a3e440c254
Backend: - Add role hierarchy (ADMIN > GESTIONNAIRE > VIEWER > USER) in security.yaml - Add password authentication on profile activation (SessionProfileController) - Add SessionProfileAuthenticator with stateless API firewall - Add ProfilePasswordHasher state processor for API Platform - Add security annotations on all 18 API Platform entities - Add denyAccessUnlessGranted on all 13 custom controllers - Add AdminProfileController for profile/role management (/api/admin/profiles) - Add InitProfilePasswordsCommand for initial admin setup - Simplify SessionProfilesController to list-only (removed create/delete) Frontend (submodule update): - Add usePermissions composable (isAdmin, canEdit, canView, isGranted) - Add password login modal on profiles page - Add admin backoffice page for profile management - Disable all form fields for ROLE_VIEWER across all edit/create pages - Show navigation buttons for all roles, hide destructive actions for viewers - Add readonly mode to ModelTypeForm and site/constructeur modals - Guard /admin routes in middleware - Configure Vite proxy for API requests Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
78 lines
2.7 KiB
PHP
78 lines
2.7 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Controller;
|
|
|
|
use App\Entity\CustomField;
|
|
use App\Entity\CustomFieldValue;
|
|
use App\Entity\Machine;
|
|
use App\Repository\CustomFieldValueRepository;
|
|
use App\Repository\MachineRepository;
|
|
use Doctrine\ORM\EntityManagerInterface;
|
|
use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
|
|
use Symfony\Component\HttpFoundation\JsonResponse;
|
|
use Symfony\Component\Routing\Attribute\Route;
|
|
|
|
#[Route('/api/machines')]
|
|
class MachineCustomFieldsController extends AbstractController
|
|
{
|
|
public function __construct(
|
|
private readonly EntityManagerInterface $entityManager,
|
|
private readonly MachineRepository $machineRepository,
|
|
private readonly CustomFieldValueRepository $customFieldValueRepository,
|
|
) {}
|
|
|
|
#[Route('/{id}/add-custom-fields', name: 'machine_add_custom_fields', methods: ['POST'])]
|
|
public function addMissingCustomFields(string $id): JsonResponse
|
|
{
|
|
$this->denyAccessUnlessGranted('ROLE_GESTIONNAIRE');
|
|
|
|
$machine = $this->machineRepository->find($id);
|
|
if (!$machine instanceof Machine) {
|
|
return $this->json(['success' => false, 'error' => 'Machine not found.'], 404);
|
|
}
|
|
|
|
$typeMachine = $machine->getTypeMachine();
|
|
if (!$typeMachine) {
|
|
return $this->json(['success' => true, 'machineId' => $machine->getId(), 'customFieldValues' => []]);
|
|
}
|
|
|
|
foreach ($typeMachine->getCustomFields() as $customField) {
|
|
if (!$customField instanceof CustomField) {
|
|
continue;
|
|
}
|
|
$existing = $this->customFieldValueRepository->findOneBy([
|
|
'machine' => $machine,
|
|
'customField' => $customField,
|
|
]);
|
|
if ($existing instanceof CustomFieldValue) {
|
|
continue;
|
|
}
|
|
|
|
$value = new CustomFieldValue();
|
|
$value->setMachine($machine);
|
|
$value->setCustomField($customField);
|
|
$value->setValue($customField->getDefaultValue() ?? '');
|
|
$this->entityManager->persist($value);
|
|
}
|
|
|
|
$this->entityManager->flush();
|
|
|
|
$values = $this->customFieldValueRepository->findBy(['machine' => $machine]);
|
|
|
|
return $this->json([
|
|
'success' => true,
|
|
'machineId' => $machine->getId(),
|
|
'customFieldValues' => array_map(
|
|
static fn (CustomFieldValue $value) => [
|
|
'id' => $value->getId(),
|
|
'value' => $value->getValue(),
|
|
'customFieldId' => $value->getCustomField()->getId(),
|
|
],
|
|
$values
|
|
),
|
|
]);
|
|
}
|
|
}
|