AuthModel::buildUserFoldersList()

Complexity

Conditions	18
Paths	128

Size

Total Lines	114
Code Lines	70

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
    private function buildUserFoldersList($userInfo)
    {
        // Start by adding the manually added folders
        $allowedFolders = $userInfo['groupes_visibles'];
        $readOnlyFolders = [];
        $allowedFoldersByRoles = [];
        $restrictedFoldersForItems = [];
        $foldersLimited = [];
        $foldersLimitedFull = [];

        $userFunctionId = str_replace(";", ",", $userInfo['fonction_id']);

        // Get folders from the roles
        if (empty($userFunctionId) === false) {
            $rows = $this->select("SELECT * FROM " . prefixTable('roles_values') . " WHERE role_id IN (".$userFunctionId.") AND type IN ('W', 'ND', 'NE', 'NDNE', 'R')");
            foreach ($rows as $record) {
                if ($record['type'] === 'R') {
                    array_push($readOnlyFolders, $record['folder_id']);
                } elseif (in_array($record['folder_id'], $allowedFolders) === false) {
                    array_push($allowedFoldersByRoles, $record['folder_id']);
                }
            }
            $allowedFoldersByRoles = array_unique($allowedFoldersByRoles);
            $readOnlyFolders = array_unique($readOnlyFolders);
            // Clean arrays
            foreach ($allowedFoldersByRoles as $value) {
                $key = array_search($value, $readOnlyFolders);
                if ($key !== false) {
                    unset($readOnlyFolders[$key]);
                }
            }
        }

        // Does this user is allowed to see other items
        $rows = $this->select("SELECT id, id_tree FROM " . prefixTable('items') . " WHERE WHERE restricted_to LIKE '".$userInfo['id']."'".
            (empty($userFunctionId) === false ? ' AND id_tree NOT IN ('.$userFunctionId.')' : ''));
        foreach ($rows as $record) {
            // Exclude restriction on item if folder is fully accessible
            //if (in_array($record['id_tree'], $allowedFolders) === false) {
                $restrictedFoldersForItems[$record['id_tree']][$inc] = $record['id'];

The variable $inc seems to be never defined.

            //}
        }

        // Check for the users roles if some specific rights exist on items
        $rows = $this->select("SELECT i.id_tree, r.item_id
            FROM " . prefixTable('items') . " as i
            INNER JOIN " . prefixTable('restriction_to_roles') . " as r ON (r.item_id=i.id)
            WHERE ".(empty($userFunctionId) === false ? ' id_tree NOT IN ('.$userFunctionId.') AND ' : '')." i.id_tree != ''
            ORDER BY i.id_tree ASC");
        foreach ($rows as $record) {
            $foldersLimited[$record['id_tree']][$inc] = $record['item_id'];
            array_push($foldersLimitedFull, $record['item_id']);
        }

        // TODO ajouter perso folders
        $rows = $this->select(
            'SELECT id
            FROM ' . prefixTable('nested_tree') . '
            WHERE title = '.$userInfo['id'].' AND personal_folder = 1'.
            (empty($userFunctionId) === false ? ' AND id NOT IN ('.$userFunctionId.')' : '').
            ' LIMIT 0,1'
        );
        if (empty($rows['id']) === false) {
            array_push($personalFolders, $rows['id']);
            array_push($allowedFolders, $rows['id']);
            // get all descendants
            $ids = $tree->getDescendants($rows['id'], false, false, true);

The variable $tree seems to be never defined.

            foreach ($ids as $id) {
                array_push($allowedFolders, $id);
                array_push($personalFolders, $id);
            }
        }

        // Exclude all other PF
        $where = new WhereClause('and');
        $where->add('personal_folder=%i', 1);
        if (
            (int) $enablePfFeature === 1

The variable $enablePfFeature seems to be never defined.

            && (int) $globalsPersonalFolders === 1

The variable $globalsPersonalFolders seems to be never defined.

        ) {
            $where->add('title=%s', $globalsUserId);

The variable $globalsUserId seems to be never defined.

            $where->negateLast();
        }
        $persoFlds = DB::query(

The assignment to $persoFlds is dead and can be removed.

            'SELECT id
            FROM ' . prefixTable('nested_tree') . '
            WHERE %l',
            $wheres

The variable $wheres does not exist. Did you maybe mean $where?

        );

        $rows = $this->select(
            'SELECT id
            FROM ' . prefixTable('nested_tree') . '
            WHERE title != '.$userInfo['id'].' AND personal_folder = 1'
        );

        foreach ($rows as $persoFldId) {
            array_push($noAccessPersonalFolders, $persoFldId['id']);
        }

        // All folders visibles
        $allowedFolders = array_merge(
            $allowedFolders,
            $foldersLimitedFull,
            $allowedFoldersByRoles,
            $restrictedFoldersForItems,
            $readOnlyFolders
        );
        // Exclude from allowed folders all the specific user forbidden folders
        if (count($noAccessFolders) > 0) {

The variable $noAccessFolders seems to be never defined.

            $allowedFolders = array_diff($allowedFolders, $noAccessFolders);
        }

        return $allowedFolders;
    }
}