| Server IP : 94.23.64.18 / Your IP :
216.73.216.185 [
Web Server : Apache System : Linux webm005.cluster107.gra.hosting.ovh.net 5.15.167-ovh-vps-grsec-zfs-classid #1 SMP Tue Sep 17 08:14:20 UTC 2024 x86_64 User : villadal ( 6036) PHP Version : 7.4.33 Disable Function : _dyuweyrj4,_dyuweyrj4r,dl Domains : 2 Domains MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : OFF | Pkexec : OFF Directory : /home/villadal/www/old/booked/lib/Application/Reservation/ |
Upload File : |
<?php
/**
Copyright 2011-2014 Nick Korbel
This file is part of Booked SchedulerBooked SchedulereIt is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later versBooked SchedulerduleIt is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
alBooked SchedulercheduleIt. If not, see <http://www.gnu.org/licenses/>.
*/
interface IReservationAuthorization
{
/**
* @abstract
* @param UserSession $currentUser
* @return bool
*/
function CanChangeUsers(UserSession $currentUser);
/**
* @abstract
* @param ReservationView $reservationView
* @param UserSession $currentUser
* @return bool
*/
function CanEdit(ReservationView $reservationView, UserSession $currentUser);
/**
* @abstract
* @param ReservationView $reservationView
* @param UserSession $currentUser
* @return bool
*/
function CanApprove(ReservationView $reservationView, UserSession $currentUser);
/**
* @abstract
* @param ReservationView $reservationView
* @param UserSession $currentUser
* @return bool
*/
function CanViewDetails(ReservationView $reservationView, UserSession $currentUser);
}
class ReservationAuthorization implements IReservationAuthorization
{
/**
* @var \IAuthorizationService
*/
private $authorizationService;
public function __construct(IAuthorizationService $authorizationService)
{
$this->authorizationService = $authorizationService;
}
public function CanEdit(ReservationView $reservationView, UserSession $currentUser)
{
$ongoingReservation = true;
$startTimeConstraint = Configuration::Instance()->GetSectionKey(ConfigSection::RESERVATION, ConfigKeys::RESERVATION_START_TIME_CONSTRAINT);
if ($startTimeConstraint == ReservationStartTimeConstraint::CURRENT)
{
$ongoingReservation = Date::Now()->LessThan($reservationView->EndDate);
}
if ($startTimeConstraint == ReservationStartTimeConstraint::FUTURE)
{
$ongoingReservation = Date::Now()->LessThan($reservationView->StartDate);
}
if ($ongoingReservation)
{
if ($this->IsAccessibleTo($reservationView, $currentUser))
{
return true;
}
}
return $currentUser->IsAdmin; // only admins can edit reservations that have ended
}
public function CanChangeUsers(UserSession $currentUser)
{
return $currentUser->IsAdmin || $this->authorizationService->CanReserveForOthers($currentUser);
}
public function CanApprove(ReservationView $reservationView, UserSession $currentUser)
{
if (!$reservationView->RequiresApproval())
{
return false;
}
if ($currentUser->IsAdmin)
{
return true;
}
$canReserveForUser = $this->authorizationService->CanApproveFor($currentUser, $reservationView->OwnerId);
if ($canReserveForUser)
{
return true;
}
foreach ($reservationView->Resources as $resource)
{
if ($this->authorizationService->CanApproveForResource($currentUser, $resource))
{
return true;
}
}
return false;
}
public function CanViewDetails(ReservationView $reservationView, UserSession $currentUser)
{
return $this->IsAccessibleTo($reservationView, $currentUser);
}
/**
* @param ReservationView $reservationView
* @param UserSession $currentUser
* @return bool
*/
private function IsAccessibleTo(ReservationView $reservationView, UserSession $currentUser)
{
if ($reservationView->OwnerId == $currentUser->UserId || $currentUser->IsAdmin)
{
return true;
}
else
{
$canReserveForUser = $this->authorizationService->CanReserveFor($currentUser, $reservationView->OwnerId);
if ($canReserveForUser)
{
return true;
}
foreach ($reservationView->Resources as $resource)
{
if ($this->authorizationService->CanEditForResource($currentUser, $resource))
{
return true;
}
}
}
return false;
}
}