access.php

<?php
 
namespace Bitrix\Socialnetwork\Helper\Workgroup;
 
use Bitrix\Socialnetwork\Helper;
use Bitrix\Socialnetwork\Item\Workgroup\AccessManager;
use Bitrix\Socialnetwork\UserToGroupTable;
use Bitrix\Socialnetwork\WorkgroupTable;
 
class Access
{
    public static function canCreate(array $params = []): bool
    {
        $siteId = (string)($params['siteId'] ?? SITE_ID);
        $checkAdminSession = (bool)($params['checkAdminSession'] ?? true);
 
        return (
            \CSocNetUser::isCurrentUserModuleAdmin(SITE_ID, $checkAdminSession)
            || (\CMain::getGroupRight('socialnetwork', false, 'Y', 'Y', [ $siteId, false ]) >= 'K')
        );
    }
 
    public static function canView(array $params = []): bool
    {
        $groupId = (int)($params['groupId'] ?? 0);
        $currentUserId = (int)($params['userId'] ?? Helper\User::getCurrentUserId());
        $checkAdminSession = (bool)($params['checkAdminSession'] ?? true);
 
        if ($groupId <= 0)
        {
            return false;
        }
 
        if ($currentUserId <= 0)
        {
            return false;
        }
 
        $group = WorkgroupTable::getList([
            'filter' => [
                '=ID' => $groupId,
            ],
            'select' => [ 'ID', 'CLOSED', 'PROJECT', 'SCRUM_MASTER_ID', 'VISIBLE' ],
        ])->fetchObject();
        if (!$group)
        {
            return false;
        }
 
        $currentUserRelation = UserToGroupTable::getList([
            'filter' => [
                '=GROUP_ID' => $groupId,
                '=USER_ID' => $currentUserId,
            ],
            'select' => [ 'ID', 'ROLE', 'USER_ID', 'GROUP_ID' ],
        ])->fetchObject();
 
        $accessManager = new AccessManager(
            $group,
            $currentUserRelation,
            $currentUserRelation,
            [],
            [
                'checkAdminSession' => $checkAdminSession,
            ]
        );
 
        return $accessManager->canView();
    }
 
    public static function canModify(array $params = []): bool
    {
        $groupId = (int)($params['groupId'] ?? 0);
        $currentUserId = (int)($params['userId'] ?? Helper\User::getCurrentUserId());
        $checkAdminSession = (bool)($params['checkAdminSession'] ?? true);
 
        if ($groupId <= 0)
        {
            return false;
        }
 
        if ($currentUserId <= 0)
        {
            return false;
        }
 
        $group = WorkgroupTable::getList([
            'filter' => [
                '=ID' => $groupId,
            ],
            'select' => [ 'ID', 'CLOSED', 'PROJECT', 'SCRUM_MASTER_ID' ],
        ])->fetchObject();
        if (!$group)
        {
            return false;
        }
 
        $currentUserRelation = UserToGroupTable::getList([
            'filter' => [
                '=GROUP_ID' => $groupId,
                '=USER_ID' => $currentUserId,
            ],
            'select' => [ 'ID', 'ROLE', 'USER_ID', 'GROUP_ID' ],
        ])->fetchObject();
 
        $accessManager = new AccessManager(
            $group,
            $currentUserRelation,
            $currentUserRelation,
            [],
            [
                'checkAdminSession' => $checkAdminSession,
            ]
        );
 
        return $accessManager->canModify();
    }
 
    public static function canUpdate(array $params = []): bool
    {
        return static::canModify($params);
    }
 
    public static function canSetOwner(array $params = []): bool
    {
        $groupId = (int)($params['groupId'] ?? 0);
        $userId = (int)($params['userId'] ?? 0);
        $currentUserId = Helper\User::getCurrentUserId();
 
        if (
            $groupId <= 0
            || $userId <= 0
            || $currentUserId <= 0
        )
        {
            return false;
        }
 
        $group = WorkgroupTable::getList([
            'filter' => [
                '=ID' => $groupId,
            ],
            'select' => [ 'ID', 'CLOSED', 'PROJECT', 'SCRUM_MASTER_ID' ],
        ])->fetchObject();
        if (!$group)
        {
            return false;
        }
 
        $targetUserRelation = UserToGroupTable::getList([
            'filter' => [
                '=GROUP_ID' => $groupId,
                '=USER_ID' => $userId,
            ],
            'select' => [ 'ID', 'ROLE', 'USER_ID', 'GROUP_ID' ],
        ])->fetchObject();
 
        $currentUserRelation = UserToGroupTable::getList([
            'filter' => [
                '=GROUP_ID' => $groupId,
                '=USER_ID' => $currentUserId,
            ],
            'select' => [ 'ID', 'ROLE', 'USER_ID', 'GROUP_ID' ],
        ])->fetchObject();
 
        $accessManager = new AccessManager(
            $group,
            $targetUserRelation,
            $currentUserRelation
        );
 
        return $accessManager->canSetOwner();
    }
 
    public static function canSetScrumMaster(array $params = []): bool
    {
        $groupId = (int)($params['groupId'] ?? 0);
        $userId = ($params['userId'] ?? null);
        $currentUserId = Helper\User::getCurrentUserId();
 
        if (
            $groupId <= 0
            || $userId <= 0
            || $currentUserId <= 0
        )
        {
            return false;
        }
 
        $group = WorkgroupTable::getList([
            'filter' => [
                '=ID' => $groupId,
            ],
            'select' => [ 'ID', 'CLOSED', 'PROJECT', 'SCRUM_MASTER_ID' ],
        ])->fetchObject();
        if (!$group)
        {
            return false;
        }
 
        $targetUserRelation = UserToGroupTable::getList([
            'filter' => [
                '=GROUP_ID' => $groupId,
                '=USER_ID' => $userId,
            ],
            'select' => [ 'ID', 'ROLE', 'USER_ID', 'GROUP_ID' ],
        ])->fetchObject();
 
        $currentUserRelation = UserToGroupTable::getList([
            'filter' => [
                '=GROUP_ID' => $groupId,
                '=USER_ID' => $currentUserId,
            ],
            'select' => [ 'ID', 'ROLE', 'USER_ID', 'GROUP_ID' ],
        ])->fetchObject();
 
        $accessManager = new AccessManager(
            $group,
            $targetUserRelation,
            $currentUserRelation
        );
 
        return $accessManager->canSetScrumMaster();
    }
 
    public static function canDeleteOutgoingRequest(array $params = []): bool
    {
        $groupId = (int)($params['groupId'] ?? 0);
        $userId = ($params['userId'] ?? null);
        $currentUserId = Helper\User::getCurrentUserId();
 
        if (
            $groupId <= 0
            || $userId <= 0
            || $currentUserId <= 0
        )
        {
            return false;
        }
 
        $group = WorkgroupTable::getList([
            'filter' => [
                '=ID' => $groupId,
            ],
            'select' => [ 'ID', 'CLOSED', 'PROJECT', 'SCRUM_MASTER_ID', 'INITIATE_PERMS' ],
        ])->fetchObject();
        if (!$group)
        {
            return false;
        }
 
        $targetUserRelation = UserToGroupTable::getList([
            'filter' => [
                '=GROUP_ID' => $groupId,
                '=USER_ID' => $userId,
            ],
            'select' => [ 'ID', 'ROLE', 'USER_ID', 'GROUP_ID', 'INITIATED_BY_TYPE', 'INITIATED_BY_USER_ID' ],
        ])->fetchObject();
 
        $currentUserRelation = UserToGroupTable::getList([
            'filter' => [
                '=GROUP_ID' => $groupId,
                '=USER_ID' => $currentUserId,
            ],
            'select' => [ 'ID', 'ROLE', 'USER_ID', 'GROUP_ID' ],
        ])->fetchObject();
 
        $accessManager = new AccessManager(
            $group,
            $targetUserRelation,
            $currentUserRelation
        );
 
        return $accessManager->canDeleteOutgoingRequest();
    }
 
    public static function canDeleteIncomingRequest(array $params = []): bool
    {
        $groupId = (int)($params['groupId'] ?? 0);
        $userId = ($params['userId'] ?? null);
        $currentUserId = Helper\User::getCurrentUserId();
 
        if (
            $groupId <= 0
            || $userId <= 0
            || $currentUserId <= 0
        )
        {
            return false;
        }
 
        $group = WorkgroupTable::getList([
            'filter' => [
                '=ID' => $groupId,
            ],
            'select' => [ 'ID', 'CLOSED', 'PROJECT', 'SCRUM_MASTER_ID' ],
        ])->fetchObject();
        if (!$group)
        {
            return false;
        }
 
        $targetUserRelation = UserToGroupTable::getList([
            'filter' => [
                '=GROUP_ID' => $groupId,
                '=USER_ID' => $userId,
            ],
            'select' => [ 'ID', 'ROLE', 'GROUP_ID', 'INITIATED_BY_TYPE', 'INITIATED_BY_USER_ID' ],
        ])->fetchObject();
 
        $currentUserRelation = UserToGroupTable::getList([
            'filter' => [
                '=GROUP_ID' => $groupId,
                '=USER_ID' => $currentUserId,
            ],
            'select' => [ 'ID', 'GROUP_ID' ],
        ])->fetchObject();
 
        $accessManager = new AccessManager(
            $group,
            $targetUserRelation,
            $currentUserRelation
        );
 
        return $accessManager->canDeleteIncomingRequest();
    }
 
    public static function canProcessIncomingRequest(array $params = []): bool
    {
        $groupId = (int)($params['groupId'] ?? 0);
        $userId = ($params['userId'] ?? null);
        $currentUserId = Helper\User::getCurrentUserId();
 
        if (
            $groupId <= 0
            || $userId <= 0
            || $currentUserId <= 0
        )
        {
            return false;
        }
 
        $group = WorkgroupTable::getList([
            'filter' => [
                '=ID' => $groupId,
            ],
            'select' => [ 'ID', 'CLOSED', 'PROJECT', 'SCRUM_MASTER_ID', 'INITIATE_PERMS' ],
        ])->fetchObject();
        if (!$group)
        {
            return false;
        }
 
        $targetUserRelation = UserToGroupTable::getList([
            'filter' => [
                '=GROUP_ID' => $groupId,
                '=USER_ID' => $userId,
            ],
            'select' => [ 'ID', 'ROLE', 'GROUP_ID', 'INITIATED_BY_TYPE' ],
        ])->fetchObject();
 
        $currentUserRelation = UserToGroupTable::getList([
            'filter' => [
                '=GROUP_ID' => $groupId,
                '=USER_ID' => $currentUserId,
            ],
            'select' => [ 'ID', 'ROLE', 'USER_ID', 'GROUP_ID' ],
        ])->fetchObject();
 
        $accessManager = new AccessManager(
            $group,
            $targetUserRelation,
            $currentUserRelation
        );
 
        return $accessManager->canProcessIncomingRequest();
    }
 
    public static function canExclude(array $params = []): bool
    {
        $groupId = (int)($params['groupId'] ?? 0);
        $userId = ($params['userId'] ?? null);
        $currentUserId = Helper\User::getCurrentUserId();
 
        $group = WorkgroupTable::getList([
            'filter' => [
                '=ID' => $groupId,
            ],
            'select' => [ 'ID', 'CLOSED', 'PROJECT', 'SCRUM_MASTER_ID', 'INITIATE_PERMS' ],
        ])->fetchObject();
        if (!$group)
        {
            return false;
        }
 
        $targetUserRelation = UserToGroupTable::getList([
            'filter' => [
                '=GROUP_ID' => $groupId,
                '=USER_ID' => $userId,
            ],
            'select' => [ 'ID', 'ROLE', 'USER_ID', 'GROUP_ID', 'AUTO_MEMBER' ],
        ])->fetchObject();
 
        $currentUserRelation = UserToGroupTable::getList([
            'filter' => [
                '=GROUP_ID' => $groupId,
                '=USER_ID' => $currentUserId,
            ],
            'select' => [ 'ID', 'ROLE', 'USER_ID', 'GROUP_ID' ],
        ])->fetchObject();
 
        $accessManager = new AccessManager(
            $group,
            $targetUserRelation,
            $currentUserRelation
        );
 
        return $accessManager->canExclude();
    }
 
    public static function canJoin(array $params = []): bool
    {
        $groupId = (int)($params['groupId'] ?? 0);
        $userId = ($params['userId'] ?? Helper\User::getCurrentUserId());
 
        if (
            $groupId <= 0
            || $userId <= 0
        )
        {
            return false;
        }
 
        $group = WorkgroupTable::getList([
            'filter' => [
                '=ID' => $groupId,
            ],
            'select' => [ 'ID', 'CLOSED', 'VISIBLE' ],
        ])->fetchObject();
        if (!$group)
        {
            return false;
        }
 
        $currentUserRelation = UserToGroupTable::getList([
            'filter' => [
                '=GROUP_ID' => $groupId,
                '=USER_ID' => $userId,
            ],
            'select' => [ 'ID', 'ROLE', 'USER_ID', 'GROUP_ID', 'INITIATED_BY_TYPE' ],
        ])->fetchObject();
 
        $accessManager = new AccessManager(
            $group,
            null,
            $currentUserRelation
        );
 
        return $accessManager->canJoin();
    }
 
    public static function canLeave(array $params = []): bool
    {
        $groupId = (int)($params['groupId'] ?? 0);
        $userId = ($params['userId'] ?? Helper\User::getCurrentUserId());
 
        if (
            $groupId <= 0
            || $userId <= 0
        )
        {
            return false;
        }
 
        $group = WorkgroupTable::getList([
            'filter' => [
                '=ID' => $groupId,
            ],
            'select' => [ 'ID', 'PROJECT', 'SCRUM_MASTER_ID' ],
        ])->fetchObject();
        if (!$group)
        {
            return false;
        }
 
        $currentUserRelation = UserToGroupTable::getList([
            'filter' => [
                '=GROUP_ID' => $groupId,
                '=USER_ID' => $userId,
            ],
            'select' => [ 'ID', 'ROLE', 'USER_ID', 'GROUP_ID', 'AUTO_MEMBER' ],
        ])->fetchObject();
 
        $accessManager = new AccessManager(
            $group,
            null,
            $currentUserRelation
        );
 
        return $accessManager->canLeave();
    }
 
    public static function canSetModerator(array $params = []): bool
    {
        $groupId = (int)($params['groupId'] ?? 0);
        $userId = ($params['userId'] ?? null);
        $currentUserId = Helper\User::getCurrentUserId();
 
        if (
            $groupId <= 0
            || $userId <= 0
            || $currentUserId <= 0
        )
        {
            return false;
        }
 
        $group = WorkgroupTable::getList([
            'filter' => [
                '=ID' => $groupId,
            ],
            'select' => [ 'ID', 'CLOSED', 'PROJECT', 'SCRUM_MASTER_ID' ],
        ])->fetchObject();
        if (!$group)
        {
            return false;
        }
 
        $targetUserRelation = UserToGroupTable::getList([
            'filter' => [
                '=GROUP_ID' => $groupId,
                '=USER_ID' => $userId,
            ],
            'select' => [ 'ID', 'ROLE', 'USER_ID', 'GROUP_ID' ],
        ])->fetchObject();
 
        $currentUserRelation = UserToGroupTable::getList([
            'filter' => [
                '=GROUP_ID' => $groupId,
                '=USER_ID' => $currentUserId,
            ],
            'select' => [ 'ID', 'ROLE', 'USER_ID', 'GROUP_ID' ],
        ])->fetchObject();
 
        $accessManager = new AccessManager(
            $group,
            $targetUserRelation,
            $currentUserRelation
        );
 
        return $accessManager->canSetModerator();
    }
 
    public static function canRemoveModerator(array $params = []): bool
    {
        $groupId = (int)($params['groupId'] ?? 0);
        $userId = ($params['userId'] ?? null);
        $currentUserId = Helper\User::getCurrentUserId();
 
        if (
            $groupId <= 0
            || $userId <= 0
            || $currentUserId <= 0
        )
        {
            return false;
        }
 
        $group = WorkgroupTable::getList([
            'filter' => [
                '=ID' => $groupId,
            ],
            'select' => [ 'ID', 'CLOSED', 'PROJECT', 'SCRUM_MASTER_ID' ],
        ])->fetchObject();
        if (!$group)
        {
            return false;
        }
 
        $targetUserRelation = UserToGroupTable::getList([
            'filter' => [
                '=GROUP_ID' => $groupId,
                '=USER_ID' => $userId,
            ],
            'select' => [ 'ID', 'ROLE', 'USER_ID', 'GROUP_ID' ],
        ])->fetchObject();
 
        $currentUserRelation = UserToGroupTable::getList([
            'filter' => [
                '=GROUP_ID' => $groupId,
                '=USER_ID' => $currentUserId,
            ],
            'select' => [ 'ID', 'ROLE', 'USER_ID', 'GROUP_ID' ],
        ])->fetchObject();
 
        $accessManager = new AccessManager(
            $group,
            $targetUserRelation,
            $currentUserRelation
        );
 
        return $accessManager->canRemoveModerator();
    }
}