Mr.X


<?php
/**
Copyright 2011-2014 Nick Korbel

This file is part of Booked SchedulerBooked SchedulereIt is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later versBooked SchedulerduleIt is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
alBooked SchedulercheduleIt.  If not, see <http://www.gnu.org/licenses/>.
*/

interface IReservationAuthorization
{
    /**
     * @abstract
     * @param UserSession $currentUser
     * @return bool
     */
    function CanChangeUsers(UserSession $currentUser);

    /**
     * @abstract
     * @param ReservationView $reservationView
     * @param UserSession $currentUser
     * @return bool
     */
    function CanEdit(ReservationView $reservationView, UserSession $currentUser);

    /**
     * @abstract
     * @param ReservationView $reservationView
     * @param UserSession $currentUser
     * @return bool
     */
    function CanApprove(ReservationView $reservationView, UserSession $currentUser);

    /**
     * @abstract
     * @param ReservationView $reservationView
     * @param UserSession $currentUser
     * @return bool
     */
    function CanViewDetails(ReservationView $reservationView, UserSession $currentUser);
}

class ReservationAuthorization implements IReservationAuthorization
{
    /**
     * @var \IAuthorizationService
     */
    private $authorizationService;

    public function __construct(IAuthorizationService $authorizationService)
    {
        $this->authorizationService = $authorizationService;
    }

    public function CanEdit(ReservationView $reservationView, UserSession $currentUser)
    {
        $ongoingReservation = true;
        $startTimeConstraint = Configuration::Instance()->GetSectionKey(ConfigSection::RESERVATION, ConfigKeys::RESERVATION_START_TIME_CONSTRAINT);

        if ($startTimeConstraint == ReservationStartTimeConstraint::CURRENT)
        {
            $ongoingReservation = Date::Now()->LessThan($reservationView->EndDate);
        }

        if ($startTimeConstraint == ReservationStartTimeConstraint::FUTURE)
        {
            $ongoingReservation = Date::Now()->LessThan($reservationView->StartDate);
        }

        if ($ongoingReservation)
        {
            if ($this->IsAccessibleTo($reservationView, $currentUser))
            {
                return true;
            }
        }

        return $currentUser->IsAdmin;    // only admins can edit reservations that have ended
    }

    public function CanChangeUsers(UserSession $currentUser)
    {
        return $currentUser->IsAdmin || $this->authorizationService->CanReserveForOthers($currentUser);
    }

    public function CanApprove(ReservationView $reservationView, UserSession $currentUser)
    {
        if (!$reservationView->RequiresApproval())
        {
            return false;
        }

        if ($currentUser->IsAdmin)
        {
            return true;
        }

        $canReserveForUser = $this->authorizationService->CanApproveFor($currentUser, $reservationView->OwnerId);
        if ($canReserveForUser)
        {
            return true;
        }

        foreach ($reservationView->Resources as $resource)
        {
            if ($this->authorizationService->CanApproveForResource($currentUser, $resource))
            {
                return true;
            }
        }

        return false;
    }

    public function CanViewDetails(ReservationView $reservationView, UserSession $currentUser)
    {
        return $this->IsAccessibleTo($reservationView, $currentUser);
    }

    /**
     * @param ReservationView $reservationView
     * @param UserSession $currentUser
     * @return bool
     */
    private function IsAccessibleTo(ReservationView $reservationView, UserSession $currentUser)
    {
        if ($reservationView->OwnerId == $currentUser->UserId || $currentUser->IsAdmin)
        {
            return true;
        }
        else
        {
            $canReserveForUser = $this->authorizationService->CanReserveFor($currentUser, $reservationView->OwnerId);
            if ($canReserveForUser)
            {
                return true;
            }

            foreach ($reservationView->Resources as $resource)
            {
                if ($this->authorizationService->CanEditForResource($currentUser, $resource))
                {
                    return true;
                }
            }
        }

        return false;
    }
}