284 lines
14 KiB
PHP
284 lines
14 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers;
|
|
use App\Enums\RecordStatusEnum;
|
|
use App\Enums\UtilEnum;
|
|
use App\Http\Controllers\Helper\GlobalController;
|
|
use App\Models\BaseModel;
|
|
use App\Models\Role;
|
|
use App\Models\User;
|
|
use App\Models\UserOrganization;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Auth;
|
|
use Illuminate\Support\Facades\Hash;
|
|
use Illuminate\Support\Facades\Session;
|
|
use Illuminate\Support\Facades\Log;
|
|
|
|
class UserController extends Controller
|
|
{
|
|
|
|
protected $userModel;
|
|
protected $roleModel;
|
|
protected $userOrganizations;
|
|
protected $baseOrganizationId;
|
|
protected $organizations;
|
|
protected $base;
|
|
|
|
public function __construct(User $userModel, Role $roleModel, UserOrganization $userOrganizations){
|
|
$this->userModel = $userModel;
|
|
$this->roleModel = $roleModel;
|
|
$this->userOrganizations = $userOrganizations;
|
|
$this->baseOrganizationId = Session::get('base_organization_id');
|
|
$this->base = Session::get('base_organization');
|
|
}
|
|
|
|
public function index(Request $request){
|
|
if(!GlobalController::user_can(Auth::user()->role_id, ['view_user_account'])) return redirect(url('my-profile'));
|
|
$this->organizations = parent::getAccessAbleLabs();
|
|
$recordStatusCondition = Auth::id()==1 ? [RecordStatusEnum::DELETE, RecordStatusEnum::ACTIVE] : [RecordStatusEnum::ACTIVE];
|
|
$roles = $this->roleModel::query()->where(BaseModel::RECORD_STATUS_FIELD, RecordStatusEnum::ACTIVE)
|
|
->when(Auth::user()->role_id != UtilEnum::ADMINISTRATOR_ROLE , function ($roles){
|
|
$roles->whereNotIn('id', [UtilEnum::ADMINISTRATOR_ROLE]);
|
|
})->get();
|
|
|
|
|
|
$users = $this->userModel::with(['role','userOrganizations'])->whereIn(BaseModel::RECORD_STATUS_FIELD, $recordStatusCondition)
|
|
->when(Auth::id()!=1, function ($users){
|
|
$users->whereNotIn('id', [UtilEnum::ADMINISTRATOR_USER])
|
|
->whereIn('id', $this->organizations->pluck('organizations')->flatten()->pluck('user_id')->toArray());
|
|
})->when(!empty($request->kword), function($users) use ($request) {
|
|
$keyword = '%' . str_replace(' ', '', $request->kword) . '%';
|
|
$users->where(function ($q) use ($keyword) {
|
|
$q->whereRaw("REPLACE(name,' ','') LIKE ?", [$keyword])
|
|
->orWhereRaw("REPLACE(email,' ','') LIKE ?", [$keyword]);
|
|
})->where('id', '!=', UtilEnum::ADMINISTRATOR_USER);
|
|
})
|
|
->orderBy(BaseModel::CREATED_AT,'desc')->paginate(config('nrml.pagination.perpage', 10));
|
|
return view('user_account', ['users' => $users, 'roles' => $roles, 'organizations' => $this->organizations]);
|
|
}
|
|
|
|
public function labUsers(Request $request){
|
|
if(!GlobalController::user_can(Auth::user()->role_id, ['view_user_account'])) return redirect(url('my-profile'));
|
|
$this->labs = parent::getAccessAbleLabs();
|
|
$roles = $this->roleModel::query()->where(BaseModel::RECORD_STATUS_FIELD, RecordStatusEnum::ACTIVE)
|
|
->whereNotIn('id', [UtilEnum::ADMINISTRATOR_ROLE])->get();
|
|
|
|
$users = $this->userModel::with(['role','userOrganizations'])->where(BaseModel::RECORD_STATUS_FIELD, RecordStatusEnum::ACTIVE)
|
|
->whereIn('id', $this->labs->pluck('userOrganizations')->flatten()->pluck('user_id')->toArray())
|
|
->whereNotIn('role_id', [UtilEnum::ADMINISTRATOR_ROLE])
|
|
->when(!empty($request->kword), function($users) use ($request) {
|
|
$users->whereRaw("replace(name, ' ','') like '%".str_replace(" ","",$request->kword)."%'")
|
|
->orWhereRaw("replace(email, ' ','') like '%".str_replace(" ","",$request->kword)."%'");
|
|
})->orderBy(BaseModel::CREATED_AT,'desc')->paginate(config('nrml.pagination.perpage', 10));
|
|
return view('user_account', ['users' => $users, 'roles' => $roles, 'labs' => $this->labs]);
|
|
}
|
|
|
|
public function save(Request $request){
|
|
try{
|
|
if(!GlobalController::user_can(Auth::user()->role_id, ['create_user_account'])) return false;
|
|
$validator = \Validator::make($request->all(), [
|
|
'name' => 'required',
|
|
'email' => 'required|email|unique:users',
|
|
'password' => 'required',
|
|
'role_id' => 'required'
|
|
]);
|
|
if ($validator->fails()) return response()->json(['success' => false, 'message' => __('user_account.create_fail'), 'errors' => $validator->errors()->all()]);
|
|
$data = array(
|
|
'name' => $request->name,
|
|
'email' => $request->email,
|
|
'password' => Hash::make($request->password),
|
|
'role_id' => $request->role_id,
|
|
'created_at' => date('Y-m-d H:i:s'),
|
|
'created_by' => Auth::id(),
|
|
);
|
|
$user = $this->userModel::query()->create($data);
|
|
Log::channel('account_creation')->info(array('action' => 'create', 'raw' => $request->all(), 'prepared' => $data));
|
|
$requests = new Request(array('uid' => $user->id, 'organization_ids' => [Session::get('base_organization_id')]));
|
|
$this->assignLabs($requests);
|
|
return response()->json(['success' => true, 'message' => __('user_account.create_success')]);
|
|
} catch (\Exception $e){
|
|
return response()->json(['success' => false, 'message' => __('user_account.create_fail'), 'errors' => $e->getMessage()]);
|
|
}
|
|
}
|
|
|
|
public function update(Request $request){
|
|
try{
|
|
if(!GlobalController::user_can(Auth::user()->role_id, ['update_user_account'])) return false;
|
|
$validator = \Validator::make($request->all(), [
|
|
'name' => 'required',
|
|
'email' => 'required|email|unique:users,email, ' . $request->uid . ',id',
|
|
'password' => 'required',
|
|
'role_id' => 'required'
|
|
]);
|
|
if ($validator->fails()) return response()->json(['success' => false, 'message' => __('user_account.update_fail'), 'errors' => $validator->errors()->all()]);
|
|
$data = array(
|
|
'name' => $request->name,
|
|
'email' => $request->email,
|
|
'role_id' => $request->role_id,
|
|
'updated_at' => date('Y-m-d H:i:s'),
|
|
'updated_by' => Auth::id()
|
|
);
|
|
$this->userModel::query()->where('id', $request->uid)->update($data);
|
|
Log::channel('account_creation')->info(array('action' => 'update', 'raw' => $request->all(), 'prepared' => $data));
|
|
return response()->json(['success' => true, 'message' => __('user_account.update_success')]);
|
|
} catch (\Exception $e){
|
|
return response()->json(['success' => false, 'message' => __('user_account.update_fail'), 'errors' => $e->getMessage()]);
|
|
}
|
|
}
|
|
|
|
public function resetPassword(Request $request){
|
|
try{
|
|
if(!GlobalController::user_can(Auth::user()->role_id, ['update_user_account'])) return false;
|
|
$validator = \Validator::make($request->all(), [
|
|
'uid' => 'required',
|
|
'password' => 'required'
|
|
]);
|
|
if ($validator->fails()) return response()->json(['success' => false, 'message' => __('user_account.update_fail'), 'errors' => $validator->errors()->all()]);
|
|
$data = array(
|
|
'password' => Hash::make($request->password),
|
|
'updated_at' => date('Y-m-d H:i:s'),
|
|
'updated_by' => Auth::id()
|
|
);
|
|
$this->userModel::query()->find($request->uid)->update($data);
|
|
return response()->json(['success' => true, 'message' => __('user_account.update_success')]);
|
|
} catch (\Exception $e){
|
|
return response()->json(['success' => false, 'message' => __('user_account.update_fail'), 'errors' => $e->getMessage()]);
|
|
}
|
|
}
|
|
|
|
public function get(Request $request){
|
|
try{
|
|
$user = $this->userModel::with(['userOrganizations'])->find($request->uid);
|
|
return response()->json(['success' => true, 'message' => __('user_account.get_success'), 'data' => $user]);
|
|
} catch (\Exception $e){
|
|
return response()->json(['success' => false, 'message' => __('user_account.get_fail'), 'errors' => $e->getMessage()]);
|
|
}
|
|
}
|
|
|
|
public function delete(Request $request){
|
|
try{
|
|
if(!GlobalController::user_can(Auth::user()->role_id, ['delete_user_account'])) return false;
|
|
$this->userModel::query()->where('id', $request->uid)->update(array( BaseModel::RECORD_STATUS_FIELD => RecordStatusEnum::DELETE));
|
|
return response()->json(['success' => true, 'message' => __('user_account.delete_success')]);
|
|
} catch (\Exception $e){
|
|
return response()->json(['success' => false, 'message' => __('user_account.delete_fail'), 'errors' => $e->getMessage()]);
|
|
}
|
|
}
|
|
|
|
public function restore(Request $request){
|
|
try{
|
|
$this->userModel::query()->where('id', $request->uid)->update(array(BaseModel::RECORD_STATUS_FIELD=> RecordStatusEnum::ACTIVE));
|
|
return response()->json(['success' => true, 'message' => __('user_account.restore_success')]);
|
|
} catch (\Exception $e){
|
|
return response()->json(['success' => false, 'message' => __('user_account.restore_fail'), 'errors' => $e->getMessage()]);
|
|
}
|
|
}
|
|
|
|
public function assignLabs(Request $request){
|
|
try{
|
|
if(!GlobalController::user_can(Auth::user()->role_id, ['assign_lab'])) return false;
|
|
$validator = \Validator::make($request->all(), [ 'uid' => 'required']);
|
|
if ($validator->fails()) return response()->json(['success' => false, 'message' => __('user_account.assign_lab_fail'), 'errors'=>$validator->errors()->all()]);
|
|
$this->userOrganizations::query()->where('user_id', $request->uid)
|
|
->update(['end_date' => date('Y-m-d'), BaseModel::RECORD_STATUS_FIELD => RecordStatusEnum::DELETE, BaseModel::UPDATED_AT_FIELD => date('Y-m-d H:i:s'), BaseModel::UPDATED_BY_FIELD =>Auth::id()]);
|
|
$data = array();
|
|
foreach ($request->organization_ids as $organization_id){
|
|
$data[] = array(
|
|
'user_id' => $request->uid,
|
|
'organization_id' => $organization_id,
|
|
'start_date' => date('Y-m-d'),
|
|
'created_at' => date('Y-m-d H:i:s'),
|
|
'created_by' => Auth::id()
|
|
);
|
|
}
|
|
$this->userOrganizations::query()->insert($data);
|
|
return response()->json(['success' => true, 'message' => __('user_account.assign_lab_success')]);
|
|
} catch (\Exception $e){
|
|
return response()->json(['success' => false, 'message' => __('user_account.assign_lab_fail'), 'errors' => $e->getMessage()]);
|
|
}
|
|
|
|
}
|
|
|
|
public function uploadSignature(Request $request){
|
|
try {
|
|
$image = $request->file('signature');
|
|
$imageName = 'signature_'.Auth::id().date('YmdHis').'.' . $image->getClientOriginalExtension();
|
|
$user = User::find(Auth::id());
|
|
$user->update(array('signature' => $imageName));
|
|
$image->move(public_path('storage/images/signature'), $imageName);
|
|
return back()->with(['success' => true, 'message' => __('singnature updated'), 'data' => 'signature']);
|
|
}catch (\Exception $e){
|
|
Log::error($e);
|
|
return response()->json(['success'=> false , 'message' => __('user_account.update_fail'), 'errors' => $e->getMessage()]);
|
|
}
|
|
}
|
|
|
|
public function removeSignature(Request $request){
|
|
try {
|
|
$user = $this->userModel::query()->find(Auth::id());
|
|
if(!empty($user->signature)) {
|
|
if (file_exists(public_path('storage/images/signature/' . $user->signature))) {
|
|
unlink(public_path('storage/images/signature/' . $user->signature));
|
|
$user->signature = null;
|
|
}
|
|
}
|
|
$user->save();
|
|
return response()->json(['success' => true, 'message' => __('user_account.update_success'), 'data' => $user]);
|
|
}catch (\Exception $e){
|
|
return response()->json(['success'=> false , 'message' => __('user_account.update_fail'), 'errors' => $e->getMessage()]);
|
|
}
|
|
}
|
|
|
|
public function changePassword(Request $request)
|
|
{
|
|
try {
|
|
|
|
$request->validate([
|
|
'current_password' => 'required|string',
|
|
'new_password' => 'required|confirmed|min:8|string'
|
|
]);
|
|
|
|
$auth = Auth::user();
|
|
|
|
// Check current password
|
|
if (!Hash::check($request->current_password, $auth->password)) {
|
|
return redirect()->back()->withErrors(['current_password' => __('user_account.invalid_current_password')]);
|
|
}
|
|
|
|
// Check new password not same as old
|
|
if ($request->current_password === $request->new_password) {
|
|
return redirect()->back()->withErrors(['new_password' => __('user_account.new_password_same_old_password')]);
|
|
}
|
|
|
|
// Update password
|
|
$user = User::where('id', $auth->id)->update([
|
|
'password' => Hash::make($request->new_password)
|
|
]);
|
|
|
|
Log::channel('account_creation')->info([
|
|
'action' => 'change-password',
|
|
'user_id' => $auth->id
|
|
]);
|
|
|
|
return redirect()->back()->with('success', __('user_account.change_password_success'));
|
|
|
|
}
|
|
catch (\Exception $e) {
|
|
return redirect()->back()->withErrors(['error' => __('user_account.change_password_fail') . ': ' . $e->getMessage()]);
|
|
}
|
|
}
|
|
|
|
function my_profile()
|
|
{
|
|
$user = $this->userModel::query()->with(['role','userOrganizations'])->find(Auth::id());
|
|
return view('my_profiles',[
|
|
'users' => $user
|
|
]);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
}
|