feat: complete jobcard management workflows and UI

This commit is contained in:
Marco0300
2026-09-01 21:47:35 +02:00
parent b983f90dcb
commit 9ce08bc6f8
27 changed files with 1081 additions and 115 deletions
+41 -4
View File
@@ -49,7 +49,24 @@ final class RolePermissionService
return ['role_id' => $roleId ?? 0, 'permissions' => $normalized, 'valid' => $errors === [], 'errors' => $errors];
}
/** Alias matching controller command terminology. */
/** Validate creation of a custom role and its optional permission set. */
public function validateForCreate(array $input, array $available = []): array
{
$record = $this->roles ?? new RoleRecord();
$result = $record->validate($input);
if ($record->isAdministrator($input)) {
$result['errors']['role'] = 'The protected Administrator role cannot be created or renamed.';
}
if (array_key_exists('permissions', $input)) {
$assignment = $this->validateAssignment(['id' => 2, 'name' => $result['name']], is_array($input['permissions']) ? $input['permissions'] : [], $available);
$result['permissions'] = $assignment['permissions'];
$result['errors'] = [...$result['errors'], ...$assignment['errors']];
}
$result['valid'] = $result['errors'] === [];
return $result;
}
/** @return array{role_id: int, permissions: list<string>, valid: bool, errors: array<string, string>} */
public function validateForAssignment(array $role, array $selected, array $available = []): array
{
return $this->validateAssignment($role, $selected, $available);
@@ -68,9 +85,7 @@ final class RolePermissionService
$result['id'] = $id;
if ($id < 1) $result['errors']['id'] = 'Role ID must be a positive integer.';
$current = ['id' => $id, 'name' => $id === 1 ? 'Administrator' : ($input['current_name'] ?? ($input['name'] ?? null))];
if (array_key_exists('current_name', $input)) {
if (!$record->canRename($current, $result['name'])) $result['errors']['role'] = 'The protected Administrator role cannot be renamed.';
}
if (!$record->canRename($current, $result['name'])) $result['errors']['role'] = 'The protected Administrator role cannot be renamed.';
if (array_key_exists('permissions', $input)) {
$assignment = $this->validateAssignment(['id' => $id, 'name' => $current['name']], is_array($input['permissions']) ? $input['permissions'] : [], $available);
$result['permissions'] = $assignment['permissions'];
@@ -80,6 +95,28 @@ final class RolePermissionService
return $result;
}
/** Alias matching edit controller terminology. */
public function validateEdit(int $id, array $input, array $available = []): array
{
return $this->validateForEdit($id, $input, $available);
}
/** Validate deletion of a custom role; ID 1 is always protected. */
public function validateDelete(int $id, array $role = []): array
{
$errors = [];
if ($id < 1) $errors['id'] = 'Role ID must be a positive integer.';
if ($id === 1 || ($role !== [] && !($this->roles ?? new RoleRecord())->canDelete(['id' => $id, ...$role]))) {
$errors['role'] = 'The protected Administrator role cannot be deleted.';
}
return ['valid' => $errors === [], 'id' => $id, 'errors' => $errors];
}
public function delete(int $id, array $role = []): array
{
return $this->validateDelete($id, $role);
}
public function canAssignPermissions(array $role): bool
{
return !($this->roles ?? new RoleRecord())->isAdministrator($role);