ngcp-panel/lib/NGCP/Panel/Controller/Administrator.pm

package NGCP::Panel::Controller::Administrator;
use Sipwise::Base;
use namespace::sweep;
BEGIN { extends 'Catalyst::Controller'; }
use NGCP::Panel::Form::Administrator qw();
use NGCP::Panel::Utils::Navigation;

sub auto :Does(ACL) :ACLDetachTo('/denied_page') :AllowedRole(admin) {
    my ($self, $c) = @_;
    $c->log->debug(__PACKAGE__ . '::auto');
    return 1;
}

sub list_admin :PathPart('administrator') :Chained('/') :CaptureArgs(0) {
    my ($self, $c) = @_;
    $c->stash(
        admins => $c->model('DB')->resultset('admins'),
        template => 'administrator/list.tt',
    );
    return;
}

sub root :Chained('list_admin') :PathPart('') :Args(0) {
    my ($self, $c) = @_;
    return;
}

sub ajax :Chained('list_admin') :PathPart('ajax') :Args(0) {
    my ($self, $c) = @_;
    my $admins = $c->stash->{admins};
    $c->forward(
        '/ajax_process_resultset', [
            $admins,
            [qw(id login is_master is_active read_only show_passwords call_data lawful_intercept)],
            [ qw(login) ]
        ]
    );
    $c->detach($c->view('JSON'));
    return;
}

sub create :Chained('list_admin') :PathPart('create') :Args(0) {
    my ($self, $c) = @_;

#    use Data::Printer; p $c->user;
#    $c->detach('/denied_page')
#    	unless($c->user->{is_master});

    my $form = NGCP::Panel::Form::Administrator->new;
    $form->process(
        posted => $c->request->method eq 'POST',
        params => $c->request->params,
        action => $c->uri_for('create'),
    );
    return if NGCP::Panel::Utils::Navigation::check_form_buttons(
        c => $c,
        form => $form,
        fields => [qw(administrator.create)],
        back_uri => $c->uri_for('create')
    );
    if ($form->validated) {
        # TODO: check if reseller, and if so, auto-set contract;
        # also, only show admins within reseller_id if reseller
        try {
            delete $form->params->{save};
            $form->params->{is_superuser} = 1;
            $form->params->{reseller_id} = 1;
            $c->model('DB')->resultset('admins')->create($form->params);
            $c->flash(messages => [{type => 'success', text => 'Administrator created.'}]);
        } catch($e) {
            $c->log->error($e);
            $c->flash(messages => [{type => 'error', text => 'Creating administrator failed'}]);
        }
        $c->response->redirect($c->uri_for);
        return;
    }
    $c->stash({
        create_flag => 1,
        close_target => $c->uri_for,
        form => $form,
    });
}

sub base :Chained('list_admin') :PathPart('') :CaptureArgs(1) {
    my ($self, $c, $administrator_id) = @_;
    unless ($administrator_id && $administrator_id->is_integer) {
        $c->flash(messages => [{type => 'error', text => 'invalid administrator id'}]);
        $c->response->redirect($c->uri_for);
        return;
    }
    $c->stash(administrator => {$c->stash->{admins}->find($administrator_id)->get_inflated_columns});
}

sub edit :Chained('base') :PathPart('edit') :Args(0) {
    my ($self, $c) = @_;
    my $posted = $c->request->method eq 'POST';
    my $form = NGCP::Panel::Form::Administrator->new;
    $c->stash->{administrator}->{'reseller.id'} = delete $c->stash->{administrator}->{reseller_id};
    $form->field('md5pass')->{required} = 0;
    $form->process(
        posted => 1,
        params => $posted ? $c->request->params : $c->stash->{administrator},
        action => $c->uri_for($c->stash->{administrator}->{id}, 'edit'),
    );
    # TODO: if pass is empty, don't update it
    if ($posted && $form->validated) {
        try {
            my $form_values = $form->value;
            # flatten nested hashref instead of recursive update
            $form_values->{reseller_id} = delete $form_values->{reseller}{id};
            delete $form_values->{reseller};
            delete $form_values->{md5pass} unless length $form_values->{md5pass};
            $c->stash->{admins}->search_rs({ id => $form_values->{id} })->update_all($form_values);
            $c->flash(messages => [{type => 'success', text => 'Administrator changed.'}]);
        } catch($e) {
            $c->log->error($e);
            $c->flash(messages => [{type => 'error', text => 'Updating administrator failed'}]);
        };
        $c->response->redirect($c->uri_for);
    }
    $c->stash({
        close_target => $c->uri_for,
        form => $form,
        edit_flag => 1,
    });
    return;
}

sub delete :Chained('base') :PathPart('delete') :Args(0) {
    my ($self, $c) = @_;
    try {
        $c->model('DB')->resultset('admins')->find($c->stash->{administrator}->{id})->delete;
        $c->flash(messages => [{type => 'success', text => 'Administrator deleted.'}]);
    } catch($e) {
        $c->log->error($e);
        $c->flash(messages => [{type => 'error', text => 'Deleting administrator failed'}]);
    };
    $c->response->redirect($c->uri_for);
    return;
}

$CLASS->meta->make_immutable;

__END__

=encoding UTF-8

=head1 NAME

NGCP::Panel::Controller::Administrator - manage platform administrators

=head1 DESCRIPTION

View and edit platform administrators. Administrators have the highest access level and thus can exert the highest
amount of control over resellers and subscribers.

=head1 METHODS

=head2 C<list_admin>

Stashes administrator data structure. Chains off to L</root>.

=head2 C<root>

Display administrators through F<administrator/list.tt> template.

=head2 C<ajax>

JSON emitter for administrator data structure. Implicitly called from F<administrator/list.tt> template.

=head2 C<create>

Show modal dialog form and save administrator details to database.

=head2 C<base>

Capture id of existing administrator. Used for L</edit> and L</delete>.

=head1 AUTHOR

Lars Dieckow C<< <ldieckow@sipwise.com> >>

=head1 LICENSE

This library is free software. You can redistribute it and/or modify
it under the same terms as Perl itself.

# vim: set tabstop=4 expandtab: