feat: complete jobcard management workflows and UI
This commit is contained in:
@@ -49,7 +49,24 @@ final class RolePermissionService
|
||||
return ['role_id' => $roleId ?? 0, 'permissions' => $normalized, 'valid' => $errors === [], 'errors' => $errors];
|
||||
}
|
||||
|
||||
/** Alias matching controller command terminology. */
|
||||
/** Validate creation of a custom role and its optional permission set. */
|
||||
public function validateForCreate(array $input, array $available = []): array
|
||||
{
|
||||
$record = $this->roles ?? new RoleRecord();
|
||||
$result = $record->validate($input);
|
||||
if ($record->isAdministrator($input)) {
|
||||
$result['errors']['role'] = 'The protected Administrator role cannot be created or renamed.';
|
||||
}
|
||||
if (array_key_exists('permissions', $input)) {
|
||||
$assignment = $this->validateAssignment(['id' => 2, 'name' => $result['name']], is_array($input['permissions']) ? $input['permissions'] : [], $available);
|
||||
$result['permissions'] = $assignment['permissions'];
|
||||
$result['errors'] = [...$result['errors'], ...$assignment['errors']];
|
||||
}
|
||||
$result['valid'] = $result['errors'] === [];
|
||||
return $result;
|
||||
}
|
||||
|
||||
/** @return array{role_id: int, permissions: list<string>, valid: bool, errors: array<string, string>} */
|
||||
public function validateForAssignment(array $role, array $selected, array $available = []): array
|
||||
{
|
||||
return $this->validateAssignment($role, $selected, $available);
|
||||
@@ -68,9 +85,7 @@ final class RolePermissionService
|
||||
$result['id'] = $id;
|
||||
if ($id < 1) $result['errors']['id'] = 'Role ID must be a positive integer.';
|
||||
$current = ['id' => $id, 'name' => $id === 1 ? 'Administrator' : ($input['current_name'] ?? ($input['name'] ?? null))];
|
||||
if (array_key_exists('current_name', $input)) {
|
||||
if (!$record->canRename($current, $result['name'])) $result['errors']['role'] = 'The protected Administrator role cannot be renamed.';
|
||||
}
|
||||
if (!$record->canRename($current, $result['name'])) $result['errors']['role'] = 'The protected Administrator role cannot be renamed.';
|
||||
if (array_key_exists('permissions', $input)) {
|
||||
$assignment = $this->validateAssignment(['id' => $id, 'name' => $current['name']], is_array($input['permissions']) ? $input['permissions'] : [], $available);
|
||||
$result['permissions'] = $assignment['permissions'];
|
||||
@@ -80,6 +95,28 @@ final class RolePermissionService
|
||||
return $result;
|
||||
}
|
||||
|
||||
/** Alias matching edit controller terminology. */
|
||||
public function validateEdit(int $id, array $input, array $available = []): array
|
||||
{
|
||||
return $this->validateForEdit($id, $input, $available);
|
||||
}
|
||||
|
||||
/** Validate deletion of a custom role; ID 1 is always protected. */
|
||||
public function validateDelete(int $id, array $role = []): array
|
||||
{
|
||||
$errors = [];
|
||||
if ($id < 1) $errors['id'] = 'Role ID must be a positive integer.';
|
||||
if ($id === 1 || ($role !== [] && !($this->roles ?? new RoleRecord())->canDelete(['id' => $id, ...$role]))) {
|
||||
$errors['role'] = 'The protected Administrator role cannot be deleted.';
|
||||
}
|
||||
return ['valid' => $errors === [], 'id' => $id, 'errors' => $errors];
|
||||
}
|
||||
|
||||
public function delete(int $id, array $role = []): array
|
||||
{
|
||||
return $this->validateDelete($id, $role);
|
||||
}
|
||||
|
||||
public function canAssignPermissions(array $role): bool
|
||||
{
|
||||
return !($this->roles ?? new RoleRecord())->isAdministrator($role);
|
||||
|
||||
Reference in New Issue
Block a user