<?php
    /*********************************************************************************
     * Zurmo is a customer relationship management program developed by
     * Zurmo, Inc. Copyright (C) 2017 Zurmo Inc.
     *
     * Zurmo is free software; you can redistribute it and/or modify it under
     * the terms of the GNU Affero General Public License version 3 as published by the
     * Free Software Foundation with the addition of the following permission added
     * to Section 15 as permitted in Section 7(a): FOR ANY PART OF THE COVERED WORK
     * IN WHICH THE COPYRIGHT IS OWNED BY ZURMO, ZURMO DISCLAIMS THE WARRANTY
     * OF NON INFRINGEMENT OF THIRD PARTY RIGHTS.
     *
     * Zurmo is distributed in the hope that it will be useful, but WITHOUT
     * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
     * FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public License for more
     * details.
     *
     * You should have received a copy of the GNU Affero General Public License along with
     * this program; if not, see http://www.gnu.org/licenses or write to the Free
     * Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
     * 02110-1301 USA.
     *
     * You can contact Zurmo, Inc. with a mailing address at 27 North Wacker Drive
     * Suite 370 Chicago, IL 60606. or at email address contact@zurmo.com.
     *
     * The interactive user interfaces in original and modified versions
     * of this program must display Appropriate Legal Notices, as required under
     * Section 5 of the GNU Affero General Public License version 3.
     *
     * In accordance with Section 7(b) of the GNU Affero General Public License version 3,
     * these Appropriate Legal Notices must retain the display of the Zurmo
     * logo and Zurmo copyright notice. If the display of the logo is not reasonably
     * feasible for technical reasons, the Appropriate Legal Notices must display the words
     * "Copyright Zurmo Inc. 2017. All rights reserved".
     ********************************************************************************/

    /**
     * Helper class to make a ModulePermissionsForm
     * and populate the data attribute.
     */
    class ModulePermissionsFormUtil
    {
        /**
         * @param $modulesPermissionsData - combined array of all permission
         * and existing permissions on a permittable.  Organized by module.
         * Example below showing just the accounts module:
         * @code
            <?php
                $modulePermissionsData = array(
                    'accounts' => array(
                        'CREATE' => array(
                            'explicit'    => null,
                            'inherited'   => null,
                        ),
                        'CHANGE_OWNER' => array(
                            'explicit'    => null,
                            'inherited'   => null,
                        ),
                        'CHANGE_PERMISSIONS' => array(
                            'explicit'    => null,
                            'inherited'   => null,
                        ),
                        'DELETE' => array(
                            'explicit'    => null,
                            'inherited'   => null,
                        ),
                        'READ' => array(
                            'explicit'    => null,
                            'inherited'   => Permission::ALLOW,
                        ),
                        'WRITE' => array(
                            'explicit'    => null,
                            'inherited'   => Permission::DENY,
                        ),
                    ),
                );
            ?>
         * @endcode
         */
        public static function makeFormFromPermissionsData($data)
        {
            assert('is_array($data)');
            $form       = new ModulePermissionsForm();
            $form->data = $data;
            return $form;
        }

        /**
         * Set Module Permissions from Post
         * @return boolean - true on success
         */
        public static function setPermissionsFromCastedPost(array $validatedAndCastedPostData, $permitable)
        {
            assert('$permitable instanceof Permitable');
            assert('$permitable->id > 0');
            foreach ($validatedAndCastedPostData as $concatenatedIndex => $value)
            {
                $moduleClassName = self::getModuleClassNameFromPostConcatenatedIndexString($concatenatedIndex);
                $permission      = self::getPermissionFromPostConcatenatedIndexString($concatenatedIndex);
                $saved           = self::addOrRemoveSpecificPermission($moduleClassName, $permitable, $permission, $value);
                if (!$saved)
                {
                    return false;
                }
            }
            return true;
        }

        /**
         * @return $moduleClassName string
         */
        protected static function getModuleClassNameFromPostConcatenatedIndexString($string)
        {
            assert('is_string($string)');
            $nameParts                          = explode(FormModelUtil::DELIMITER, $string);
            list($moduleClassName, $permission) = $nameParts;
            return $moduleClassName;
        }

        /**
         * @return intval permission
         */
        protected static function getPermissionFromPostConcatenatedIndexString($string)
        {
            assert('is_string($string)');
            $nameParts                          = explode(FormModelUtil::DELIMITER, $string);
            list($moduleClassName, $permission) = $nameParts;
            $permission                         = intval($permission);
            return $permission;
        }

        protected static function addOrRemoveSpecificPermission($moduleClassName, $permitable, $permission, $value)
        {
            assert('is_string($moduleClassName)');
            assert('$permitable instanceof Permitable');
            assert('$permitable->id > 0');
            assert('is_int($permission)');
            assert('is_int($value) || $value == null');
            $item = NamedSecurableItem::getByName($moduleClassName);
            $item->allowChangePermissionsRegardlessOfUser = true;
            if (!empty($value) && $value    == Permission::ALLOW)
            {
                //Before adding explicit allow permission, remove any existing deny permission
                $item->removePermissions($permitable, $permission, Permission::DENY);
                $item->addPermissions   ($permitable, $permission, Permission::ALLOW);
            }
            elseif (!empty($value) && $value == Permission::DENY)
            {
                $item->addPermissions   ($permitable, $permission, Permission::DENY);
            }
            else
            {
                $item->removePermissions($permitable, $permission);
            }
            $saved = $item->save();
            if ($saved)
            {
                ReadPermissionsSubscriptionUtil::modulePermissionsHasBeenChanged($permitable);
            }
            $item->forget();
            return $saved;
        }

        /**
         * Used to properly type cast incoming POST data
         */
        public static function typeCastPostData($postData)
        {
            assert('is_array($postData)');
            foreach ($postData as $concatenatedIndex => $value)
            {
                if ($value != '')
                {
                    $postData[$concatenatedIndex] = intval($value);
                }
            }
            return $postData;
        }
    }
?>