class.ilDclTableHelper.php

Go to the documentation of this file.

<?php

class ilDclTableHelper {

        protected $obj_id = 0;
        protected $ref_id = 0;
        protected $rbac_review;
        protected $user;
        protected $database;


        public function __construct(int $obj_id, int $ref_id, ilRbacReview $rbac_review, ilObjUser $user, ilDBInterface $database) {
                $this->obj_id = $obj_id;
                $this->ref_id = $ref_id;
                $this->rbac_review = $rbac_review;
                $this->user = $user;
                $this->database = $database;
        }


        public function getRoleTitlesWithoutReadRightOnAnyStandardView() {
                $visible_tables_for_data_collection = $this->getAllVisibleTablesForDataColleciton();
                $standard_views_for_data_collection = $this->getStandardViewsByVisibleTables($visible_tables_for_data_collection);

                $roles_ids = $this->getRolesIdsByViews($standard_views_for_data_collection);

                $roles_with_read_acces_ids = $this->getRolesIdsWithReadAccessOnDataCollection();

                //check if there are roles with rbac read right on the datacollection but without read right on any table view
                $roles_with_no_read_right_on_any_standard_view = array_diff($roles_with_read_acces_ids, $roles_ids);

                $roles_data = $this->rbac_review->getRolesForIDs($roles_with_no_read_right_on_any_standard_view, true);
                $role_titles = [];
                if (!empty($roles_data)) {
                        foreach ($roles_data as $role_data) {
                                $role_titles[] = $role_data['title'];
                        }
                }

                return $role_titles;
        }


        protected function getRolesIdsWithReadAccessOnDataCollection() {
                $rbac_roles = $this->rbac_review->getParentRoleIds($this->ref_id);
                $roles_with_read_acces_ids = [];
                //get all roles with read access on data collection
                foreach ($rbac_roles as $role) {
                        $operations = $this->rbac_review->getActiveOperationsOfRole($this->ref_id, $role['rol_id']);
                        //3 corresponds to the read rbac right
                        if (!empty($operations) && in_array(3, $operations)) {
                                $roles_with_read_acces_ids[] = $role['rol_id'];
                        }
                }

                return $roles_with_read_acces_ids;
        }


        protected function getRolesIdsByViews($views_for_data_collection) {
                $roles_ids = [];
                foreach ($views_for_data_collection as $key => $view_for_data_collection_array_of_objects) {
                        foreach ($view_for_data_collection_array_of_objects as $view_for_data_collection_object) {
                                $ilDclTableView = ilDclTableView::find($view_for_data_collection_object->getId());
                                $roles_of_view = $ilDclTableView->getRoles();
                                $roles_ids = array_merge($roles_ids, $roles_of_view);
                        }
                }

                return $roles_ids;
        }


        protected function getStandardViewsByVisibleTables($visible_tables_for_data_collection) {
                $standard_views_for_data_collection = [];
                foreach ($visible_tables_for_data_collection as $visible_table) {
                        $standard_views_for_data_collection[] = ilDclTableView::where(
                                [
                                        'table_id' => $visible_table['id']
                                ]
                        )->get();
                }

                return $standard_views_for_data_collection;
        }


        protected function getAllVisibleTablesForDataColleciton() {
                $visible_tables_for_data_collection = [];
                $res = $this->database->queryF(
                        "SELECT * FROM il_dcl_table WHERE obj_id = %s AND is_visible = 1", array('integer'), array($this->obj_id)
                );
                while ($rec = $this->database->fetchAssoc($res)) {
                        $visible_tables_for_data_collection[] = $rec;
                }

                return $visible_tables_for_data_collection;
        }


        protected function hasUserReadAccessOnAnyVisibleTableView() {
                // admin user has always access to the views of a data collection
                if ($this->user->getId() == 6) {
                        return true;
                }

                $visible_tables_for_data_collection = $this->getAllVisibleTablesForDataColleciton();
                $standard_views_for_data_collection = $this->getStandardViewsByVisibleTables($visible_tables_for_data_collection);

                $roles_ids = $this->getRolesIdsByViews($standard_views_for_data_collection);

                $user_ids_with_read_right_on_any_standard_view = [];
                foreach ($roles_ids as $role_id) {
                        $assigned_users = $this->rbac_review->assignedUsers($role_id);
                        if (!empty($assigned_users)) {
                                $user_ids_with_read_right_on_any_standard_view[] = array_merge($user_ids_with_read_right_on_any_standard_view, $assigned_users);
                        }
                }

                //check if current user id is in the array of user ids with read right on standard view
                if ($this->in_array_r($this->user->getId(), $user_ids_with_read_right_on_any_standard_view)) {
                        return true;
                } else {
                        return false;
                }
        }


        protected function in_array_r($needle, $haystack, $strict = false) {
                foreach ($haystack as $item) {
                        if (($strict ? $item === $needle : $item == $needle) || (is_array($item) && $this->in_array_r($needle, $item, $strict))) {
                                return true;
                        }
                }

                return false;
        }
}