social_lms_integrator-1.0.0-beta4/modules/social_lms_integrator_iteration_invite/src/SocialLMSIntegratorIterationInviteAccessHelper.php

<?php

namespace Drupal\social_lms_integrator_iteration_invite;

use Drupal\Core\Access\AccessResult;
use Drupal\Core\Config\ConfigFactoryInterface;
use Drupal\Core\Entity\EntityTypeManagerInterface;
use Drupal\Core\Routing\RouteMatchInterface;
use Drupal\Core\Session\AccountProxyInterface;
use Drupal\node\Entity\Node;
use Drupal\node\NodeInterface;
use Drupal\social_group\SocialGroupHelperService;
use Drupal\user\Entity\User;
use Drupal\user\UserInterface;

/**
 * Class SocialLMSIntegratorIterationInviteAccessHelper.
 *
 * @package Drupal\social_lms_integrator_iteration_invite\Access
 */
class SocialLMSIntegratorIterationInviteAccessHelper {

  /**
   * The route match.
   *
   * @var \Drupal\Core\Routing\RouteMatchInterface
   */
  protected $routeMatch;

  /**
   * Configuration factory.
   *
   * @var \Drupal\Core\Config\ConfigFactoryInterface
   */
  protected $configFactory;

  /**
   * Group helper service.
   *
   * @var \Drupal\social_group\SocialGroupHelperService
   */
  protected $groupHelperService;

  /**
   * Entity type manager.
   *
   * @var \Drupal\Core\Entity\EntityTypeManagerInterface
   */
  protected $entityTypeManager;

  /**
   * The current user.
   *
   * @var \Drupal\Core\Session\AccountProxyInterface
   */
  protected $currentUser;

  /**
   * SocialLMSIntegratorIterationInvitesAccess constructor.
   *
   * @param \Drupal\Core\Routing\RouteMatchInterface $routeMatch
   *   The route match.
   * @param \Drupal\Core\Config\ConfigFactoryInterface $configFactory
   *   Configuration factory.
   * @param \Drupal\social_group\SocialGroupHelperService $groupHelperService
   *   The group helper service.
   * @param \Drupal\Core\Entity\EntityTypeManagerInterface $entityTypeManager
   *   The entity type manager.
   * @param \Drupal\Core\Session\AccountProxyInterface $currentUser
   *   The current user.
   */
  public function __construct(RouteMatchInterface $routeMatch, ConfigFactoryInterface $configFactory, SocialGroupHelperService $groupHelperService, EntityTypeManagerInterface $entityTypeManager, AccountProxyInterface $currentUser) {
    $this->routeMatch = $routeMatch;
    $this->configFactory = $configFactory;
    $this->groupHelperService = $groupHelperService;
    $this->entityTypeManager = $entityTypeManager;
    $this->currentUser = $currentUser;
  }

  /**
   * Custom access check for the iteration invite features for iteration managers.
   *
   * @return \Drupal\Core\Access\AccessResult
   *   Returns the access result.
   *
   * @throws \Drupal\Component\Plugin\Exception\InvalidPluginDefinitionException
   * @throws \Drupal\Component\Plugin\Exception\PluginNotFoundException
   */
  public function iterationFeatureAccess() {
    $config = $this->configFactory->get('social_lms_integrator.settings');

    
    // Get the group of this node.
    $node = $this->routeMatch->getRawParameter('node');
    $node = Node::load($node);
    if ($node instanceof NodeInterface) {
      $node = $node->id();
    }
    $gid_from_entity = $this->groupHelperService->getGroupFromEntity([
      'target_type' => 'node',
      'target_id' => $node,
    ]);

    // If we have a group we need to additional checks.
    if ($gid_from_entity !== NULL) {
      /** @var \Drupal\group\Entity\GroupInterface $group */
      $group = $this->entityTypeManager
        ->getStorage('group')
        ->load($gid_from_entity);

      $enabled_for_group = $config->get('social_lms_integrator_group_types');
      $enabled = FALSE;
      if (is_array($enabled_for_group)) {
        foreach ($enabled_for_group as $group_type) {
          if ($group_type === $group->bundle()) {
            $enabled = TRUE;
            break;
          }
        }
      }


      // If it's not enabled for the group this iteration belongs to,
      // we don't want to show the block.
      if (!$enabled) {
        return AccessResult::forbidden();
      }
    }

    // If the user is not an iteration owner or organizer don't give access.
    // @todo can be combined with the next check into a service.
    if (!social_lms_integrator_enrollment_iteration_manager_or_organizer()) {
      return AccessResult::forbidden();
    }

    // If we've got this far we can be sure the user is allowed to see this
    // block.
    // @todo move that function to a service.
    return AccessResult::allowedIf(social_lms_integrator_enrollment_iteration_manager_or_organizer());
  }

  /**
   * Custom access check for the user invite overview.
   *
   * @return \Drupal\Core\Access\AccessResult
   *   Returns the access result.
   */
  public function userInviteAccess() {
    $config = $this->configFactory->get('social_lms_integrator_iteration_invite.settings');
    
    // If it's globally disabled, we don't want to show the block.
    //if (!$enabled_global) {
      //return AccessResult::forbidden();
    //}

    // Get the user.
    $account = $this->routeMatch->getRawParameter('user');
    if (!empty($account)) {
      $account = User::load($account);
      if ($account instanceof UserInterface) {
        return AccessResult::allowedIf($account->id() === $this->currentUser->id());
      }
    }

    return AccessResult::neutral();
  }

}