Fix controllers tests

2025-10-18 07:23:13 +00:00 · 2012-09-19 11:39:00 +02:00
parent ba3ea5d948
commit 8952b66d0a
14 changed files with 326 additions and 93 deletions
--- a/lib/Alchemy/Phrasea/Controller/Datafiles.php
+++ b/lib/Alchemy/Phrasea/Controller/Datafiles.php
@@ -0,0 +1,98 @@
+<?php
+
+/*
+ * This file is part of Phraseanet
+ *
+ * (c) 2005-2012 Alchemy
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Alchemy\Phrasea\Controller;
+
+use Alchemy\Phrasea\Application as PhraseaApplication;
+use Silex\Application;
+
+/**
+ *
+ * @license     http://opensource.org/licenses/gpl-3.0 GPLv3
+ * @link        www.phraseanet.com
+ */
+class Datafiles extends AbstractDelivery
+{
+
+    public function connect(Application $app)
+    {
+        $controllers = $app['controllers_factory'];
+
+        $that = $this;
+
+        $controllers->get('/{sbas_id}/{record_id}/{subdef}/', function($sbas_id, $record_id, $subdef, PhraseaApplication $app) use ($that) {
+
+                $databox = $app['phraseanet.appbox']->get_databox((int) $sbas_id);
+                $record = new \record_adapter($app, $sbas_id, $record_id);
+
+                if (!$app['phraseanet.session']->is_authenticated()) {
+                    throw new \Exception_Session_NotAuthenticated();
+                }
+
+                $all_access = false;
+                $subdefStruct = $databox->get_subdef_structure();
+
+                if ($subdefStruct->getSubdefGroup($record->get_type())) {
+                    foreach ($subdefStruct->getSubdefGroup($record->get_type()) as $subdefObj) {
+                        if ($subdefObj->get_name() == $subdef) {
+                            if ($subdefObj->get_class() == 'thumbnail') {
+                                $all_access = true;
+                            }
+                            break;
+                        }
+                    }
+                }
+
+                $user = $app['phraseanet.user'];
+
+                if (!$user->ACL()->has_access_to_subdef($record, $subdef)) {
+                    throw new \Exception_UnauthorizedAction();
+                }
+
+                $stamp = false;
+                $watermark = !$user->ACL()->has_right_on_base($record->get_base_id(), 'nowatermark');
+
+                if ($watermark && !$all_access) {
+                    $subdef_class = $databox
+                        ->get_subdef_structure()
+                        ->get_subdef($record->get_type(), $subdef)
+                        ->get_class();
+
+                    if ($subdef_class == \databox_subdef::CLASS_PREVIEW && $user->ACL()->has_preview_grant($record)) {
+                        $watermark = false;
+                    } elseif ($subdef_class == \databox_subdef::CLASS_DOCUMENT && $user->ACL()->has_hd_grant($record)) {
+                        $watermark = false;
+                    }
+                }
+
+                if ($watermark && !$all_access) {
+
+                    $repository = $app['EM']->getRepository('\Entities\BasketElement');
+
+                    /* @var $repository \Repositories\BasketElementRepository */
+
+                    $ValidationByRecord = $repository->findReceivedValidationElementsByRecord($record, $user);
+                    $ReceptionByRecord = $repository->findReceivedElementsByRecord($record, $user);
+
+                    if ($ValidationByRecord && count($ValidationByRecord) > 0) {
+                        $watermark = false;
+                    } elseif ($ReceptionByRecord && count($ReceptionByRecord) > 0) {
+                        $watermark = false;
+                    }
+                }
+
+                return $that->deliverContent($app['request'], $app['phraseanet.session'], $record, $subdef, $watermark, $stamp, $app);
+            })->assert('sbas_id', '\d+')->assert('record_id', '\d+');
+
+
+        return $controllers;
+    }
+}