infinito/application/symfony/src/Domain/LawManagement/LawPermissionChecker.php

<?php

namespace Infinito\Domain\LawManagement;

use PhpCollection\CollectionInterface;
use Doctrine\Common\Collections\ArrayCollection;
use Infinito\Entity\Meta\RightInterface;
use Doctrine\Common\Collections\Collection;
use Infinito\Entity\Meta\LawInterface;
use Infinito\Domain\RightManagement\RightChecker;
use Infinito\Entity\Source\SourceInterface;
use Infinito\Domain\SourceManagement\SourceMemberInformation;
use Infinito\Domain\MethodManagement\MethodPrefixType;

/**
 * @todo Implement checking by operation sources
 * @todo chek if recievers are still neccessary and if they should be implemented
 *
 * @author kevinfrantz
 */
final class LawPermissionChecker implements LawPermissionCheckerInterface
{
    /**
     * @var LawInterface
     */
    private $law;

    /**
     * @param Collection|RightInterface[] $rights
     * @param string                      $value
     * @param string                      $attribut
     *
     * @return Collection|RightInterface[]
     */
    private function getFilteredRights(Collection $rights, string $value, string $attribut): Collection
    {
        $result = new ArrayCollection();
        foreach ($rights as $right) {
            if ($right->{MethodPrefixType::GET.$attribut}() === $value) {
                $result->add($right);
            }
        }

        return $result;
    }

    /**
     * @param Collection|RightInterface[] $rights
     * @param string                      $type
     *
     * @return Collection|RightInterface[]
     */
    private function getRightsByActionType(Collection $rights, string $type): Collection
    {
        return $this->getFilteredRights($rights, $type, 'ActionType');
    }

    /**
     * @param RightInterface $right
     *
     * @return bool True if right applies to all
     */
    private function doesRightApplyToAll(RightInterface $right): bool
    {
        return !$right->hasReciever();
    }

    /**
     * @param Collection|RightInterface[] $rights
     * @param RightInterface              $requestedRight
     *
     * @return Collection|RightInterface[]
     */
    private function getRightsByReciever(Collection $rights, RightInterface $requestedRight): Collection
    {
        $result = new ArrayCollection();
        foreach ($rights as $right) {
            if ($this->doesRightApplyToAll($right) || $right->getReciever() === $requestedRight->getReciever() || $this->memberExist($right, $requestedRight->getReciever())) {
                $result->add($right);
            }
        }

        return $result;
    }

    /**
     * @todo Implement!
     *
     * @param RightInterface  $right
     * @param SourceInterface $recieverSource
     *
     * @return bool
     */
    private function memberExist(RightInterface $right, SourceInterface $recieverSource): bool
    {
        $rightMemberInformation = new SourceMemberInformation($right->getReciever());
        $rightMemberSources = $rightMemberInformation->getAllMembers();
        foreach ($rightMemberSources as $memberSource) {
            if ($memberSource === $recieverSource) {
                return true;
            }
        }

        return false;
    }

    /**
     * @param Collection|RightInterface[] $rights
     * @param string                      $layer
     *
     * @return Collection|RightInterface[]
     */
    private function getRightsByLayer(Collection $rights, string $layer): Collection
    {
        return $this->getFilteredRights($rights, $layer, 'Layer');
    }

    /**
     * @todo seems like this can be solved on a nicer way
     *
     * @param Collection|RightInterface[] $rights
     *
     * @return Collection|RightInterface[]
     */
    private function sortByPriority(Collection $rights): Collection
    {
        $iterator = $rights->getIterator();
        $iterator->uasort(function ($first, $second) {
            return (int) $first->getPriority() > (int) $second->getPriority() ? 1 : -1;
        });
        $sorted = new ArrayCollection();
        foreach ($iterator as $right) {
            $sorted->add($right);
        }

        return $sorted;
    }

    /**
     * @param CollectionInterface|RightInterface[] $rights
     *                                                     the rights which exist
     *
     * @return bool
     */
    private function isGranted(Collection $rights, RightInterface $client): bool
    {
        if (0 === $rights->count()) {
            return $this->law->getGrant();
        }
        $right = $rights[0];
        $rightChecker = new RightChecker($right);

        return $rightChecker->isGranted($client->getLayer(), $client->getActionType(), $client->getReciever());
    }

    /**
     * @param LawInterface $law
     */
    public function __construct(LawInterface $law)
    {
        $this->law = $law;
    }

    /**
     * {@inheritdoc}
     *
     * @see \Infinito\Domain\LawManagement\LawPermissionCheckerInterface::hasPermission()
     */
    public function hasPermission(RightInterface $clientRight): bool
    {
        $rights = clone $this->law->getRights();
        $rights = $this->getRightsByActionType($rights, $clientRight->getActionType());
        $rights = $this->getRightsByLayer($rights, $clientRight->getLayer());
        $rights = $this->getRightsByReciever($rights, $clientRight);
        $rights = $this->sortByPriority($rights);

        return $this->isGranted($rights, $clientRight);
    }
}