before(function(Request $request) use ($app) { $app['firewall']->requireAuthentication(); }); /** * I got a selection of docs, which publications are available forthese docs ? */ $controllers->post('/requestavailable/', function(Application $app, Request $request) { $feeds = $app['EM']->getRepository('Alchemy\Phrasea\Model\Entities\Feed')->getAllForUser($app['authentication']->getUser()); $publishing = RecordsRequest::fromRequest($app, $request, true, array(), array('bas_chupub')); return $app['twig']->render('prod/actions/publish/publish.html.twig', array('publishing' => $publishing, 'feeds' => $feeds)); }); /** * I've selected a publication for my docs, let's publish them */ $controllers->post('/entry/create/', function(Application $app, Request $request) { $feed = $app['EM']->getRepository('Alchemy\Phrasea\Model\Entities\Feed')->find($request->request->get('feed_id')); if (null === $feed) { $app->abort(404, "Feed not found"); } $publisher = $app['EM']->getRepository('Alchemy\Phrasea\Model\Entities\FeedPublisher')->findOneBy(array('feed' => $feed, 'usrId' => $app['authentication']->getUser()->get_id())); if ('' === $title = trim($request->request->get('title', ''))) { $app->abort(400, "Bad request"); } if (!$feed->isPublisher($app['authentication']->getUser())) { $app->abort(403, 'Unathorized action'); } $entry = new FeedEntry(); $entry->setAuthorEmail($request->request->get('author_mail')) ->setAuthorName($request->request->get('author_name')) ->setTitle($title) ->setFeed($feed) ->setPublisher($publisher) ->setSubtitle($request->request->get('subtitle', '')); $feed->addEntry($entry); $publishing = RecordsRequest::fromRequest($app, $request, true, array(), array('bas_chupub')); foreach ($publishing as $record) { $item = new FeedItem(); $item->setEntry($entry) ->setRecordId($record->get_record_id()) ->setSbasId($record->get_sbas_id()); $entry->addItem($item); $app['EM']->persist($item); } $app['EM']->persist($entry); $app['EM']->persist($feed); $app['EM']->flush(); $app['events-manager']->trigger('__FEED_ENTRY_CREATE__', array('entry_id' => $entry->getId(), 'notify_email' => (Boolean) $request->request->get('notify')), $entry); $datas = array('error' => false, 'message' => false); return $app->json($datas); }) ->bind('prod_feeds_entry_create') ->before(function(Request $request) use ($app) { $app['firewall']->requireRight('bas_chupub'); }); $controllers->get('/entry/{id}/edit/', function(Application $app, Request $request, $id) { $entry = $app['EM']->getRepository('Alchemy\Phrasea\Model\Entities\FeedEntry')->find($id); if (!$entry->isPublisher($app['authentication']->getUser())) { throw new AccessDeniedHttpException(); } $feeds = $app['EM']->getRepository('Alchemy\Phrasea\Model\Entities\Feed')->getAllForUser($app['authentication']->getUser()); $datas = $app['twig']->render('prod/actions/publish/publish_edit.html.twig', array('entry' => $entry, 'feeds' => $feeds)); return new Response($datas); }) ->bind('feed_entry_edit') ->assert('id', '\d+') ->before(function(Request $request) use ($app) { $app['firewall']->requireRight('bas_chupub'); }); $controllers->post('/entry/{id}/update/', function(Application $app, Request $request, $id) { $datas = array('error' => true, 'message' => '', 'datas' => ''); $entry = $app['EM']->getRepository('Alchemy\Phrasea\Model\Entities\FeedEntry')->find($id); if (null === $entry) { $app->abort(404, 'Entry not found'); } if (!$entry->isPublisher($app['authentication']->getUser())) { $app->abort(403, 'Unathorized action'); } if ('' === $title = trim($request->request->get('title', ''))) { $app->abort(400, "Bad request"); } $entry->setAuthorEmail($request->request->get('author_mail')) ->setAuthorName($request->request->get('author_name')) ->setTitle($title) ->setSubtitle($request->request->get('subtitle', '')); $currentFeedId = $entry->getFeed()->getId(); $new_feed_id = $request->request->get('feed_id', $currentFeedId); if ($currentFeedId !== (int) $new_feed_id) { $new_feed = $app['EM']->getRepository('Alchemy\Phrasea\Model\Entities\Feed')->find($new_feed_id); if ($new_feed === null) { $app->abort(404, 'Feed not found'); } if (!$new_feed->isPublisher($app['authentication']->getUser())) { $app->abort(403, 'You are not publisher of this feed'); } $entry->setFeed($new_feed); } $items = explode(';', $request->request->get('sorted_lst')); foreach ($items as $item_sort) { $item_sort_datas = explode('_', $item_sort); if (count($item_sort_datas) != 2) { continue; } $item = $app['EM']->getRepository('Alchemy\Phrasea\Model\Entities\FeedItem')->find($item_sort_datas[0]); $item->setOrd($item_sort_datas[1]); $app['EM']->persist($item); } $app['EM']->persist($entry); $app['EM']->flush(); return $app->json(array( 'error' => false, 'message' => 'succes', 'datas' => $app['twig']->render('prod/feeds/entry.html.twig', array( 'entry' => $entry )) )); }) ->bind('prod_feeds_entry_update') ->assert('id', '\d+')->before(function(Request $request) use ($app) { $app['firewall']->requireRight('bas_chupub'); }); $controllers->post('/entry/{id}/delete/', function(Application $app, Request $request, $id) { $datas = array('error' => true, 'message' => ''); $entry = $app['EM']->getRepository('Alchemy\Phrasea\Model\Entities\FeedEntry')->find($id); if (null === $entry) { $app->abort(404, 'Entry not found'); } if (!$entry->isPublisher($app['authentication']->getUser()) && $entry->getFeed()->isOwner($app['authentication']->getUser()) === false) { $app->abort(403, _('Action Forbidden : You are not the publisher')); } $app['EM']->remove($entry); $app['EM']->flush(); return $app->json(array('error' => false, 'message' => 'succes')); }) ->bind('prod_feeds_entry_delete') ->assert('id', '\d+')->before(function(Request $request) use ($app) { $app['firewall']->requireRight('bas_chupub'); }); $controllers->get('/', function(Application $app, Request $request) { $request = $app['request']; $page = (int) $request->query->get('page'); $page = $page > 0 ? $page : 1; $feeds = $app['EM']->getRepository('Alchemy\Phrasea\Model\Entities\Feed')->getAllForUser($app['authentication']->getUser()); $datas = $app['twig']->render('prod/feeds/feeds.html.twig', array( 'feeds' => $feeds, 'feed' => new Aggregate($app['EM'], $feeds), 'page' => $page )); return new Response($datas); })->bind('prod_feeds'); $controllers->get('/feed/{id}/', function(Application $app, Request $request, $id) { $page = (int) $request->query->get('page'); $page = $page > 0 ? $page : 1; $feed = $app['EM']->getRepository('Alchemy\Phrasea\Model\Entities\Feed')->find($id); if (!$feed->isAccessible($app['authentication']->getUser(), $app)) { $app->abort(404, 'Feed not found'); } $feeds = $app['EM']->getRepository('Alchemy\Phrasea\Model\Entities\Feed')->getAllForUser($app['authentication']->getUser()); $datas = $app['twig']->render('prod/feeds/feeds.html.twig', array('feed' => $feed, 'feeds' => $feeds, 'page' => $page)); return new Response($datas); }) ->bind('prod_feeds_feed') ->assert('id', '\d+'); $controllers->get('/subscribe/aggregated/', function(Application $app, Request $request) { $renew = ($request->query->get('renew') === 'true'); $feeds = $app['EM']->getRepository('Alchemy\Phrasea\Model\Entities\Feed')->getAllForUser($app['authentication']->getUser()); $link = $app['feed.aggregate-link-generator']->generate(new Aggregate($app['EM'], $feeds), $app['authentication']->getUser(), AggregateLinkGenerator::FORMAT_RSS, null, $renew ); $output = array( 'texte' => '

' . _('publication::Voici votre fil RSS personnel. Il vous permettra d\'etre tenu au courrant des publications.') . '

' . _('publications::Ne le partagez pas, il est strictement confidentiel') . '

', 'titre' => _('publications::votre rss personnel') ); return $app->json($output); })->bind('prod_feeds_subscribe_aggregated'); $controllers->get('/subscribe/{id}/', function(Application $app, Request $request, $id) { $renew = ($request->query->get('renew') === 'true'); $feed = $app['EM']->getRepository('Alchemy\Phrasea\Model\Entities\Feed')->find($id); if (!$feed->isAccessible($app['authentication']->getUser(), $app)) { $app->abort(404, 'Feed not found'); } $link = $app['feed.user-link-generator']->generate($feed, $app['authentication']->getUser(), FeedLinkGenerator::FORMAT_RSS, null, $renew); $output = array( 'texte' => '

' . _('publication::Voici votre fil RSS personnel. Il vous permettra d\'etre tenu au courrant des publications.') . '

' . _('publications::Ne le partagez pas, il est strictement confidentiel') . '

', 'titre' => _('publications::votre rss personnel') ); return $app->json($output); }) ->bind('prod_feeds_subscribe_feed') ->assert('id', '\d+'); return $controllers; } }