<?php

namespace Bitrix\Bizproc\Api\Service;

use Bitrix\Bizproc\Api\Request\WorkflowAccessService\CanViewFacesRequest;
use Bitrix\Bizproc\Api\Request\WorkflowAccessService\CanViewTimelineRequest;
use Bitrix\Bizproc\Api\Request\WorkflowAccessService\CheckStartWorkflowRequest;
use Bitrix\Bizproc\Api\Response\Error;
use Bitrix\Bizproc\Api\Response\WorkflowAccessService\CanViewFacesResponse;
use Bitrix\Bizproc\Api\Response\WorkflowAccessService\CanViewTimelineResponse;
use Bitrix\Bizproc\Api\Response\WorkflowAccessService\CheckAccessResponse;
use Bitrix\Bizproc\Workflow\Entity\WorkflowUserTable;
use Bitrix\Main\Localization\Loc;

class WorkflowAccessService
{
	public function checkStartWorkflow(CheckStartWorkflowRequest $request): CheckAccessResponse
	{
		$hasAccess =
			\CBPDocument::canUserOperateDocument(
				\CBPCanUserOperateOperation::StartWorkflow,
				$request->userId,
				$request->complexDocumentId,
				$request->parameters,
			)
		;

		$response = new CheckAccessResponse();
		if (!$hasAccess)
		{
			$response->addError(new Error(Loc::getMessage(
				'BIZPROC_LIB_API_WORKFLOW_ACCESS_SERVICE_START_WORKFLOW_RIGHTS_ERROR'
			)));
		}

		return $response;
	}

	public function canViewTimeline(CanViewTimelineRequest $request): CanViewTimelineResponse
	{
		$workflowUser =
			WorkflowUserTable::query()
				->setSelect(['*'])
				->setFilter([
					'=WORKFLOW_ID' => $request->workflowId,
					'=USER_ID' => $request->userId,
				])
				->setLimit(1)
				->exec()
				->fetchObject()
		;

		if (!$workflowUser && !$this->canViewWorkflow($request->workflowId, $request->userId))
		{
			return CanViewTimelineResponse::createError(static::getViewAccessDeniedError());
		}

		return new CanViewTimelineResponse();
	}

	private function canViewWorkflow($workflowId, $userId): bool
	{
		$documentId = \CBPStateService::getStateDocumentId($workflowId);

		return (
			$documentId
			&& \CBPDocument::canUserOperateDocument(
				\CBPCanUserOperateOperation::ViewWorkflow,
				$userId,
				$documentId,
				[
					'WorkflowId' => $workflowId,
				]
			)
		);
	}

	public function canCreateWorkflow(array $complexDocumentType, int $userId, array $parameters = []): bool
	{
		return \CBPDocument::CanUserOperateDocumentType(
			\CBPCanUserOperateOperation::CreateWorkflow,
			$userId,
			$complexDocumentType,
			$parameters
		);
	}

	public static function getViewAccessDeniedError(): \Bitrix\Bizproc\Error
	{
		return new \Bitrix\Bizproc\Error(Loc::getMessage(
			'BIZPROC_LIB_API_WORKFLOW_ACCESS_SERVICE_VIEW_TIMELINE_RIGHTS_ERROR_MSGVER_1'
		));
	}

	public function canViewFaces(CanViewFacesRequest $request): CanViewFacesResponse
	{
		if (empty($request->workflowId) || $request->userId <= 0)
		{
			return CanViewFacesResponse::createError(self::getViewAccessDeniedError());
		}

		// admin can view all bp content
		if ($request->currentUserId > 0 && (new \CBPWorkflowTemplateUser($request->currentUserId))->isAdmin())
		{
			return CanViewFacesResponse::createOk();
		}

		$canViewResponse = $this->canViewTimeline(
			new CanViewTimelineRequest(
				$request->workflowId,
				$request->userId
			)
		);
		if (!$canViewResponse->isSuccess())
		{
			return CanViewFacesResponse::createError(self::getViewAccessDeniedError());
		}

		if (
			$request->currentUserId > 0
			&& $request->currentUserId !== $request->userId
			&& !\CBPHelper::checkUserSubordination($request->currentUserId, $request->userId)
		)
		{
			return CanViewFacesResponse::createError(self::getViewAccessDeniedError());
		}

		return CanViewFacesResponse::createOk();
	}
}