ff7cff1d39
- Add Assert\Choice on ClientTicket type and status with typed constants - Add Assert\Url on GiteaConfiguration, BookStackConfiguration, TaskBookStackLink, ClientTicket - Fix concurrent task/ticket numbering: use pg_advisory_xact_lock instead of FOR UPDATE with MAX() - Wrap CreateTaskTool numbering in transaction - Harmonize repository contracts: both return max number, caller adds +1 Tickets: T-004, T-008, T-011, T-012 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
71 lines
2.3 KiB
PHP
71 lines
2.3 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\State;
|
|
|
|
use ApiPlatform\Metadata\Operation;
|
|
use ApiPlatform\State\ProcessorInterface;
|
|
use App\Entity\ClientTicket;
|
|
use App\Entity\User;
|
|
use App\Repository\ClientTicketRepository;
|
|
use App\Service\NotificationService;
|
|
use DateTimeImmutable;
|
|
use Doctrine\ORM\EntityManagerInterface;
|
|
use Symfony\Bundle\SecurityBundle\Security;
|
|
use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
|
|
use Symfony\Component\HttpKernel\Exception\BadRequestHttpException;
|
|
|
|
/**
|
|
* @implements ProcessorInterface<ClientTicket, ClientTicket>
|
|
*/
|
|
final readonly class ClientTicketNumberProcessor implements ProcessorInterface
|
|
{
|
|
public function __construct(
|
|
private EntityManagerInterface $entityManager,
|
|
private Security $security,
|
|
private ClientTicketRepository $clientTicketRepository,
|
|
private NotificationService $notificationService,
|
|
) {}
|
|
|
|
public function process(mixed $data, Operation $operation, array $uriVariables = [], array $context = []): ClientTicket
|
|
{
|
|
assert($data instanceof ClientTicket);
|
|
|
|
$user = $this->security->getUser();
|
|
assert($user instanceof User);
|
|
|
|
$project = $data->getProject();
|
|
if (null === $project) {
|
|
throw new BadRequestHttpException('Project is required.');
|
|
}
|
|
|
|
// Admins can create tickets on any project; clients only on allowed projects
|
|
if (!$this->security->isGranted('ROLE_ADMIN')) {
|
|
if (null === $user->getClient()) {
|
|
throw new AccessDeniedHttpException('Only client users can create tickets.');
|
|
}
|
|
|
|
if (!$user->getAllowedProjects()->contains($project)) {
|
|
throw new AccessDeniedHttpException('You do not have access to this project.');
|
|
}
|
|
}
|
|
|
|
$now = new DateTimeImmutable();
|
|
|
|
$maxNumber = $this->clientTicketRepository->findMaxNumberByProjectForUpdate($project);
|
|
$data->setNumber($maxNumber + 1);
|
|
$data->setSubmittedBy($user);
|
|
$data->setStatus('new');
|
|
$data->setCreatedAt($now);
|
|
$data->setUpdatedAt($now);
|
|
|
|
$this->entityManager->persist($data);
|
|
$this->entityManager->flush();
|
|
|
|
$this->notificationService->createForTicketCreated($data);
|
|
|
|
return $data;
|
|
}
|
|
}
|