memoryCache->proxy($this->projectUserRoleModel, 'getUserRole', $project_id, $this->userSession->getId()); } /** * Return true if the task can be moved by the logged user * * @param array $task * @return bool */ public function isDraggable(array &$task) { if ($task['is_active'] == 1 && $this->helper->user->hasProjectAccess('BoardViewController', 'save', $task['project_id'])) { return $this->isSortableColumn($task['project_id'], $task['column_id'], 'src_column_id'); } return false; } /** * Return true is the column is sortable * * @param int $project_id * @param int $column_id * @param string $field * @return bool */ public function isSortableColumn($project_id, $column_id, $field) { $role = $this->getProjectUserRole($project_id); if ($this->role->isCustomProjectRole($role)) { $sortableColumns = $this->columnMoveRestrictionCacheDecorator->getSortableColumns($project_id, $role); foreach ($sortableColumns as $column) { if ($column[$field] == $column_id) { return true; } } return empty($sortableColumns); } return true; } /** * Check if the user can move a task * * @param int $project_id * @param int $src_column_id * @param int $dst_column_id * @return bool|int */ public function canMoveTask($project_id, $src_column_id, $dst_column_id) { $role = $this->getProjectUserRole($project_id); if ($this->role->isCustomProjectRole($role)) { if ($src_column_id == $dst_column_id) { return true; } $sortableColumns = $this->columnMoveRestrictionCacheDecorator->getSortableColumns($project_id, $role); foreach ($sortableColumns as $column) { if ($column['src_column_id'] == $src_column_id && $column['dst_column_id'] == $dst_column_id) { return true; } } return empty($sortableColumns); } return true; } /** * Return true if the user can remove a task * * Regular users can't remove tasks from other people * * @public * @param array $task * @return bool */ public function canRemoveTask(array $task) { if (isset($task['creator_id']) && $task['creator_id'] == $this->userSession->getId()) { return true; } if ($this->userSession->isAdmin() || $this->getProjectUserRole($task['project_id']) === Role::PROJECT_MANAGER) { return true; } return false; } /** * Check project access * * @param string $controller * @param string $action * @param integer $project_id * @return bool */ public function checkProjectAccess($controller, $action, $project_id) { if (! $this->userSession->isLogged()) { return false; } if ($this->userSession->isAdmin()) { return true; } if (! $this->helper->user->hasAccess($controller, $action)) { return false; } $role = $this->getProjectUserRole($project_id); if ($this->role->isCustomProjectRole($role)) { $restrictions = $this->projectRoleRestrictionModel->getAllByRole($project_id, $role); $result = $this->projectRoleRestrictionModel->isAllowed($restrictions, $controller, $action); $result = $result && $this->projectAuthorization->isAllowed($controller, $action, Role::PROJECT_MEMBER); } else { $result = $this->projectAuthorization->isAllowed($controller, $action, $role); } return $result; } }