<?php
/**
 * sysPass
 *
 * @author    nuxsmin
 * @link      http://syspass.org
 * @copyright 2012-2015 Rubén Domínguez nuxsmin@syspass.org
 *
 * This file is part of sysPass.
 *
 * sysPass is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * sysPass is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with sysPass.  If not, see <http://www.gnu.org/licenses/>.
 *
 */

namespace SP\Controller;

use SP\Response;
use SP\CustomFields;
use SP\DB;
use SP\Groups;
use SP\Log;
use SP\Profile;
use SP\Session;
use SP\SessionUtil;
use SP\Template;
use SP\UserUtil;
use SP\Util;

defined('APP_ROOT') || die(_('No es posible acceder directamente a este archivo'));

/**
 * Clase encargada de de preparar la presentación de las vistas de gestión de usuarios
 *
 * @package Controller
 */
class UsersMgmtC extends Controller implements ActionsInterface
{
    /**
     * Máximo numero de acciones antes de agrupar
     */
    const MAX_NUM_ACTIONS = 3;
    /**
     * @var int
     */
    private $_module = 0;

    /**
     * Constructor
     *
     * @param $template Template con instancia de plantilla
     */
    public function __construct(Template $template = null)
    {
        parent::__construct($template);

        $this->view->assign('isDemo', Util::demoIsEnabled());
        $this->view->assign('sk', SessionUtil::getSessionKey());
    }

    /**
     * Obtener los datos para la pestaña de usuarios
     */
    public function getUsersList()
    {
        $this->setAction(self::ACTION_USR_USERS);

        $this->view->assign('sk', SessionUtil::getSessionKey(true));

        if (!$this->checkAccess()) {
            return;
        }

        $arrUsersTableProp = array(
            'tblId' => 'tblUsers',
            'header' => '',
            'tblHeaders' => array(
                _('Nombre'),
                _('Login'),
                _('Perfil'),
                _('Grupo'),
                _('Propiedades')),
            'tblRowSrc' => array(
                'user_name',
                'user_login',
                'userprofile_name',
                'usergroup_name',
                'images' => array(
                    'user_isAdminApp' => array(
                        'img_file' => 'check_blue.png',
                        'img_title' => _('Admin Aplicación'),
                        'icon' => 'star'),
                    'user_isAdminAcc' => array(
                        'img_file' => 'check_orange.png',
                        'img_title' => _('Admin Cuentas'),
                        'icon' => 'star_half'),
                    'user_isLdap' => array(
                        'img_file' => 'ldap.png',
                        'img_title' => _('Usuario de LDAP'),
                        'icon' => 'business'),
                    'user_isDisabled' => array(
                        'img_file' => 'disabled.png',
                        'img_title' => _('Deshabilitado'),
                        'icon' => 'error')
                )
            ),
            'tblRowSrcId' => 'user_id',
            'onCloseAction' => self::ACTION_USR,
            'actions' => array(
                'new' => array(
                    'id' => self::ACTION_USR_USERS_NEW,
                    'title' => _('Nuevo Usuario'),
                    'onclick' => 'sysPassUtil.Common.appMgmtData(this,' . self::ACTION_USR_USERS_NEW . ',\'' . $this->view->sk . '\')',
                    'img' => 'imgs/new.png',
                    'icon' => 'add',
                    'skip' => true
                ),
                'view' => array(
                    'id' => self::ACTION_USR_USERS_VIEW,
                    'title' => _('Ver Detalles de Usuario'),
                    'onclick' => 'sysPassUtil.Common.appMgmtData(this,' . self::ACTION_USR_USERS_VIEW . ',\'' . $this->view->sk . '\')',
                    'img' => 'imgs/view.png',
                    'icon' => 'visibility'
                ),
                'edit' => array(
                    'id' => self::ACTION_USR_USERS_EDIT,
                    'title' => _('Editar Usuario'),
                    'onclick' => 'sysPassUtil.Common.appMgmtData(this,' . self::ACTION_USR_USERS_EDIT . ',\'' . $this->view->sk . '\')',
                    'img' => 'imgs/edit.png',
                    'icon' => 'mode_edit'
                ),
                'pass' => array(
                    'id' => self::ACTION_USR_USERS_EDITPASS,
                    'title' => _('Cambiar Clave de Usuario'),
                    'onclick' => 'sysPassUtil.Common.usrUpdPass(this,' . self::ACTION_USR_USERS_EDITPASS . ',\'' . $this->view->sk . '\')',
                    'img' => 'imgs/key.png',
                    'icon' => 'lock_outline'
                ),
                'del' => array(
                    'id' => self::ACTION_USR_USERS_DELETE,
                    'title' => _('Eliminar Usuario'),
                    'onclick' => 'sysPassUtil.Common.appMgmtDelete(this,' . self::ACTION_USR_USERS_DELETE . ',\'' . $this->view->sk . '\')',
                    'img' => 'imgs/delete.png',
                    'icon' => 'delete',
                    'isdelete' => true
                ),
            )
        );

        $arrUsersTableProp['cellWidth'] = floor(65 / count($arrUsersTableProp['tblHeaders']));

        $this->view->append(
            'tabs', array(
                'title' => _('Gestión de Usuarios'),
                'query' => UserUtil::getUsers(),
                'props' => $arrUsersTableProp,
                'time' => round(microtime() - $this->view->queryTimeStart, 5))
        );

    }

    /**
     * Obtener los datos para la pestaña de grupos
     */
    public function getGroupsList()
    {
        $this->setAction(self::ACTION_USR_GROUPS);

        $this->view->assign('sk', SessionUtil::getSessionKey(true));

        if (!$this->checkAccess()) {
            return;
        }

        $arrGroupsTableProp = array(
            'tblId' => 'tblGroups',
            'header' => '',
            'tblHeaders' => array(_('Nombre'), _('Descripción')),
            'tblRowSrc' => array('usergroup_name', 'usergroup_description'),
            'tblRowSrcId' => 'usergroup_id',
            'onCloseAction' => self::ACTION_USR,
            'actions' => array(
                'new' => array(
                    'id' => self::ACTION_USR_GROUPS_NEW,
                    'title' => _('Nuevo Grupo'),
                    'onclick' => 'sysPassUtil.Common.appMgmtData(this,' . self::ACTION_USR_GROUPS_NEW . ',\'' . $this->view->sk . '\')',
                    'img' => 'imgs/new.png',
                    'icon' => 'add',
                    'skip' => true
                ),
                'edit' => array(
                    'id' => self::ACTION_USR_GROUPS_EDIT,
                    'title' => _('Editar Grupo'),
                    'onclick' => 'sysPassUtil.Common.appMgmtData(this,' . self::ACTION_USR_GROUPS_EDIT . ',\'' . $this->view->sk . '\')',
                    'img' => 'imgs/edit.png',
                    'icon' => 'mode_edit'
                ),
                'del' => array(
                    'id' => self::ACTION_USR_GROUPS_DELETE,
                    'title' => _('Eliminar Grupo'),
                    'onclick' => 'sysPassUtil.Common.appMgmtDelete(this,' . self::ACTION_USR_GROUPS_DELETE . ',\'' . $this->view->sk . '\')',
                    'img' => 'imgs/delete.png',
                    'icon' => 'delete',
                    'isdelete' => true
                )
            )
        );

        $arrGroupsTableProp['cellWidth'] = floor(65 / count($arrGroupsTableProp['tblHeaders']));

        $this->view->append(
            'tabs', array(
                'title' => _('Gestión de Grupos'),
                'query' => Groups::getGroups(),
                'props' => $arrGroupsTableProp,
                'time' => round(microtime() - $this->view->queryTimeStart, 5))
        );
    }

    /**
     * Obtener los datos para la pestaña de perfiles
     */
    public function getProfilesList()
    {
        $this->setAction(self::ACTION_USR_PROFILES);

        $this->view->assign('sk', SessionUtil::getSessionKey(true));

        if (!$this->checkAccess()) {
            return;
        }

        $arrProfilesTableProp = array(
            'tblId' => 'tblProfiles',
            'header' => '',
            'tblHeaders' => array(_('Nombre')),
            'tblRowSrc' => array('userprofile_name'),
            'tblRowSrcId' => 'userprofile_id',
            'onCloseAction' => self::ACTION_USR,
            'actions' => array(
                'new' => array(
                    'id' => self::ACTION_USR_PROFILES_NEW,
                    'title' => _('Nuevo Perfil'),
                    'onclick' => 'sysPassUtil.Common.appMgmtData(this,' . self::ACTION_USR_PROFILES_NEW . ',\'' . $this->view->sk . '\')',
                    'img' => 'imgs/new.png',
                    'icon' => 'add',
                    'skip' => true
                ),
                'view' => array(
                    'id' => self::ACTION_USR_PROFILES_VIEW,
                    'title' => _('Ver Detalles de Perfil'),
                    'onclick' => 'sysPassUtil.Common.appMgmtData(this,' . self::ACTION_USR_PROFILES_VIEW . ',\'' . $this->view->sk . '\')',
                    'img' => 'imgs/view.png',
                    'icon' => 'visibility'
                ),
                'edit' => array(
                    'id' => self::ACTION_USR_PROFILES_EDIT,
                    'title' => _('Editar Perfil'),
                    'onclick' => 'sysPassUtil.Common.appMgmtData(this,' . self::ACTION_USR_PROFILES_EDIT . ',\'' . $this->view->sk . '\')',
                    'img' => 'imgs/edit.png',
                    'icon' => 'mode_edit'
                ),
                'del' => array(
                    'id' => self::ACTION_USR_PROFILES_DELETE,
                    'title' => _('Eliminar Perfil'),
                    'onclick' => 'sysPassUtil.Common.appMgmtDelete(this,' . self::ACTION_USR_PROFILES_DELETE . ',\'' . $this->view->sk . '\')',
                    'img' => 'imgs/delete.png',
                    'icon' => 'delete',
                    'isdelete' => true
                )
            )
        );

        $arrProfilesTableProp['cellWidth'] = floor(65 / count($arrProfilesTableProp['tblHeaders']));

        $this->view->append(
            'tabs', array(
                'title' => _('Gestión de Perfiles'),
                'query' => Profile::getProfiles(),
                'props' => $arrProfilesTableProp,
                'time' => round(microtime() - $this->view->queryTimeStart, 5)
            )
        );
    }

    /**
     * Inicializar las plantillas para las pestañas
     */
    public function useTabs()
    {
        $this->view->addTemplate('tabs-start');
        $this->view->addTemplate('mgmttabs');
        $this->view->addTemplate('tabs-end');

        $this->view->assign('tabs', array());
        $this->view->assign('activeTab', 0);
        $this->view->assign('maxNumActions', self::MAX_NUM_ACTIONS);
    }

    /**
     * Obtener los datos para la ficha de usuario
     */
    public function getUser()
    {
        $this->_module = self::ACTION_USR_USERS;
        $this->view->addTemplate('users');

        $this->view->assign('user', UserUtil::getUserData($this->view->itemId));
        $this->view->assign('isDisabled', (($this->view->user['user_login'] === 'demo' && $this->view->isDemo) || $this->view->actionId === self::ACTION_USR_USERS_VIEW) ? 'disabled' : '');
        $this->view->assign('groups', DB::getValuesForSelect('usrGroups', 'usergroup_id', 'usergroup_name'));
        $this->view->assign('profiles', DB::getValuesForSelect('usrProfiles', 'userprofile_id', 'userprofile_name'));
        $this->view->assign('ro', ($this->view->user['checks']['user_isLdap']) ? 'READONLY' : '');

        $this->getCustomFieldsForItem();
    }

    /**
     * Obtener los datos para la ficha de grupo
     */
    public function getGroup()
    {
        $this->_module = self::ACTION_USR_GROUPS;
        $this->view->addTemplate('groups');

        $this->view->assign('group', Groups::getGroupData($this->view->itemId));
        $this->view->assign('users', \SP\DB::getValuesForSelect('usrData', 'user_id', 'user_name'));
        $this->view->assign('groupUsers', \SP\Groups::getUsersForGroup($this->view->itemId));

        $this->getCustomFieldsForItem();
    }

    /**
     * Obtener los datos para la ficha de perfil
     */
    public function getProfile()
    {
        $this->view->addTemplate('profiles');

        $profile = ($this->view->itemId) ? Profile::getProfile($this->view->itemId) : new Profile();

        $this->view->assign('profile', $profile);
        $this->view->assign('isDisabled', ($this->view->actionId === self::ACTION_USR_PROFILES_VIEW) ? 'disabled' : '');

        if ($this->view->isView === true) {
            $this->view->assign('usedBy', Profile::getProfileInUsersName($this->view->itemId));
        }
    }

    /**
     * Inicializar la vista de cambio de clave de usuario
     */
    public function getUserPass()
    {
        $this->setAction(self::ACTION_USR_USERS_EDITPASS);

        // Comprobar si el usuario a modificar es distinto al de la sesión
        if ($this->view->userId != Session::getUserId() && !$this->checkAccess()) {
            return;
        }

        $this->view->addTemplate('userspass');

        $this->view->assign('actionId', self::ACTION_USR_USERS_EDITPASS);

        // Obtener de nuevo el token de seguridad por si se habñia regenerado antes
        $this->view->assign('sk', SessionUtil::getSessionKey());
    }

    /**
     * Obtener los datos para la pestaña de tokens de API
     */
    public function getAPITokensList()
    {
        $this->setAction(self::ACTION_MGM_APITOKENS);

        if (!$this->checkAccess()) {
            return;
        }

        $tokensTableProp = array(
            'tblId' => 'tblTokens',
            'header' => '',
            'tblHeaders' => array(_('Usuario'), _('Acción')),
            'tblRowSrc' => array('user_login', 'authtoken_actionId'),
            'tblRowSrcId' => 'authtoken_id',
            'onCloseAction' => self::ACTION_USR,
            'actions' => array(
                'new' => array(
                    'id' => self::ACTION_MGM_APITOKENS_NEW,
                    'title' => _('Nueva Autorización'),
                    'onclick' => 'sysPassUtil.Common.appMgmtData(this,' . self::ACTION_MGM_APITOKENS_NEW . ',\'' . $this->view->sk . '\')',
                    'img' => 'imgs/new.png',
                    'icon' => 'add',
                    'skip' => true
                ),
                'view' => array(
                    'id' => self::ACTION_MGM_APITOKENS_VIEW,
                    'title' => _('Ver token de Autorización'),
                    'onclick' => 'sysPassUtil.Common.appMgmtData(this,' . self::ACTION_MGM_APITOKENS_VIEW . ',\'' . $this->view->sk . '\')',
                    'img' => 'imgs/view.png',
                    'icon' => 'visibility'
                ),
                'edit' => array(
                    'id' => self::ACTION_MGM_APITOKENS_EDIT,
                    'title' => _('Editar Autorización'),
                    'onclick' => 'sysPassUtil.Common.appMgmtData(this,' . self::ACTION_MGM_APITOKENS_EDIT . ',\'' . $this->view->sk . '\')',
                    'img' => 'imgs/edit.png',
                    'icon' => 'mode_edit'
                ),
                'del' => array(
                    'id' => self::ACTION_MGM_APITOKENS_DELETE,
                    'title' => _('Eliminar Autorización'),
                    'onclick' => 'sysPassUtil.Common.appMgmtDelete(this,' . self::ACTION_MGM_APITOKENS_DELETE . ',\'' . $this->view->sk . '\')',
                    'img' => 'imgs/delete.png',
                    'icon' => 'delete',
                    'isdelete' => true
                )
            )
        );

        $tokensTableProp['cellWidth'] = floor(65 / count($tokensTableProp['tblHeaders']));

        $this->view->append(
            'tabs', array(
                'title' => _('Gestión de Autorizaciones API'),
                'query' => \SP\ApiTokens::getTokens(),
                'props' => $tokensTableProp,
                'time' => round(microtime() - $this->view->queryTimeStart, 5))
        );
    }

    /**
     * Obtener los datos para la ficha de tokens de API
     */
    public function getToken()
    {
        $this->view->addTemplate('tokens');

        $token = \SP\ApiTokens::getTokens($this->view->itemId, true);

        $this->view->assign('users', \SP\DB::getValuesForSelect('usrData', 'user_id', 'user_name'));
        $this->view->assign('actions', \SP\ApiTokens::getTokenActions());
        $this->view->assign('token', $token);
        $this->view->assign('gotData', is_object($token));

        if ($this->view->isView === true) {
            $msg = sprintf('%s ;;Usuario: %s', _('Token de autorización visualizado'), $token->user_login);
            Log::writeNewLogAndEmail(_('Autorizaciones'), $msg);
        }
    }

    /**
     * Obtener la lista de campos personalizados y sus valores
     */
    private function getCustomFieldsForItem()
    {
        // Se comprueba que hayan campos con valores para el elemento actual
        if ($this->view->itemId && CustomFields::checkCustomFieldExists($this->_module, $this->view->itemId)) {
            $this->view->assign('customFields', CustomFields::getCustomFieldsData($this->_module, $this->view->itemId));
        } else {
            $this->view->assign('customFields', CustomFields::getCustomFieldsForModule($this->_module));
        }
    }
}