1 files changed, 166 insertions, 0 deletions
diff --git a/app/Model/ProjectPermissionModel.php b/app/Model/ProjectPermissionModel.php
new file mode 100644
index 00000000..a7c1857c
--- /dev/null
+++ b/app/Model/ProjectPermissionModel.php
@@ -0,0 +1,166 @@
+<?php
+
+namespace Kanboard\Model;
+
+use Kanboard\Core\Base;
+use Kanboard\Core\Security\Role;
+use Kanboard\Filter\ProjectGroupRoleProjectFilter;
+use Kanboard\Filter\ProjectGroupRoleUsernameFilter;
+use Kanboard\Filter\ProjectUserRoleProjectFilter;
+use Kanboard\Filter\ProjectUserRoleUsernameFilter;
+
+/**
+ * Project Permission
+ *
+ * @package  Kanboard\Model
+ * @author   Frederic Guillot
+ */
+class ProjectPermissionModel extends Base
+{
+    /**
+     * Get query for project users overview
+     *
+     * @access public
+     * @param  array    $project_ids
+     * @param  string   $role
+     * @return \PicoDb\Table
+     */
+    public function getQueryByRole(array $project_ids, $role)
+    {
+        if (empty($project_ids)) {
+            $project_ids = array(-1);
+        }
+
+        return $this
+            ->db
+            ->table(ProjectUserRoleModel::TABLE)
+            ->join(UserModel::TABLE, 'id', 'user_id')
+            ->join(ProjectModel::TABLE, 'id', 'project_id')
+            ->eq(ProjectUserRoleModel::TABLE.'.role', $role)
+            ->eq(ProjectModel::TABLE.'.is_private', 0)
+            ->in(ProjectModel::TABLE.'.id', $project_ids)
+            ->columns(
+                UserModel::TABLE.'.id',
+                UserModel::TABLE.'.username',
+                UserModel::TABLE.'.name',
+                ProjectModel::TABLE.'.name AS project_name',
+                ProjectModel::TABLE.'.id'
+            );
+    }
+
+    /**
+     * Get all usernames (fetch users from groups)
+     *
+     * @access public
+     * @param  integer $project_id
+     * @param  string  $input
+     * @return array
+     */
+    public function findUsernames($project_id, $input)
+    {
+        $userMembers = $this->projectUserRoleQuery
+            ->withFilter(new ProjectUserRoleProjectFilter($project_id))
+            ->withFilter(new ProjectUserRoleUsernameFilter($input))
+            ->getQuery()
+            ->findAllByColumn('username');
+
+        $groupMembers = $this->projectGroupRoleQuery
+            ->withFilter(new ProjectGroupRoleProjectFilter($project_id))
+            ->withFilter(new ProjectGroupRoleUsernameFilter($input))
+            ->getQuery()
+            ->findAllByColumn('username');
+
+        $members = array_unique(array_merge($userMembers, $groupMembers));
+
+        sort($members);
+
+        return $members;
+    }
+
+    /**
+     * Return true if everybody is allowed for the project
+     *
+     * @access public
+     * @param  integer   $project_id   Project id
+     * @return bool
+     */
+    public function isEverybodyAllowed($project_id)
+    {
+        return $this->db
+                    ->table(ProjectModel::TABLE)
+                    ->eq('id', $project_id)
+                    ->eq('is_everybody_allowed', 1)
+                    ->exists();
+    }
+
+    /**
+     * Return true if the user is allowed to access a project
+     *
+     * @param integer $project_id
+     * @param integer $user_id
+     * @return boolean
+     */
+    public function isUserAllowed($project_id, $user_id)
+    {
+        if ($this->userSession->isAdmin()) {
+            return true;
+        }
+
+        return in_array(
+            $this->projectUserRoleModel->getUserRole($project_id, $user_id),
+            array(Role::PROJECT_MANAGER, Role::PROJECT_MEMBER, Role::PROJECT_VIEWER)
+        );
+    }
+
+    /**
+     * Return true if the user is assignable
+     *
+     * @access public
+     * @param  integer  $project_id
+     * @param  integer  $user_id
+     * @return boolean
+     */
+    public function isAssignable($project_id, $user_id)
+    {
+        return $this->userModel->isActive($user_id) &&
+            in_array($this->projectUserRoleModel->getUserRole($project_id, $user_id), array(Role::PROJECT_MEMBER, Role::PROJECT_MANAGER));
+    }
+
+    /**
+     * Return true if the user is member
+     *
+     * @access public
+     * @param  integer  $project_id
+     * @param  integer  $user_id
+     * @return boolean
+     */
+    public function isMember($project_id, $user_id)
+    {
+        return in_array($this->projectUserRoleModel->getUserRole($project_id, $user_id), array(Role::PROJECT_MEMBER, Role::PROJECT_MANAGER, Role::PROJECT_VIEWER));
+    }
+
+    /**
+     * Get active project ids by user
+     *
+     * @access public
+     * @param  integer $user_id
+     * @return array
+     */
+    public function getActiveProjectIds($user_id)
+    {
+        return array_keys($this->projectUserRoleModel->getActiveProjectsByUser($user_id));
+    }
+
+    /**
+     * Copy permissions to another project
+     *
+     * @param  integer  $project_src_id  Project Template
+     * @param  integer  $project_dst_id  Project that receives the copy
+     * @return boolean
+     */
+    public function duplicate($project_src_id, $project_dst_id)
+    {
+        return $this->projectUserRoleModel->duplicate($project_src_id, $project_dst_id) &&
+            $this->projectGroupRoleModel->duplicate($project_src_id, $project_dst_id);
+    }
+}