class.ilIndividualAssessmentAccessHandler.php

Go to the documentation of this file.

<?php

declare(strict_types=1);

class ilIndividualAssessmentAccessHandler implements IndividualAssessmentAccessHandler
{
    public const DEFAULT_ROLE = 'il_iass_member';

    protected ilObjIndividualAssessment $iass;
    protected ilAccessHandler $handler;
    protected ilRbacAdmin $admin;
    protected ilRbacReview $review;
    protected ilObjUser $usr;

    public function __construct(
        ilObjIndividualAssessment $iass,
        ilAccessHandler $handler,
        ilRbacAdmin $admin,
        ilRbacReview $review,
        ilObjUser $usr
    ) {
        $this->iass = $iass;
        $this->handler = $handler;
        $this->admin = $admin;
        $this->review = $review;
        $this->usr = $usr;
    }

    public function checkRBACAccessToObj(string $operation): bool
    {
        return $this->isSystemAdmin() || $this->handler->checkAccessOfUser($this->usr->getId(), $operation, '', $this->iass->getRefId(), 'iass');
    }

    public function checkRBACOrPositionAccessToObj(string $operation)
    {
        if ($this->isSystemAdmin()) {
            return true;
        }

        if ($operation == "read_learning_progress") {
            return $this->handler->checkRbacOrPositionPermissionAccess(
                "read_learning_progress",
                "read_learning_progress",
                $this->iass->getRefId()
            );
        }

        if ($operation == "edit_learning_progress") {
            return $this->handler->checkRbacOrPositionPermissionAccess(
                "edit_learning_progress",
                "write_learning_progress",
                $this->iass->getRefId()
            );
        }

        throw new \LogicException("Unknown rbac/position-operation: $operation");
    }

    public function initDefaultRolesForObject(ilObjIndividualAssessment $iass): void
    {
        ilObjRole::createDefaultRole(
            $this->getRoleTitleByObj($iass),
            "Admin of iass obj_no." . $iass->getId(),
            self::DEFAULT_ROLE,
            $iass->getRefId()
        );
    }

    public function assignUserToMemberRole(ilObjUser $usr, ilObjIndividualAssessment $iass): bool
    {
        $this->admin->assignUser($this->getMemberRoleIdForObj($iass), $usr->getId());
        return true;
    }

    public function deassignUserFromMemberRole(ilObjUser $usr, ilObjIndividualAssessment $iass): bool
    {
        $this->admin->deassignUser($this->getMemberRoleIdForObj($iass), $usr->getId());
        return true;
    }

    protected function getRoleTitleByObj(ilObjIndividualAssessment $iass): string
    {
        return self::DEFAULT_ROLE . '_' . $iass->getRefId();
    }

    protected function getMemberRoleIdForObj(ilObjIndividualAssessment $iass)
    {
        return current($this->review->getLocalRoles($iass->getRefId()));
    }

    public function mayReadObject(): bool
    {
        return $this->checkRBACAccessToObj('read');
    }

    public function mayEditObject(): bool
    {
        return $this->checkRBACAccessToObj('write');
    }

    public function mayEditPermissions(): bool
    {
        return $this->checkRBACAccessToObj('edit_permission');
    }

    public function mayEditMembers(): bool
    {
        return $this->checkRBACAccessToObj('edit_members');
    }

    public function mayViewAnyUser(): bool
    {
        return $this->mayViewAllUsers()
            || $this->checkRBACOrPositionAccessToObj('read_learning_progress')
            || $this->checkRBACOrPositionAccessToObj('edit_learning_progress');
    }

    public function mayViewAllUsers(): bool
    {
        return $this->checkRBACAccessToObj('read_learning_progress');
    }

    public function mayGradeAnyUser(): bool
    {
        return $this->mayGradeAllUsers() || $this->checkRBACOrPositionAccessToObj('edit_learning_progress');
    }

    public function mayGradeAllUsers(): bool
    {
        return $this->checkRBACAccessToObj('edit_learning_progress');
    }

    public function mayGradeUser(int $user_id): bool
    {
        return
            $this->mayGradeAllUsers() ||
            (count(
                $this->handler->filterUserIdsByRbacOrPositionOfCurrentUser(
                    "edit_learning_progress",
                    "write_learning_progress",
                    $this->iass->getRefId(),
                    [$user_id]
                )
            ) > 0);
    }

    public function mayViewUser(int $user_id): bool
    {
        return
            $this->mayViewAllUsers() ||
            (count(
                $this->handler->filterUserIdsByRbacOrPositionOfCurrentUser(
                    "read_learning_progress",
                    "read_learning_progress",
                    $this->iass->getRefId(),
                    [$user_id]
                )
            ) > 0);
    }

    public function mayAmendAllUsers(): bool
    {
        return $this->checkRBACAccessToObj('amend_grading');
    }

    public function isSystemAdmin(): bool
    {
        return $this->review->isAssigned($this->usr->getId(), SYSTEM_ROLE_ID);
    }
}