OneBot: Leantime 改造版源码（BOM/Univer 表格/AI 接管/品牌替换等）

2026-09-03 18:49:20 +08:00
commit d647428529
3501 changed files with 1988906 additions and 0 deletions
--- a/app/Domain/Timesheets/Controllers/EditTime.php
+++ b/app/Domain/Timesheets/Controllers/EditTime.php
@@ -0,0 +1,118 @@
+<?php
+
+namespace Leantime\Domain\Timesheets\Controllers;
+
+use Leantime\Core\Auth\Permissions\RequiresPermission;
+use Leantime\Core\Controller\Controller;
+use Leantime\Domain\Clients\Services\Clients as ClientService;
+use Leantime\Domain\Projects\Services\Projects as ProjectService;
+use Leantime\Domain\Tickets\Services\Tickets as TicketService;
+use Leantime\Domain\Timesheets\Permissions\TimesheetsPermissions;
+use Leantime\Domain\Timesheets\Services\Timesheets as TimesheetService;
+use Symfony\Component\HttpFoundation\Response;
+
+class EditTime extends Controller
+{
+    private TimesheetService $timesheetService;
+
+    private ProjectService $projectService;
+
+    private TicketService $ticketService;
+
+    private ClientService $clientService;
+
+    /**
+     * Initializes dependencies.
+     */
+    public function init(
+        TimesheetService $timesheetService,
+        ProjectService $projectService,
+        TicketService $ticketService,
+        ClientService $clientService
+    ): void {
+        $this->timesheetService = $timesheetService;
+        $this->projectService = $projectService;
+        $this->ticketService = $ticketService;
+        $this->clientService = $clientService;
+    }
+
+    /**
+     * Displays the edit time form.
+     *
+     * @param  array  $params  Request parameters
+     */
+    #[RequiresPermission(TimesheetsPermissions::EDIT, global: true)]
+    public function get(array $params): Response
+    {
+        if (! isset($params['id'])) {
+            return $this->tpl->displayPartial('errors.error403');
+        }
+
+        $id = (int) $params['id'];
+        // getTimesheetForEdit routes through the gated getTimesheet (own → view, another user's →
+        // manage), returning null for an entry the user may not access — this fences ownership,
+        // replacing the former manual role/owner check.
+        $values = $this->timesheetService->getTimesheetForEdit($id);
+
+        if ($values === null) {
+            return $this->tpl->displayPartial('errors.error403');
+        }
+
+        $this->tpl->assign('values', $values);
+        $this->tpl->assign('info', '');
+        $this->assignTemplateVars();
+
+        return $this->tpl->displayPartial('timesheets.editTime');
+    }
+
+    /**
+     * Handles time entry update.
+     *
+     * @param  array  $params  Request parameters
+     */
+    #[RequiresPermission(TimesheetsPermissions::EDIT, global: true)]
+    public function post(array $params): Response
+    {
+        if (! isset($params['id'])) {
+            return $this->tpl->displayPartial('errors.error403');
+        }
+
+        $id = (int) $params['id'];
+        // Fences ownership via the gated read; the save itself goes through the gated
+        // validateAndUpdateTime → updateTime (own → edit, another user's → manage).
+        $values = $this->timesheetService->getTimesheetForEdit($id);
+
+        if ($values === null) {
+            return $this->tpl->displayPartial('errors.error403');
+        }
+
+        if (isset($_POST['saveForm'])) {
+            $values = $this->timesheetService->applyEditTimePostUpdates($_POST, $values);
+            $values = $this->timesheetService->processEditTimeInvoiceFields($_POST, $values);
+
+            $result = $this->timesheetService->validateAndUpdateTime($id, $values);
+            $values = $result['values'];
+
+            if ($result['notification'] !== null) {
+                $this->tpl->setNotification($result['notification']['message'], $result['notification']['type']);
+            }
+        }
+
+        $this->tpl->assign('values', $values);
+        $this->tpl->assign('info', '');
+        $this->assignTemplateVars();
+
+        return $this->tpl->displayPartial('timesheets.editTime');
+    }
+
+    /**
+     * Assigns common template variables for the edit form.
+     */
+    private function assignTemplateVars(): void
+    {
+        $this->tpl->assign('allClients', $this->clientService->getAll());
+        $this->tpl->assign('allProjects', $this->projectService->getAll(showClosedProjects: false));
+        $this->tpl->assign('allTickets', $this->ticketService->getAll());
+        $this->tpl->assign('kind', $this->timesheetService->getLoggableHourTypes());
+    }
+}