User profile and PDF export of memberships

app/Console/Commands/LdapSyncRoles.php

@@ -4,11 +4,14 @@
 
 use App\Ldap\Committee;
 use App\Ldap\Community;
+use App\Ldap\Group;
 use App\Ldap\Role;
+use App\Models\GroupMembership;
 use App\Models\RoleMembership;
 use Carbon\Carbon;
 use Illuminate\Console\Command;
 use Illuminate\Contracts\Console\Isolatable;
+use Illuminate\Support\Facades\DB;
 
 class LdapSyncRoles extends Command
 {
@@ -45,6 +48,9 @@ public function handle()
             ->setDn(Community::$rootDn)
             ->search('ou', $this->argument('community'))
             ->get();
+
+        $this->comment("Committees:");
+
         foreach ($realms as $realm){
             $committees = Committee::fromCommunity($realm->getFirstAttribute('ou'))
                 ->search('ou', $this->argument('committee'))
@@ -60,7 +66,7 @@ public function handle()
                         ->where('committee_dn', $committee->getDn())
                         ->where('role_cn', $role->getFirstAttribute('cn'))
                         ->get();
-                    $this->comment("  |-> " .$role->getDn());
+                    $this->comment("  |-> " . $role->getDn());
                     // delete all members so far
                     $role->setAttribute('uniqueMember', ['']);
                     $ldapMembers = $role->members();
@@ -73,5 +79,38 @@ public function handle()
                 }
             }
         }
+
+        $this->comment("\nGroups:");
+
+        foreach ($realms as $realm) {
+            $groups = Group::fromCommunity($realm->getFirstAttribute('ou'))
+                ->search('ou', $this->argument('group'))
+                ->get();
+
+            foreach ($groups as $group) {
+                $this->comment("> " . $group->getDn());
+
+                // delete all members so far
+                $group->setAttribute('uniqueMember', ['']);
+
+                $roles = GroupMembership::where('group_dn', $group->getDn())->get();
+
+                foreach ($roles as $role) {
+                    $roleCn = str_replace('cn=', '', substr($role->role_dn, 0, strpos($role->role_dn, ',')));
+                    $committeeDn = strstr($role->role_dn, "ou=");
+                    $activeMemberships = RoleMembership::active($date)
+                        ->where('committee_dn', $committeeDn)
+                        ->where('role_cn', $roleCn)
+                        ->get();
+
+                    $ldapMembers = $group->users();
+                    foreach ($activeMemberships as $membership) {
+                        // add only active members back
+                        $this->comment("  |-> $membership->username");
+                        $ldapMembers->attach($membership->user->ldap());
+                    }
+                }
+            }
+        }
     }
 }

app/Console/Commands/MoveGroupRolesFromLdapToDatabase.php

@@ -0,0 +1,60 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Ldap\Community;
+use App\Ldap\Group;
+use App\Models\GroupMembership;
+use Illuminate\Console\Command;
+
+class MoveGroupRolesFromLdapToDatabase extends Command
+{
+    /**
+     * The name and signature of the console command.
+     *
+     * @var string
+     */
+    protected $signature = 'app:move-group-roles-from-ldap-to-database
+                {community? : The short name to search for of the community}
+                {group? : The short name to search for of the group}';
+
+    /**
+     * The console command description.
+     *
+     * @var string
+     */
+    protected $description = 'Command description';
+
+    /**
+     * Execute the console command.
+     */
+    public function handle()
+    {
+        $realms = Community::query()
+            ->list() // only first level
+            ->setDn(Community::$rootDn)
+            ->search('ou', $this->argument('community'))
+            ->get();
+
+        foreach ($realms as $realm) {
+            $groups = Group::fromCommunity($realm->getFirstAttribute('ou'))
+                ->search('ou', $this->argument('group'))
+                ->get();
+
+            foreach ($groups as $group) {
+                $this->comment("> " . $group->getDn());
+
+                // get roles
+                $roles = $group->members()->get();
+
+                foreach ($roles as $role) {
+                    $this->comment($role);
+                    GroupMembership::create([
+                        'group_dn' => $group->getDn(),
+                        'role_dn' => $role,
+                    ]);
+                }
+            }
+        }
+    }
+}

app/Livewire/ChangePassword.php

@@ -8,6 +8,7 @@
 use Illuminate\Support\Facades\Auth;
 use Illuminate\Support\Facades\Hash;
 use Illuminate\Validation\Rules\Password;
+use Livewire\Attributes\Locked;
 use Livewire\Attributes\Rule;
 use Livewire\Component;
 use Mockery\Generator\StringManipulation\Pass\Pass;
@@ -18,6 +19,20 @@ class ChangePassword extends Component
 
     public string $password_confirmation;
 
+    #[Locked]
+    public $currentUsername;
+
+    public function mount($username)
+    {
+        if ($username === auth()->user()->username || auth()->user()->can('superadmin', User::class)) {
+            $this->currentUsername = $username;
+        } elseif ($username === auth()->user()->username) {
+            $this->currentUsername = auth()->user()->username;
+        } else {
+            abort('403');
+        }
+    }
+
     public function rules(): array
     {
         return [

app/Livewire/Group/AddRoleToGroup.php

@@ -9,6 +9,8 @@
 use Livewire\Attributes\Locked;
 use Livewire\Component;
 
+use App\Models\GroupMembership;
+
 class AddRoleToGroup extends Component
 {
     #[Locked]
@@ -42,9 +44,12 @@ public function render()
 
     public function save()
     {
-        /** @var Group $group */
-        $group = Group::findOrFail(Group::dnFrom($this->uid, $this->group_cn));
-        $group->members()->attach($this->selected_role_dn);
+        $group_dn = Group::findOrFail(Group::dnFrom($this->uid, $this->group_cn));
+        GroupMembership::create([
+            'group_dn' => $group_dn,
+            'role_dn' => $this->selected_role_dn,
+        ]);
+
         return redirect()->route('realms.groups.roles', ['uid' => $this->uid, 'cn' => $this->group_cn])
             ->with('message', __('groups.success_role_add'))
         ;

app/Livewire/Group/ListRolesInGroup.php

@@ -5,6 +5,7 @@
 use App\Ldap\Community;
 use App\Ldap\Group;
 use App\Ldap\Role;
+use App\Models\GroupMembership;
 use Livewire\Attributes\Url;
 use Livewire\Component;
 use Livewire\WithPagination;
@@ -51,16 +52,15 @@ public function updatedSearch(): void
     }
 
     public function render() {
-        /** @var Group $group */
-        $group = Group::findOrFail($this->group_dn);
-        $roles = $group->members()->get();
-        $users = $group->users()->get();
-        // slice breaks it, whyever - get to go.
+        $rolesDB = GroupMembership::select('role_dn')->where('group_dn', $this->group_dn)->get();
+        $roles = [];
+        foreach ($rolesDB as $row) {
+            $role = Role::findOrFail($row->role_dn);
+            array_push($roles, $role);
+        }
         return view(
             'livewire.group.roles', [
                 'roles' => $roles,
-                'users' => $users,
-                'group' => $group,
             ]
         )->title(__('groups.roles_list_title', ['name' => $this->group_cn]));
     }
@@ -75,14 +75,7 @@ public function deletePrepare(string $role_dn): void
         $committee = $role->committee();
 
         $this->deleteRoleDN = $role_dn;
-        $this->deleteRoleName = [
-            'role_short' => $role->getFirstAttribute('description'),
-            'role_name' => $role->getFirstAttribute('cn'),
-            'committee_name' => $committee?->getFirstAttribute('description'),
-            'committee_short' => $committee?->getFirstAttribute('ou'),
-            'group_short' => $group->getFirstAttribute('cn'),
-            'group_name' => $group->getFirstAttribute('description')
-        ];
+        $this->deleteRoleName = [ $role->getFirstAttribute('cn') ];
 
         $this->showDeleteModal = true;
     }
@@ -92,10 +85,7 @@ public function deleteCommit(): void
         $community = Community::findByUid($this->realm_uid);
         $this->authorize('delete', [Group::class, $community]);
 
-        $group = Group::findOrFail($this->group_dn);
-        $role = Role::findOrFail($this->deleteRoleDN);
-
-        $group->roles()->detach($role);
+        GroupMembership::where('group_dn', $this->group_dn)->where('role_dn', $this->deleteRoleDN)->delete();
 
         $this->close();
     }

app/Livewire/Profile.php

@@ -33,10 +33,18 @@ class Profile extends Component
     public $picture;
     public $pictureUrl;
 
-    public function mount()
+    public $currentUsername;
+
+    public function mount($username)
     {
-        $username = Auth::user()->username;
-        $user = User::findOrFailByUsername($username);
+        if ($username == auth()->user()->username || auth()->user()->can('superadmin', User::class)) {
+            $this->currentUsername = $username;
+        } elseif ($username == auth()->user()->username) {
+            $this->currentUsername = auth()->user()->username;
+        } else {
+            abort('403');
+        }
+        $user = User::findOrFailByUsername($this->currentUsername);
         $this->uid = $user->getFirstAttribute('uid');
         $this->givenName = $user->getFirstAttribute('givenName');
         $this->sn = $user->getFirstAttribute('sn');
@@ -57,9 +65,6 @@ public function render()
     public function save()
     {
         $this->validate();
-        if (Auth::user()->username !== $this->uid) {
-            abort('403');
-        }
         $user = User::findOrFailByUsername($this->uid);
         $user->setAttribute('mail', $this->email);
         $user->setAttribute('givenName', $this->givenName);

app/Livewire/Profile/Memberships.php

@@ -0,0 +1,74 @@
+<?php
+
+namespace App\Livewire\Profile;
+
+use App\Ldap\User;
+use App\Ldap\Role;
+use App\Models\RoleMembership;
+use Barryvdh\DomPDF\Facade\Pdf;
+use Livewire\Attributes\Locked;
+use Livewire\Component;
+
+class Memberships extends Component
+{
+    #[Locked]
+    public $currentUsername;
+
+    public bool $showOnlyActive = true;
+
+    public function mount($username)
+    {
+        if ($username == auth()->user()->username || auth()->user()->can('superadmin', User::class)) {
+            $this->currentUsername = $username;
+        } elseif ($username == auth()->user()->username) {
+            $this->currentUsername = auth()->user()->username;
+        } else {
+            abort('403');
+        }
+    }
+
+    public function getMemberships(string $username, bool $onlyActive)
+    {
+        $query = RoleMembership::where('username', $username);
+        if ($onlyActive) {
+            $query->whereNull('until');
+        }
+        $roleMemberships = $query->get();
+        $memberships = [];
+        foreach ($roleMemberships as $row) {
+            $role = Role::findOrFail('cn=' . $row->role_cn . ',' . $row->committee_dn);
+            $memberships[] = [
+                'role' => $role,
+                'from' => $row->from,
+                'until' => $row->until,
+                'decided' => $row->decided,
+                'comment' => $row->comment,
+            ];
+        }
+        return $memberships;
+    }
+
+    public function render()
+    {
+        $memberships = $this->getMemberships($this->currentUsername, $this->showOnlyActive);
+
+        return view('livewire.profile.memberships', [
+            'memberships' => $memberships,
+        ])->title(__('Profile'));
+    }
+
+    public function exportPdf()
+    {
+        $memberships = $this->getMemberships($this->currentUsername, false);
+        $user = User::findOrFailByUsername($this->currentUsername);
+        $pdf = Pdf::loadView('pdfs.memberships', [
+            'fullName' => $user->cn[0],
+            'community' => null,
+            'memberships' => $memberships,
+        ]);
+
+        return response()->streamDownload(function () use ($pdf) {
+            echo $pdf->stream();
+        }, strtolower(trans('profile.memberships')) . '_' . $this->currentUsername . '.pdf');
+    }
+}

app/Livewire/Realm/ListMembers.php

@@ -4,6 +4,7 @@
 
 use App\Ldap\Community;
 use App\Ldap\User;
+use Barryvdh\DomPDF\Facade\Pdf;
 use Livewire\Attributes\Rule;
 use Livewire\Attributes\Url;
 use Livewire\Component;
@@ -87,4 +88,20 @@ public function close(): void
         $this->showDeleteModal = false;
         unset($this->deleteMemberName, $this->deleteMemberUsername);
     }
+
+    public function exportPdf($username)
+    {
+        $memberships = app('App\Livewire\Profile\Memberships')->getMemberships($username, false);
+        $user = User::findOrFailByUsername($username);
+        $community = Community::findOrFailByUid($this->community_name);
+        $pdf = Pdf::loadView('pdfs.memberships', [
+            'fullName' => $user->cn[0],
+            'community' => $community->description[0],
+            'memberships' => $memberships,
+        ]);
+
+        return response()->streamDownload(function () use ($pdf) {
+            echo $pdf->stream();
+        }, 'memberships-' . $username . '.pdf');;
+    }
 }