Preventing students to see stats from assignments that are not visible to students (yet).

Author: krulis-martin

app/model/view/GroupViewFactory.php

@@ -20,6 +20,7 @@
 use App\Security\ACL\IShadowAssignmentPermissions;
 use App\Security\ACL\IGroupPermissions;
 use Nette\Utils\Arrays;
+use Doctrine\Common\Collections\Collection;
 
 /**
  * Factory for group views which somehow do not fit into json serialization of
@@ -94,6 +95,30 @@ function ($carry, ShadowAssignmentPoints $points) {
         );
     }
 
+    /**
+     * Get assignments of the group which current user can view.
+     */
+    private function getAssignments(Group $group): Collection
+    {
+        return $group->getAssignments()->filter(
+            function (Assignment $assignment) {
+                return $this->assignmentAcl->canViewDetail($assignment);
+            }
+        );
+    }
+
+    /**
+     * Get shadow assignments of the group which current user can view.
+     */
+    private function getShadowAssignments(Group $group): Collection
+    {
+        return $group->getShadowAssignments()->filter(
+            function (ShadowAssignment $assignment) {
+                return $this->shadowAssignmentAcl->canViewDetail($assignment);
+            }
+        );
+    }
+
     /**
      * Get the statistics of an individual student.
      * @param Group $group
@@ -110,7 +135,7 @@ private function getStudentStatsInternal(
     ) {
         $maxPoints = $group->getMaxPoints();
         $shadowPointsMap = $this->shadowAssignmentPointsRepository->findPointsForAssignments(
-            $group->getShadowAssignments()->getValues(),
+            $this->getShadowAssignments($group)->getValues(),
             $student
         );
         $gainedPoints = $this->getPointsGainedByStudentForSolutions($assignmentSolutions);
@@ -119,7 +144,7 @@ private function getStudentStatsInternal(
         $studentReviewRequests = $reviewRequests[$student->getId()] ?? [];
 
         $assignments = [];
-        foreach ($group->getAssignments()->getValues() as $assignment) {
+        foreach ($this->getAssignments($group) as $assignment) {
             /**
              * @var Assignment $assignment
              */
@@ -141,7 +166,7 @@ private function getStudentStatsInternal(
         }
 
         $shadowAssignments = [];
-        foreach ($group->getShadowAssignments()->getValues() as $shadowAssignment) {
+        foreach ($this->getShadowAssignments($group) as $shadowAssignment) {
             /**
              * @var ShadowAssignment $shadowAssignment
              */
@@ -189,7 +214,7 @@ private function getStudentStatsInternal(
     public function getStudentsStats(Group $group, User $student)
     {
         $assignmentSolutions = $this->assignmentSolutions->findBestUserSolutionsForAssignments(
-            $group->getAssignments()->getValues(),
+            $this->getAssignments($group)->getValues(),
             $student
         );
         $reviewRequestSolutions = $this->assignmentSolutions->findReviewRequestSolutionsIndexed($group, $student);
@@ -204,7 +229,7 @@ public function getStudentsStats(Group $group, User $student)
     public function getAllStudentsStats(Group $group)
     {
         $assignmentSolutions = $this->assignmentSolutions->findBestSolutionsForAssignments(
-            $group->getAssignments()->getValues()
+            $this->getAssignments($group)->getValues()
         );
         $reviewRequestSolutions = $this->assignmentSolutions->findReviewRequestSolutionsIndexed($group);
         return array_map(
@@ -237,20 +262,12 @@ public function getGroup(Group $group, bool $ignoreArchived = true): array
                 "students" => $this->groupAcl->canViewStudents($group) ? $group->getStudentsIds() : [],
                 "instanceId" => $group->getInstance() ? $group->getInstance()->getId() : null,
                 "hasValidLicence" => $group->hasValidLicense(),
-                "assignments" => $group->getAssignments()->filter(
-                    function (Assignment $assignment) {
-                        return $this->assignmentAcl->canViewDetail($assignment);
-                    }
-                )->map(
+                "assignments" => $this->getAssignments($group)->map(
                     function (Assignment $assignment) {
                         return $assignment->getId();
                     }
                 )->getValues(),
-                "shadowAssignments" => $group->getShadowAssignments()->filter(
-                    function (ShadowAssignment $assignment) {
-                        return $this->shadowAssignmentAcl->canViewDetail($assignment);
-                    }
-                )->map(
+                "shadowAssignments" => $this->getShadowAssignments($group)->map(
                     function (ShadowAssignment $assignment) {
                         return $assignment->getId();
                     }