ilios/frontend

import Service, { service } from '@ember/service';

export default class PermissionCheckerService extends Service {
  @service currentUser;
  @service permissionMatrix;
  @service apiVersion;

  async canChangeInSchool(school, capability) {
    const apiVersionMismatch = await this.apiVersion.getIsMismatched();
    // never allow changes if the API version is not up to date
    if (apiVersionMismatch) {
      return false;
    }
    const isRoot = await this.currentUser.get('isRoot');
    if (isRoot) {
      return true;
    }
    const rolesToCheck = await this.permissionMatrix.getPermittedRoles(school, capability);
    const rolesInSchool = await this.currentUser.getRolesInSchool(school, rolesToCheck);

    return this.permissionMatrix.hasPermission(school, capability, rolesInSchool);
  }

  async canUpdateCourse(course) {
    if (course.get('locked') || course.get('archived')) {
      return false;
    }
    const school = await course.get('school');
    if (await this.canChangeInSchool(school, 'CAN_UPDATE_ALL_COURSES')) {
      return true;
    }

    const capability = 'CAN_UPDATE_THEIR_COURSES';
    const rolesToCheck = await this.permissionMatrix.getPermittedRoles(school, capability);
    const rolesInCourse = await this.currentUser.getRolesInCourse(course, rolesToCheck);
    return await this.permissionMatrix.hasPermission(school, capability, rolesInCourse);
  }
  async canUpdateAllCoursesInSchool(school) {
    return this.canChangeInSchool(school, 'CAN_UPDATE_ALL_COURSES');
  }
  async canDeleteCourse(course) {
    if (course.get('locked') || course.get('archived')) {
      return false;
    }

    const school = await course.get('school');
    if (await this.canChangeInSchool(school, 'CAN_DELETE_ALL_COURSES')) {
      return true;
    }

    const capability = 'CAN_DELETE_THEIR_COURSES';
    const rolesToCheck = await this.permissionMatrix.getPermittedRoles(school, capability);
    const rolesInCourse = await this.currentUser.getRolesInCourse(course, rolesToCheck);
    return await this.permissionMatrix.hasPermission(school, capability, rolesInCourse);
  }
  async canCreateCourse(school) {
    return this.canChangeInSchool(school, 'CAN_CREATE_COURSES');
  }
  async canUnlockCourse(course) {
    const school = await course.get('school');
    if (await this.canChangeInSchool(school, 'CAN_UNLOCK_ALL_COURSES')) {
      return true;
    }

    const capability = 'CAN_UNLOCK_THEIR_COURSES';
    const rolesToCheck = await this.permissionMatrix.getPermittedRoles(school, capability);
    const rolesInCourse = await this.currentUser.getRolesInCourse(course, rolesToCheck);
    return await this.permissionMatrix.hasPermission(school, capability, rolesInCourse);
  }
  async canUpdateSession(session) {
    const course = await session.get('course');

    if (course.get('locked') || course.get('archived')) {
      return false;
    }

    const school = await course.get('school');
    if (await this.canChangeInSchool(school, 'CAN_UPDATE_ALL_SESSIONS')) {
      return true;
    }

    const capability = 'CAN_UPDATE_THEIR_SESSIONS';
    const rolesToCheck = await this.permissionMatrix.getPermittedRoles(school, capability);
    const rolesInSession = await this.currentUser.getRolesInSession(session, rolesToCheck);
    if (await this.permissionMatrix.hasPermission(school, capability, rolesInSession)) {
      return true;
    }

    return this.canUpdateCourse(course);
  }
  async canDeleteSession(session) {
    const course = await session.get('course');

    if (course.get('locked') || course.get('archived')) {
      return false;
    }

    const school = await course.get('school');
    if (await this.canChangeInSchool(school, 'CAN_DELETE_ALL_SESSIONS')) {
      return true;
    }

    const capability = 'CAN_DELETE_THEIR_SESSIONS';
    const rolesToCheck = await this.permissionMatrix.getPermittedRoles(school, capability);
    const rolesInSession = await this.currentUser.getRolesInSession(session, rolesToCheck);
    if (await this.permissionMatrix.hasPermission(school, capability, rolesInSession)) {
      return true;
    }

    return this.canUpdateCourse(course);
  }
  async canCreateSession(course) {
    if (course.get('locked') || course.get('archived')) {
      return false;
    }

    const school = await course.get('school');
    if (await this.canChangeInSchool(school, 'CAN_CREATE_SESSIONS')) {
      return true;
    }

    return this.canUpdateCourse(course);
  }
  async canUpdateSessionType(sessionType) {
    const school = await sessionType.get('school');
    return this.canChangeInSchool(school, 'CAN_UPDATE_SESSION_TYPES');
  }
  async canDeleteSessionType(sessionType) {
    const school = await sessionType.get('school');
    return this.canChangeInSchool(school, 'CAN_DELETE_SESSION_TYPES');
  }
  async canUpdateSessionTypeInSchool(school) {
    return this.canChangeInSchool(school, 'CAN_UPDATE_SESSION_TYPES');
  }
  async canDeleteSessionTypeInSchool(school) {
    return this.canChangeInSchool(school, 'CAN_DELETE_SESSION_TYPES');
  }
  async canCreateSessionType(school) {
    return this.canChangeInSchool(school, 'CAN_CREATE_SESSION_TYPES');
  }
  async canUpdateProgram(program) {
    const school = await program.get('school');
    if (await this.canChangeInSchool(school, 'CAN_UPDATE_ALL_PROGRAMS')) {
      return true;
    }

    const capability = 'CAN_UPDATE_THEIR_PROGRAMS';
    const rolesToCheck = await this.permissionMatrix.getPermittedRoles(school, capability);
    const rolesInProgram = await this.currentUser.getRolesInProgram(program, rolesToCheck);
    return await this.permissionMatrix.hasPermission(school, capability, rolesInProgram);
  }
  async canDeleteProgram(program) {
    const school = await program.get('school');
    if (await this.canChangeInSchool(school, 'CAN_DELETE_ALL_PROGRAMS')) {
      return true;
    }

    const capability = 'CAN_DELETE_THEIR_PROGRAMS';
    const rolesToCheck = await this.permissionMatrix.getPermittedRoles(school, capability);
    const rolesInProgram = await this.currentUser.getRolesInProgram(program, rolesToCheck);
    return await this.permissionMatrix.hasPermission(school, capability, rolesInProgram);
  }
  async canCreateProgram(school) {
    return this.canChangeInSchool(school, 'CAN_CREATE_PROGRAMS');
  }
  async canUpdateProgramYear(programYear) {
    if (programYear.get('locked') || programYear.get('archived')) {
      return false;
    }

    const program = await programYear.get('program');
    const school = await program.get('school');
    if (await this.canChangeInSchool(school, 'CAN_UPDATE_ALL_PROGRAM_YEARS')) {
      return true;
    }

    const capability = 'CAN_UPDATE_THEIR_PROGRAM_YEARS';
    const rolesToCheck = await this.permissionMatrix.getPermittedRoles(school, capability);
    const rolesInProgramYear = await this.currentUser.getRolesInProgramYear(
      programYear,
      rolesToCheck,
    );
    if (await this.permissionMatrix.hasPermission(school, capability, rolesInProgramYear)) {
      return true;
    }

    return this.canUpdateProgram(program);
  }
  async canDeleteProgramYear(programYear) {
    if (programYear.get('locked') || programYear.get('archived')) {
      return false;
    }

    const program = await programYear.get('program');
    const school = await program.get('school');
    if (await this.canChangeInSchool(school, 'CAN_DELETE_ALL_PROGRAM_YEARS')) {
      return true;
    }

    const capability = 'CAN_DELETE_THEIR_PROGRAM_YEARS';
    const rolesToCheck = await this.permissionMatrix.getPermittedRoles(school, capability);
    const rolesInProgramYear = await this.currentUser.getRolesInProgramYear(
      programYear,
      rolesToCheck,
    );
    if (await this.permissionMatrix.hasPermission(school, capability, rolesInProgramYear)) {
      return true;
    }

    return this.canUpdateProgram(program);
  }
  async canCreateProgramYear(program) {
    const school = await program.get('school');
    if (await this.canChangeInSchool(school, 'CAN_CREATE_PROGRAM_YEARS')) {
      return true;
    }
    return this.canUpdateProgram(program);
  }
  async canLockProgramYear(programYear) {
    const program = await programYear.get('program');
    const school = await program.get('school');
    if (await this.canChangeInSchool(school, 'CAN_LOCK_ALL_PROGRAM_YEARS')) {
      return true;
    }
    const capability = 'CAN_LOCK_THEIR_PROGRAM_YEARS';
    const rolesToCheck = await this.permissionMatrix.getPermittedRoles(school, capability);
    const rolesInProgramYear = await this.currentUser.getRolesInProgramYear(
      programYear,
      rolesToCheck,
    );
    if (await this.permissionMatrix.hasPermission(school, capability, rolesInProgramYear)) {
      return true;
    }

    return this.canUpdateProgram(program);
  }

  async canUnlockProgramYear(programYear) {
    const program = await programYear.get('program');
    const school = await program.get('school');
    if (await this.canChangeInSchool(school, 'CAN_UNLOCK_ALL_PROGRAM_YEARS')) {
      return true;
    }
    const capability = 'CAN_UNLOCK_THEIR_PROGRAM_YEARS';
    const rolesToCheck = await this.permissionMatrix.getPermittedRoles(school, capability);
    const rolesInProgramYear = await this.currentUser.getRolesInProgramYear(
      programYear,
      rolesToCheck,
    );
    if (await this.permissionMatrix.hasPermission(school, capability, rolesInProgramYear)) {
      return true;
    }

    return this.canUpdateProgram(program);
  }
  async canUpdateSchoolConfig(school) {
    return this.canChangeInSchool(school, 'CAN_UPDATE_SCHOOL_CONFIGS');
  }
  async canUpdateSchool(school) {
    return this.canChangeInSchool(school, 'CAN_UPDATE_SCHOOLS');
  }
  async canUpdateCompetency(competency) {
    const school = await competency.get('school');
    return this.canChangeInSchool(school, 'CAN_UPDATE_COMPETENCIES');
  }
  async canDeleteCompetency(competency) {
    const school = await competency.get('school');
    return this.canChangeInSchool(school, 'CAN_DELETE_COMPETENCIES');
  }
  async canUpdateCompetencyInSchool(school) {
    return this.canChangeInSchool(school, 'CAN_UPDATE_COMPETENCIES');
  }
  async canDeleteCompetencyInSchool(school) {
    return this.canChangeInSchool(school, 'CAN_DELETE_COMPETENCIES');
  }
  async canCreateCompetency(school) {
    return this.canChangeInSchool(school, 'CAN_CREATE_COMPETENCIES');
  }
  async canUpdateVocabulary(vocabulary) {
    const school = await vocabulary.get('school');
    return this.canChangeInSchool(school, 'CAN_UPDATE_VOCABULARIES');
  }
  async canDeleteVocabulary(vocabulary) {
    const school = await vocabulary.get('school');
    return this.canChangeInSchool(school, 'CAN_DELETE_VOCABULARIES');
  }
  async canUpdateVocabularyInSchool(school) {
    return this.canChangeInSchool(school, 'CAN_UPDATE_VOCABULARIES');
  }
  async canDeleteVocabularyInSchool(school) {
    return this.canChangeInSchool(school, 'CAN_DELETE_VOCABULARIES');
  }
  async canCreateVocabulary(school) {
    return this.canChangeInSchool(school, 'CAN_CREATE_VOCABULARIES');
  }
  async canUpdateTerm(term) {
    const school = await term.get('school');
    return this.canChangeInSchool(school, 'CAN_UPDATE_TERMS');
  }
  async canDeleteTerm(term) {
    const school = await term.get('school');
    return this.canChangeInSchool(school, 'CAN_DELETE_TERMS');
  }
  async canUpdateTermInSchool(school) {
    return this.canChangeInSchool(school, 'CAN_UPDATE_TERMS');
  }
  async canDeleteTermInSchool(school) {
    return this.canChangeInSchool(school, 'CAN_DELETE_TERMS');
  }
  async canCreateTerm(school) {
    return this.canChangeInSchool(school, 'CAN_CREATE_TERMS');
  }
  async canUpdateInstructorGroup(instructorGroup) {
    const school = await instructorGroup.get('school');
    return this.canChangeInSchool(school, 'CAN_UPDATE_INSTRUCTOR_GROUPS');
  }
  async canDeleteInstructorGroup(instructorGroup) {
    const school = await instructorGroup.get('school');
    return this.canChangeInSchool(school, 'CAN_DELETE_INSTRUCTOR_GROUPS');
  }
  async canCreateInstructorGroup(school) {
    return this.canChangeInSchool(school, 'CAN_CREATE_INSTRUCTOR_GROUPS');
  }
  async canUpdateInstructorGroupInSchool(school) {
    return this.canChangeInSchool(school, 'CAN_UPDATE_INSTRUCTOR_GROUPS');
  }
  async canDeleteInstructorGroupInSchool(school) {
    return this.canChangeInSchool(school, 'CAN_DELETE_INSTRUCTOR_GROUPS');
  }
  async canUpdateCurriculumInventoryReport(curriculumInventoryReport) {
    if (curriculumInventoryReport.belongsTo('export')?.id()) {
      return false;
    }

    const program = await curriculumInventoryReport.get('program');
    const school = await program.get('school');
    if (await this.canChangeInSchool(school, 'CAN_UPDATE_ALL_CURRICULUM_INVENTORY_REPORTS')) {
      return true;
    }

    const capability = 'CAN_UPDATE_THEIR_CURRICULUM_INVENTORY_REPORTS';
    const rolesToCheck = await this.permissionMatrix.getPermittedRoles(school, capability);
    const rolesInReport = await this.currentUser.getRolesInCurriculumInventoryReport(
      curriculumInventoryReport,
      rolesToCheck,
    );

    return this.permissionMatrix.hasPermission(school, capability, rolesInReport);
  }
  async canDeleteCurriculumInventoryReport(curriculumInventoryReport) {
    if (curriculumInventoryReport.belongsTo('export')?.id()) {
      return false;
    }

    const program = await curriculumInventoryReport.program;
    const school = await program.school;
    if (await this.canChangeInSchool(school, 'CAN_DELETE_ALL_CURRICULUM_INVENTORY_REPORTS')) {
      return true;
    }

    const capability = 'CAN_DELETE_THEIR_CURRICULUM_INVENTORY_REPORTS';
    const rolesToCheck = await this.permissionMatrix.getPermittedRoles(school, capability);
    const rolesInReport = await this.currentUser.getRolesInCurriculumInventoryReport(
      curriculumInventoryReport,
      rolesToCheck,
    );
    return this.permissionMatrix.hasPermission(school, capability, rolesInReport);
  }
  async canCreateCurriculumInventoryReport(school) {
    return this.canChangeInSchool(school, 'CAN_CREATE_CURRICULUM_INVENTORY_REPORTS');
  }
  async canUpdateLearnerGroup(learnerGroup) {
    const cohort = await learnerGroup.cohort;
    const programYear = await cohort.programYear;
    const program = await programYear.program;
    const school = await program.school;
    return this.canChangeInSchool(school, 'CAN_UPDATE_LEARNER_GROUPS');
  }
  async canDeleteLearnerGroup(learnerGroup) {
    const cohort = await learnerGroup.cohort;
    const programYear = await cohort.programYear;
    const program = await programYear.program;
    const school = await program.school;
    return this.canChangeInSchool(school, 'CAN_DELETE_LEARNER_GROUPS');
  }
  async canUpdateLearnerGroupInSchool(school) {
    return this.canChangeInSchool(school, 'CAN_UPDATE_LEARNER_GROUPS');
  }
  async canDeleteLearnerGroupInSchool(school) {
    return this.canChangeInSchool(school, 'CAN_DELETE_LEARNER_GROUPS');
  }
  async canCreateLearnerGroup(school) {
    return this.canChangeInSchool(school, 'CAN_CREATE_LEARNER_GROUPS');
  }
  async canUpdateUser(user) {
    const school = await user.get('school');
    return this.canChangeInSchool(school, 'CAN_UPDATE_USERS');
  }
  async canDeleteUser(user) {
    const school = await user.get('school');
    return this.canChangeInSchool(school, 'CAN_DELETE_USERS');
  }
  async canCreateUser(school) {
    return this.canChangeInSchool(school, 'CAN_CREATE_USERS');
  }
  async canUpdateUserInSchool(school) {
    return this.canChangeInSchool(school, 'CAN_UPDATE_USERS');
  }
}