<?php
class AuditController extends Controller
{
    /**
     * @var string the default layout for the views. Defaults to 'column2', meaning
     * using two-column layout. See 'protected/views/layouts/column2.php'.
     */
    public $layout = '//layouts/column1';

    /**
     * 应用操作对象
     * @var object
     */
    private $_appModel;
    /**
     * 实例操作对象
     * @var object
     */
    private $_caseModel;
    /**
     * 用户权限判断对象
     * @var object
     */
    private $isAllowed;
    /**
     * 存放URL请求CALL参数
     * @var object
     */
    private $mRequest;
    
    /**
     * @return array action filters
     */
    public function filters()
    {
        return array(
            //'accessControl', // perform access control for CRUD operations
        );
    }

    /**
     * Specifies the access control rules.
     * This method is used by the 'accessControl' filter.
     * @return array access control rules
     */
    public function accessRules()
    {
        /*
        return array(
            array('allow',  // allow all users to perform 'index' and 'view' actions
                'actions' => array('index', 'audit', 'accept', 'reject'),
                'users' => array('@'),
            ),
            array('allow', // allow admin user to perform 'admin' and 'delete' actions
                'actions' => array('admin', 'delete'),
                'users' => array('admin'),
            ),
            array('deny',  // deny all users
                'users' => array('*'),
            ),
        );
        */
    }
    
    /**
     * 审核记录管理
     */
    public function actionAdmin()
    {
        $model = new History('search');
        $model->unsetAttributes();  // clear any default values
        if(isset($_GET['History']))
            $model->attributes = $_GET['History'];

        $this->render('admin', array('model' => $model));
    }
    
    /**
     * 查看详细
     */
    public function actionView()
    {
        $dataProvider = null;
        
        $this->checkUserIsAllowed();
        if($this->isAllowed && isset($this->mRequest->item, $this->mRequest->id))
        {
            $dataProvider = AuditManage::getViewData($this->mRequest->item, $this->mRequest->id);
            $viewClass = AuditManage::getViewClass($this->mRequest->item);
        }
        else
        {
            throw new CHttpException(404, '抱歉，您访问的页面不存在！');
        }
        $this->render('view', array(
                                       'dataProvider' => $dataProvider,
                                       'view' => $viewClass
                     ));    
    }
    
    /**
     * 应用审核
     */
    public function actionAudit()
    {
        $dataProvider = null;
        
        $this->checkUserIsAllowed();
        if($this->isAllowed && isset($this->mRequest->item))
        {
            $dataProvider = AuditManage::getAuditData($this->mRequest->item);
        }
        else
        {
            throw new CHttpException(404, '抱歉，您访问的页面不存在！');
        }
        $this->render('audit', array(
                                        'dataProvider' => $dataProvider,
                                        'item' => $this->mRequest->item
                     ));    
    }
    
    /**
     * 拒绝回退
     */
    public function actionReject()
    {
        $caseModel = $this->_loadCaseModel();

        if(!is_object($this->mRequest) || !isset($this->mRequest->item))
        {
            throw new CHttpException(404, '抱歉，您访问的页面不存在！');
        }
        
        if(is_array($caseModel) && count($caseModel))
        {
            foreach ($caseModel as $model)
            {
                // 检查实例是否有状态
                if($model->swHasStatus())
                {
                    // 获取工作流中允许转变状态 
                    $nextStatus = $model->swGetNextStatus();
                    // 过滤转变当前状态为回退
                    if (is_array($nextStatus) && $model->swNextStatus($nextStatus[0]))
                    {
                        if (isset($this->mRequest->aid)) 
                        {   // 应用升级拒绝
                            $status = $model->swGetStatus()->getId();
                            $model->case_status = $status;
                            $model->save();
                        }
                        else 
                        {   // 应用审核拒绝
                            $model->delete();
                        }
                    }
                }
            }
            
            // 工作流中断时同步应用当前状态
            $model = $this->_loadAppModel();
            
            if(isset($this->mRequest->aid))
            {   // 升级回退到已发布状态
                $model->app_state = Platform::APP_STATUS_PUBLISHED;
            }
            else
            {   // 审核未通过回退到开发状态
                $model->app_state = Platform::APP_STATUS_REJECT;
            }
            
            if (!$model->save())
            {
                print_r($model->getErrors());
            }
        }
        unset($this->_caseModel);
        unset($this->_appModel);
        
        if (Yii::app()->request->isPostRequest)
        {
            echo 1; // 批量拒绝成功
        }
        else
        {
            $this->redirect($this->createUrl('audit/audit', array("CALL" => CJSON::encode(array('item' => $this->mRequest->item)))));
        }
    }
    
    /**
     * 批准转变
     */
    public function actionAccept()
    {
        $caseModel = $this->_loadCaseModel();
        $status = null;
        
        if ( !is_object($this->mRequest) || !isset($this->mRequest->item) )
        {
            throw new CHttpException(404, '抱歉，您访问的页面不存在！');
        }
        
        if (is_array($caseModel) && count($caseModel))
        {
            foreach ($caseModel as $model)
            {
                // 检查实例是否有状态
                if($model->swHasStatus())
                {
                    // 获取工作流中允许转变状态 
                    $nextStatus = $model->swGetNextStatus();
                    // 过滤转变当前状态为批准
                    if(is_array($nextStatus) && $model->swNextStatus($nextStatus[1]))
                    {
                        $status = $model->swGetStatus()->getId();
                        
                        $model->case_status = $status;
                        
                        if(!$model->save())
                        {
                            print_r($model->getErrors());
                        }
                    }
                }
                
                // 工作流完成时同步应用当前状态
                if(Cases::STATUS_ARCHIVED === intval($status))
                {
                    // 更改应用当前状态
                    $model = $this->_loadAppModel();
                    
                    if(is_object($model) && ($model instanceof Platform))
                    {
                        $model->app_state = Platform::APP_STATUS_APPROVED;
                        
                        if(!$model->save())
                        {
                            print_r($model->getErrors());
                        }
                    }
                }
            }
        }
        unset($this->_caseModel);
        unset($this->_appModel);
        
        if (Yii::app()->request->isPostRequest)
        {
            echo 1; // 批量批准成功
        }
        else
        {
            $this->redirect($this->createUrl('audit/audit', array("CALL" => CJSON::encode(array('item' => $this->mRequest->item)))));
        }
    }
    
    /**
     * 应用升级操作
     *
     * 步骤如下:
     * [
     *   A.更新上线表中应用属性信息
     *   B.更新上线表中应用平台设置
     *   C.更新开发者测试表中应用当前状态
     * ]
     * 
     */
    public function actionUpgrade()
    {
        $this->_getRequest();
        
        if(!is_object($this->mRequest) || !isset($this->mRequest->aid, $this->mRequest->pid, $this->mRequest->item))
        {
            throw new CHttpException(404, '抱歉，您访问的页面不存在！');
        }
        
        $connection = Yii::app()->db;
        $transaction = $connection->beginTransaction();
        try 
        {
            $sqlStatement = "UPDATE `wave_func` AS `t1`, `wave_func_dev` AS `t2`
                                SET t1.pic = t2.pic, t1.info = t2.info, t1.sort_id = t2.sort_id, t1.appTime = t2.appTime,
                                        t1.recommend = t2.recommend, t1.developer = t2.developer, t1.upTime = t2.upTime, t1.www = t2.www
                                     WHERE t1.id=t2.id AND t2.id=:aid";
            $command = $connection->createCommand($sqlStatement);
            $command->bindValue(':aid', $this->mRequest->aid);
            $command->execute();

            $sqlStatement = "UPDATE `wave_func_plat` AS `t1`, `wave_func_plat_dev` AS `t2` 
                                SET t1.appTime = t2.appTime, 
                                    t1.upTime = t2.upTime, 
                                    t1.appHome = t2.appHome, 
                                    t1.classID = t2.classID, 
                                    t1.prop = t2.prop, 
                                    t1.dataFormat = t2.dataFormat, 
                                    t1.lang = t2.lang, 
                                    t1.ver = t2.ver, 
                                    t1.devType = t2.devType, 
                                    t1.isLinkWave = t2.isLinkWave, 
                                    t1.callback = t2.callback, 
                                    t1.ifWidth = t2.ifWidth, 
                                    t1.ifHeight = t2.ifHeight 
                                WHERE t1.app_id = t2.app_id 
                                  AND t1.plat_id = t2.plat_id 
                                  AND t2.app_id = :aid 
                                  AND t2.plat_id = :pid";
            $command = $connection->createCommand($sqlStatement);
            $command->bindValue(':aid', $this->mRequest->aid);
            $command->bindValue(':pid', $this->mRequest->pid);
            $command->execute();
 
            $sqlStatement = "UPDATE `wave_func_plat_dev` SET app_state = :status WHERE app_id = :aid AND plat_id = :pid";
            $command = $connection->createCommand($sqlStatement);
            $command->bindValue(':status', Platform::APP_STATUS_PUBLISHED);
            $command->bindValue(':aid', $this->mRequest->aid);
            $command->bindValue(':pid', $this->mRequest->pid);
            $command->execute();
            
            $transaction->commit();
            $this->redirect($this->createUrl('audit/audit', array("CALL" => CJSON::encode(array('item' => $this->mRequest->item)))));
        } 
        catch ( Exception $e ) 
        {
            $transaction->rollback();
            echo $e->getMessage();
        }
    }
    
    /**
     * 检查当前用户所分配的角色是否被允许操作
     * 
     * @throws CHttpException
     */
    protected function checkUserIsAllowed()
    {
        $this->_getRequest();
        $items = array();

        if($this->isAllowed === null)
        {
            if(!is_object($this->mRequest))
            {
                throw new CHttpException(404, '抱歉，您访问的页面不存在！');
            }
            
            Yii::import('application.modules.srbac.models.*');
            $userId = Yii::app()->user->id;
            $roles = Helper::getUserAssignedRoles($userId);
            if(is_array($roles) && count($roles))
            {
                foreach ($roles as $role)
                {
                    $items[] = $role->name;
                }
                if(isset($this->mRequest->item))
                {
                    $this->isAllowed = in_array($this->mRequest->item, $items) ? true : false;
                }
            }
            if($this->isAllowed === null || $this->isAllowed === false)
            {
                throw new CHttpException(404, '抱歉，您无权访问此页面！');
            }
        }
    }
    
    /**
     * 加载应用平台信息
     * 
     * @throws CHttpException
     * @return object
     */
    private function _loadAppModel()
    {
        $this->_getRequest();
        
        if (is_object($this->mRequest))
        {
            if ( isset($this->mRequest->aid, $this->mRequest->pid) )
            {
                $condition = "app_state = ".Platform::APP_STATUS_UPGRADE; 
            }
            else 
            {
                $condition = "app_state = ".Platform::APP_STATUS_PENDING; 
            }
            $this->_appModel = Platform::model()->findByPk($this->mRequest->id, $condition);
        }
        if ($this->_appModel === null)
        {
            throw new CHttpException(403, '抱歉，您访问的页面不存在！');
        }
        return $this->_appModel;
    }
    
    /**
     * 加载审核实例信息
     * 
     * @throws CHttpException
     * @return object
     */
    private function _loadCaseModel()
    {
        $this->_getRequest();

        if (is_object($this->mRequest) && isset($this->mRequest->id))
        {
            $condition = "case_id IN ( ".$this->mRequest->id." ) AND case_status IN ( ".Cases::STATUS_DRAFT.','.Cases::STATUS_RETRIAL.','.Cases::STATUS_CHECK.','.Cases::STATUS_UPGRADE." )";
            $this->_caseModel = Cases::model()->findAll($condition);
        }
        if (empty($this->_caseModel))
        {
            throw new CHttpException(402, '抱歉，您访问的页面不存在！');
        }
        return $this->_caseModel;
    }
    
    /**
     * 获取URL请求CALL参数的内容
     * 
     * @throws CHttpException
     */
    private function _getRequest()
    {
        if (!isset($_REQUEST['CALL']))
        {
            throw new CHttpException(404, '抱歉，您访问的页面不存在！');
        }
        else
        {
            $this->mRequest = CJSON::decode($_REQUEST['CALL'], false);
        }
    }
}
?>