pulsarvp/vps-tools

<?php

    namespace vps\tools\modules\user\widgets;

    use vps\tools\helpers\ArrayHelper;
    use vps\tools\modules\user\forms\RoleForm;
    use Yii;
    use yii\base\Widget;
    use yii\data\SqlDataProvider;
    use yii\db\Query;
    use yii\rbac\Role;
    use yii\web\View;

    class RbacWidget extends Widget
    {
        /**
         * @inheritdoc
         */
        public function init ()
        {
            parent::init();
            $this->view = new View([
                'renderers' => [
                    'tpl' => [
                        'class'   => 'yii\smarty\ViewRenderer',
                        'imports' => [
                            'Html' => '\vps\tools\helpers\Html',
                            'Url'  => '\vps\tools\helpers\Url'
                        ],
                        'widgets' => [
                            'blocks' => [
                                'Form' => '\vps\tools\html\Form',
                            ]
                        ]
                    ]
                ]
            ]);
            Yii::$app->view->registerCss('#rbac-list .value {font-family: monospace; white-space: pre-wrap}');
        }

        /**
         * @inheritdoc
         */
        public function run ()
        {
            $userClass = Yii::$app->getModule('users')->modelUser;

            $query = $userClass::find()->select("user.*,(SELECT GROUP_CONCAT(item_name) from `auth_assignment` where `user`.`id`=`auth_assignment`.`user_id`) as rolesNames")->leftJoin('auth_assignment', '`auth_assignment`.`user_id` = `user`.`id`');
            $get = Yii::$app->request->get();
            $search = '';
            $filterRole = '';
            if (isset($get[ 'search' ]) and $get[ 'search' ] != '')
            {
                $query->andWhere([ 'or', [ 'like', 'user.id', $get[ 'search' ] ], [ 'like', 'user.email', $get[ 'search' ] ], [ 'like', 'user.name', $get[ 'search' ] ] ]);
                $search = $get[ 'search' ];
            }
            if (isset($get[ 'filterRole' ]) and $get[ 'filterRole' ] != '')
            {
                $query->andWhere([ '`auth_assignment`.`item_name`' => $get[ 'filterRole' ] ]);
                $filterRole = $get[ 'filterRole' ];
            }
            $query->groupBy('user.id');
            $provider = new SqlDataProvider([
                'sql'        => $query->createCommand()->rawSql,
                'totalCount' => $query->count(),
                'pagination' => [
                    'pageSize'       => 20,
                    'forcePageParam' => false,
                    'pageSizeParam'  => false,
                    'urlManager'     => new \yii\web\UrlManager([
                        'enablePrettyUrl' => true,
                        'showScriptName'  => false,
                    ])
                ],
                'sort'       => [
                    'attributes'   => [
                        'id',
                        'email',
                        'name',
                        'loginDT',
                        'activeDT',
                        'active'
                    ],
                    'defaultOrder' => [
                        'name' => SORT_ASC
                    ]
                ],
            ]);
            $roles = Yii::$app->authManager->getRoles();
            $data = [];
            foreach ($roles as $role)
            {
                $item = [
                    'name'             => $role->name,
                    'description'      => $role->description,
                    'ruleName'         => $role->ruleName,
                    'data'             => $role->data,
                    'childRoles'       => ArrayHelper::objectsAttribute(Yii::$app->authManager->getChildren($role->name), 'name'),
                    'childPermissions' => ArrayHelper::objectsAttribute(Yii::$app->authManager->getChildren($role->name), 'name'),
                    'fixed'            => $this->isFixed($role->name)
                ];
                $data[] = $item;
            }

            $permissions = Yii::$app->authManager->getPermissions();
            $rules = Yii::$app->authManager->getRules();

            return $this->renderFile('@rbacViews/index.tpl', [
                'title'       => Yii::tr('User manage', [], 'user'),
                'users'       => $provider->models,
                'pagination'  => $provider->pagination,
                'sort'        => $provider->sort,
                'roles'       => $data,
                'search'      => $search,
                'filterRole'  => $filterRole,
                'rules'       => $rules,
                'permissions' => $permissions,
                'roleForm'    => $this->addRole()
            ]);
        }

        /**
         * Is fixed role
         *
         * @param $name
         *
         * @return bool
         */
        private function isFixed ($name)
        {
            $row = ( new Query )->from(Yii::$app->authManager->itemTable)
                ->select('fixed')
                ->where([ 'name' => $name ])
                ->one(Yii::$app->db);

            return $row[ 'fixed' ];
        }

        /**
         * Add new role
         */
        private function addRole ()
        {
            $roleForm = new RoleForm();
            if (Yii::$app->request->getIsPost())
            {
                $roleForm->setAttributes(Yii::$app->request->post('RoleForm'));
                if ($roleForm->method == 'rbac-add')
                    $roleForm->setScenario(RoleForm::SCENARIO_ADD);

                if ($roleForm->validate())
                {
                    $this->saveRole($roleForm);
                    $url = Yii::$app->request->referrer . '#roles';
                    Yii::$app->response->redirect($url);
                }
            }

            return $roleForm;
        }

        /**
         * Save role
         *
         * @param RoleForm $roleForm
         * @param bool     $newFlag
         */
        private function saveRole ($roleForm)
        {

            $auth = Yii::$app->getAuthManager();
            $role = $auth->createRole($roleForm->name);
            $role->type = Role::TYPE_ROLE;
            $role->description = $roleForm->description;
            if (!empty($roleForm->ruleName))
                $role->ruleName = $roleForm->ruleName;
            $role->data = $roleForm->data;

            if ($roleForm->method == 'rbac-add')
                $auth->add($role);
            else
            {
                $auth->update($roleForm->method, $role);
                $auth->removeChildren($role);
            }

            if (is_array($roleForm->childRoles) and count($roleForm->childRoles) > 0)
                foreach ($roleForm->childRoles as $childRole)
                {
                    $child = $auth->getRole($childRole);
                    $auth->addChild($role, $child);
                }

            if (is_array($roleForm->childPermissions) and count($roleForm->childPermissions) > 0)
                foreach ($roleForm->childPermissions as $childPermission)
                {
                    $child = $auth->getPermission($childPermission);
                    $auth->addChild($role, $child);
                }
        }

    }