GroupPermissionPolicy.php

<?php

namespace App\Security\Policies;

use App\Model\Entity\Group;
use App\Model\Entity\GroupMembership;
use App\Model\Entity\Instance;
use App\Security\Identity;
use DateTIme;

class GroupPermissionPolicy extends BasePermissionPolicy implements IPermissionPolicy
{
    public function getAssociatedClass()
    {
        return Group::class;
    }

    public function isMember(Identity $identity, Group $group): bool
    {
        $user = $identity->getUserData();
        if (!$user) {
            return false;
        }

        return $group->isMemberOf($user) || $this->checkMinimalMembership(
            $identity->getUserData(),
            $group,
            GroupMembership::TYPE_ADMIN
        );
    }

    public function isSupervisorOrAdmin(Identity $identity, Group $group): bool
    {
        return $this->checkMinimalMembership(
            $identity->getUserData(),
            $group,
            GroupMembership::TYPE_SUPERVISOR
        );
    }

    public function isObserver(Identity $identity, Group $group): bool
    {
        $user = $identity->getUserData();
        if (!$user) {
            return false;
        }

        return $group->isObserverOf($user);
    }

    public function isAdmin(Identity $identity, Group $group): bool
    {
        return $this->checkMinimalMembership(
            $identity->getUserData(),
            $group,
            GroupMembership::TYPE_ADMIN
        );
    }

    public function isPublic(Identity $identity, Group $group): bool
    {
        return $group->isPublic();
    }

    public function isNotDetainingStudents(Identity $identity, Group $group): bool
    {
        return !$group->isDetaining();
    }

    public function isNotArchived(Identity $identity, Group $group): bool
    {
        return !$group->isArchived();
    }

    public function isNotOrganizational(Identity $identity, Group $group): bool
    {
        return !$group->isOrganizational();
    }

    public function areStatsPublic(Identity $identity, Group $group): bool
    {
        return $group->statsArePublic();
    }

    public function isRootGroupOfInstance(Identity $identity, Group $group)
    {
        return $group->getInstance() && $group->getId() === $group->getInstance()->getId();
    }

    public function isInSameInstance(Identity $identity, Group $group): bool
    {
        $user = $identity->getUserData();
        if ($user === null) {
            return false;
        }

        if ($group->getInstance() === null) {
            return false;
        }

        return $user->getInstances()->exists(
            function ($key, Instance $instance) use ($group) {
                return $instance->getId() === $group->getInstance()->getId();
            }
        );
    }

    public function isNotExam(Identity $identity, Group $group): bool
    {
        return !$group->isExam();
    }

    public function hasNoExamPeriod(Identity $identity, Group $group): bool
    {
        return !$group->hasExamPeriodSet(); // the period is not set or is in the past
    }

    public function isBeforeExamPeriod(Identity $identity, Group $group): bool
    {
        $now = new DateTime();
        return $group->hasExamPeriodSet($now) && $now < $group->getExamBegin();
    }

    public function isExamInProgress(Identity $identity, Group $group): bool
    {
        $now = new DateTime();
        return $group->hasExamPeriodSet($now) && $group->getExamBegin() <= $now && $now <= $group->getExamEnd();
    }

    /**
     * Current user is either not locked at all, or locked to this group.
     */
    public function userIsNotLockedElsewhere(Identity $identity, Group $group): bool
    {
        $user = $identity->getUserData();
        if ($user === null) {
            return false;
        }

        return !$user->isGroupLocked() || $user->getGroupLock()->getId() === $group->getId();
    }

    /**
     * Current user is either not locked at all, or locked to this group, or the current lock is not strict.
     */
    public function userIsNotLockedElsewhereStrictly(Identity $identity, Group $group): bool
    {
        $user = $identity->getUserData();
        if ($user === null) {
            return false;
        }

        return !$user->isGroupLocked() || $user->getGroupLock()->getId() === $group->getId()
            || !$user->isGroupLockStrict();
    }
}