2018-09-25 11:30:50 +00:00
|
|
|
<?php namespace BookStack\Auth;
|
2015-09-04 16:16:58 +00:00
|
|
|
|
2018-01-28 14:08:14 +00:00
|
|
|
use Activity;
|
2019-10-05 11:55:01 +00:00
|
|
|
use BookStack\Entities\Book;
|
|
|
|
use BookStack\Entities\Bookshelf;
|
|
|
|
use BookStack\Entities\Chapter;
|
|
|
|
use BookStack\Entities\Page;
|
2018-01-28 18:09:26 +00:00
|
|
|
use BookStack\Exceptions\NotFoundException;
|
2018-12-30 16:11:58 +00:00
|
|
|
use BookStack\Exceptions\UserUpdateException;
|
2018-09-25 11:30:50 +00:00
|
|
|
use BookStack\Uploads\Image;
|
2016-09-17 20:33:55 +00:00
|
|
|
use Exception;
|
2019-04-06 15:21:20 +00:00
|
|
|
use Illuminate\Database\Eloquent\Builder;
|
2020-11-20 20:10:18 +00:00
|
|
|
use Illuminate\Pagination\LengthAwarePaginator;
|
2018-01-28 14:08:14 +00:00
|
|
|
use Images;
|
2019-10-05 11:55:01 +00:00
|
|
|
use Log;
|
2015-09-04 16:16:58 +00:00
|
|
|
|
|
|
|
class UserRepo
|
|
|
|
{
|
|
|
|
|
|
|
|
protected $user;
|
2015-09-06 11:14:32 +00:00
|
|
|
protected $role;
|
2015-09-04 16:16:58 +00:00
|
|
|
|
|
|
|
/**
|
|
|
|
* UserRepo constructor.
|
|
|
|
*/
|
2019-10-05 11:55:01 +00:00
|
|
|
public function __construct(User $user, Role $role)
|
2015-09-04 16:16:58 +00:00
|
|
|
{
|
|
|
|
$this->user = $user;
|
2015-09-06 11:14:32 +00:00
|
|
|
$this->role = $role;
|
2015-09-04 16:16:58 +00:00
|
|
|
}
|
|
|
|
|
2015-09-06 11:14:32 +00:00
|
|
|
/**
|
2020-02-02 17:31:00 +00:00
|
|
|
* Get a user by their email address.
|
2015-09-06 11:14:32 +00:00
|
|
|
*/
|
2020-02-02 17:31:00 +00:00
|
|
|
public function getByEmail(string $email): ?User
|
2015-09-06 11:14:32 +00:00
|
|
|
{
|
2015-09-04 16:16:58 +00:00
|
|
|
return $this->user->where('email', '=', $email)->first();
|
|
|
|
}
|
2015-09-05 19:25:57 +00:00
|
|
|
|
2015-09-06 11:14:32 +00:00
|
|
|
/**
|
|
|
|
* @param int $id
|
|
|
|
* @return User
|
|
|
|
*/
|
2015-09-05 19:25:57 +00:00
|
|
|
public function getById($id)
|
|
|
|
{
|
2018-12-30 16:11:58 +00:00
|
|
|
return $this->user->newQuery()->findOrFail($id);
|
2015-09-05 19:25:57 +00:00
|
|
|
}
|
2015-09-06 11:14:32 +00:00
|
|
|
|
2016-02-27 19:24:42 +00:00
|
|
|
/**
|
|
|
|
* Get all the users with their permissions.
|
2019-04-06 15:21:20 +00:00
|
|
|
* @return Builder|static
|
2016-02-27 19:24:42 +00:00
|
|
|
*/
|
|
|
|
public function getAllUsers()
|
|
|
|
{
|
|
|
|
return $this->user->with('roles', 'avatar')->orderBy('name', 'asc')->get();
|
|
|
|
}
|
|
|
|
|
2016-05-22 09:44:31 +00:00
|
|
|
/**
|
|
|
|
* Get all the users with their permissions in a paginated format.
|
|
|
|
*/
|
2020-11-20 20:10:18 +00:00
|
|
|
public function getAllUsersPaginatedAndSorted(int $count, array $sortData): LengthAwarePaginator
|
2016-05-22 09:44:31 +00:00
|
|
|
{
|
2020-11-20 20:10:18 +00:00
|
|
|
$sort = $sortData['sort'];
|
|
|
|
if ($sort === 'latest_activity') {
|
|
|
|
$sort = \BookStack\Actions\Activity::query()->select('created_at')
|
|
|
|
->whereColumn('activities.user_id', 'users.id')
|
|
|
|
->latest()
|
|
|
|
->take(1);
|
|
|
|
}
|
|
|
|
|
|
|
|
$query = $this->user->with(['roles', 'avatar', 'latestActivity'])
|
|
|
|
->orderBy($sort, $sortData['order']);
|
2016-05-22 09:44:31 +00:00
|
|
|
|
|
|
|
if ($sortData['search']) {
|
|
|
|
$term = '%' . $sortData['search'] . '%';
|
2018-01-28 16:58:52 +00:00
|
|
|
$query->where(function ($query) use ($term) {
|
2016-05-22 09:44:31 +00:00
|
|
|
$query->where('name', 'like', $term)
|
|
|
|
->orWhere('email', 'like', $term);
|
|
|
|
});
|
|
|
|
}
|
|
|
|
|
|
|
|
return $query->paginate($count);
|
|
|
|
}
|
|
|
|
|
2018-08-21 01:19:25 +00:00
|
|
|
/**
|
2015-09-06 11:14:32 +00:00
|
|
|
* Creates a new user and attaches a role to them.
|
|
|
|
*/
|
2020-02-02 17:31:00 +00:00
|
|
|
public function registerNew(array $data, bool $emailConfirmed = false): User
|
2015-09-06 11:14:32 +00:00
|
|
|
{
|
2020-02-02 17:31:00 +00:00
|
|
|
$user = $this->create($data, $emailConfirmed);
|
|
|
|
$user->attachDefaultRole();
|
2018-12-22 19:29:19 +00:00
|
|
|
$this->downloadAndAssignUserAvatar($user);
|
2016-01-17 15:20:07 +00:00
|
|
|
|
2015-12-15 19:27:36 +00:00
|
|
|
return $user;
|
|
|
|
}
|
2015-09-06 11:14:32 +00:00
|
|
|
|
2018-01-28 18:09:26 +00:00
|
|
|
/**
|
|
|
|
* Assign a user to a system-level role.
|
|
|
|
* @param User $user
|
|
|
|
* @param $systemRoleName
|
|
|
|
* @throws NotFoundException
|
|
|
|
*/
|
|
|
|
public function attachSystemRole(User $user, $systemRoleName)
|
|
|
|
{
|
|
|
|
$role = $this->role->newQuery()->where('system_name', '=', $systemRoleName)->first();
|
|
|
|
if ($role === null) {
|
|
|
|
throw new NotFoundException("Role '{$systemRoleName}' not found");
|
|
|
|
}
|
|
|
|
$user->attachRole($role);
|
|
|
|
}
|
|
|
|
|
2015-09-06 11:14:32 +00:00
|
|
|
/**
|
|
|
|
* Checks if the give user is the only admin.
|
2019-10-05 11:55:01 +00:00
|
|
|
* @param User $user
|
2015-09-06 11:14:32 +00:00
|
|
|
* @return bool
|
|
|
|
*/
|
|
|
|
public function isOnlyAdmin(User $user)
|
|
|
|
{
|
2018-01-28 16:58:52 +00:00
|
|
|
if (!$user->hasSystemRole('admin')) {
|
|
|
|
return false;
|
|
|
|
}
|
2015-09-06 11:14:32 +00:00
|
|
|
|
2017-12-29 16:14:20 +00:00
|
|
|
$adminRole = $this->role->getSystemRole('admin');
|
2018-01-28 16:58:52 +00:00
|
|
|
if ($adminRole->users->count() > 1) {
|
|
|
|
return false;
|
|
|
|
}
|
2015-09-06 11:14:32 +00:00
|
|
|
return true;
|
|
|
|
}
|
|
|
|
|
2018-12-30 16:11:58 +00:00
|
|
|
/**
|
|
|
|
* Set the assigned user roles via an array of role IDs.
|
|
|
|
* @param User $user
|
|
|
|
* @param array $roles
|
|
|
|
* @throws UserUpdateException
|
|
|
|
*/
|
|
|
|
public function setUserRoles(User $user, array $roles)
|
|
|
|
{
|
|
|
|
if ($this->demotingLastAdmin($user, $roles)) {
|
|
|
|
throw new UserUpdateException(trans('errors.role_cannot_remove_only_admin'), $user->getEditUrl());
|
|
|
|
}
|
|
|
|
|
|
|
|
$user->roles()->sync($roles);
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Check if the given user is the last admin and their new roles no longer
|
|
|
|
* contains the admin role.
|
|
|
|
* @param User $user
|
|
|
|
* @param array $newRoles
|
|
|
|
* @return bool
|
|
|
|
*/
|
|
|
|
protected function demotingLastAdmin(User $user, array $newRoles) : bool
|
|
|
|
{
|
|
|
|
if ($this->isOnlyAdmin($user)) {
|
|
|
|
$adminRole = $this->role->getSystemRole('admin');
|
|
|
|
if (!in_array(strval($adminRole->id), $newRoles)) {
|
|
|
|
return true;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
return false;
|
|
|
|
}
|
|
|
|
|
2015-09-06 11:14:32 +00:00
|
|
|
/**
|
|
|
|
* Create a new basic instance of user.
|
|
|
|
*/
|
2020-02-02 17:31:00 +00:00
|
|
|
public function create(array $data, bool $emailConfirmed = false): User
|
2015-09-06 11:14:32 +00:00
|
|
|
{
|
2016-01-13 22:22:30 +00:00
|
|
|
return $this->user->forceCreate([
|
2015-09-06 11:14:32 +00:00
|
|
|
'name' => $data['name'],
|
|
|
|
'email' => $data['email'],
|
2016-04-03 11:16:54 +00:00
|
|
|
'password' => bcrypt($data['password']),
|
2020-02-02 17:31:00 +00:00
|
|
|
'email_confirmed' => $emailConfirmed,
|
|
|
|
'external_auth_id' => $data['external_auth_id'] ?? '',
|
2015-09-06 11:14:32 +00:00
|
|
|
]);
|
|
|
|
}
|
2015-12-15 19:27:36 +00:00
|
|
|
|
|
|
|
/**
|
|
|
|
* Remove the given user from storage, Delete all related content.
|
2019-10-05 11:55:01 +00:00
|
|
|
* @param User $user
|
2018-01-28 14:08:14 +00:00
|
|
|
* @throws Exception
|
2015-12-15 19:27:36 +00:00
|
|
|
*/
|
|
|
|
public function destroy(User $user)
|
|
|
|
{
|
|
|
|
$user->socialAccounts()->delete();
|
2019-12-29 17:03:52 +00:00
|
|
|
$user->apiTokens()->delete();
|
2015-12-15 19:27:36 +00:00
|
|
|
$user->delete();
|
2018-01-28 13:50:24 +00:00
|
|
|
|
2018-01-28 14:08:14 +00:00
|
|
|
// Delete user profile images
|
2019-04-21 14:52:29 +00:00
|
|
|
$profileImages = Image::where('type', '=', 'user')->where('uploaded_to', '=', $user->id)->get();
|
2018-01-28 14:08:14 +00:00
|
|
|
foreach ($profileImages as $image) {
|
2018-05-13 16:41:35 +00:00
|
|
|
Images::destroy($image);
|
2018-01-28 13:50:24 +00:00
|
|
|
}
|
2015-12-15 19:27:36 +00:00
|
|
|
}
|
2016-02-16 21:25:11 +00:00
|
|
|
|
|
|
|
/**
|
|
|
|
* Get the latest activity for a user.
|
2019-10-05 11:55:01 +00:00
|
|
|
* @param User $user
|
2016-02-16 21:25:11 +00:00
|
|
|
* @param int $count
|
|
|
|
* @param int $page
|
|
|
|
* @return array
|
|
|
|
*/
|
|
|
|
public function getActivity(User $user, $count = 20, $page = 0)
|
|
|
|
{
|
2018-01-28 14:08:14 +00:00
|
|
|
return Activity::userActivity($user, $count, $page);
|
2016-02-16 21:25:11 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2016-02-17 22:11:48 +00:00
|
|
|
* Get the recently created content for this given user.
|
2016-02-16 21:25:11 +00:00
|
|
|
*/
|
2019-10-05 11:55:01 +00:00
|
|
|
public function getRecentlyCreated(User $user, int $count = 20): array
|
2016-02-16 21:25:11 +00:00
|
|
|
{
|
2019-10-05 11:55:01 +00:00
|
|
|
$query = function (Builder $query) use ($user, $count) {
|
|
|
|
return $query->orderBy('created_at', 'desc')
|
|
|
|
->where('created_by', '=', $user->id)
|
|
|
|
->take($count)
|
|
|
|
->get();
|
2019-04-06 15:21:20 +00:00
|
|
|
};
|
|
|
|
|
2016-02-17 22:11:48 +00:00
|
|
|
return [
|
2019-10-05 11:55:01 +00:00
|
|
|
'pages' => $query(Page::visible()->where('draft', '=', false)),
|
|
|
|
'chapters' => $query(Chapter::visible()),
|
|
|
|
'books' => $query(Book::visible()),
|
|
|
|
'shelves' => $query(Bookshelf::visible()),
|
2016-02-17 22:11:48 +00:00
|
|
|
];
|
2016-02-16 21:25:11 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Get asset created counts for the give user.
|
|
|
|
*/
|
2019-10-05 11:55:01 +00:00
|
|
|
public function getAssetCounts(User $user): array
|
2016-02-16 21:25:11 +00:00
|
|
|
{
|
2019-10-05 11:55:01 +00:00
|
|
|
$createdBy = ['created_by' => $user->id];
|
2016-02-16 21:25:11 +00:00
|
|
|
return [
|
2019-10-05 11:55:01 +00:00
|
|
|
'pages' => Page::visible()->where($createdBy)->count(),
|
|
|
|
'chapters' => Chapter::visible()->where($createdBy)->count(),
|
|
|
|
'books' => Book::visible()->where($createdBy)->count(),
|
|
|
|
'shelves' => Bookshelf::visible()->where($createdBy)->count(),
|
2016-02-16 21:25:11 +00:00
|
|
|
];
|
|
|
|
}
|
2016-02-17 22:11:48 +00:00
|
|
|
|
2016-05-01 18:36:53 +00:00
|
|
|
/**
|
|
|
|
* Get the roles in the system that are assignable to a user.
|
|
|
|
* @return mixed
|
|
|
|
*/
|
2016-09-29 11:43:46 +00:00
|
|
|
public function getAllRoles()
|
2016-05-01 18:36:53 +00:00
|
|
|
{
|
2020-08-04 13:55:01 +00:00
|
|
|
return $this->role->newQuery()->orderBy('display_name', 'asc')->get();
|
2016-05-01 18:36:53 +00:00
|
|
|
}
|
|
|
|
|
2018-01-28 18:09:26 +00:00
|
|
|
/**
|
2018-12-22 19:29:19 +00:00
|
|
|
* Get an avatar image for a user and set it as their avatar.
|
|
|
|
* Returns early if avatars disabled or not set in config.
|
2018-01-28 18:09:26 +00:00
|
|
|
* @param User $user
|
|
|
|
* @return bool
|
|
|
|
*/
|
2018-12-22 19:29:19 +00:00
|
|
|
public function downloadAndAssignUserAvatar(User $user)
|
2018-01-28 18:09:26 +00:00
|
|
|
{
|
2018-12-22 19:29:19 +00:00
|
|
|
if (!Images::avatarFetchEnabled()) {
|
2018-01-28 18:09:26 +00:00
|
|
|
return false;
|
|
|
|
}
|
|
|
|
|
|
|
|
try {
|
2018-12-22 19:29:19 +00:00
|
|
|
$avatar = Images::saveUserAvatar($user);
|
2018-01-28 18:09:26 +00:00
|
|
|
$user->avatar()->associate($avatar);
|
|
|
|
$user->save();
|
|
|
|
return true;
|
|
|
|
} catch (Exception $e) {
|
2019-10-05 11:55:01 +00:00
|
|
|
Log::error('Failed to save user avatar image');
|
2018-01-28 18:09:26 +00:00
|
|
|
return false;
|
|
|
|
}
|
|
|
|
}
|
2018-08-21 01:19:25 +00:00
|
|
|
}
|