class.AccessManager.php

Go to the documentation of this file.

<?php

declare(strict_types=1);

namespace ILIAS\Survey\Access;

use ILIAS\Survey\InternalDomainService;

class AccessManager
{
    protected \ilAccessHandler $access;
    protected int $ref_id;
    protected int $user_id;
    protected InternalDomainService $domain_service;

    public function __construct(
        InternalDomainService $domain_service,
        \ilAccessHandler $access,
        int $ref_id,
        int $user_id
    ) {
        $this->domain_service = $domain_service;
        $this->access = $access;
        $this->user_id = $user_id;
        $this->ref_id = $ref_id;
    }

    protected function getSurvey(): \ilObjSurvey
    {
        return new \ilObjSurvey($this->ref_id);
    }

    public function canRead(): bool
    {
        return $this->access->checkAccessOfUser(
            $this->user_id,
            "read",
            "",
            $this->ref_id
        );
    }

    public function canManageCodes(): bool
    {
        return $this->access->checkAccessOfUser(
            $this->user_id,
            "write",
            "",
            $this->ref_id
        ) ||
            $this->access->checkAccessOfUser(       // see #35369
                $this->user_id,
                "delete",
                "",
                $this->ref_id
            );
    }

    public function canAccessInfoScreen(): bool
    {
        $participant_status = $this->domain_service
            ->participants()
            ->status($this->getSurvey(), $this->user_id);
        if ($participant_status->isExternalRater() ||
            $this->access->checkAccessOfUser($this->user_id, "read", "", $this->ref_id) ||
            $this->access->checkAccessOfUser($this->user_id, "visible", "", $this->ref_id)) {
            return true;
        }
        return false;
    }

    public function canStartSurvey(): bool
    {
        $survey = $this->getSurvey();
        $participant_status = $this->domain_service
            ->participants()
            ->status($survey, $this->user_id);
        if ($participant_status->isExternalRater() ||
            $this->access->checkAccessOfUser($this->user_id, "read", "", $this->ref_id)) {
            if (!$survey->getOfflineStatus() &&
                $survey->hasStarted() &&
                !$survey->hasEnded()) {
                return true;
            }
        }
        return false;
    }

    public function canEditSettings(): bool
    {
        return $this->access->checkAccessOfUser($this->user_id, "write", "", $this->ref_id);
    }

    public function canAccessEvaluation(): bool
    {
        $survey = $this->getSurvey();
        if ($this->access->checkAccessOfUser($this->user_id, "write", "", $this->ref_id) ||
            $this->checkRbacOrPositionPermission('read_results', 'access_results') ||
            \ilObjSurveyAccess::_hasEvaluationAccess($survey->getId(), $this->user_id)) {
            return true;
        }
        return false;
    }

    protected function checkRbacOrPositionPermission(
        string $a_rbac_permission,
        string $a_position_permission
    ): bool {
        $access = $this->access;
        return $access->checkRbacOrPositionPermissionAccess(
            $a_rbac_permission,
            $a_position_permission,
            $this->ref_id
        );
    }

    public function isCodeInputAllowed(): bool
    {
        $survey = $this->getSurvey();
        $participant_status = $this->domain_service
            ->participants()
            ->status($this->getSurvey(), $this->user_id);
        if ($participant_status->isExternalRater() ||
            $survey->getAnonymize() || !$survey->isAccessibleWithoutCode()) {
            return true;
        }
        return false;
    }

    public function canReadResultOfParticipants(
        ?array $a_finished_ids = null
    ): array {
        $all_participants = $this->getSurvey()->getSurveyParticipants($a_finished_ids);
        $participant_ids = [];
        foreach ($all_participants as $participant) {
            if (isset($participant['usr_id'])) {
                $participant_ids[] = $participant['usr_id'];
            }
        }

        $filtered_participant_ids = $this->access->filterUserIdsByRbacOrPositionOfCurrentUser(
            'read_results',
            'access_results',
            $this->getSurvey()->getRefId(),
            $participant_ids
        );
        $participants = [];
        foreach ($all_participants as $username => $user_data) {
            if (!isset($user_data['usr_id'])) {
                $participants[$username] = $user_data;
            }
            if (in_array(($user_data['usr_id'] ?? null), $filtered_participant_ids)) {
                $participants[$username] = $user_data;
            }
        }
        return $participants;
    }
}