OneBot: Leantime 改造版源码（BOM/Univer 表格/AI 接管/品牌替换等）
This commit is contained in:
wangruiguo
341
app/Domain/Blueprints/Controllers/EditCanvasComment.php
Normal file
341
app/Domain/Blueprints/Controllers/EditCanvasComment.php
Normal file
@@ -0,0 +1,341 @@
|
||||
<?php
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
namespace Leantime\Domain\Blueprints\Controllers;
|
||||
|
||||
use Leantime\Core\Auth\Permissions\RequiresPermission;
|
||||
use Leantime\Core\Controller\Frontcontroller;
|
||||
use Leantime\Core\Http\IncomingRequest;
|
||||
use Leantime\Core\Language;
|
||||
use Leantime\Core\UI\Template;
|
||||
use Leantime\Domain\Blueprints\Models\CanvasTemplate;
|
||||
use Leantime\Domain\Blueprints\Permissions\BlueprintsPermissions;
|
||||
use Leantime\Domain\Blueprints\Services\Blueprints as BlueprintsService;
|
||||
use Leantime\Domain\Blueprints\Services\TemplateRegistry;
|
||||
use Leantime\Domain\Comments\Repositories\Comments as CommentRepository;
|
||||
use Leantime\Domain\Notifications\Models\Notification as NotificationModel;
|
||||
use Leantime\Domain\Projects\Services\Projects as ProjectService;
|
||||
use Symfony\Component\HttpFoundation\Response;
|
||||
|
||||
/**
|
||||
* EditCanvasComment controller - handles the comment-focused editing view for canvas items.
|
||||
*
|
||||
* Replaces the old per-variant Canvas\Controllers\EditCanvasComment subclasses.
|
||||
* The canvas type slug comes from the route instead of a class constant.
|
||||
*
|
||||
* All by-id item access goes through the Blueprints service, which authorizes against the
|
||||
* item's real project — the controller never reads/writes canvas items via the repository.
|
||||
*/
|
||||
class EditCanvasComment
|
||||
{
|
||||
private string $canvasSlug;
|
||||
|
||||
private ?CanvasTemplate $template;
|
||||
|
||||
/**
|
||||
* __construct - resolve dependencies and determine the canvas slug from request.
|
||||
*
|
||||
* @param IncomingRequest $request Incoming request
|
||||
* @param Template $tpl Template engine
|
||||
* @param Language $language Language service
|
||||
* @param CommentRepository $commentsRepo Comment repository
|
||||
* @param ProjectService $projectService Project service
|
||||
* @param BlueprintsService $blueprintsService Blueprints service (project-authorized item CRUD)
|
||||
* @param TemplateRegistry $templateRegistry Template registry
|
||||
*/
|
||||
public function __construct(
|
||||
private IncomingRequest $request,
|
||||
private Template $tpl,
|
||||
private Language $language,
|
||||
private CommentRepository $commentsRepo,
|
||||
private ProjectService $projectService,
|
||||
private BlueprintsService $blueprintsService,
|
||||
TemplateRegistry $templateRegistry,
|
||||
) {
|
||||
$this->canvasSlug = strip_tags((string) ($request->route('canvasSlug') ?? ''));
|
||||
$this->template = $templateRegistry->get($this->canvasSlug);
|
||||
}
|
||||
|
||||
/**
|
||||
* get - handle GET requests for the comment editing view.
|
||||
*
|
||||
* @param string|null $canvasSlug Canvas type slug from the route (resolved in the constructor)
|
||||
* @param string|null $id Canvas item id from the route
|
||||
*/
|
||||
#[RequiresPermission(BlueprintsPermissions::VIEW, entityScoped: true)]
|
||||
public function get(?string $canvasSlug = null, ?string $id = null): Response
|
||||
{
|
||||
$data = $this->request->getRequestParams();
|
||||
if ($id !== null) {
|
||||
$data['id'] = $id;
|
||||
}
|
||||
|
||||
if ($this->template === null) {
|
||||
return $this->tpl->displayPartial('errors.error404');
|
||||
}
|
||||
|
||||
$canvasType = $this->template->getDatabaseType();
|
||||
$commentModule = $this->template->getCommentModule();
|
||||
$canvasTypes = $this->blueprintsService->getTranslatedBoxes($this->template);
|
||||
$statusLabels = $this->blueprintsService->getTranslatedStatusLabels($this->template);
|
||||
$relatesLabels = $this->blueprintsService->getTranslatedRelatesLabels($this->template);
|
||||
|
||||
if (isset($data['id'])) {
|
||||
// Resolve + VIEW-authorize the item against its real project before anything else.
|
||||
$canvasItem = $this->blueprintsService->getCanvasItem((int) $data['id'], $canvasType);
|
||||
if (! $canvasItem) {
|
||||
return $this->tpl->displayPartial('errors.error404');
|
||||
}
|
||||
|
||||
// Delete comment — ONLY when it belongs to THIS gated item (module + moduleId).
|
||||
// deleteComment() filters on the comment id alone, so without this bind a viewable
|
||||
// item would let any global comment id be deleted (cross-item / cross-project).
|
||||
if (isset($data['delComment']) === true) {
|
||||
$commentId = (int) ($data['delComment']);
|
||||
$comment = $this->commentsRepo->getComment($commentId);
|
||||
if ($comment !== false
|
||||
&& (string) $comment['module'] === $commentModule
|
||||
&& (int) $comment['moduleId'] === (int) $canvasItem['id']) {
|
||||
$this->commentsRepo->deleteComment($commentId);
|
||||
$this->tpl->setNotification(
|
||||
$this->language->__('notifications.comment_deleted'),
|
||||
'success',
|
||||
strtoupper($this->canvasSlug).'canvascomment_deleted'
|
||||
);
|
||||
}
|
||||
}
|
||||
|
||||
$comments = $this->commentsRepo->getComments($commentModule, $canvasItem['id']);
|
||||
$this->tpl->assign(
|
||||
'numComments',
|
||||
$this->commentsRepo->countComments($commentModule, $canvasItem['id'])
|
||||
);
|
||||
} else {
|
||||
if (isset($data['type'])) {
|
||||
$type = strip_tags($data['type']);
|
||||
} else {
|
||||
$type = array_key_first($canvasTypes);
|
||||
}
|
||||
|
||||
$canvasItem = [
|
||||
'id' => '',
|
||||
'box' => $type,
|
||||
'description' => '',
|
||||
'status' => array_key_first($statusLabels),
|
||||
'relates' => array_key_first($relatesLabels),
|
||||
'assumptions' => '',
|
||||
'data' => '',
|
||||
'conclusion' => '',
|
||||
'milestoneHeadline' => '',
|
||||
'milestoneId' => '',
|
||||
];
|
||||
|
||||
$comments = [];
|
||||
}
|
||||
|
||||
$this->tpl->assign('comments', $comments);
|
||||
$this->tpl->assign('canvasTypes', $canvasTypes);
|
||||
$this->tpl->assign('canvasItem', $canvasItem);
|
||||
$this->tpl->assign('canvasSlug', $this->canvasSlug);
|
||||
|
||||
return $this->tpl->displayPartial('blueprints.canvasComment');
|
||||
}
|
||||
|
||||
/**
|
||||
* post - handle POST requests for updating canvas items and adding comments.
|
||||
*
|
||||
* @param string|null $canvasSlug Canvas type slug from the route (resolved in the constructor)
|
||||
* @param string|null $id Canvas item id from the route
|
||||
*/
|
||||
#[RequiresPermission(BlueprintsPermissions::EDIT, entityScoped: true)]
|
||||
public function post(?string $canvasSlug = null, ?string $id = null): Response
|
||||
{
|
||||
$data = $this->request->getRequestParams();
|
||||
if ($id !== null) {
|
||||
$data['id'] = $id;
|
||||
}
|
||||
|
||||
if ($this->template === null) {
|
||||
return $this->tpl->displayPartial('errors.error404');
|
||||
}
|
||||
|
||||
$canvasType = $this->template->getDatabaseType();
|
||||
$commentModule = $this->template->getCommentModule();
|
||||
$sessionKey = $this->template->getSessionKey();
|
||||
$basePath = '/blueprints/'.$this->canvasSlug;
|
||||
|
||||
if (isset($data['changeItem'])) {
|
||||
if (isset($data['itemId']) && $data['itemId'] != '') {
|
||||
if (isset($data['description']) && ! empty($data['description'])) {
|
||||
$currentCanvasId = (int) session($sessionKey);
|
||||
|
||||
$canvasItem = [
|
||||
'box' => $data['box'],
|
||||
'author' => session('userdata.id'),
|
||||
'description' => $data['description'],
|
||||
'status' => $data['status'],
|
||||
'relates' => $data['relates'],
|
||||
'assumptions' => $data['assumptions'],
|
||||
'data' => $data['data'],
|
||||
'conclusion' => $data['conclusion'],
|
||||
'itemId' => $data['itemId'],
|
||||
'id' => $data['itemId'],
|
||||
'canvasId' => $currentCanvasId,
|
||||
'milestoneId' => $data['milestoneId'],
|
||||
'dependentMilstone' => '',
|
||||
];
|
||||
|
||||
// Resolves the item's real project from itemId and authorizes EDIT there.
|
||||
$this->blueprintsService->updateCanvasItem($canvasItem, $canvasType);
|
||||
|
||||
$comments = $this->commentsRepo->getComments($commentModule, $data['itemId']);
|
||||
$this->tpl->assign('numComments', $this->commentsRepo->countComments(
|
||||
$commentModule,
|
||||
$data['itemId']
|
||||
));
|
||||
$this->tpl->assign('comments', $comments);
|
||||
|
||||
$this->tpl->setNotification(
|
||||
$this->language->__('notifications.canvas_item_updates'),
|
||||
'success',
|
||||
strtoupper($this->canvasSlug).'canvasitem_updated'
|
||||
);
|
||||
|
||||
$notification = app()->make(NotificationModel::class);
|
||||
$notification->url = [
|
||||
'url' => BASE_URL.$basePath.'/editCanvasComment/'.(int) $data['itemId'],
|
||||
'text' => $this->language->__('email_notifications.canvas_item_update_cta'),
|
||||
];
|
||||
$notification->entity = $canvasItem;
|
||||
$notification->module = $this->canvasSlug.'canvas';
|
||||
$notification->action = 'updated';
|
||||
$notification->projectId = session('currentProject');
|
||||
$notification->subject = $this->language->__('email_notifications.canvas_board_edited');
|
||||
$notification->authorId = session('userdata.id');
|
||||
$notification->message = sprintf(
|
||||
$this->language->__('email_notifications.canvas_item_update_message'),
|
||||
session('userdata.name'),
|
||||
$canvasItem['description']
|
||||
);
|
||||
|
||||
$this->projectService->notifyProjectUsers($notification);
|
||||
|
||||
return Frontcontroller::redirect(BASE_URL.$basePath.'/editCanvasComment/'.$data['itemId']);
|
||||
} else {
|
||||
$this->tpl->setNotification($this->language->__('notification.please_enter_element_title'), 'error');
|
||||
}
|
||||
} else {
|
||||
if (isset($data['description']) && ! empty($data['description'])) {
|
||||
$currentCanvasId = (int) session($sessionKey);
|
||||
|
||||
$canvasItem = [
|
||||
'box' => $data['box'],
|
||||
'author' => session('userdata.id'),
|
||||
'description' => $data['description'],
|
||||
'status' => $data['status'],
|
||||
'relates' => $data['relates'],
|
||||
'assumptions' => $data['assumptions'],
|
||||
'data' => $data['data'],
|
||||
'conclusion' => $data['conclusion'],
|
||||
'canvasId' => $currentCanvasId,
|
||||
];
|
||||
|
||||
// Resolves the target board's real project from canvasId and authorizes CREATE.
|
||||
$id = $this->blueprintsService->createCanvasItem($canvasItem, $canvasType);
|
||||
|
||||
$canvasItem['id'] = $id;
|
||||
|
||||
$canvasTypes = $this->blueprintsService->getTranslatedBoxes($this->template);
|
||||
|
||||
$this->tpl->setNotification(
|
||||
($canvasTypes[$data['box']]['title'] ?? $data['box']).' successfully created',
|
||||
'success',
|
||||
strtoupper($this->canvasSlug).'canvasitem_created'
|
||||
);
|
||||
|
||||
$notification = app()->make(NotificationModel::class);
|
||||
$notification->url = [
|
||||
'url' => BASE_URL.$basePath.'/editCanvasComment/'.(int) ($data['itemId'] ?? $id),
|
||||
'text' => $this->language->__('email_notifications.canvas_item_update_cta'),
|
||||
];
|
||||
$notification->entity = $canvasItem;
|
||||
$notification->module = $this->canvasSlug.'canvas';
|
||||
$notification->action = 'created';
|
||||
$notification->projectId = session('currentProject');
|
||||
$notification->subject = $this->language->__('email_notifications.canvas_board_item_created');
|
||||
$notification->authorId = session('userdata.id');
|
||||
$notification->message = sprintf(
|
||||
$this->language->__('email_notifications.canvas_item_created_message'),
|
||||
session('userdata.name'),
|
||||
$canvasItem['description']
|
||||
);
|
||||
|
||||
$this->projectService->notifyProjectUsers($notification);
|
||||
|
||||
$this->tpl->setNotification(
|
||||
$this->language->__('notification.element_created'),
|
||||
'success',
|
||||
strtoupper($this->canvasSlug).'canvasitem_created'
|
||||
);
|
||||
|
||||
return Frontcontroller::redirect(BASE_URL.$basePath.'/editCanvasComment/'.$id);
|
||||
} else {
|
||||
$this->tpl->setNotification($this->language->__('notification.please_enter_element_title'), 'error');
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if (isset($data['comment']) === true) {
|
||||
$itemId = (int) ($data['id'] ?? 0);
|
||||
|
||||
// Only allow commenting on an item the user can view in their project.
|
||||
if (! $this->blueprintsService->getCanvasItem($itemId, $canvasType)) {
|
||||
return $this->tpl->displayPartial('errors.error404');
|
||||
}
|
||||
|
||||
$values = [
|
||||
'text' => $data['text'],
|
||||
'date' => date('Y-m-d H:i:s'),
|
||||
'userId' => (session('userdata.id')),
|
||||
'moduleId' => $itemId,
|
||||
'commentParent' => ($data['father']),
|
||||
];
|
||||
|
||||
$this->commentsRepo->addComment($values, $commentModule);
|
||||
$this->tpl->setNotification(
|
||||
$this->language->__('notifications.comment_create_success'),
|
||||
'success',
|
||||
strtoupper($this->canvasSlug).'canvasitemcomment_created'
|
||||
);
|
||||
|
||||
$notification = app()->make(NotificationModel::class);
|
||||
$notification->url = [
|
||||
'url' => BASE_URL.$basePath.'/editCanvasComment/'.$itemId,
|
||||
'text' => $this->language->__('email_notifications.canvas_item_update_cta'),
|
||||
];
|
||||
$notification->entity = $values;
|
||||
$notification->module = $this->canvasSlug.'canvas';
|
||||
$notification->action = 'commented';
|
||||
$notification->projectId = session('currentProject');
|
||||
$notification->subject = $this->language->__('email_notifications.canvas_board_comment_created');
|
||||
$notification->authorId = session('userdata.id');
|
||||
$notification->message = sprintf(
|
||||
$this->language->__('email_notifications.canvas_item__comment_created_message'),
|
||||
session('userdata.name')
|
||||
);
|
||||
|
||||
$this->projectService->notifyProjectUsers($notification);
|
||||
|
||||
return Frontcontroller::redirect(BASE_URL.$basePath.'/editCanvasComment/'.$itemId);
|
||||
}
|
||||
|
||||
$itemId = (int) ($data['id'] ?? 0);
|
||||
$this->tpl->assign('id', $itemId);
|
||||
$this->tpl->assign('canvasTypes', $this->blueprintsService->getTranslatedBoxes($this->template));
|
||||
$this->tpl->assign('canvasItem', $this->blueprintsService->getCanvasItem($itemId, $canvasType));
|
||||
$this->tpl->assign('canvasSlug', $this->canvasSlug);
|
||||
|
||||
return $this->tpl->displayPartial('blueprints.canvasComment');
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user