modules\rbac\console\InitController

Complexity

Total Complexity

13

Size/Duplication

Total Lines	206
Duplicated Lines	0 %

Importance

Changes	4
Bugs	0	Features	1

9 Methods

Rating	Name	Duplication	Size	Complexity
A	processInit()	0	14	1
A	processAssignUserToRole()	0	4	1
A	getRoles()	0	4	1
A	processAddPermissionToRoles()	0	52	1
A	getPermissions()	0	4	1
A	actionIndex()	0	13	2
A	processAddChildRoles()	0	20	1
A	processCreate()	0	15	4
A	processClear()	0	4	1

<?php

namespace modules\rbac\console;

use Exception;
use modules\rbac\components\AuthorRule;
use Yii;
use yii\helpers\ArrayHelper;
use yii\console\Controller;
use app\components\helpers\Console;
use modules\rbac\models\Role;
use modules\rbac\models\Permission;
use modules\rbac\Module;

/**
 * Class RbacController
 * Инициализатор RBAC выполняется в консоли php yii rbac/init
 *
 * @package console\controllers
 *
 * @property-read array $permissions
 * @property-read array $roles
 */
class InitController extends Controller
{
    const TYPE_ROLE = 'Roles';
    const TYPE_PERMISSION = 'Permissions';

    /**
     * Initialize RBAC
     */
    public function actionIndex()
    {
        if ($this->processInit()) {
            $this->stdout(Console::convertEncoding(Module::t(
                'module',
                'Done!'
            )), Console::FG_GREEN, Console::BOLD);
            $this->stdout(PHP_EOL);
        } else {
            $this->stderr(Console::convertEncoding(Module::t(
                'module',
                'Fail!'
            )), Console::FG_RED, Console::BOLD);
        }
    }

    /**
     * @return bool
     * @throws Exception
     */
    public function processInit()
    {
        /** @var yii\rbac\ManagerInterface|yii\rbac\BaseManager|yii\rbac\DbManager|yii\rbac\PhpManager $auth */
        $auth = Yii::$app->authManager;
        $this->processClear($auth);
        $roles = $this->processCreate($auth, $this->getRoles(), self::TYPE_ROLE);
        $permissions = $this->processCreate($auth, $this->getPermissions(), self::TYPE_PERMISSION);
        $this->processAddPermissionToRoles($auth, $roles, $permissions);
        // Inheritance of roles - If you uncomment, the roles are inherited
        //$this->processAddChildRoles($auth, $roles);

        // Assign a super administrator role to the user from id 1
        $role = ArrayHelper::getValue($roles, Role::ROLE_SUPER_ADMIN);
        return $this->processAssignUserToRole($auth, $role, 1);
    }

    /**
     * Clear
     *
     * @param $auth yii\rbac\ManagerInterface
     * @return bool
     */
    protected function processClear($auth)
    {
        $auth->removeAll();
        return true;
    }

    /**
     * Create Roles and Permissions
     *
     * @param object $auth
     * @param array $array
     * @param string $type
     * @return array
     */
    protected function processCreate($auth, $array = [], $type = self::TYPE_ROLE)
    {
        $result = [];
        foreach ($array as $key => $value) {
            $result[$key] = ($type === self::TYPE_ROLE) ? $auth->createRole($key) : $auth->createPermission($key);
            $result[$key]->description = Module::t('module', $value);
            // Add rules
            if ($key == Permission::PERMISSION_UPDATE_OWN_POST) {
                $authorRule = new AuthorRule;
                $auth->add($authorRule);
                $result[$key]->ruleName = $authorRule->name;
            }
            $auth->add($result[$key]);
        }
        return $result;
    }

    /**
     * Add Permissions for Roles
     *
     * @param object $auth
     * @param array $roles
     * @param array $permissions
     * @throws Exception
     */
    protected function processAddPermissionToRoles($auth, $roles = [], $permissions = [])
    {
        // ROLE_SUPER_ADMIN
        $auth->addChild(
            ArrayHelper::getValue($roles, Role::ROLE_SUPER_ADMIN),
            ArrayHelper::getValue($permissions, Permission::PERMISSION_VIEW_ADMIN_PAGE)
        );
        $auth->addChild(
            ArrayHelper::getValue($roles, Role::ROLE_SUPER_ADMIN),
            ArrayHelper::getValue($permissions, Permission::PERMISSION_MANAGER_POST)
        );
        $auth->addChild(
            ArrayHelper::getValue($roles, Role::ROLE_SUPER_ADMIN),
            ArrayHelper::getValue($permissions, Permission::PERMISSION_MANAGER_USERS)
        );
        $auth->addChild(
            ArrayHelper::getValue($roles, Role::ROLE_SUPER_ADMIN),
            ArrayHelper::getValue($permissions, Permission::PERMISSION_MANAGER_RBAC)
        );

        // ROLE_ADMIN
        $auth->addChild(
            ArrayHelper::getValue($roles, Role::ROLE_ADMIN),
            ArrayHelper::getValue($permissions, Permission::PERMISSION_VIEW_ADMIN_PAGE)
        );
        $auth->addChild(
            ArrayHelper::getValue($roles, Role::ROLE_ADMIN),
            ArrayHelper::getValue($permissions, Permission::PERMISSION_MANAGER_POST)
        );
        $auth->addChild(
            ArrayHelper::getValue($roles, Role::ROLE_ADMIN),
            ArrayHelper::getValue($permissions, Permission::PERMISSION_MANAGER_USERS)
        );

        // ROLE_MANAGER
        $auth->addChild(
            ArrayHelper::getValue($roles, Role::ROLE_MANAGER),
            ArrayHelper::getValue($permissions, Permission::PERMISSION_VIEW_ADMIN_PAGE)
        );
        $auth->addChild(
            ArrayHelper::getValue($roles, Role::ROLE_MANAGER),
            ArrayHelper::getValue($permissions, Permission::PERMISSION_MANAGER_POST)
        );

        // ROLE_EDITOR
        $auth->addChild(
            ArrayHelper::getValue($roles, Role::ROLE_EDITOR),
            ArrayHelper::getValue($permissions, Permission::PERMISSION_VIEW_ADMIN_PAGE)
        );
        $auth->addChild(
            ArrayHelper::getValue($roles, Role::ROLE_EDITOR),
            ArrayHelper::getValue($permissions, Permission::PERMISSION_UPDATE_OWN_POST)
        );
    }

    /**
     * Add Child role for Roles
     *
     * @param object $auth
     * @param array $roles
     */
    protected function processAddChildRoles($auth, $roles = [])
    {
        $auth->addChild(
            ArrayHelper::getValue($roles, Role::ROLE_SUPER_ADMIN),
            ArrayHelper::getValue($roles, Role::ROLE_ADMIN)
        );

        $auth->addChild(
            ArrayHelper::getValue($roles, Role::ROLE_ADMIN),
            ArrayHelper::getValue($roles, Role::ROLE_MANAGER)
        );

        $auth->addChild(
            ArrayHelper::getValue($roles, Role::ROLE_MANAGER),
            ArrayHelper::getValue($roles, Role::ROLE_EDITOR)
        );

        $auth->addChild(
            ArrayHelper::getValue($roles, Role::ROLE_EDITOR),
            ArrayHelper::getValue($roles, Role::ROLE_DEFAULT)
        );
    }

    /**
     * Assign Role to User
     * @param object $auth
     * @param array $role
     * @param int $userId
     * @return bool
     */
    protected function processAssignUserToRole($auth, $role, $userId = 1)
    {
        $auth->assign($role, $userId);
        return true;
    }

    /**
     * Roles
     *
     * @return array
     */
    protected function getRoles()
    {
        $role = new Role();
        return $role->getRolesArray();
    }

    /**
     * Permissions
     *
     * @return array
     */
    protected function getPermissions()
    {
        $permission = new Permission();
        return $permission->getPermissionsArray();
    }
}