<?php
namespace App\TribalAccount;

use Qs_Db;
use App_Admin_Auth;
use Qs_Array;

class Acl
{
    const FORBIDDEN_MSG = 'You don’t have permission to view this page, please call or email us directly.';

    //if block ID is set for the resource, it is not allowed to all administrators of this type
    const ACL_BLOCK_ID = 100;

    //id from ma_DTribalAccountAclResource table
    const ACL_VENDOR_ACCOUNTS_READ_ID           = 1;
    const ACL_VENDOR_ACCOUNTS_READ_WRITE_ID     = 2;

    const ACL_VENDOR_RATES_READ_ID              = 10;
    const ACL_VENDOR_RATES_RATE_ID              = 11;
    const ACL_VENDOR_RATES_BLACKLIST_ID         = 12;

    const ACL_LICENSES_READ_ID                  = 3;
    const ACL_LICENSES_READ_APPROVE_ID          = 4;
    const ACL_LICENSES_READ_APPROVE_DECLINE_ID  = 5;
    const ACL_VENDOR_SERVICES_READ_ID           = 6;
    const ACL_LIBRARY_ID                        = 7;
    const ACL_TRIBAL_ACCOUNTS_ACTIVITY_ID       = 8;
    const ACL_TRIBAL_ACCOUNTS_ID                = 9;

    protected static $_allowedResources;
    protected static $_resources;
    protected static $_aclTableAlias = 'TribalAccountAcl';

    public static function getAclResources()
    {
        if (null === self::$_resources) {
            $select = Qs_Db::getSelect();
            $select->from(Qs_Db::getPair('DTribalAccountAclResource'));
            $select->order('sorter');
            self::$_resources =  Qs_Db::getInstance()->fetchAssoc($select, ['id']);
        }
        return self::$_resources;
    }

    public function setAllowedResources($resources)
    {
        self::$_allowedResources = $resources;
        return $this;
    }

    public static function getAllowedResources($adminId = null)
    {
        if (null === $adminId) {
            $adminId = App_Admin_Auth::getInstance()->getData('id');
        }
        if (null === self::$_allowedResources) {
            $select = Qs_Db::getSelect();
            $select->from(Qs_Db::getPair(self::getAclTableAlias()), ['aclResourceId']);
            $select->where('adminId = ?', $adminId, Qs_Db::INT_TYPE);
            self::$_allowedResources =  Qs_Db::getInstance()->fetchCol($select);
        }
        return self::$_allowedResources;
    }

    public static function isAccessTo(array $resourceIds, $adminId = null)
    {
        return (bool) array_intersect($resourceIds, self::getAllowedResources($adminId));
    }

    public static function getResource($id, $field)
    {
        return Qs_Array::get(self::getAclResources(), $id, $field);
    }

    public static function getAclTableAlias()
    {
        return self::$_aclTableAlias;
    }

}