128 lines
4.2 KiB
PHP
128 lines
4.2 KiB
PHP
<?php
|
|
|
|
/*
|
|
* This file is part of the Kimai time-tracking app.
|
|
*
|
|
* For the full copyright and license information, please view the LICENSE
|
|
* file that was distributed with this source code.
|
|
*/
|
|
|
|
namespace App\Validator\Constraints;
|
|
|
|
use App\Configuration\TimesheetConfiguration;
|
|
use App\Entity\Timesheet as TimesheetEntity;
|
|
use Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface;
|
|
use Symfony\Component\Validator\Constraint;
|
|
use Symfony\Component\Validator\ConstraintValidator;
|
|
use Symfony\Component\Validator\Exception\UnexpectedTypeException;
|
|
|
|
final class TimesheetLockdownValidator extends ConstraintValidator
|
|
{
|
|
/**
|
|
* @var AuthorizationCheckerInterface
|
|
*/
|
|
private $auth;
|
|
/**
|
|
* @var TimesheetConfiguration
|
|
*/
|
|
private $configuration;
|
|
|
|
public function __construct(AuthorizationCheckerInterface $auth, TimesheetConfiguration $configuration)
|
|
{
|
|
$this->auth = $auth;
|
|
$this->configuration = $configuration;
|
|
}
|
|
|
|
/**
|
|
* @param TimesheetEntity $timesheet
|
|
* @param Constraint $constraint
|
|
*/
|
|
public function validate($timesheet, Constraint $constraint)
|
|
{
|
|
if (!($constraint instanceof TimesheetLockdown)) {
|
|
throw new UnexpectedTypeException($constraint, TimesheetLockdown::class);
|
|
}
|
|
|
|
if (!\is_object($timesheet) || !($timesheet instanceof TimesheetEntity)) {
|
|
throw new UnexpectedTypeException($timesheet, TimesheetEntity::class);
|
|
}
|
|
|
|
$timesheetStart = $timesheet->getBegin();
|
|
|
|
if (null === $timesheetStart) {
|
|
return;
|
|
}
|
|
|
|
if (!$this->configuration->isLockdownActive()) {
|
|
return;
|
|
}
|
|
|
|
$lockedStart = $this->configuration->getLockdownPeriodStart();
|
|
$lockedEnd = $this->configuration->getLockdownPeriodEnd();
|
|
|
|
$gracePeriod = $this->configuration->getLockdownGracePeriod();
|
|
if (!empty($gracePeriod)) {
|
|
$gracePeriod = $gracePeriod . ' ';
|
|
}
|
|
|
|
try {
|
|
$lockdownStart = new \DateTime($lockedStart, $timesheetStart->getTimezone());
|
|
$lockdownEnd = new \DateTime($lockedEnd, $timesheetStart->getTimezone());
|
|
$lockdownGrace = new \DateTime($gracePeriod . $lockdownEnd->format('Y-m-d'), $timesheetStart->getTimezone());
|
|
} catch (\Exception $ex) {
|
|
// should not happen, but ... if parsing of datetimes fails: skip validation
|
|
return;
|
|
}
|
|
|
|
// misconfiguration detected, skip validation
|
|
if ($lockdownEnd < $lockdownStart) {
|
|
return;
|
|
}
|
|
|
|
// validate only entries added before the end of lockdown period
|
|
if ($timesheetStart > $lockdownEnd) {
|
|
return;
|
|
}
|
|
|
|
// lockdown never takes effect for users with special permission
|
|
if ($this->auth->isGranted('lockdown_override_timesheet')) {
|
|
return;
|
|
}
|
|
|
|
if (!empty($constraint->now)) {
|
|
if ($constraint->now instanceof \DateTime) {
|
|
$now = $constraint->now;
|
|
} elseif (\is_string($constraint->now)) {
|
|
try {
|
|
$now = new \DateTime($constraint->now, $timesheetStart->getTimezone());
|
|
} catch (\Exception $ex) {
|
|
}
|
|
}
|
|
}
|
|
|
|
if (empty($now)) {
|
|
$now = new \DateTime('now', $timesheetStart->getTimezone());
|
|
}
|
|
|
|
// further validate entries inside of the most recent lockdown
|
|
if ($timesheetStart > $lockdownStart && $timesheetStart < $lockdownEnd) {
|
|
// if grace period is still in effect, validation succeeds
|
|
if ($now < $lockdownGrace) {
|
|
return;
|
|
}
|
|
|
|
// if user has special role, validation succeeds
|
|
if ($this->auth->isGranted('lockdown_grace_timesheet')) {
|
|
return;
|
|
}
|
|
}
|
|
|
|
// raise a violation for all entries before the start of lockdown period
|
|
$this->context->buildViolation('This period is locked, please choose a later date.')
|
|
->atPath('begin')
|
|
->setTranslationDomain('validators')
|
|
->setCode(TimesheetLockdown::PERIOD_LOCKED)
|
|
->addViolation();
|
|
}
|
|
}
|