UploadBrowseProxy.php

<?php
/*
 SPDX-FileCopyrightText: © 2015 Siemens AG
 
 SPDX-License-Identifier: GPL-2.0-only
*/
 
namespace Fossology\Lib\Proxy;
 
use Fossology\Lib\Auth\Auth;
use Fossology\Lib\Data\Upload\UploadEvents;
use Fossology\Lib\Data\UploadStatus;
use Fossology\Lib\Db\DbManager;
 
class UploadBrowseProxy
{
  const PRIO_COLUMN = 'priority';
 
  protected $groupId;
  protected $userPerm;
  protected $dbManager;
 
  public function __construct($groupId, $userPerm, DbManager $dbManager, $doSanity=true)
  {
    $this->groupId = $groupId;
    $this->userPerm = $userPerm;
    $this->dbManager = $dbManager;
    if ($doSanity) {
      $this->sanity();
    }
  }
 
  public function sanity()
  {
    $params = array($this->groupId, UploadStatus::OPEN, Auth::PERM_READ);
    $sql = 'INSERT INTO upload_clearing (upload_fk,group_fk,status_fk,'.self::PRIO_COLUMN.') '
         . ' SELECT upload_pk,$1,$2,upload_pk as '.self::PRIO_COLUMN
         . ' FROM upload LEFT JOIN upload_clearing ON upload_pk=upload_fk AND group_fk=$1'
         . ' WHERE upload_clearing.upload_fk IS NULL'
         . ' AND (public_perm>=$3 OR EXISTS(SELECT * FROM perm_upload WHERE perm_upload.upload_fk = upload_pk AND group_fk=$1))';
    $this->dbManager->getSingleRow($sql, $params);
  }
 
  public function updateTable($columnName, $uploadId, $value)
  {
    if ($columnName == 'status_fk') {
      $this->changeStatus($uploadId, $value);
    } else if ($columnName == 'assignee' && $this->userPerm) {
      $sql = "UPDATE upload_clearing SET assignee=$1 WHERE group_fk=$2 AND upload_fk=$3";
      $this->dbManager->getSingleRow($sql, array($value, $this->groupId, $uploadId), $sqlLog = __METHOD__);
      $this->setAssigneeEvent($uploadId);
    } else {
      throw new \Exception('invalid column');
    }
  }
 
  protected function changeStatus($uploadId, $newStatus)
  {
    if ($newStatus == UploadStatus::REJECTED && $this->userPerm) {
      $this->setStatusAndComment($uploadId, $newStatus, $commentText = '');
    } else if ($newStatus == UploadStatus::REJECTED) {
      throw new \Exception('missing permission');
    } else if ($this->userPerm) {
      $sql = "UPDATE upload_clearing SET status_fk=$1 WHERE group_fk=$2 AND upload_fk=$3";
      $this->dbManager->getSingleRow($sql, array($newStatus, $this->groupId, $uploadId), __METHOD__ . '.advisor');
    } else {
      $sql = "UPDATE upload_clearing SET status_fk=$1 WHERE group_fk=$2 AND upload_fk=$3 AND status_fk<$4";
      $params = array($newStatus, $this->groupId, $uploadId, UploadStatus::REJECTED);
      $this->dbManager->getSingleRow($sql, $params,  __METHOD__ . '.user');
    }
    if ($newStatus == UploadStatus::CLOSED || $newStatus == UploadStatus::REJECTED) {
      $this->setCloseEvent($uploadId);
    }
  }
 
  public function setStatusAndComment($uploadId, $statusId, $commentText)
  {
    $sql = "UPDATE upload_clearing SET status_fk=$1, status_comment=$2 WHERE group_fk=$3 AND upload_fk=$4";
    $this->dbManager->getSingleRow($sql, array($statusId, $commentText, $this->groupId, $uploadId), __METHOD__);
    if ($statusId == UploadStatus::CLOSED || $statusId == UploadStatus::REJECTED) {
      $this->setCloseEvent($uploadId);
    }
  }
 
  private function setAssigneeEvent($uploadId)
  {
    $sql = "SELECT 1 as exists FROM upload_events WHERE upload_fk = $1 " .
      "AND event_type = " . UploadEvents::ASSIGNEE_EVENT;
    $row = $this->dbManager->getSingleRow($sql, [$uploadId],
      __METHOD__ . ".exists");
    if (empty($row) || empty($row["exists"])) {
      $sql = "INSERT INTO upload_events (upload_fk, event_type) VALUES ($1, " .
        UploadEvents::ASSIGNEE_EVENT . ")";
      $this->dbManager->getSingleRow($sql, [$uploadId],
        __METHOD__ . ".insert");
    }
  }
 
  private function setCloseEvent($uploadId)
  {
    $sql = "SELECT 1 as exists FROM upload_events WHERE upload_fk = $1 " .
      "AND event_type = " . UploadEvents::UPLOAD_CLOSED_EVENT;
    $row = $this->dbManager->getSingleRow($sql, [$uploadId],
      __METHOD__ . ".exists");
    if (empty($row) || empty($row["exists"])) {
      $sql = "INSERT INTO upload_events (upload_fk, event_type) VALUES ($1, " .
        UploadEvents::UPLOAD_CLOSED_EVENT . ")";
      $this->dbManager->getSingleRow($sql, [$uploadId],
        __METHOD__ . ".insert");
    }
  }
 
  public function moveUploadToInfinity($uploadId, $top)
  {
    $fun = $top ? 'MAX('.self::PRIO_COLUMN.')+1' : 'MIN('.self::PRIO_COLUMN.')-1';
    $sql = "UPDATE upload_clearing SET ".self::PRIO_COLUMN."=(SELECT $fun FROM upload_clearing WHERE group_fk=$1)"
            . " WHERE group_fk=$1 AND upload_fk=$2";
    $this->dbManager->getSingleRow($sql,
            array($this->groupId,$uploadId),
            __METHOD__.($top?'+':'-'));
  }
 
  public function moveUploadBeyond($moveUpload, $beyondUpload)
  {
    $this->dbManager->begin();
    $this->dbManager->prepare($stmt = __METHOD__ . '.get.single.Upload',
        $sql='SELECT upload_fk,'.self::PRIO_COLUMN.' FROM upload_clearing WHERE group_fk=$1 AND upload_fk=$2');
    $movePoint = $this->dbManager->getSingleRow($sql, array($this->groupId,$moveUpload), $stmt);
    $beyondPoint = $this->dbManager->getSingleRow($sql, array($this->groupId,$beyondUpload), $stmt);
 
    if ($movePoint[self::PRIO_COLUMN] > $beyondPoint[self::PRIO_COLUMN]) {
      $farPoint = $this->dbManager->getSingleRow("SELECT MAX(".self::PRIO_COLUMN.") m FROM upload_clearing WHERE group_fk=$1 AND ".self::PRIO_COLUMN."<$2",
              array($this->groupId,$beyondPoint[self::PRIO_COLUMN]), 'get.upload.with.lower.priority');
      $farPrio = $farPoint['m']!==null ? $farPoint['m'] : $beyondPoint[self::PRIO_COLUMN]-1;
    } else {
      $farPoint = $this->dbManager->getSingleRow("SELECT MIN(".self::PRIO_COLUMN.") m FROM upload_clearing WHERE group_fk=$1 AND ".self::PRIO_COLUMN.">$2",
              array($this->groupId,$beyondPoint[self::PRIO_COLUMN]), 'get.upload.with.higher.priority');
      $farPrio = $farPoint['m']!==null ? $farPoint['m'] : $beyondPoint[self::PRIO_COLUMN]+1;
    }
 
    $newPriority = ($farPrio + $beyondPoint[self::PRIO_COLUMN]) / 2;
    $this->dbManager->getSingleRow('UPDATE upload_clearing SET '.self::PRIO_COLUMN.'=$1 WHERE group_fk=$2 AND upload_fk=$3',
            array($newPriority, $this->groupId, $moveUpload),
            __METHOD__.'.update.priority');
    $this->dbManager->commit();
  }
 
  public function getFolderPartialQuery(& $params)
  {
    if (count($params)!=1) {
      throw new \Exception('expected argument to be array with exactly one element for folderId');
    }
    if (! is_array($params[0])) {
      $params[0] = [$params[0]];
    }
    $params[0] = '{' . implode(',', $params[0]) . '}';
    $params[] = $this->groupId;
    $params[] = Auth::PERM_READ;
    return 'upload
        INNER JOIN upload_clearing ON upload_pk = upload_clearing.upload_fk AND group_fk=$2
        INNER JOIN uploadtree ON upload_pk = uploadtree.upload_fk AND upload.pfile_fk = uploadtree.pfile_fk
        WHERE upload_pk IN (SELECT child_id FROM foldercontents WHERE foldercontents_mode&2 != 0 AND parent_fk = ANY($1::int[]) )
         AND (public_perm>=$3
              OR EXISTS(SELECT * FROM perm_upload WHERE perm_upload.upload_fk = upload_pk AND group_fk=$2))
         AND parent IS NULL
         AND lft IS NOT NULL';
  }
 
  public function getStatus($uploadId)
  {
    $row = $this->dbManager->getSingleRow("SELECT status_fk FROM upload_clearing WHERE upload_fk=$1 AND group_fk=$2",
            array($uploadId, $this->groupId));
    if (false === $row) {
      throw new \Exception("cannot find uploadId=$uploadId");
    }
    return $row['status_fk'];
  }
}