Code Coverage
 
Lines
Functions and Methods
Classes and Traits
Total
0.00%
0 / 34
0.00%
0 / 1
 CRAP
0.00%
0 / 1
UpdateRoleEndpoint
0.00%
0 / 34
0.00%
0 / 1
 110
0.00%
0 / 1
 handle
0.00%
0 / 34
0.00%
0 / 1
 110
1<?php
2
3namespace Olz\Roles\Endpoints;
4
5use Olz\Api\OlzUpdateEntityTypedEndpoint;
6use Olz\Entity\Roles\Role;
7use Olz\Entity\Users\User;
8use PhpTypeScriptApi\HttpError;
9
10/**
11 * @phpstan-import-type OlzRoleId from RoleEndpointTrait
12 * @phpstan-import-type OlzRoleData from RoleEndpointTrait
13 *
14 * @extends OlzUpdateEntityTypedEndpoint<OlzRoleId, OlzRoleData>
15 */
16class UpdateRoleEndpoint extends OlzUpdateEntityTypedEndpoint {
17    use RoleEndpointTrait;
18
19    protected function handle(mixed $input): mixed {
20        $user_repo = $this->entityManager()->getRepository(User::class);
21        $role_repo = $this->entityManager()->getRepository(Role::class);
22        $entity = $this->getEntityById($input['id']);
23
24        $is_superior = $this->authUtils()->hasRoleEditPermission($input['id']);
25        $is_owner = $this->entityUtils()->canUpdateOlzEntity($entity, null, 'roles');
26        if (!$is_superior && !$is_owner) {
27            throw new HttpError(403, "Kein Zugriff!");
28        }
29
30        // Username validation
31        $new_username = $input['data']['username'];
32        $is_username_updated = $new_username !== $entity->getUsername();
33        if (!$this->authUtils()->isUsernameAllowed($new_username)) {
34            throw HttpError::validationError(['username' => ["Der Benutzername darf nur Buchstaben, Zahlen, und die Zeichen -_. enthalten."]]);
35        }
36        if ($is_username_updated && !$this->authUtils()->isUsernameUnique($new_username, $entity)) {
37            throw HttpError::validationError(['username' => ["Dieser Benutzername ist bereits vergeben."]]);
38        }
39
40        // TODO Do this more elegantly?
41        $old_data = $this->getEntityData($entity);
42        $this->log()->notice('OLD:', [$old_data]);
43
44        $this->entityUtils()->updateOlzEntity($entity, $input['meta']);
45        if ($is_username_updated) {
46            $entity->setOldUsername($entity->getUsername());
47        }
48        $role_repo = $this->entityManager()->getRepository(Role::class);
49        $parent_role_id = $entity->getParentRoleId();
50        $parent_role = $role_repo->findOneBy(['id' => $parent_role_id]);
51        $is_parent_superior = $this->authUtils()->hasRoleEditPermission($parent_role_id);
52        $is_parent_owner = $parent_role && $this->entityUtils()->canUpdateOlzEntity($parent_role, null, 'roles');
53        if ($is_parent_superior || $is_parent_owner) {
54            $this->updateEntityWithData($entity, $input['data']);
55        } else {
56            $this->updateEntityWithNonParentData($entity, $input['data']);
57        }
58
59        // TODO Do this more elegantly?
60        $new_data = $this->getEntityData($entity);
61        $this->log()->notice('NEW:', [$new_data]);
62
63        $this->entityManager()->persist($entity);
64        $this->entityManager()->flush();
65        $this->persistUploads($entity, $input['data']);
66
67        return [
68            'id' => $entity->getId() ?? 0,
69        ];
70    }
71}