Add left navigation for the ManageAccountController
[cacert-mgr.git] / manager / application / controllers / ManageAccountController.php
index 0197fd8..e785fd1 100644 (file)
@@ -7,6 +7,11 @@ class ManageAccountController extends Zend_Controller_Action
 {
     const MAX_POINTS_PER_ASSURANCE = 35;
     const MAX_ASSURANCE_POINTS = 100;
+    const MAX_POINTS_TOTAL = 150;
+    const ADMIN_INCREASE_FRAGMENT_SIZE = 2;
+    
+    // Value used in the database to identify a admin increase
+    const ADMIN_INCREASE_METHOD = 'Administrative Increase';
     
     protected $db;
     
@@ -16,7 +21,21 @@ class ManageAccountController extends Zend_Controller_Action
             APPLICATION_ENV);
 
         $this->db = Zend_Db::factory($config->ca_mgr->db->auth->pdo,
-           $config->ca_mgr->db->auth);
+            $config->ca_mgr->db->auth);
+        
+        // Build the left navigation
+        $actions = array();
+        $actions['assurance'] = I18n::_('Automated Assurance');
+        $actions['admin-increase'] = I18n::_('Administrative Increase');
+        $actions['assurer-challenge'] = I18n::_('Assurer Challenge');
+        $url = array('controller' => 'manage-account');
+        foreach ($actions as $action => $label) {
+            $url['action'] = $action;
+            $link = '<a href="'.$this->view->url($url, 'default', true).'">'.
+                $label . '</a>';
+            $this->view->leftNav($link);
+       }
+       
     }
     
     public function indexAction()
@@ -37,28 +56,9 @@ class ManageAccountController extends Zend_Controller_Action
         // Form is valid -> get values for processing
         $values = $form->getValues();
         
-        
-        // Check identity of the user
-        $session = Zend_Registry::get('session');
-        if ($session->authdata['authed'] !== true) {
-            throw new Exception(__METHOD__ . ': you need to log in to use this feature');
-        }
-        $query = 'select `id` from `users` where `id` = :user';
-        $query_params['user'] = $session->authdata['authed_id'];
-        $result = $this->db->query($query, $query_params);
-        if ($result->rowCount() !== 1) {
-            throw new Exception(__METHOD__ . ': user ID not found in the data base');
-        }
-        $row = $result->fetch();
-        $user['id'] = $row['id'];
-        
-        
-        // Get current points of the user
-        $query = 'select sum(`points`) as `total` from `notary` where `to` = :user';
-        $query_params['user'] = $user['id'];
-        $row = $this->db->query($query, $query_params)->fetch();
-        if ($row['total'] === NULL) $row['total'] = 0;
-        $user['points'] = $row['total'];
+        // Get user data
+        $user['id'] = $this->getUserId();
+        $user['points'] = $this->getPoints($user['id']);
         
         
         // Do the actual assurances
@@ -97,21 +97,145 @@ class ManageAccountController extends Zend_Controller_Action
         } while ($quantity > 0);
         
         
-        // Fix the assurer flag
-        $query = 'UPDATE `users` SET `assurer` = 1 WHERE `users`.`id` = :user AND '.
+        // Maybe user is now assurer
+        $this->fixAssurerFlag($user['id']);
+        
+        return;
+    }
+    
+    public function adminIncreaseAction()
+    {
+        // Validate form
+        $form = $this->getAdminIncreaseForm();
+        if (!$this->getRequest()->isPost() || !$form->isValid($_POST)) {
+            $this->view->admin_increase_form = $form;
+            return $this->render('admin-increase-form');
+        }
+        
+        // Form is valid -> get values for processing
+        $values = $form->getValues();
+        
+        // Get user data
+        $user['id'] = $this->getUserId();
+        $user['points'] = $this->getPoints($user['id']);
+        
+        
+        // Do the actual increase
+        $increase = array(); // Make sure the array is empty
+        $increase['from'] = $user['id'];
+        $increase['to'] = $user['id'];
+        $increase['location'] = $values['location'];
+        $increase['date'] = $values['date'];
+        $increase['method'] = self::ADMIN_INCREASE_METHOD;
+        $increase['when'] = new Zend_Db_Expr('now()');
+        $this->view->adminIncreasesDone = array();
+        
+        $quantity = $values['quantity'];
+        do {
+            // Split up into multiple increases if fragment flag is set
+            if ($values['fragment'] == '1' &&
+                    $quantity > self::ADMIN_INCREASE_FRAGMENT_SIZE) {
+                $increase['awarded'] = self::ADMIN_INCREASE_FRAGMENT_SIZE;
+                $quantity -= self::ADMIN_INCREASE_FRAGMENT_SIZE;
+            } else {
+                $increase['awarded'] = $quantity;
+                $quantity = 0;
+            }
             
-            'EXISTS(SELECT * FROM `cats_passed` AS `cp`, `cats_variant` AS `cv` '.
-            'WHERE `cp`.`variant_id` = `cv`.`id` AND `cv`.`type_id` = 1 AND '.
-            '`cp`.`user_id` = :user) AND '.
+            // Only assign points within the limit if unlimited flag is not set
+            if ($values['unlimited'] != '1') {
+                if ($user['points'] >= self::MAX_POINTS_TOTAL) {
+                    // No more administrative increases should be done
+                    break;
+                } elseif ($user['points'] + $increase['awarded'] > self::MAX_POINTS_TOTAL) {
+                    $increase['awarded'] = self::MAX_POINTS_TOTAL - $user['points'];
+                }
+            }
             
-                   '(SELECT SUM(`points`) FROM `notary` WHERE `to` = :user AND '.
-                   '`expire` < now()) >= 100';
-        $query_params['user'] = $user['id'];
-        $this->db->query($query, $query_params);
+            // Admin increases always have `points` == `awarded`
+            $increase['points'] = $increase['awarded'];
+            
+            $this->db->insert('notary', $increase);
+            
+            $user['points'] += $increase['points'];
+            $this->view->adminIncreasesDone[] = $increase['points'];
+        } while ($quantity > 0);
+        
+        // Maybe user is now assurer
+        $this->fixAssurerFlag($user['id']);
         
         return;
     }
     
+    
+    public function assurerChallengeAction()
+    {
+        // Validate form
+        $form = $this->getAssurerChallengeForm();
+        if (!$this->getRequest()->isPost() || !$form->isValid($_POST)) {
+            $this->view->assurer_challenge_form = $form;
+            return $this->render('assurer-challenge-form');
+        }
+        
+        // Form is valid -> get values for processing
+        $values = $form->getValues();
+        
+        // Get user data
+        $user['id'] = $this->getUserId();
+        
+        // Assign the assurer challenge
+        $challenge = array(); // Make sure the array is empty
+        $challenge['user_id'] = $user['id'];
+        $challenge['variant_id'] = $values['variant'];
+        $challenge['pass_date'] = date('Y-m-d H:i:s');
+        $this->db->insert('cats_passed', $challenge);
+        
+        // Maybe user is now assurer
+        $this->fixAssurerFlag($user['id']);
+        
+        return;
+    }
+    
+    /**
+     * Get and check the user ID of the current user
+     * 
+     * @return int The ID of the current user
+     */
+    protected function getUserId()
+    {
+        $session = Zend_Registry::get('session');
+        if ($session->authdata['authed'] !== true) {
+            throw new Exception(__METHOD__ . ': you need to log in to use this feature');
+        }
+        
+        // Check if the ID is present on the test server
+        $query = 'select `id` from `users` where `id` = :user';
+        $query_params['user'] = $session->authdata['authed_id'];
+        $result = $this->db->query($query, $query_params);
+        if ($result->rowCount() !== 1) {
+            throw new Exception(__METHOD__ . ': user ID not found in the data base');
+        }
+        $row = $result->fetch();
+        
+        return $row['id'];
+    }
+    
+    /**
+     * Get current points of the user
+     * 
+     * @param int $user_id ID of the user
+     * @return int the amount of points the user currently has
+     */
+    protected function getPoints($user_id)
+    {
+        $query = 'select sum(`points`) as `total` from `notary` where `to` = :user';
+        $query_params['user'] = $user_id;
+        $row = $this->db->query($query, $query_params)->fetch();
+        if ($row['total'] === NULL) $row['total'] = 0;
+        
+        return $row['total'];
+    }
+    
     /**
      * Get the first assurer who didn't already assure the user
      * 
@@ -134,10 +258,31 @@ class ManageAccountController extends Zend_Controller_Action
         return $row['assurer'];
     }
     
+    /**
+     * Fix the assurer flag for the given user
+     * 
+     * @param $user_id ID of the user
+     */
+    protected function fixAssurerFlag($user_id)
+    {
+       // TODO: unset flag if requirements are not met
+       
+        $query = 'UPDATE `users` SET `assurer` = 1 WHERE `users`.`id` = :user AND '.
+            
+            'EXISTS(SELECT * FROM `cats_passed` AS `cp`, `cats_variant` AS `cv` '.
+            'WHERE `cp`.`variant_id` = `cv`.`id` AND `cv`.`type_id` = 1 AND '.
+            '`cp`.`user_id` = :user) AND '.
+            
+            '(SELECT SUM(`points`) FROM `notary` WHERE `to` = :user AND '.
+            '`expire` < now()) >= 100';
+        $query_params['user'] = $user_id;
+        $this->db->query($query, $query_params);
+    }
+    
     protected function getAssuranceForm()
     {
         $form = new Zend_Form();
-        $form->setAction('/add-points/assurance')->setMethod('post');
+        $form->setAction('/manage-account/assurance')->setMethod('post');
         
         $quantity = new Zend_Form_Element_Text('quantity');
         $quantity->setRequired(true)
@@ -166,4 +311,71 @@ class ManageAccountController extends Zend_Controller_Action
         
         return $form;
     }
+    
+    protected function getAdminIncreaseForm()
+    {
+        $form = new Zend_Form();
+        $form->setAction('/manage-account/admin-increase')->setMethod('post');
+        
+        $quantity = new Zend_Form_Element_Text('quantity');
+        $quantity->setRequired(true)
+                ->setLabel(I18n::_('Number of Points'))
+                ->addFilter(new Zend_Filter_Int())
+                ->addValidator(new Zend_Validate_GreaterThan(0));
+        $form->addElement($quantity);
+        
+        $fragment = new Zend_Form_Element_Checkbox('fragment');
+        $fragment->setLabel(I18n::_('Split into 2-Point Fragments'))
+                ->setChecked(true);
+        $form->addElement($fragment);
+        
+        $unlimited = new Zend_Form_Element_Checkbox('unlimited');
+        $unlimited->setLabel(I18n::_('Assign Points even if the Limit of 150 '.
+                        'is exceeded'))
+                ->setChecked(false);
+        $form->addElement($unlimited);
+        
+        $location = new Zend_Form_Element_Text('location');
+        $location->setRequired(true)
+                ->setLabel(I18n::_('Location'))
+                ->setValue(I18n::_('CAcert Test Manager'))
+                ->addValidator(new Zend_Validate_StringLength(1,255));
+        $form->addElement($location);
+        
+        $date = new Zend_Form_Element_Text('date');
+        $date->setRequired(true)
+            ->setLabel(I18n::_('Date of Increase'))
+            ->setValue(date('Y-m-d H:i:s'))
+            ->addValidator(new Zend_Validate_StringLength(1,255));
+        $form->addElement($date);
+        
+        $submit = new Zend_Form_Element_Submit('submit');
+        $submit->setLabel(I18n::_('Give Me Points'));
+        $form->addElement($submit);
+        
+        return $form;
+    }
+    
+    protected function getAssurerChallengeForm()
+    {
+        $form = new Zend_Form();
+        $form->setAction('/manage-account/assurer-challenge')
+            ->setMethod('post');
+        
+        $variant = new Zend_Form_Element_Select('variant');
+        $variant->setLabel(I18n::_('Variant'));
+        // Get the available variants from the database
+        $query = 'select `id`, `test_text` from `cats_variant`
+            where `type_id` = 1';
+        $options = $this->db->fetchPairs($query);
+        $variant->setOptions($options)
+            ->setRequired(true);
+        $form->addElement($variant);
+        
+        $submit = new Zend_Form_Element_Submit('submit');
+        $submit->setLabel(I18n::_('Challenge Me'));
+        $form->addElement($submit);
+        
+        return $form;
+    }
 }