<?php

class App_Admin_Acl
{
    const FORBIDDEN_MSG = 'You don’t have permission to view this page, please call or email us directly.';

    //if block ID is set for the resource, it is not allowed to all administrators of this type
    const ACL_BLOCK_ID = 100;

    //id from rn_DAdminAclResource table

    const ACL_CMS_ID                         = 1;
    const ACL_TRIBAL_ACCOUNTS_READ_ID        = 11;
    const ACL_TRIBAL_ACCOUNTS_ID             = 2;
    const ACL_VENDOR_ACCOUNTS_ID             = 3;

    const ACL_VENDOR_RATES_READ_ID           = 13;
    const ACL_VENDOR_RATES_RATE_ID           = 14;
    const ACL_VENDOR_RATES_BLACKLIST_ID      = 15;

    const ACL_LICENSING_ID                   = 4;
    const ACL_LICENSING_BACKGROUND_SCREENING = 12;
    const ACL_VENDOR_SERVICES_ID             = 5;
    const ACL_LIBRARY_ID                     = 6;
    const ACL_FORMS_ID                       = 7;
    const ACL_ADMIN_ACTIVITY_ID              = 8;
    const ACL_ADMINISTRATORS_ID              = 9;
    const ACL_SETTINGS_ID                    = 10;


    protected static $_allowedResources;
    protected static $_resources;
    protected static $_aclTableAlias = 'AdminAcl';

    public static function getAclResources()
    {
        if (null === self::$_resources) {
            $select = Qs_Db::getSelect();
            $select->from(Qs_Db::getPair('DAdminAclResource'));
            $select->order('sorter');
            self::$_resources = Qs_Db::getInstance()->fetchAssoc($select, ['id']);
        }
        return self::$_resources;
    }

    public function setAllowedResources($resources)
    {
        self::$_allowedResources = $resources;
        return $this;
    }

    public static function getAllowedResources($adminId = null)
    {
        if (null === $adminId) {
            $adminId = App_Admin_Auth::getInstance()->getData('id');
        }
        if (null === self::$_allowedResources) {
            $select = Qs_Db::getSelect();
            $select->from(Qs_Db::getPair(self::getAclTableAlias()), ['aclResourceId']);
            $select->where('adminId = ?', $adminId, Qs_Db::INT_TYPE);
            self::$_allowedResources = Qs_Db::getInstance()->fetchCol($select);
        }
        return self::$_allowedResources;
    }

    public static function isAccessTo(array $resourceIds, $adminId = null)
    {
        return (bool) array_intersect($resourceIds, self::getAllowedResources($adminId));
    }

    public static function getResource($id, $field)
    {
        return Qs_Array::get(self::getAclResources(), $id, $field);
    }

    public static function getAclTableAlias()
    {
        return self::$_aclTableAlias;
    }

}