Rewrite of the authentication and authorization system

1 files changed, 177 insertions, 0 deletions

diff --git a/app/Controller/ProjectPermission.php b/app/Controller/ProjectPermission.php
new file mode 100644
index 00000000..4434d017
--- /dev/null
+++ b/app/Controller/ProjectPermission.php
@@ -0,0 +1,177 @@
+<?php
+
+namespace Kanboard\Controller;
+
+use Kanboard\Core\Security\Role;
+
+/**
+ * Project Permission
+ *
+ * @package  controller
+ * @author   Frederic Guillot
+ */
+class ProjectPermission extends Base
+{
+    /**
+     * Show all permissions
+     *
+     * @access public
+     */
+    public function index(array $values = array(), array $errors = array())
+    {
+        $project = $this->getProject();
+
+        if (empty($values)) {
+            $values['role'] = Role::PROJECT_MEMBER;
+        }
+
+        $this->response->html($this->projectLayout('project_permission/index', array(
+            'project' => $project,
+            'users' => $this->projectUserRole->getUsers($project['id']),
+            'groups' => $this->projectGroupRole->getGroups($project['id']),
+            'roles' => $this->role->getProjectRoles(),
+            'values' => $values,
+            'errors' => $errors,
+            'title' => t('Project Permissions'),
+        )));
+    }
+
+    /**
+     * Allow everybody
+     *
+     * @access public
+     */
+    public function allowEverybody()
+    {
+        $project = $this->getProject();
+        $values = $this->request->getValues() + array('is_everybody_allowed' => 0);
+
+        if ($this->project->update($values)) {
+            $this->flash->success(t('Project updated successfully.'));
+        } else {
+            $this->flash->failure(t('Unable to update this project.'));
+        }
+
+        $this->response->redirect($this->helper->url->to('ProjectPermission', 'index', array('project_id' => $project['id'])));
+    }
+
+    /**
+     * Add user to the project
+     *
+     * @access public
+     */
+    public function addUser()
+    {
+        $values = $this->request->getValues();
+
+        if ($this->projectUserRole->addUser($values['project_id'], $values['user_id'], $values['role'])) {
+            $this->flash->success(t('Project updated successfully.'));
+        } else {
+            $this->flash->failure(t('Unable to update this project.'));
+        }
+
+        $this->response->redirect($this->helper->url->to('ProjectPermission', 'index', array('project_id' => $values['project_id'])));
+    }
+
+    /**
+     * Revoke user access
+     *
+     * @access public
+     */
+    public function removeUser()
+    {
+        $this->checkCSRFParam();
+
+        $values = array(
+            'project_id' => $this->request->getIntegerParam('project_id'),
+            'user_id' => $this->request->getIntegerParam('user_id'),
+        );
+
+        if ($this->projectUserRole->removeUser($values['project_id'], $values['user_id'])) {
+            $this->flash->success(t('Project updated successfully.'));
+        } else {
+            $this->flash->failure(t('Unable to update this project.'));
+        }
+
+        $this->response->redirect($this->helper->url->to('ProjectPermission', 'index', array('project_id' => $values['project_id'])));
+    }
+
+    /**
+     * Change user role
+     *
+     * @access public
+     */
+    public function changeUserRole()
+    {
+        $project_id = $this->request->getIntegerParam('project_id');
+        $values = $this->request->getJson();
+
+        if (! empty($project_id) && ! empty($values) && $this->projectUserRole->changeUserRole($project_id, $values['id'], $values['role'])) {
+            $this->response->json(array('status' => 'ok'));
+        } else {
+            $this->response->json(array('status' => 'error'));
+        }
+    }
+
+    /**
+     * Add group to the project
+     *
+     * @access public
+     */
+    public function addGroup()
+    {
+        $values = $this->request->getValues();
+
+        if (empty($values['group_id']) && ! empty($values['external_id'])) {
+            $values['group_id'] = $this->group->create($values['name'], $values['external_id']);
+        }
+
+        if ($this->projectGroupRole->addGroup($values['project_id'], $values['group_id'], $values['role'])) {
+            $this->flash->success(t('Project updated successfully.'));
+        } else {
+            $this->flash->failure(t('Unable to update this project.'));
+        }
+
+        $this->response->redirect($this->helper->url->to('ProjectPermission', 'index', array('project_id' => $values['project_id'])));
+    }
+
+    /**
+     * Revoke group access
+     *
+     * @access public
+     */
+    public function removeGroup()
+    {
+        $this->checkCSRFParam();
+
+        $values = array(
+            'project_id' => $this->request->getIntegerParam('project_id'),
+            'group_id' => $this->request->getIntegerParam('group_id'),
+        );
+
+        if ($this->projectGroupRole->removeGroup($values['project_id'], $values['group_id'])) {
+            $this->flash->success(t('Project updated successfully.'));
+        } else {
+            $this->flash->failure(t('Unable to update this project.'));
+        }
+
+        $this->response->redirect($this->helper->url->to('ProjectPermission', 'index', array('project_id' => $values['project_id'])));
+    }
+
+    /**
+     * Change group role
+     *
+     * @access public
+     */
+    public function changeGroupRole()
+    {
+        $project_id = $this->request->getIntegerParam('project_id');
+        $values = $this->request->getJson();
+
+        if (! empty($project_id) && ! empty($values) && $this->projectGroupRole->changeGroupRole($project_id, $values['id'], $values['role'])) {
+            $this->response->json(array('status' => 'ok'));
+        } else {
+            $this->response->json(array('status' => 'error'));
+        }
+    }
+}