modules\rbac\console\InitController

Complexity

Total Complexity

17

Size/Duplication

Total Lines	167
Duplicated Lines	0 %

Importance

Changes

0

8 Methods

Rating	Name	Duplication	Size	Complexity
A	actionIndex()	0	16	2
A	processCreate()	0	15	4
A	processClear()	0	4	1
B	processAddPermissionToRoles()	0	25	6
A	processAssignUserToRole()	0	4	1
A	getRoles()	0	10	1
A	getPermissions()	0	10	1
A	processAddChildRoles()	0	13	1

<?php

namespace modules\rbac\console;

use Yii;
use yii\helpers\ArrayHelper;
use yii\console\Controller;
use yii\helpers\Console;
use modules\rbac\models\Role;
use modules\rbac\models\Permission;

/**
 * Class RbacController
 * Инициализатор RBAC выполняется в консоли php yii rbac/init
 *
 * @package console\controllers
 */
class InitController extends Controller
{
    const TYPE_ROLE = 'Roles';
    const TYPE_PERMISSION = 'Permissions';

    /**
     * Initialize RBAC
     */
    public function actionIndex()
    {
        /** @var yii\rbac\DbManager $auth */
        $auth = Yii::$app->authManager;
        $this->processClear($auth);
        $roles = $this->processCreate($auth, $this->getRoles(), self::TYPE_ROLE);
        $permissions = $this->processCreate($auth, $this->getPermissions(), self::TYPE_PERMISSION);
        $this->processAddPermissionToRoles($auth, $roles, $permissions);
        $this->processAddChildRoles($auth, $roles);

        $role = ArrayHelper::getValue($roles, Role::ROLE_SUPER_ADMIN);
        if ($this->processAssignUserToRole($auth, $role, 1)) {
            $this->stdout('Done!', Console::FG_GREEN, Console::BOLD);
            $this->stdout(PHP_EOL);
        } else {
            $this->stderr('FAIL', Console::FG_RED, Console::BOLD);
        }
    }

    /**
     * Clear
     *
     * @param $auth yii\rbac\ManagerInterface
     * @return bool
     */
    protected function processClear($auth)
    {
        $auth->removeAll();
        return true;
    }

    /**
     * Create Roles and Permissions
     *
     * @param yii\rbac\DbManager $auth
     * @param array $array
     * @param string $type
     * @return array
     */
    protected function processCreate($auth, $array = [], $type = 'Roles')
    {
        $result = [];
        foreach ($array as $key => $value) {
            $result[$key] = ($type === 'Roles') ? $auth->createRole($key) : $auth->createPermission($key);
            $result[$key]->description = $value;
            // Add rules
            if ($key == Permission::PERMISSION_UPDATE_OWN_POST) {
                $authorRule = new \modules\rbac\components\AuthorRule;
                $auth->add($authorRule);
                $result[$key]->ruleName = $authorRule->name;
            }
            $auth->add($result[$key]);
        }
        return $result;
    }

    /**
     * Add Permissions for Roles
     *
     * @param yii\rbac\DbManager $auth
     * @param array $roles
     * @param array $permissions
     */
    protected function processAddPermissionToRoles($auth, $roles = [], $permissions = [])
    {
        foreach ($roles as $key => $role) {
            switch ($key) {
                case Role::ROLE_SUPER_ADMIN:
                    $auth->addChild($role, ArrayHelper::getValue($permissions, Permission::PERMISSION_VIEW_ADMIN_PAGE));
                    $auth->addChild($role, ArrayHelper::getValue($permissions, Permission::PERMISSION_MANAGER_POST));
                    $auth->addChild($role, ArrayHelper::getValue($permissions, Permission::PERMISSION_MANAGER_USERS));
                    $auth->addChild($role, ArrayHelper::getValue($permissions, Permission::PERMISSION_MANAGER_RBAC));
                    break;
                case Role::ROLE_ADMIN:
                    $auth->addChild($role, ArrayHelper::getValue($permissions, Permission::PERMISSION_VIEW_ADMIN_PAGE));
                    $auth->addChild($role, ArrayHelper::getValue($permissions, Permission::PERMISSION_MANAGER_POST));
                    $auth->addChild($role, ArrayHelper::getValue($permissions, Permission::PERMISSION_MANAGER_USERS));
                    break;
                case Role::ROLE_MANAGER:
                    $auth->addChild($role, ArrayHelper::getValue($permissions, Permission::PERMISSION_VIEW_ADMIN_PAGE));
                    $auth->addChild($role, ArrayHelper::getValue($permissions, Permission::PERMISSION_MANAGER_POST));
                    break;
                case Role::ROLE_EDITOR:
                    $auth->addChild($role, ArrayHelper::getValue($permissions, Permission::PERMISSION_VIEW_ADMIN_PAGE));
                    $auth->addChild($role, ArrayHelper::getValue($permissions, Permission::PERMISSION_UPDATE_OWN_POST));
                    break;
                default:
                    break;
            }
        }
    }

    /**
     * Add Child role for Roles
     *
     * @param yii\rbac\DbManager $auth
     * @param array $roles
     */
    protected function processAddChildRoles($auth, $roles = [])
    {
        $auth->addChild(ArrayHelper::getValue($roles, Role::ROLE_SUPER_ADMIN),
            ArrayHelper::getValue($roles, Role::ROLE_ADMIN));

        $auth->addChild(ArrayHelper::getValue($roles, Role::ROLE_ADMIN),
            ArrayHelper::getValue($roles, Role::ROLE_MANAGER));

        $auth->addChild(ArrayHelper::getValue($roles, Role::ROLE_MANAGER),
            ArrayHelper::getValue($roles, Role::ROLE_EDITOR));

        $auth->addChild(ArrayHelper::getValue($roles, Role::ROLE_EDITOR),
            ArrayHelper::getValue($roles, Role::ROLE_DEFAULT));
    }

    /**
     * Assign Role to User
     *
     * @param yii\rbac\DbManager $auth
     * @param array $role
     * @param int $userId
     * @return bool
     */
    protected function processAssignUserToRole($auth, $role, $userId = 1)
    {
        $auth->assign($role, $userId);
        return true;
    }

    /**
     * Roles
     *
     * @return array
     */
    protected function getRoles()
    {
        $roles = [
            Role::ROLE_SUPER_ADMIN => Role::ROLE_SUPER_ADMIN_DESCRIPTION,
            Role::ROLE_ADMIN => Role::ROLE_ADMIN_DESCRIPTION,
            Role::ROLE_MANAGER => Role::ROLE_MANAGER_DESCRIPTION,
            Role::ROLE_EDITOR => Role::ROLE_EDITOR_DESCRIPTION,
            Role::ROLE_DEFAULT => Role::ROLE_DEFAULT_DESCRIPTION,
        ];
        return $roles;
    }

    /**
     * Permissions
     *
     * @return array
     */
    protected function getPermissions()
    {
        $permissions = [
            Permission::PERMISSION_VIEW_ADMIN_PAGE => Permission::PERMISSION_VIEW_ADMIN_PAGE_DESCRIPTION,
            Permission::PERMISSION_MANAGER_RBAC => Permission::PERMISSION_MANAGER_RBAC_DESCRIPTION,
            Permission::PERMISSION_MANAGER_USERS => Permission::PERMISSION_MANAGER_USERS_DESCRIPTION,
            Permission::PERMISSION_MANAGER_POST => Permission::PERMISSION_MANAGER_POST_DESCRIPTION,
            Permission::PERMISSION_UPDATE_OWN_POST => Permission::PERMISSION_UPDATE_OWN_POST_DESCRIPTION,
        ];
        return $permissions;
    }
}