person) {
            throw $this->createNotFoundException('Person not found');
        }

        $this->denyAccessUnlessGranted(PersonVoter::SEE, $person);

        $reachableScopes = $this->authorizationHelper
            ->getReachableScopes(
                $this->getUser(),
                new Role(PersonDocumentVoter::SEE),
                $person->getCenter()
            );

        $documents = $em
            ->getRepository('ChillDocStoreBundle:PersonDocument')
            ->findBy(
                ['person' => $person, 'scope' => $reachableScopes],
                ['date' => 'DESC']
            );

        $event = new PrivacyEvent($person, [
            'element_class' => PersonDocument::class,
            'action' => 'index',
        ]);
        $this->eventDispatcher->dispatch(PrivacyEvent::PERSON_PRIVACY_EVENT, $event);

        return $this->render(
            'ChillDocStoreBundle:PersonDocument:index.html.twig',
            [
                'documents' => $documents,
                'person' => $person,
            ]
        );
    }

    /**
     * @Route("/new", name="person_document_new", methods="GET|POST")
     */
    public function new(Request $request, Person $person): Response
    {
        if (null === $person) {
            throw $this->createNotFoundException('person not found');
        }

        $this->denyAccessUnlessGranted(PersonVoter::SEE, $person);

        $document = new PersonDocument();
        $document->setUser($this->getUser());
        $document->setPerson($person);
        $document->setDate(new DateTime('Now'));

        $form = $this->createForm(PersonDocumentType::class, $document, [
            'center' => $document->getCenter(),
            'role' => new Role('CHILL_PERSON_DOCUMENT_CREATE'),
        ]);
        $form->handleRequest($request);

        if ($form->isSubmitted() && $form->isValid()) {
            $this->denyAccessUnlessGranted(
                'CHILL_PERSON_DOCUMENT_CREATE',
                $document,
                'creation of this activity not allowed'
            );

            $em = $this->getDoctrine()->getManager();
            $em->persist($document);
            $em->flush();

            $this->addFlash('success', $this->translator->trans('The document is successfully registered'));

            return $this->redirectToRoute('person_document_index', ['person' => $person->getId()]);
        }

        if ($form->isSubmitted() && !$form->isValid()) {
            $this->addFlash('error', $this->translator->trans('This form contains errors'));
        }

        return $this->render('ChillDocStoreBundle:PersonDocument:new.html.twig', [
            'document' => $document,
            'form' => $form->createView(),
            'person' => $person,
        ]);
    }

    /**
     * @Route("/{id}", name="person_document_show", methods="GET")
     */
    public function show(Person $person, PersonDocument $document): Response
    {
        $this->denyAccessUnlessGranted('CHILL_PERSON_SEE', $person);
        $this->denyAccessUnlessGranted('CHILL_PERSON_DOCUMENT_SEE', $document);

        $event = new PrivacyEvent($person, [
            'element_class' => PersonDocument::class,
            'element_id' => $document->getId(),
            'action' => 'show',
        ]);
        $this->eventDispatcher->dispatch(PrivacyEvent::PERSON_PRIVACY_EVENT, $event);

        return $this->render(
            'ChillDocStoreBundle:PersonDocument:show.html.twig',
            ['document' => $document, 'person' => $person]
        );
    }
}