649 lines
32 KiB
PHP
649 lines
32 KiB
PHP
<?php
|
|
/**
|
|
* Route for department self-serve tasks
|
|
*/
|
|
|
|
namespace routes;
|
|
|
|
use classes\authentication;
|
|
use modules\selfserve\classes\selfserve_config_versioning;
|
|
use classes\response;
|
|
use objects\department_selfserve_tasks_o;
|
|
use objects\logs_o;
|
|
use attachments\helpers\attachment_content;
|
|
use classes\attachment_store;
|
|
use classes\attachments;
|
|
use modules\selfserve\helpers\selfserve_lane_services;
|
|
use modules\selfserve\helpers\selfserve_task_gate_type;
|
|
use traits\route_t;
|
|
|
|
class departmentSelfserveTasksRoute
|
|
{
|
|
use route_t;
|
|
|
|
public function run(): void
|
|
{
|
|
/**
|
|
* List department self-serve tasks
|
|
*/
|
|
$this->get('/department/selfserve/tasks', function () {
|
|
global $response;
|
|
$this->requirePermission('list_department_selfserve_tasks');
|
|
$user = (new authentication())->get_user();
|
|
if ($user) {
|
|
(new logs_o())->add('department_selfserve_tasks', 'global', 1, $user->id, 'LIST_TASKS', 'User listed department self-serve tasks');
|
|
|
|
$tasks_o = new department_selfserve_tasks_o();
|
|
$authorized_department_ids = $user->getGroup()->getDepartments();
|
|
$has_view_all_permission = $this->hasPermission('view_all_department_selfserve_tasks');
|
|
|
|
// If an ID is provided, return that specific task
|
|
if (self::isParametersSet(['id'])) {
|
|
$tasks_o->select((int)self::getParameter('id'));
|
|
if ($tasks_o->exists()) {
|
|
if (!$this->canAccessDepartment($authorized_department_ids, (int)$tasks_o->department->value())) {
|
|
if (!$has_view_all_permission) {
|
|
$this->forbidDepartmentAccess((int)$tasks_o->department->value(), ['view_all_department_selfserve_tasks']);
|
|
}
|
|
}
|
|
$response->success($tasks_o->asArray());
|
|
} else {
|
|
$response->error('Task not found', 404);
|
|
}
|
|
}
|
|
|
|
$filters = [];
|
|
if (self::isParametersSet(['department'])) {
|
|
$requested_department = (int)self::getParameter('department');
|
|
if (!$this->canAccessDepartment($authorized_department_ids, $requested_department) && !$has_view_all_permission) {
|
|
$this->forbidDepartmentAccess($requested_department, ['view_all_department_selfserve_tasks']);
|
|
}
|
|
$filters['department'] = $requested_department;
|
|
} else {
|
|
if (!$has_view_all_permission) {
|
|
if (empty($authorized_department_ids)) {
|
|
$authorized_department_ids = [0];
|
|
} else {
|
|
$authorized_department_ids[] = 0;
|
|
}
|
|
$filters['department'] = $authorized_department_ids;
|
|
}
|
|
}
|
|
|
|
if (self::isParametersSet(['lane'])) {
|
|
$filters['lane'] = (int)self::getParameter('lane');
|
|
}
|
|
|
|
if (self::isParametersSet(['product'])) {
|
|
$filters['product'] = (int)self::getParameter('product');
|
|
}
|
|
|
|
if (self::isParametersSet(['condition_id'])) {
|
|
$filters['condition_id'] = (int)self::getParameter('condition_id');
|
|
}
|
|
if (self::isParametersSet(['gate_type'])) {
|
|
$filters['gate_type'] = (string)self::getParameter('gate_type');
|
|
}
|
|
if (self::isParametersSet(['gate_ref_id'])) {
|
|
$filters['gate_ref_id'] = (int)self::getParameter('gate_ref_id');
|
|
}
|
|
|
|
if (self::isParametersSet(['machine_type_id'])) {
|
|
$filters['machine_type_id'] = (int)self::getParameter('machine_type_id');
|
|
}
|
|
|
|
$response->success(
|
|
$tasks_o->setSearchableFields(['id', 'department', 'lane', 'product', 'machine_type_id', 'condition_id', 'gate_type', 'gate_ref_id', 'task', 'description', 'deleted_at'])
|
|
->listObjectsWithPaginationIfSet(function ($task) {
|
|
$t = new department_selfserve_tasks_o();
|
|
$t->select((int)$task['id']);
|
|
return $t->asArray();
|
|
}, $tasks_o->forceRestrictFilters($filters))
|
|
);
|
|
} else {
|
|
$response->error('Invalid session', 400);
|
|
}
|
|
}, [
|
|
'list_department_selfserve_tasks' => 'List all department self-serve tasks',
|
|
'view_all_department_selfserve_tasks' => 'View all department self-serve tasks'
|
|
]);
|
|
|
|
/**
|
|
* Add a department self-serve task
|
|
*/
|
|
$this->post('/department/selfserve/tasks', function () {
|
|
global $response;
|
|
$this->requirePermission('add_department_selfserve_tasks');
|
|
$user = (new authentication())->get_user();
|
|
if ($user) {
|
|
$department = $response->isRequestParameterSet('department') ? (int)$response->getRequestParameter('department') : 0;
|
|
$lane = $response->isRequestParameterSet('lane') ? (int)$response->getRequestParameter('lane') : 0;
|
|
$product = $response->isRequestParameterSet('product') ? (int)$response->getRequestParameter('product') : 0;
|
|
$machine_type_id = null;
|
|
if ($response->isRequestParameterSet('machine_type_id')) {
|
|
$machine_type_param = $response->getRequestParameter('machine_type_id');
|
|
if (!is_null($machine_type_param) && $machine_type_param !== '' && $machine_type_param !== 'null') {
|
|
$machine_type_id = (int)$machine_type_param;
|
|
}
|
|
}
|
|
$question_id = null;
|
|
if ($response->isRequestParameterSet('condition_id')) {
|
|
$condition_id_param = $response->getRequestParameter('condition_id');
|
|
if (!is_null($condition_id_param) && $condition_id_param !== '' && $condition_id_param !== 'null') {
|
|
$question_id = (int)$condition_id_param;
|
|
}
|
|
}
|
|
$gate_type = null;
|
|
if ($response->isRequestParameterSet('gate_type')) {
|
|
try {
|
|
$gate_type = department_selfserve_tasks_o::normalizeGateTypeInput($response->getRequestParameter('gate_type'));
|
|
} catch (\Exception $e) {
|
|
$response->error($e->getMessage(), 400);
|
|
}
|
|
}
|
|
$gate_ref_id = null;
|
|
if ($response->isRequestParameterSet('gate_ref_id')) {
|
|
$gate_ref_param = $response->getRequestParameter('gate_ref_id');
|
|
if (!is_null($gate_ref_param) && $gate_ref_param !== '' && $gate_ref_param !== 'null') {
|
|
$gate_ref_id = (int)$gate_ref_param;
|
|
}
|
|
}
|
|
if ($gate_type !== null) {
|
|
if ($gate_type === selfserve_task_gate_type::ALWAYS) {
|
|
$gate_ref_id = null;
|
|
$question_id = null;
|
|
} else {
|
|
if ($gate_ref_id === null) {
|
|
$gate_ref_id = $question_id;
|
|
}
|
|
if ($gate_ref_id === null || $gate_ref_id <= 0) {
|
|
$response->error('gate_ref_id is required when gate_type is CONDITION or QUESTION', 400);
|
|
}
|
|
// Keep legacy contract field in sync.
|
|
$question_id = $gate_ref_id;
|
|
}
|
|
} elseif ($gate_ref_id !== null && $gate_ref_id > 0) {
|
|
$question_id = $gate_ref_id;
|
|
}
|
|
$task = (string)$response->getRequestParameter('task');
|
|
$description = (string)$response->getRequestParameter('description');
|
|
$order_priority = (int)($response->getRequestParameter('order_priority') ?? 0);
|
|
// Optional services
|
|
$services_param = $response->isRequestParameterSet('services') ? $response->getRequestParameter('services') : null;
|
|
$services_enums = null;
|
|
if (!is_null($services_param)) {
|
|
// Accept array, JSON string, or comma-separated string
|
|
$raw = $services_param;
|
|
if (is_string($raw)) {
|
|
$decoded = json_decode($raw, true);
|
|
if (json_last_error() === JSON_ERROR_NONE && is_array($decoded)) {
|
|
$raw = $decoded;
|
|
} else {
|
|
$raw = array_filter(array_map(function ($s) { return trim($s); }, explode(',', $services_param)), fn($s) => $s !== '');
|
|
}
|
|
}
|
|
if (!is_array($raw)) {
|
|
$response->error('Invalid format for services. Expected array, JSON array, or comma-separated string of service names.', 400);
|
|
}
|
|
// Map to enum cases by name (case-insensitive)
|
|
$services_enums = [];
|
|
foreach ($raw as $srv) {
|
|
$name = strtoupper(is_string($srv) ? trim($srv) : (string)$srv);
|
|
$matched = null;
|
|
foreach (selfserve_lane_services::cases() as $case) {
|
|
if ($case->name === $name) {
|
|
$matched = $case;
|
|
break;
|
|
}
|
|
}
|
|
if (!$matched) {
|
|
$response->error('Invalid service: ' . (string)$srv, 400);
|
|
}
|
|
$services_enums[] = $matched;
|
|
}
|
|
}
|
|
|
|
// Optional buttons
|
|
$buttons_param = $response->isRequestParameterSet('buttons') ? $response->getRequestParameter('buttons') : null;
|
|
$buttons_ids = null;
|
|
if (!is_null($buttons_param)) {
|
|
try {
|
|
$buttons_ids = department_selfserve_tasks_o::normalizeButtonsInput($buttons_param);
|
|
} catch (\Exception $e) {
|
|
$response->error($e->getMessage(), 400);
|
|
}
|
|
}
|
|
|
|
// Optional dynamic_images_vehicle_type
|
|
$vehicle_type_param = $response->isRequestParameterSet('dynamic_images_vehicle_type') ? $response->getRequestParameter('dynamic_images_vehicle_type') : null;
|
|
$vehicle_type = null;
|
|
if ($vehicle_type_param !== null) {
|
|
try {
|
|
$vehicle_type = department_selfserve_tasks_o::normalizeVehicleTypeInput($vehicle_type_param);
|
|
} catch (\Exception $e) {
|
|
$response->error($e->getMessage(), 400);
|
|
}
|
|
}
|
|
|
|
if (!$task || !$description) {
|
|
$response->error('Missing required fields: task and description', 400);
|
|
}
|
|
|
|
if ($machine_type_id === null && (!$department || !$lane || !$product)) {
|
|
$response->error('Missing required fields: either machine_type_id or department, lane, and product', 400);
|
|
}
|
|
|
|
$authorized_department_ids = $user->getGroup()->getDepartments();
|
|
if (!$this->canAccessDepartment($authorized_department_ids, $department)) {
|
|
$this->forbidDepartmentAccess($department);
|
|
}
|
|
|
|
try {
|
|
$task_o = (new department_selfserve_tasks_o())->add(
|
|
$department,
|
|
$lane,
|
|
$product,
|
|
$question_id,
|
|
$task,
|
|
$description,
|
|
$order_priority,
|
|
$services_enums,
|
|
$buttons_ids,
|
|
$vehicle_type,
|
|
$machine_type_id,
|
|
$gate_type,
|
|
$gate_ref_id,
|
|
);
|
|
(new selfserve_config_versioning())->syncDraftFromLegacyForDepartment($department);
|
|
(new logs_o())->add('department_selfserve_tasks', 'global', 1, $user->id, 'ADD_TASK', 'User added a department self-serve task: ' . $task);
|
|
$response->success($task_o->asArray());
|
|
} catch (\Exception $e) {
|
|
$response->error($e->getMessage(), 500);
|
|
}
|
|
} else {
|
|
$response->error('Invalid session', 400);
|
|
}
|
|
}, [
|
|
'add_department_selfserve_tasks' => 'Add a department self-serve task'
|
|
]);
|
|
|
|
/**
|
|
* Update a department self-serve task
|
|
*/
|
|
$this->put('/department/selfserve/tasks', function () {
|
|
global $response;
|
|
$this->requirePermission('edit_department_selfserve_tasks');
|
|
$user = (new authentication())->get_user();
|
|
if ($user) {
|
|
self::requireParameters(['id']);
|
|
$id = (int)self::getParameter('id');
|
|
$task_o = new department_selfserve_tasks_o();
|
|
$task_o->select($id);
|
|
|
|
if (!$task_o->exists()) {
|
|
$response->error('Task not found', 404);
|
|
}
|
|
$originalDepartment = (int)$task_o->department->value();
|
|
|
|
$authorized_department_ids = $user->getGroup()->getDepartments();
|
|
if (!$this->canAccessDepartment($authorized_department_ids, (int)$task_o->department->value())) {
|
|
$this->forbidDepartmentAccess((int)$task_o->department->value());
|
|
}
|
|
|
|
if (self::isParametersSet(['department'])) {
|
|
$new_department = (int)self::getParameter('department');
|
|
if (!$this->canAccessDepartment($authorized_department_ids, $new_department)) {
|
|
$this->forbidDepartmentAccess($new_department);
|
|
}
|
|
$task_o->department->set($new_department);
|
|
}
|
|
if (self::isParametersSet(['lane'])) {
|
|
$task_o->lane->set((int)self::getParameter('lane'));
|
|
}
|
|
if (self::isParametersSet(['product'])) {
|
|
$task_o->product->set((int)self::getParameter('product'));
|
|
}
|
|
if (self::isParametersSet(['machine_type_id'])) {
|
|
$param = self::getParameter('machine_type_id');
|
|
$task_o->machine_type_id->set($param === null || $param === '' || $param === 'null' ? null : (int)$param);
|
|
}
|
|
if (self::isParametersSet(['condition_id'])) {
|
|
$param = self::getParameter('condition_id');
|
|
$task_o->setQuestionId($param === null || $param === '' || $param === 'null' ? null : (int)$param);
|
|
}
|
|
if (self::isParametersSet(['gate_type']) || self::isParametersSet(['gate_ref_id'])) {
|
|
try {
|
|
$effectiveGateType = self::isParametersSet(['gate_type'])
|
|
? department_selfserve_tasks_o::normalizeGateTypeInput(self::getParameter('gate_type'))
|
|
: department_selfserve_tasks_o::normalizeGateTypeInput((string)($task_o->gate_type->value() ?? selfserve_task_gate_type::ALWAYS->value));
|
|
$effectiveGateRefId = self::isParametersSet(['gate_ref_id'])
|
|
? (
|
|
(self::getParameter('gate_ref_id') === null || self::getParameter('gate_ref_id') === '' || self::getParameter('gate_ref_id') === 'null')
|
|
? null
|
|
: (int)self::getParameter('gate_ref_id')
|
|
)
|
|
: ($task_o->gate_ref_id->value() === null ? null : (int)$task_o->gate_ref_id->value());
|
|
|
|
if (!self::isParametersSet(['gate_ref_id']) && self::isParametersSet(['condition_id']) && $effectiveGateType !== selfserve_task_gate_type::ALWAYS) {
|
|
$conditionParam = self::getParameter('condition_id');
|
|
$effectiveGateRefId = ($conditionParam === null || $conditionParam === '' || $conditionParam === 'null')
|
|
? null
|
|
: (int)$conditionParam;
|
|
}
|
|
|
|
if ($effectiveGateType === selfserve_task_gate_type::ALWAYS) {
|
|
$effectiveGateRefId = null;
|
|
} elseif ($effectiveGateRefId === null || $effectiveGateRefId <= 0) {
|
|
$response->error('gate_ref_id is required when gate_type is CONDITION or QUESTION', 400);
|
|
}
|
|
|
|
$task_o->gate_type->set($effectiveGateType->value);
|
|
$task_o->gate_ref_id->set($effectiveGateRefId);
|
|
// Preserve legacy contract field.
|
|
$task_o->condition_id->set($effectiveGateRefId);
|
|
} catch (\Exception $e) {
|
|
$response->error($e->getMessage(), 400);
|
|
}
|
|
}
|
|
if (self::isParametersSet(['task'])) {
|
|
$task_o->task->set((string)self::getParameter('task'));
|
|
}
|
|
if (self::isParametersSet(['description'])) {
|
|
$task_o->description->set((string)self::getParameter('description'));
|
|
}
|
|
if (self::isParametersSet(['order_priority'])) {
|
|
$task_o->order_priority->set((int)self::getParameter('order_priority'));
|
|
}
|
|
if (self::isParametersSet(['services'])) {
|
|
$param = self::getParameter('services');
|
|
if ($param === null) {
|
|
// Explicitly clear services
|
|
$task_o->services->set(null);
|
|
} else {
|
|
$raw = $param;
|
|
if (is_string($raw)) {
|
|
$decoded = json_decode($raw, true);
|
|
if (json_last_error() === JSON_ERROR_NONE && is_array($decoded)) {
|
|
$raw = $decoded;
|
|
} else {
|
|
$raw = array_filter(array_map(function ($s) { return trim($s); }, explode(',', $param)), fn($s) => $s !== '');
|
|
}
|
|
}
|
|
if (!is_array($raw)) {
|
|
$response->error('Invalid format for services. Expected array, JSON array, or comma-separated string of service names.', 400);
|
|
}
|
|
// Validate and store names
|
|
$names = [];
|
|
foreach ($raw as $srv) {
|
|
$name = strtoupper(is_string($srv) ? trim($srv) : (string)$srv);
|
|
$valid = false;
|
|
foreach (selfserve_lane_services::cases() as $case) {
|
|
if ($case->name === $name) {
|
|
$valid = true;
|
|
break;
|
|
}
|
|
}
|
|
if (!$valid) {
|
|
$response->error('Invalid service: ' . (string)$srv, 400);
|
|
}
|
|
$names[] = $name;
|
|
}
|
|
$task_o->services->set($names);
|
|
}
|
|
}
|
|
|
|
if (self::isParametersSet(['buttons'])) {
|
|
$param = self::getParameter('buttons');
|
|
if ($param === null) {
|
|
// Explicitly clear buttons
|
|
$task_o->buttons->set(null);
|
|
} else {
|
|
try {
|
|
$ids = department_selfserve_tasks_o::normalizeButtonsInput($param);
|
|
$task_o->buttons->set($ids);
|
|
} catch (\Exception $e) {
|
|
$response->error($e->getMessage(), 400);
|
|
}
|
|
}
|
|
}
|
|
|
|
// Optional dynamic_images_vehicle_type update
|
|
if (self::isParametersSet(['dynamic_images_vehicle_type'])) {
|
|
$param = self::getParameter('dynamic_images_vehicle_type');
|
|
if ($param === null) {
|
|
$task_o->dynamic_images_vehicle_type->set(null);
|
|
} else {
|
|
try {
|
|
$val = department_selfserve_tasks_o::normalizeVehicleTypeInput($param);
|
|
$task_o->dynamic_images_vehicle_type->set($val);
|
|
} catch (\Exception $e) {
|
|
$response->error($e->getMessage(), 400);
|
|
}
|
|
}
|
|
}
|
|
|
|
(new selfserve_config_versioning())->syncDraftFromLegacyForDepartment($originalDepartment);
|
|
(new selfserve_config_versioning())->syncDraftFromLegacyForDepartment((int)$task_o->department->value());
|
|
(new logs_o())->add('department_selfserve_tasks', 'global', 1, $user->id, 'EDIT_TASK', 'User updated department self-serve task ID: ' . $id);
|
|
$response->success($task_o->asArray());
|
|
} else {
|
|
$response->error('Invalid session', 400);
|
|
}
|
|
}, [
|
|
'edit_department_selfserve_tasks' => 'Edit a department self-serve task'
|
|
]);
|
|
|
|
/**
|
|
* Delete a department self-serve task
|
|
*/
|
|
$this->delete('/department/selfserve/tasks', function () {
|
|
global $response;
|
|
$this->requirePermission('delete_department_selfserve_tasks');
|
|
$user = (new authentication())->get_user();
|
|
if ($user) {
|
|
self::requireParameters(['id']);
|
|
$id = (int)self::getParameter('id');
|
|
$task_o = new department_selfserve_tasks_o();
|
|
$task_o->select($id);
|
|
|
|
if (!$task_o->exists()) {
|
|
$response->error('Task not found', 404);
|
|
}
|
|
|
|
$authorized_department_ids = $user->getGroup()->getDepartments();
|
|
if (!$this->canAccessDepartment($authorized_department_ids, (int)$task_o->department->value())) {
|
|
$this->forbidDepartmentAccess((int)$task_o->department->value());
|
|
}
|
|
|
|
$task_o->delete();
|
|
(new selfserve_config_versioning())->syncDraftFromLegacyForDepartment((int)$task_o->department->value());
|
|
(new logs_o())->add('department_selfserve_tasks', 'global', 1, $user->id, 'DELETE_TASK', 'User deleted department self-serve task ID: ' . $id);
|
|
$response->success('Task deleted');
|
|
} else {
|
|
$response->error('Invalid session', 400);
|
|
}
|
|
}, [
|
|
'delete_department_selfserve_tasks' => 'Delete a department self-serve task'
|
|
]);
|
|
|
|
/**
|
|
* Download an attachment for a department self-serve task
|
|
*/
|
|
$this->get('/department/selfserve/tasks/attachments/download', function () {
|
|
global $response;
|
|
$this->requirePermission('download_department_selfserve_task_attachments');
|
|
$user = (new authentication())->get_user();
|
|
if ($user) {
|
|
self::requireParameters(['task_id', 'attachment_id']);
|
|
$task_id = (int)self::getParameter('task_id');
|
|
$attachment_id = (int)self::getParameter('attachment_id');
|
|
|
|
$task_o = new department_selfserve_tasks_o();
|
|
$task_o->select($task_id);
|
|
|
|
if (!$task_o->exists()) {
|
|
$response->error('Task not found', 404);
|
|
}
|
|
|
|
$authorized_department_ids = $user->getGroup()->getDepartments();
|
|
$has_view_all_permission = $this->hasPermission('view_all_department_selfserve_tasks');
|
|
if (!$this->canAccessDepartment($authorized_department_ids, (int)$task_o->department->value())) {
|
|
if (!$has_view_all_permission) {
|
|
$this->forbidDepartmentAccess((int)$task_o->department->value(), ['view_all_department_selfserve_tasks']);
|
|
}
|
|
}
|
|
|
|
$task_attachments = $task_o->listAttachments();
|
|
$task_attachment_ids = array_map(static fn($attachment) => (int)$attachment->id, $task_attachments);
|
|
if (!in_array($attachment_id, $task_attachment_ids, true)) {
|
|
$response->error('Attachment not found', 404);
|
|
}
|
|
|
|
$attachment = $task_o->getAttachment($attachment_id);
|
|
|
|
$attachment_store = new attachment_store();
|
|
$attachments = new attachments();
|
|
$attachment_formatted = $attachments->format($attachment);
|
|
$download_link = $attachment_store->generateDirectDownloadUrl($attachment_formatted->content->document);
|
|
|
|
(new logs_o())->add('department_selfserve_tasks', (int)$task_o->department->value(), 1, $user->id, 'DOWNLOAD_TASK_ATTACHMENT', 'User downloaded attachment ID: ' . $attachment_id . ' for task ID: ' . $task_id);
|
|
$response->success(['download_link' => $download_link]);
|
|
} else {
|
|
$response->error('Invalid session', 400);
|
|
}
|
|
}, [
|
|
'download_department_selfserve_task_attachments' => 'Download attachments for a department self-serve task',
|
|
'view_all_department_selfserve_tasks' => 'View all department self-serve tasks'
|
|
]);
|
|
|
|
/**
|
|
* List attachments for a department self-serve task
|
|
*/
|
|
$this->get('/department/selfserve/tasks/attachments', function () {
|
|
global $response;
|
|
$this->requirePermission('list_department_selfserve_task_attachments');
|
|
$user = (new authentication())->get_user();
|
|
if ($user) {
|
|
self::requireParameters(['id']);
|
|
$task_id = (int)self::getParameter('id');
|
|
|
|
$task_o = new department_selfserve_tasks_o();
|
|
$task_o->select($task_id);
|
|
|
|
if (!$task_o->exists()) {
|
|
$response->error('Task not found', 404);
|
|
}
|
|
|
|
$authorized_department_ids = $user->getGroup()->getDepartments();
|
|
$has_view_all_permission = $this->hasPermission('view_all_department_selfserve_tasks');
|
|
if (!$this->canAccessDepartment($authorized_department_ids, (int)$task_o->department->value())) {
|
|
if (!$has_view_all_permission) {
|
|
$this->forbidDepartmentAccess((int)$task_o->department->value(), ['view_all_department_selfserve_tasks']);
|
|
}
|
|
}
|
|
|
|
$attachments = $task_o->listAttachments();
|
|
(new logs_o())->add('department_selfserve_tasks', (int)$task_o->department->value(), 1, $user->id, 'LIST_TASK_ATTACHMENTS', 'User listed attachments for task ID: ' . $task_id);
|
|
$response->success($attachments);
|
|
} else {
|
|
$response->error('Invalid session', 400);
|
|
}
|
|
}, [
|
|
'list_department_selfserve_task_attachments' => 'List attachments for a department self-serve task',
|
|
'view_all_department_selfserve_tasks' => 'View all department self-serve tasks'
|
|
]);
|
|
|
|
/**
|
|
* Upload an attachment for a department self-serve task
|
|
*/
|
|
$this->post('/department/selfserve/tasks/attachments/upload', function () {
|
|
global $response;
|
|
$this->requirePermission('add_department_selfserve_task_attachments');
|
|
$user = (new authentication())->get_user();
|
|
if ($user) {
|
|
$this->requireParameters(['task_id', 'base64_file', 'file_name']);
|
|
$task_id = (int)$this->getParameter('task_id');
|
|
$base64_file = (string)$this->getParameter('base64_file');
|
|
$file_name = (string)$this->getParameter('file_name');
|
|
|
|
$task_o = new department_selfserve_tasks_o();
|
|
$task_o->select($task_id);
|
|
|
|
if (!$task_o->exists()) {
|
|
$response->error('Task not found', 404);
|
|
}
|
|
|
|
$authorized_department_ids = $user->getGroup()->getDepartments();
|
|
if (!$this->canAccessDepartment($authorized_department_ids, (int)$task_o->department->value())) {
|
|
$this->forbidDepartmentAccess((int)$task_o->department->value());
|
|
}
|
|
|
|
$attachment_store = new attachment_store();
|
|
$extension = pathinfo($file_name, PATHINFO_EXTENSION);
|
|
$object_name = $attachment_store->storeTempFileFromBase64($base64_file, $extension);
|
|
|
|
if ($object_name === false) {
|
|
$response->error('Failed to store the attachment file.', 500);
|
|
}
|
|
|
|
$object_attachment = $task_o->addAttachment((new attachment_content())->setDocument($object_name)->setOther($file_name));
|
|
|
|
(new logs_o())->add('department_selfserve_tasks', (int)$task_o->department->value(), 1, $user->id, 'ADD_TASK_ATTACHMENT', 'User added an attachment for task ID: ' . $task_id);
|
|
|
|
$attachments = new attachments();
|
|
$response->success($attachments->format($attachments->get($object_attachment->id)));
|
|
} else {
|
|
$response->error('Invalid session', 400);
|
|
}
|
|
}, [
|
|
'add_department_selfserve_task_attachments' => 'Add attachments for a department self-serve task'
|
|
]);
|
|
|
|
/**
|
|
* Delete an attachment for a department self-serve task
|
|
*/
|
|
$this->delete('/department/selfserve/tasks/attachments', function () {
|
|
global $response;
|
|
$this->requirePermission('delete_department_selfserve_task_attachments');
|
|
$user = (new authentication())->get_user();
|
|
if ($user) {
|
|
self::requireParameters(['task_id', 'attachment_id']);
|
|
$task_id = (int)self::getParameter('task_id');
|
|
$attachment_id = (int)self::getParameter('attachment_id');
|
|
|
|
$task_o = new department_selfserve_tasks_o();
|
|
$task_o->select($task_id);
|
|
|
|
if (!$task_o->exists()) {
|
|
$response->error('Task not found', 404);
|
|
}
|
|
|
|
$authorized_department_ids = $user->getGroup()->getDepartments();
|
|
if (!$this->canAccessDepartment($authorized_department_ids, (int)$task_o->department->value())) {
|
|
$this->forbidDepartmentAccess((int)$task_o->department->value());
|
|
}
|
|
|
|
$task_attachments = $task_o->listAttachments();
|
|
$task_attachment_ids = array_map(static fn($attachment) => (int)$attachment->id, $task_attachments);
|
|
if (!in_array($attachment_id, $task_attachment_ids, true)) {
|
|
$response->error('Attachment not found', 404);
|
|
}
|
|
|
|
$task_o->removeAttachment($attachment_id);
|
|
|
|
(new logs_o())->add('department_selfserve_tasks', (int)$task_o->department->value(), 1, $user->id, 'DELETE_TASK_ATTACHMENT', 'User deleted attachment ID: ' . $attachment_id . ' for task ID: ' . $task_id);
|
|
$response->success(['message' => 'Attachment deleted successfully']);
|
|
} else {
|
|
$response->error('Invalid session', 400);
|
|
}
|
|
}, [
|
|
'delete_department_selfserve_task_attachments' => 'Delete attachments for a department self-serve task'
|
|
]);
|
|
}
|
|
|
|
private function canAccessDepartment(array $authorizedDepartmentIds, int $departmentId): bool
|
|
{
|
|
return $departmentId === 0 || in_array($departmentId, $authorizedDepartmentIds, true);
|
|
}
|
|
}
|