Phraseanet/lib/Alchemy/Phrasea/Controller/Admin/Publications.php

<?php

/*
 * This file is part of Phraseanet
 *
 * (c) 2005-2013 Alchemy
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */

namespace Alchemy\Phrasea\Controller\Admin;

use Alchemy\Phrasea\Application as PhraseaApplication;
use Silex\Application;
use Silex\ControllerProviderInterface;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpKernel\Exception\BadRequestHttpException;

/**
 *
 * @license     http://opensource.org/licenses/gpl-3.0 GPLv3
 * @link        www.phraseanet.com
 */
class Publications implements ControllerProviderInterface
{

    public function connect(Application $app)
    {
        $controllers = $app['controllers_factory'];

        $controllers->before(function(Request $request) use ($app) {
            $app['firewall']->requireAccessToModule('admin')
                ->requireRight('bas_chupub');
        });

        $controllers->get('/list/', function(PhraseaApplication $app) {

            $feeds = \Feed_Collection::load_all(
                    $app, $app['authentication']->getUser()
            );

            return $app['twig']
                    ->render('admin/publications/list.html.twig', array('feeds' => $feeds));
        })->bind('admin_feeds_list');

        $controllers->post('/create/', function(PhraseaApplication $app, Request $request) {

            $feed = \Feed_Adapter::create(
                    $app, $app['authentication']->getUser(), $request->request->get('title'), $request->request->get('subtitle')
            );

            if ($request->request->get('public') == '1') {
                $feed->set_public(true);
            } elseif ($request->request->get('base_id')) {
                $feed->set_collection(\collection::get_from_base_id($app, $request->request->get('base_id')));
            }

            return $app->redirectPath('admin_feeds_list');
        })->bind('admin_feeds_create');

        $controllers->get('/feed/{id}/', function(PhraseaApplication $app, Request $request, $id) {
            $feed = new \Feed_Adapter($app, $id);

            return $app['twig']
                    ->render('admin/publications/fiche.html.twig', array('feed'  => $feed, 'error' => $app['request']->query->get('error')));
        })
            ->bind('admin_feeds_feed')
            ->assert('id', '\d+');

        $controllers->post('/feed/{id}/update/', function(PhraseaApplication $app, Request $request, $id) {

            $feed = new \Feed_Adapter($app, $id);

            try {
                $collection = \collection::get_from_base_id($app, $request->request->get('base_id'));
            } catch (\Exception $e) {
                $collection = null;
            }

            $feed->set_title($request->request->get('title'));
            $feed->set_subtitle($request->request->get('subtitle'));
            $feed->set_collection($collection);
            $feed->set_public($request->request->get('public'));

            return $app->redirectPath('admin_feeds_list');
        })->before(function(Request $request) use ($app) {
            $feed = new \Feed_Adapter($app, $request->attributes->get('id'));

            if (!$feed->is_owner($app['authentication']->getUser())) {
                return $app->redirectPath('admin_feeds_feed', array('id' => $request->attributes->get('id'), 'error' =>  _('You are not the owner of this feed, you can not edit it')));
            }
        })
            ->bind('admin_feeds_feed_update')
            ->assert('id', '\d+');

        $controllers->post('/feed/{id}/iconupload/', function(PhraseaApplication $app, Request $request, $id) {
            $datas = array(
                'success' => false,
                'message' => '',
            );

            $feed = new \Feed_Adapter($app, $id);

            $request = $app["request"];

            if (!$feed->is_owner($app['authentication']->getUser())) {
                $datas['message'] = 'You are not allowed to do that';

                return $app->json($datas);
            }

            try {
                if (!$request->files->get('files')) {
                    throw new BadRequestHttpException('Missing file parameter');
                }

                if (count($request->files->get('files')) > 1) {
                    throw new BadRequestHttpException('Upload is limited to 1 file per request');
                }

                $file = current($request->files->get('files'));

                if (!$file->isValid()) {
                    throw new BadRequestHttpException('Uploaded file is invalid');
                }

                $media = $app['mediavorus']->guess($file->getPathname());

                if ($media->getType() !== \MediaVorus\Media\MediaInterface::TYPE_IMAGE) {
                    throw new BadRequestHttpException('Bad filetype');
                }

                $spec = new \MediaAlchemyst\Specification\Image();

                $spec->setResizeMode(\MediaAlchemyst\Specification\Image::RESIZE_MODE_OUTBOUND);
                $spec->setDimensions(32, 32);
                $spec->setStrip(true);
                $spec->setQuality(72);

                $tmpname = tempnam(sys_get_temp_dir(), 'feed_icon');

                try {
                    $app['media-alchemyst']
                        ->open($media->getFile()->getPathname())
                        ->turnInto($tmpname, $spec)
                        ->close();
                } catch (\MediaAlchemyst\Exception\ExceptionInterface $e) {
                    throw new \Exception_InternalServerError('Error while resizing');
                }

                $feed->set_icon($tmpname);

                unset($media);

                $app['filesystem']->remove($tmpname);

                $datas['success'] = true;
            } catch (\Exception $e) {
                $datas['message'] = _('Unable to add file to Phraseanet');
            }

            return $app->json($datas);
        })
            ->bind('admin_feeds_feed_icon')
            ->assert('id', '\d+');

        $controllers->post('/feed/{id}/addpublisher/', function(PhraseaApplication $app, $id) {
            $error = '';
            try {
                $request = $app['request'];
                $user = \User_Adapter::getInstance($request->request->get('usr_id'), $app);
                $feed = new \Feed_Adapter($app, $id);
                $feed->add_publisher($user);
            } catch (\Exception $e) {
                $error = $e->getMessage();
            }

            return $app->redirectPath('admin_feeds_feed', array('id' => $id, 'error' => $error));
        })
            ->bind('admin_feeds_feed_add_publisher')
            ->assert('id', '\d+');

        $controllers->post('/feed/{id}/removepublisher/', function(PhraseaApplication $app, $id) {
            try {
                $request = $app['request'];

                $feed = new \Feed_Adapter($app, $id);
                $publisher = new \Feed_Publisher_Adapter($app, $request->request->get('publisher_id'));
                $user = $publisher->get_user();
                if ($feed->is_publisher($user) === true && $feed->is_owner($user) === false)
                    $publisher->delete();
            } catch (\Exception $e) {
                $error = $e->getMessage();
            }

            return $app->redirectPath('admin_feeds_feed', array('id' => $id, 'error' => $error));
        })
            ->bind('admin_feeds_feed_remove_publisher')
            ->assert('id', '\d+');

        $controllers->post('/feed/{id}/delete/', function(PhraseaApplication $app, $id) {
            $feed = new \Feed_Adapter($app, $id);
            $feed->delete();

            return $app->redirectPath('admin_feeds_list');
        })
            ->bind('admin_feeds_feed_delete')
            ->assert('id', '\d+');

        return $controllers;
    }
}