Rename all models
This commit is contained in:
166
app/Model/ProjectPermissionModel.php
Normal file
166
app/Model/ProjectPermissionModel.php
Normal file
@@ -0,0 +1,166 @@
|
||||
<?php
|
||||
|
||||
namespace Kanboard\Model;
|
||||
|
||||
use Kanboard\Core\Base;
|
||||
use Kanboard\Core\Security\Role;
|
||||
use Kanboard\Filter\ProjectGroupRoleProjectFilter;
|
||||
use Kanboard\Filter\ProjectGroupRoleUsernameFilter;
|
||||
use Kanboard\Filter\ProjectUserRoleProjectFilter;
|
||||
use Kanboard\Filter\ProjectUserRoleUsernameFilter;
|
||||
|
||||
/**
|
||||
* Project Permission
|
||||
*
|
||||
* @package Kanboard\Model
|
||||
* @author Frederic Guillot
|
||||
*/
|
||||
class ProjectPermissionModel extends Base
|
||||
{
|
||||
/**
|
||||
* Get query for project users overview
|
||||
*
|
||||
* @access public
|
||||
* @param array $project_ids
|
||||
* @param string $role
|
||||
* @return \PicoDb\Table
|
||||
*/
|
||||
public function getQueryByRole(array $project_ids, $role)
|
||||
{
|
||||
if (empty($project_ids)) {
|
||||
$project_ids = array(-1);
|
||||
}
|
||||
|
||||
return $this
|
||||
->db
|
||||
->table(ProjectUserRoleModel::TABLE)
|
||||
->join(UserModel::TABLE, 'id', 'user_id')
|
||||
->join(ProjectModel::TABLE, 'id', 'project_id')
|
||||
->eq(ProjectUserRoleModel::TABLE.'.role', $role)
|
||||
->eq(ProjectModel::TABLE.'.is_private', 0)
|
||||
->in(ProjectModel::TABLE.'.id', $project_ids)
|
||||
->columns(
|
||||
UserModel::TABLE.'.id',
|
||||
UserModel::TABLE.'.username',
|
||||
UserModel::TABLE.'.name',
|
||||
ProjectModel::TABLE.'.name AS project_name',
|
||||
ProjectModel::TABLE.'.id'
|
||||
);
|
||||
}
|
||||
|
||||
/**
|
||||
* Get all usernames (fetch users from groups)
|
||||
*
|
||||
* @access public
|
||||
* @param integer $project_id
|
||||
* @param string $input
|
||||
* @return array
|
||||
*/
|
||||
public function findUsernames($project_id, $input)
|
||||
{
|
||||
$userMembers = $this->projectUserRoleQuery
|
||||
->withFilter(new ProjectUserRoleProjectFilter($project_id))
|
||||
->withFilter(new ProjectUserRoleUsernameFilter($input))
|
||||
->getQuery()
|
||||
->findAllByColumn('username');
|
||||
|
||||
$groupMembers = $this->projectGroupRoleQuery
|
||||
->withFilter(new ProjectGroupRoleProjectFilter($project_id))
|
||||
->withFilter(new ProjectGroupRoleUsernameFilter($input))
|
||||
->getQuery()
|
||||
->findAllByColumn('username');
|
||||
|
||||
$members = array_unique(array_merge($userMembers, $groupMembers));
|
||||
|
||||
sort($members);
|
||||
|
||||
return $members;
|
||||
}
|
||||
|
||||
/**
|
||||
* Return true if everybody is allowed for the project
|
||||
*
|
||||
* @access public
|
||||
* @param integer $project_id Project id
|
||||
* @return bool
|
||||
*/
|
||||
public function isEverybodyAllowed($project_id)
|
||||
{
|
||||
return $this->db
|
||||
->table(ProjectModel::TABLE)
|
||||
->eq('id', $project_id)
|
||||
->eq('is_everybody_allowed', 1)
|
||||
->exists();
|
||||
}
|
||||
|
||||
/**
|
||||
* Return true if the user is allowed to access a project
|
||||
*
|
||||
* @param integer $project_id
|
||||
* @param integer $user_id
|
||||
* @return boolean
|
||||
*/
|
||||
public function isUserAllowed($project_id, $user_id)
|
||||
{
|
||||
if ($this->userSession->isAdmin()) {
|
||||
return true;
|
||||
}
|
||||
|
||||
return in_array(
|
||||
$this->projectUserRoleModel->getUserRole($project_id, $user_id),
|
||||
array(Role::PROJECT_MANAGER, Role::PROJECT_MEMBER, Role::PROJECT_VIEWER)
|
||||
);
|
||||
}
|
||||
|
||||
/**
|
||||
* Return true if the user is assignable
|
||||
*
|
||||
* @access public
|
||||
* @param integer $project_id
|
||||
* @param integer $user_id
|
||||
* @return boolean
|
||||
*/
|
||||
public function isAssignable($project_id, $user_id)
|
||||
{
|
||||
return $this->userModel->isActive($user_id) &&
|
||||
in_array($this->projectUserRoleModel->getUserRole($project_id, $user_id), array(Role::PROJECT_MEMBER, Role::PROJECT_MANAGER));
|
||||
}
|
||||
|
||||
/**
|
||||
* Return true if the user is member
|
||||
*
|
||||
* @access public
|
||||
* @param integer $project_id
|
||||
* @param integer $user_id
|
||||
* @return boolean
|
||||
*/
|
||||
public function isMember($project_id, $user_id)
|
||||
{
|
||||
return in_array($this->projectUserRoleModel->getUserRole($project_id, $user_id), array(Role::PROJECT_MEMBER, Role::PROJECT_MANAGER, Role::PROJECT_VIEWER));
|
||||
}
|
||||
|
||||
/**
|
||||
* Get active project ids by user
|
||||
*
|
||||
* @access public
|
||||
* @param integer $user_id
|
||||
* @return array
|
||||
*/
|
||||
public function getActiveProjectIds($user_id)
|
||||
{
|
||||
return array_keys($this->projectUserRoleModel->getActiveProjectsByUser($user_id));
|
||||
}
|
||||
|
||||
/**
|
||||
* Copy permissions to another project
|
||||
*
|
||||
* @param integer $project_src_id Project Template
|
||||
* @param integer $project_dst_id Project that receives the copy
|
||||
* @return boolean
|
||||
*/
|
||||
public function duplicate($project_src_id, $project_dst_id)
|
||||
{
|
||||
return $this->projectUserRoleModel->duplicate($project_src_id, $project_dst_id) &&
|
||||
$this->projectGroupRoleModel->duplicate($project_src_id, $project_dst_id);
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user