postIsEditableByStudent()

Complexity

Conditions	13
Paths	50

Size

Total Lines	61
Code Lines	31

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
function postIsEditableByStudent(CForum $forum, $post): bool
{
    // Normalize $post to an entity
    /** @var CForumPost|null $entity */
    $entity = null;

    if ($post instanceof CForumPost) {
        $entity = $post;
    } elseif (is_array($post)) {
        // Prefer the embedded entity from getPosts()
        if (isset($post['entity']) && $post['entity'] instanceof CForumPost) {
            $entity = $post['entity'];
        } else {
            // Fallback: fetch by id if present in the array
            $postId = $post['post_id'] ?? $post['iid'] ?? null;
            if ($postId) {
                $em = Database::getManager();
                $entity = $em->getRepository(CForumPost::class)->find($postId);
            }
        }
    }

    // If we still don't have a valid entity, be conservative: deny student edit
    if (!$entity instanceof CForumPost) {
        return false;
    }

    // Admins/teachers can always edit
    if (api_is_platform_admin() || api_is_allowed_to_edit()) {
        return true;
    }

    $isModerated = (bool) $forum->isModerated();
    $userId      = (int) api_get_user_id();
    $ownerId     = $entity->getUser() ? (int) $entity->getUser()->getId() : 0;
    $isOwner     = ($ownerId === $userId);
    $status      = $entity->getStatus();

    // Unmoderated forum: student can edit only own posts
    if (!$isModerated) {
        return $isOwner;
    }

    // editable by owner when status is NULL or WAITING or REJECTED.
    if ($isOwner) {
        if ($status === null) {
            return true;
        }

        return in_array(
            $status,
            [
                CForumPost::STATUS_WAITING_MODERATION,
                CForumPost::STATUS_REJECTED,
            ],
            true
        );
    }

    // Not owner and not a teacher/admin
    return false;
}