Mini Shell

<?php
/**
 * 2007-2018 PrestaShop
 *
 * NOTICE OF LICENSE
 *
 * This source file is subject to the Open Software License (OSL 3.0)
 * that is bundled with this package in the file LICENSE.txt.
 * It is also available through the world-wide-web at this URL:
 * https://opensource.org/licenses/OSL-3.0
 * If you did not receive a copy of the license and are unable to
 * obtain it through the world-wide-web, please send an email
 * to license@prestashop.com so we can send you a copy immediately.
 *
 * DISCLAIMER
 *
 * Do not edit or add to this file if you wish to upgrade PrestaShop to newer
 * versions in the future. If you wish to customize PrestaShop for your
 * needs please refer to http://www.prestashop.com for more information.
 *
 * @author    PrestaShop SA <contact@prestashop.com>
 * @copyright 2007-2018 PrestaShop SA
 * @license   https://opensource.org/licenses/OSL-3.0 Open Software License (OSL 3.0)
 * International Registered Trademark & Property of PrestaShop SA
 */

/**
 * Class ProfileCore
 */
class ProfileCore extends ObjectModel
{
    /** @var string Name */
    public $name;

    /**
     * @see ObjectModel::$definition
     */
    public static $definition = array(
        'table' => 'profile',
        'primary' => 'id_profile',
        'multilang' => true,
        'fields' => array(
            /* Lang fields */
            'name' => array('type' => self::TYPE_STRING, 'lang' => true, 'validate' => 'isGenericName', 'required' => true, 'size' => 32),
        ),
    );

    protected static $_cache_accesses = array();

    /**
    * Get all available profiles
    *
    * @return array Profiles
    */
    public static function getProfiles($idLang)
    {
        return Db::getInstance(_PS_USE_SQL_SLAVE_)->executeS('
		SELECT p.`id_profile`, `name`
		FROM `'._DB_PREFIX_.'profile` p
		LEFT JOIN `'._DB_PREFIX_.'profile_lang` pl ON (p.`id_profile` = pl.`id_profile` AND `id_lang` = '.(int) $idLang.')
		ORDER BY `id_profile` ASC');
    }

    /**
     * Get the current profile name
     *
     * @param int  $idProfile Profile ID
     * @param null $idLang    Language ID
     *
     * @return string Profile
     */
    public static function getProfile($idProfile, $idLang = null)
    {
        if (!$idLang) {
            $idLang = Configuration::get('PS_LANG_DEFAULT');
        }

        return Db::getInstance(_PS_USE_SQL_SLAVE_)->getRow('
			SELECT `name`
			FROM `'._DB_PREFIX_.'profile` p
			LEFT JOIN `'._DB_PREFIX_.'profile_lang` pl ON (p.`id_profile` = pl.`id_profile`)
			WHERE p.`id_profile` = '.(int) $idProfile.'
			AND pl.`id_lang` = '.(int) $idLang
        );
    }

    public function add($autodate = true, $null_values = false)
    {
        return parent::add($autodate, true);
    }

    public function delete()
    {
        if (parent::delete()) {
            return (
                Db::getInstance()->execute('DELETE FROM `'._DB_PREFIX_.'access` WHERE `id_profile` = '.(int) $this->id)
                && Db::getInstance()->execute('DELETE FROM `'._DB_PREFIX_.'module_access` WHERE `id_profile` = '.(int) $this->id)
            );
        }
        return false;
    }

    /**
     * Get access profile
     *
     * @param int $idProfile Profile ID
     * @param int $idTab     Tab ID
     *
     * @return bool
     */
    public static function getProfileAccess($idProfile, $idTab)
    {
        // getProfileAccesses is cached so there is no performance leak
        $accesses = Profile::getProfileAccesses($idProfile);
        return (isset($accesses[$idTab]) ? $accesses[$idTab] : false);
    }

    /**
     * Get access profiles
     *
     * @param int    $idProfile Profile ID
     * @param string $type      Type
     *
     * @return bool
     */
    public static function getProfileAccesses($idProfile, $type = 'id_tab')
    {
        if (!in_array($type, array('id_tab', 'class_name'))) {
            return false;
        }

        if (!isset(self::$_cache_accesses[$idProfile])) {
            self::$_cache_accesses[$idProfile] = array();
        }

        if (!isset(self::$_cache_accesses[$idProfile][$type])) {
            self::$_cache_accesses[$idProfile][$type] = array();
            // Super admin profile has full auth
            if ($idProfile == _PS_ADMIN_PROFILE_) {
                self::fillCacheAccesses(
                    $idProfile,
                    $type,
                    array(
                        'id_profile' => _PS_ADMIN_PROFILE_,
                        'view' => '1',
                        'add' => '1',
                        'edit' => '1',
                        'delete' => '1',
                    )
                );
            } else {
                self::fillCacheAccesses(
                    $idProfile,
                    $type,
                    array(
                        'id_profile' => $idProfile,
                        'view' => '0',
                        'add' => '0',
                        'edit' => '0',
                        'delete' => '0',
                    )
                );

                $result = Db::getInstance()->executeS('
				SELECT `slug`,
                                    `slug` LIKE "%CREATE" as "add",
                                    `slug` LIKE "%READ" as "view",
                                    `slug` LIKE "%UPDATE" as "edit",
                                    `slug` LIKE "%DELETE" as "delete"
				FROM `'._DB_PREFIX_.'authorization_role` a
				LEFT JOIN `'._DB_PREFIX_.'access` j ON j.id_authorization_role = a.id_authorization_role
				WHERE j.`id_profile` = '.(int) $idProfile);

                foreach ($result as $row) {
                    $tab = self::findTabTypeInformationByAuthSlug($type, $row['slug']);

                    self::$_cache_accesses[$idProfile][$type][$tab][array_search('1', $row)] = '1';
                }
            }
        }

        return self::$_cache_accesses[$idProfile][$type];
    }

    public static function resetCacheAccesses()
    {
        self::$_cache_accesses = array();
    }

    /**
     *
     * @param int    $idProfile Profile ID
     * @param string $type Type
     * @param array  $cacheData Cached data
     */
    private static function fillCacheAccesses($idProfile, $type, $cacheData = [])
    {
        foreach (Tab::getTabs(Context::getContext()->language->id) as $tab) {
            self::$_cache_accesses[$idProfile][$type][$tab[$type]] = array_merge(
                array(
                    'id_tab' => $tab['id_tab'],
                    'class_name' => $tab['class_name'],
                ),
                $cacheData
            );
        }
    }

    /**
     * Find tab type information by authorization slug
     * 
     * @param string $type
     * @param string $authSlug
     * @return int
     */
    private static function findTabTypeInformationByAuthSlug($type, $authSlug)
    {
        preg_match(
            '/ROLE_MOD_[A-Z]+_(?P<classname>[A-Z][A-Z0-9]*)_(?P<auth>[A-Z]+)/',
            $authSlug,
            $matches
        );

        $result = Db::getInstance()->getRow('
            SELECT `'.$type.'`
            FROM `'._DB_PREFIX_.'tab` t
            WHERE UCASE(`class_name`) = "'.$matches['classname'].'"
        ');

        return $result[$type];
    }
}