350 lines
11 KiB
PHP
350 lines
11 KiB
PHP
<?php
|
|
|
|
/*
|
|
* This file is part of the 2amigos/yii2-usuario project.
|
|
*
|
|
* (c) 2amigOS! <http://2amigos.us/>
|
|
*
|
|
* For the full copyright and license information, please view
|
|
* the LICENSE file that was distributed with this source code.
|
|
*/
|
|
|
|
namespace Da\User\Controller;
|
|
|
|
use Da\User\Event\UserEvent;
|
|
use Da\User\Factory\MailFactory;
|
|
use Da\User\Filter\AccessRuleFilter;
|
|
use Da\User\Model\Profile;
|
|
use Da\User\Model\User;
|
|
use Da\User\Query\UserQuery;
|
|
use Da\User\Search\UserSearch;
|
|
use Da\User\Service\PasswordExpireService;
|
|
use Da\User\Service\PasswordRecoveryService;
|
|
use Da\User\Service\SwitchIdentityService;
|
|
use Da\User\Service\UserBlockService;
|
|
use Da\User\Service\UserConfirmationService;
|
|
use Da\User\Service\UserCreateService;
|
|
use Da\User\Traits\ContainerAwareTrait;
|
|
use Da\User\Traits\ModuleAwareTrait;
|
|
use Da\User\Validator\AjaxRequestModelValidator;
|
|
use Yii;
|
|
use yii\base\Module;
|
|
use yii\db\ActiveRecord;
|
|
use yii\filters\AccessControl;
|
|
use yii\filters\VerbFilter;
|
|
use yii\helpers\Url;
|
|
use yii\web\Controller;
|
|
|
|
class AdminController extends Controller
|
|
{
|
|
use ContainerAwareTrait;
|
|
use ModuleAwareTrait;
|
|
|
|
/**
|
|
* @var UserQuery
|
|
*/
|
|
protected $userQuery;
|
|
|
|
/**
|
|
* AdminController constructor.
|
|
*
|
|
* @param string $id
|
|
* @param Module $module
|
|
* @param UserQuery $userQuery
|
|
* @param array $config
|
|
*/
|
|
public function __construct($id, Module $module, UserQuery $userQuery, array $config = [])
|
|
{
|
|
$this->userQuery = $userQuery;
|
|
parent::__construct($id, $module, $config);
|
|
}
|
|
|
|
/**
|
|
* @param \yii\base\Action $action
|
|
*
|
|
* @return bool
|
|
*/
|
|
public function beforeAction($action)
|
|
{
|
|
if (in_array($action->id, ['index', 'update', 'update-profile', 'info', 'assignments'], true)) {
|
|
Url::remember('', 'actions-redirect');
|
|
}
|
|
|
|
return parent::beforeAction($action);
|
|
}
|
|
|
|
/**
|
|
* {@inheritdoc}
|
|
*/
|
|
public function behaviors()
|
|
{
|
|
return [
|
|
'verbs' => [
|
|
'class' => VerbFilter::class,
|
|
'actions' => [
|
|
'delete' => ['post'],
|
|
'confirm' => ['post'],
|
|
'block' => ['post'],
|
|
'switch-identity' => ['post'],
|
|
'password-reset' => ['post'],
|
|
'force-password-change' => ['post'],
|
|
],
|
|
],
|
|
'access' => [
|
|
'class' => AccessControl::class,
|
|
'ruleConfig' => [
|
|
'class' => AccessRuleFilter::class,
|
|
],
|
|
'rules' => [
|
|
[
|
|
'allow' => true,
|
|
'actions' => ['switch-identity'],
|
|
'roles' => ['@'],
|
|
],
|
|
[
|
|
'allow' => true,
|
|
'roles' => ['admin'],
|
|
],
|
|
],
|
|
],
|
|
];
|
|
}
|
|
|
|
public function actionIndex()
|
|
{
|
|
$searchModel = $this->make(UserSearch::class);
|
|
$dataProvider = $searchModel->search(Yii::$app->request->get());
|
|
|
|
return $this->render(
|
|
'index',
|
|
[
|
|
'dataProvider' => $dataProvider,
|
|
'searchModel' => $searchModel,
|
|
]
|
|
);
|
|
}
|
|
|
|
public function actionCreate()
|
|
{
|
|
/** @var User $user */
|
|
$user = $this->make(User::class, [], ['scenario' => 'create']);
|
|
|
|
/** @var UserEvent $event */
|
|
$event = $this->make(UserEvent::class, [$user]);
|
|
|
|
$this->make(AjaxRequestModelValidator::class, [$user])->validate();
|
|
|
|
if ($user->load(Yii::$app->request->post()) && $user->validate()) {
|
|
$this->trigger(UserEvent::EVENT_BEFORE_CREATE, $event);
|
|
|
|
$mailService = MailFactory::makeWelcomeMailerService($user);
|
|
|
|
if ($this->make(UserCreateService::class, [$user, $mailService])->run()) {
|
|
Yii::$app->getSession()->setFlash('success', Yii::t('usuario', 'User has been created'));
|
|
$this->trigger(UserEvent::EVENT_AFTER_CREATE, $event);
|
|
return $this->redirect(['update', 'id' => $user->id]);
|
|
}
|
|
Yii::$app->session->setFlash('danger', Yii::t('usuario', 'User account could not be created.'));
|
|
}
|
|
|
|
return $this->render('create', ['user' => $user]);
|
|
}
|
|
|
|
public function actionUpdate($id)
|
|
{
|
|
$user = $this->userQuery->where(['id' => $id])->one();
|
|
$user->setScenario('update');
|
|
/** @var UserEvent $event */
|
|
$event = $this->make(UserEvent::class, [$user]);
|
|
|
|
$this->make(AjaxRequestModelValidator::class, [$user])->validate();
|
|
|
|
if ($user->load(Yii::$app->request->post())) {
|
|
$this->trigger(UserEvent::EVENT_BEFORE_ACCOUNT_UPDATE, $event);
|
|
|
|
if ($user->save()) {
|
|
Yii::$app->getSession()->setFlash('success', Yii::t('usuario', 'Account details have been updated'));
|
|
$this->trigger(UserEvent::EVENT_AFTER_ACCOUNT_UPDATE, $event);
|
|
|
|
return $this->refresh();
|
|
}
|
|
}
|
|
|
|
return $this->render('_account', ['user' => $user]);
|
|
}
|
|
|
|
public function actionUpdateProfile($id)
|
|
{
|
|
/** @var User $user */
|
|
$user = $this->userQuery->where(['id' => $id])->one();
|
|
/** @var Profile $profile */
|
|
$profile = $user->profile;
|
|
if ($profile === null) {
|
|
$profile = $this->make(Profile::class);
|
|
$profile->link('user', $user);
|
|
}
|
|
/** @var UserEvent $event */
|
|
$event = $this->make(UserEvent::class, [$user]);
|
|
|
|
$this->make(AjaxRequestModelValidator::class, [$profile])->validate();
|
|
|
|
if ($profile->load(Yii::$app->request->post())) {
|
|
if ($profile->save()) {
|
|
$this->trigger(UserEvent::EVENT_BEFORE_PROFILE_UPDATE, $event);
|
|
Yii::$app->getSession()->setFlash('success', Yii::t('usuario', 'Profile details have been updated'));
|
|
$this->trigger(UserEvent::EVENT_AFTER_PROFILE_UPDATE, $event);
|
|
|
|
return $this->refresh();
|
|
}
|
|
}
|
|
|
|
return $this->render(
|
|
'_profile',
|
|
[
|
|
'user' => $user,
|
|
'profile' => $profile,
|
|
]
|
|
);
|
|
}
|
|
|
|
public function actionInfo($id)
|
|
{
|
|
/** @var User $user */
|
|
$user = $this->userQuery->where(['id' => $id])->one();
|
|
|
|
return $this->render(
|
|
'_info',
|
|
[
|
|
'user' => $user,
|
|
]
|
|
);
|
|
}
|
|
|
|
public function actionAssignments($id)
|
|
{
|
|
/** @var User $user */
|
|
$user = $this->userQuery->where(['id' => $id])->one();
|
|
|
|
return $this->render(
|
|
'_assignments',
|
|
[
|
|
'user' => $user,
|
|
'params' => Yii::$app->request->post(),
|
|
]
|
|
);
|
|
}
|
|
|
|
public function actionConfirm($id)
|
|
{
|
|
/** @var User $user */
|
|
$user = $this->userQuery->where(['id' => $id])->one();
|
|
/** @var UserEvent $event */
|
|
$event = $this->make(UserEvent::class, [$user]);
|
|
|
|
$this->trigger(UserEvent::EVENT_BEFORE_CONFIRMATION, $event);
|
|
|
|
if ($this->make(UserConfirmationService::class, [$user])->run()) {
|
|
Yii::$app->getSession()->setFlash('success', Yii::t('usuario', 'User has been confirmed'));
|
|
$this->trigger(UserEvent::EVENT_AFTER_CONFIRMATION, $event);
|
|
} else {
|
|
Yii::$app->getSession()->setFlash(
|
|
'warning',
|
|
Yii::t('usuario', 'Unable to confirm user. Please, try again.')
|
|
);
|
|
}
|
|
|
|
return $this->redirect(Url::previous('actions-redirect'));
|
|
}
|
|
|
|
public function actionDelete($id)
|
|
{
|
|
if ((int)$id === Yii::$app->user->getId()) {
|
|
Yii::$app->getSession()->setFlash('danger', Yii::t('usuario', 'You cannot remove your own account'));
|
|
} else {
|
|
/** @var User $user */
|
|
$user = $this->userQuery->where(['id' => $id])->one();
|
|
/** @var UserEvent $event */
|
|
$event = $this->make(UserEvent::class, [$user]);
|
|
$this->trigger(ActiveRecord::EVENT_BEFORE_DELETE, $event);
|
|
|
|
if ($user->delete()) {
|
|
Yii::$app->getSession()->setFlash('success', Yii::t('usuario', 'User has been deleted'));
|
|
$this->trigger(ActiveRecord::EVENT_AFTER_DELETE, $event);
|
|
} else {
|
|
Yii::$app->getSession()->setFlash(
|
|
'warning',
|
|
Yii::t('usuario', 'Unable to delete user. Please, try again later.')
|
|
);
|
|
}
|
|
}
|
|
|
|
return $this->redirect(['index']);
|
|
}
|
|
|
|
public function actionBlock($id)
|
|
{
|
|
if ((int)$id === Yii::$app->user->getId()) {
|
|
Yii::$app->getSession()->setFlash('danger', Yii::t('usuario', 'You cannot remove your own account'));
|
|
} else {
|
|
/** @var User $user */
|
|
$user = $this->userQuery->where(['id' => $id])->one();
|
|
/** @var UserEvent $event */
|
|
$event = $this->make(UserEvent::class, [$user]);
|
|
|
|
if ($this->make(UserBlockService::class, [$user, $event, $this])->run()) {
|
|
Yii::$app->getSession()->setFlash('success', Yii::t('usuario', 'User block status has been updated.'));
|
|
} else {
|
|
Yii::$app->getSession()->setFlash('danger', Yii::t('usuario', 'Unable to update block status.'));
|
|
}
|
|
}
|
|
|
|
return $this->redirect(Url::previous('actions-redirect'));
|
|
}
|
|
|
|
public function actionSwitchIdentity($id = null)
|
|
{
|
|
if (false === $this->module->enableSwitchIdentities) {
|
|
Yii::$app->getSession()->setFlash('danger', Yii::t('usuario', 'Switch identities is disabled.'));
|
|
|
|
return $this->redirect(['index']);
|
|
}
|
|
|
|
$this->make(SwitchIdentityService::class, [$this, 2 => $id])->run();
|
|
|
|
return $this->goHome();
|
|
}
|
|
|
|
public function actionPasswordReset($id)
|
|
{
|
|
/** @var User $user */
|
|
$user = $this->userQuery->where(['id' => $id])->one();
|
|
$mailService = MailFactory::makeRecoveryMailerService($user->email);
|
|
if ($this->make(PasswordRecoveryService::class, [$user->email, $mailService])->run()) {
|
|
Yii::$app->getSession()->setFlash('success', Yii::t('usuario', 'Recovery message sent'));
|
|
} else {
|
|
Yii::$app->getSession()->setFlash(
|
|
'danger',
|
|
Yii::t('usuario', 'Unable to send recovery message to the user')
|
|
);
|
|
}
|
|
|
|
return $this->redirect(['index']);
|
|
}
|
|
|
|
/**
|
|
* Forces the user to change password at next login
|
|
* @param integer $id
|
|
*/
|
|
public function actionForcePasswordChange($id)
|
|
{
|
|
/** @var User $user */
|
|
$user = $this->userQuery->where(['id' => $id])->one();
|
|
if ($this->make(PasswordExpireService::class, [$user])->run()) {
|
|
Yii::$app->session->setFlash("success", Yii::t('usuario', 'User will be required to change password at next login'));
|
|
} else {
|
|
Yii::$app->session->setFlash("danger", Yii::t('usuario', 'There was an error in saving user'));
|
|
}
|
|
$this->redirect(['index']);
|
|
}
|
|
}
|