<?php
if (!defined("B_PROLOG_INCLUDED") || B_PROLOG_INCLUDED!==true) die();

use Bitrix\Main\Application;
use Bitrix\Main\Error;
use Bitrix\Main\ErrorCollection;
use Bitrix\Voximplant\Model;
use Bitrix\Voximplant\Security\Permissions;
use Bitrix\Main\Localization\Loc;

Loc::loadMessages(__FILE__);

class CVoximplantPermsComponent extends CBitrixComponent
{
	protected $errors;
	protected $saveMode = false;

	public function __construct($component)
	{
		parent::__construct($component);

		\Bitrix\Main\Loader::includeModule("voximplant");

		$this->errors = new ErrorCollection();
		$request = \Bitrix\Main\Application::getInstance()->getContext()->getRequest();
		if($request['act'] === 'save' && check_bitrix_sessid())
			$this->saveMode = true;
	}

	public function prepareData()
	{
		$roles = array();
		foreach (\Bitrix\Voximplant\Security\RoleManager::getRoles() as $roleId => $roleName)
		{
			$roles[$roleId] = array(
				'ID' => $roleId,
				'NAME' => $roleName,
				'EDIT_URL' => CVoxImplantMain::GetPublicFolder().'editrole.php?ID='.$roleId,
			);
		}

		$roleAccessCodes = array();

		$accessManager = new CAccess();
		$resolvedAccessCodes = $accessManager->GetNames(array_keys(\Bitrix\Voximplant\Security\RoleManager::getRoleAccess()));

		foreach(\Bitrix\Voximplant\Security\RoleManager::getRoleAccess() as $accessCode => $accessRoles)
		{
			foreach ($accessRoles as $roleId)
			{
				$roleAccessCodes[] = array(
					'ROLE_ID' => $roleId,
					'ACCESS_CODE' => $accessCode,
					'ACCESS_PROVIDER' => $resolvedAccessCodes[$accessCode] ? $resolvedAccessCodes[$accessCode]['provider'] : null,
					'ACCESS_NAME' => $resolvedAccessCodes[$accessCode] ? $resolvedAccessCodes[$accessCode]['name'] : Loc::getMessage('VOXIMPLANT_PERM_UNKNOWN_ACCESS_CODE'),
				);
			}
		}

		$this->arResult['ROLES'] = $roles;
		$this->arResult['ROLE_ACCESS_CODES'] = $roleAccessCodes;
		$this->arResult['ADD_URL'] = CVoxImplantMain::GetPublicFolder().'editrole.php?ID=0';
		$this->arResult['CAN_EDIT'] = \Bitrix\Voximplant\Security\Helper::canUse();
		if(!$this->arResult['CAN_EDIT'])
		{
			$this->arResult['TRIAL'] = CVoxImplantMain::GetSecurityTrialText();
		}
	}

	public function save()
	{
		$request = Application::getInstance()->getContext()->getRequest();
		$roleAccessCodes = $request['PERMS'];
		\Bitrix\Voximplant\Security\Helper::clearMenuCache();

		\Bitrix\Voximplant\Security\RoleManager::clearRoleAccess();

		if(!is_array($roleAccessCodes))
		{
			return true;
		}

		foreach ($roleAccessCodes as $roleAccessCode => $roleId)
		{
			$insertResult = Model\RoleAccessTable::add(array(
				'ROLE_ID' => $roleId,
				'ACCESS_CODE' => $roleAccessCode
			));
			if(!$insertResult->isSuccess())
			{
				$this->errors[] = new Error(Loc::getMessage('VOXIMPLANT_PERM_UNKNOWN_SAVE_ERROR'));
				return false;
			}
		}

		return true;
	}
	
	public function executeComponent()
	{
		$permissions = Permissions::createWithCurrentUser();
		if(!$permissions->canPerform(Permissions::ENTITY_SETTINGS, Permissions::ACTION_MODIFY))
		{
			ShowError(Loc::getMessage('VOXIMPLANT_PERM_ACCESS_DENIED'));
			return false;
		}

		if(\Bitrix\Voximplant\Limits::isRestOnly())
		{
			return false;
		}

		if($this->saveMode)
		{
			if(\Bitrix\Voximplant\Security\Helper::canUse())
			{
				$this->save();
			}
			else
			{
				ShowError(Loc::getMessage('VOXIMPLANT_PERM_LICENSING_ERROR'));
				return false;
			}
		}

		$this->prepareData();
		$this->includeComponentTemplate();
		return $this->arResult;
	}
}