fs
da0abc824a
New Updates page in the Helpdesk module that fetches UPDATE/UPDATE-HF tickets from Business Central (PBI_LV_Tickets) and allows assigning a domain and Gitea link via a dialog. Ticket status (from BC) and assignment status (local) are shown as separate columns with filters for both plus type and free-text search. Assigned updates also appear on the domain detail page. Includes session-cached BC fetch with refresh button, admin permissions, migration, and 16 unit tests. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
83 lines
4.1 KiB
PHP
83 lines
4.1 KiB
PHP
<?php
|
|
|
|
namespace MintyPHP\Module\Helpdesk;
|
|
|
|
use MintyPHP\Service\Access\AuthorizationDecision;
|
|
use MintyPHP\Service\Access\AuthorizationPolicyInterface;
|
|
use MintyPHP\Service\Access\PermissionService;
|
|
|
|
final class HelpdeskAuthorizationPolicy implements AuthorizationPolicyInterface
|
|
{
|
|
public const ABILITY_ACCESS = 'helpdesk.access';
|
|
public const ABILITY_SETTINGS_MANAGE = 'helpdesk.settings.manage';
|
|
public const ABILITY_TEAM_WORKLOAD = 'helpdesk.team-workload.view';
|
|
public const ABILITY_RISK_RADAR = 'helpdesk.risk-radar.view';
|
|
public const ABILITY_SOFTWARE_PRODUCTS_MANAGE = 'helpdesk.software-products.manage';
|
|
public const ABILITY_HANDOVERS_VIEW = 'helpdesk.handovers.view';
|
|
public const ABILITY_HANDOVERS_CREATE = 'helpdesk.handovers.create';
|
|
public const ABILITY_HANDOVERS_MANAGE = 'helpdesk.handovers.manage';
|
|
/** @api Used in pages/helpdesk/updates action files */
|
|
public const ABILITY_UPDATES_VIEW = 'helpdesk.updates.view';
|
|
/** @api Used in pages/helpdesk/updates action files */
|
|
public const ABILITY_UPDATES_MANAGE = 'helpdesk.updates.manage';
|
|
|
|
public const PERMISSION_ACCESS = 'helpdesk.access';
|
|
public const PERMISSION_SETTINGS_MANAGE = 'helpdesk.settings.manage';
|
|
public const PERMISSION_TEAM_WORKLOAD = 'helpdesk.team-workload.view';
|
|
public const PERMISSION_RISK_RADAR = 'helpdesk.risk-radar.view';
|
|
/** @api Used in authorize() match for ability resolution */
|
|
public const PERMISSION_SOFTWARE_PRODUCTS_MANAGE = 'helpdesk.software-products.manage';
|
|
/** @api Used in authorize() match for ability resolution */
|
|
public const PERMISSION_HANDOVERS_VIEW = 'helpdesk.handovers.view';
|
|
/** @api Used in authorize() match for ability resolution */
|
|
public const PERMISSION_HANDOVERS_CREATE = 'helpdesk.handovers.create';
|
|
/** @api Used in authorize() match for ability resolution */
|
|
public const PERMISSION_HANDOVERS_MANAGE = 'helpdesk.handovers.manage';
|
|
/** @api Used in authorize() match */
|
|
public const PERMISSION_UPDATES_VIEW = 'helpdesk.updates.view';
|
|
/** @api Used in authorize() match */
|
|
public const PERMISSION_UPDATES_MANAGE = 'helpdesk.updates.manage';
|
|
|
|
public function __construct(
|
|
private readonly PermissionService $permissionService
|
|
) {
|
|
}
|
|
|
|
public function supports(string $ability): bool
|
|
{
|
|
return in_array($ability, [self::ABILITY_ACCESS, self::ABILITY_SETTINGS_MANAGE, self::ABILITY_TEAM_WORKLOAD, self::ABILITY_RISK_RADAR, self::ABILITY_SOFTWARE_PRODUCTS_MANAGE, self::ABILITY_HANDOVERS_VIEW, self::ABILITY_HANDOVERS_CREATE, self::ABILITY_HANDOVERS_MANAGE, self::ABILITY_UPDATES_VIEW, self::ABILITY_UPDATES_MANAGE], true);
|
|
}
|
|
|
|
public function authorize(string $ability, array $context = []): AuthorizationDecision
|
|
{
|
|
$actorUserId = (int) ($context['actor_user_id'] ?? 0);
|
|
if ($actorUserId <= 0) {
|
|
return AuthorizationDecision::deny(403, 'forbidden');
|
|
}
|
|
|
|
$permissionKey = match ($ability) {
|
|
self::ABILITY_ACCESS => self::PERMISSION_ACCESS,
|
|
self::ABILITY_SETTINGS_MANAGE => self::PERMISSION_SETTINGS_MANAGE,
|
|
self::ABILITY_TEAM_WORKLOAD => self::PERMISSION_TEAM_WORKLOAD,
|
|
self::ABILITY_RISK_RADAR => self::PERMISSION_RISK_RADAR,
|
|
self::ABILITY_SOFTWARE_PRODUCTS_MANAGE => self::PERMISSION_SOFTWARE_PRODUCTS_MANAGE,
|
|
self::ABILITY_HANDOVERS_VIEW => self::PERMISSION_HANDOVERS_VIEW,
|
|
self::ABILITY_HANDOVERS_CREATE => self::PERMISSION_HANDOVERS_CREATE,
|
|
self::ABILITY_HANDOVERS_MANAGE => self::PERMISSION_HANDOVERS_MANAGE,
|
|
self::ABILITY_UPDATES_VIEW => self::PERMISSION_UPDATES_VIEW,
|
|
self::ABILITY_UPDATES_MANAGE => self::PERMISSION_UPDATES_MANAGE,
|
|
default => null,
|
|
};
|
|
|
|
if ($permissionKey === null) {
|
|
return AuthorizationDecision::deny(403, 'forbidden');
|
|
}
|
|
|
|
if (!$this->permissionService->userHas($actorUserId, $permissionKey)) {
|
|
return AuthorizationDecision::deny(403, 'forbidden');
|
|
}
|
|
|
|
return AuthorizationDecision::allow();
|
|
}
|
|
}
|