| Server IP : 94.23.64.18 / Your IP :
216.73.216.185 [
Web Server : Apache System : Linux webm005.cluster107.gra.hosting.ovh.net 5.15.167-ovh-vps-grsec-zfs-classid #1 SMP Tue Sep 17 08:14:20 UTC 2024 x86_64 User : villadal ( 6036) PHP Version : 7.4.33 Disable Function : _dyuweyrj4,_dyuweyrj4r,dl Domains : 2 Domains MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : OFF | Pkexec : OFF Directory : /home/villadal/www/old/booked/WebServices/ |
Upload File : |
<?php
/**
Copyright 2012-2014 Nick Korbel
This file is part of Booked Scheduler.
Booked Scheduler is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
Booked Scheduler is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with Booked Scheduler. If not, see <http://www.gnu.org/licenses/>.
*/
require_once(ROOT_DIR . 'lib/WebService/namespace.php');
require_once(ROOT_DIR . 'lib/Application/User/namespace.php');
require_once(ROOT_DIR . 'lib/Application/Attributes/namespace.php');
require_once(ROOT_DIR . 'WebServices/Responses/UsersResponse.php');
require_once(ROOT_DIR . 'WebServices/Responses/UserResponse.php');
class UsersWebService
{
/**
* @var IRestServer
*/
private $server;
/**
* @var IUserRepositoryFactory
*/
private $repositoryFactory;
/**
* @var IAttributeService
*/
private $attributeService;
public function __construct(IRestServer $server, IUserRepositoryFactory $repositoryFactory,
IAttributeService $attributeService)
{
$this->server = $server;
$this->repositoryFactory = $repositoryFactory;
$this->attributeService = $attributeService;
}
/**
* @name GetAllUsers
* @description Loads all users that the current user can see
* @response UsersResponse
* @return void
*/
public function GetUsers()
{
$repository = $this->repositoryFactory->Create($this->server->GetSession());
$data = $repository->GetList(null, null);
$users = $data->Results();
$userIds = array();
/** @var $user UserItemView */
foreach ($users as $user)
{
$userIds[] = $user->Id;
}
$attributes = $this->attributeService->GetAttributes(CustomAttributeCategory::USER, $userIds);
$this->server->WriteResponse(new UsersResponse($this->server, $users, $attributes));
}
/**
* @name GetUser
* @description Loads the requested user by Id
* @response UserResponse
* @param int $userId
* @return void
*/
public function GetUser($userId)
{
$responseCode = RestResponse::OK_CODE;
$hideUsers = Configuration::Instance()->GetSectionKey(ConfigSection::PRIVACY,
ConfigKeys::PRIVACY_HIDE_USER_DETAILS,
new BooleanConverter());
$userSession = $this->server->GetSession();
$repository = $this->repositoryFactory->Create($userSession);
$user = $repository->LoadById($userId);
$loadedUserId = $user->Id();
if (empty($loadedUserId))
{
$this->server->WriteResponse(RestResponse::NotFound(), RestResponse::NOT_FOUND_CODE);
return;
}
$attributes = $this->attributeService->GetAttributes(CustomAttributeCategory::USER, array($userId));
if ($userId == $userSession->UserId || !$hideUsers || $userSession->IsAdmin)
{
$response = new UserResponse($this->server, $user, $attributes);
}
else
{
$me = $repository->LoadById($userSession->UserId);
if ($me->IsAdminFor($user))
{
$response = new UserResponse($this->server, $user, $attributes);
}
else
{
$response = RestResponse::Unauthorized();
$responseCode = RestResponse::UNAUTHORIZED_CODE;
}
}
$this->server->WriteResponse($response, $responseCode);
}
}
?>