espocrm/application/Espo/Core/Controllers/Record.php

<?php

namespace Espo\Core\Controllers;

use \Espo\Core\Exceptions\Error;
use \Espo\Core\Exceptions\Forbidden;

abstract class Record extends Base
{
	protected $serviceClassName = '\\Espo\\Services\\Record';
	
	protected function loadService()
	{
		parent::loadService();
		$this->service->setEntityName($this->name);
	}

	protected function actionRead($params)
	{
		$id = $params['id'];
		$service = $this->getService();
		$entity = $service->getEntity($id);

		if (!$this->getAcl()->check($entity, 'read')) {
			throw new Forbidden();
		}

		return $entity;
	}

	protected function actionUpdate($params, $data)
	{
		$id = $params['id'];
		$service = $this->getService();
		$entity = $service->getEntity($id);

		if (!$this->getAcl()->check($entity, 'edit')) {
			throw new Forbidden();
		}

		if ($service->updateEntity($entity, $data)) {
			return $entity;
		}

		throw new Error();
	}

	protected function actionPost($params, $data)
	{
		if (!$this->getAcl()->check($this->name, 'edit')) {
			throw new Forbidden();
		}

		$service = $this->getService();

		if ($entity = $service->postEntity($data)) {
			return $entity;
		}

		throw new Error();
	}

	protected function actionList($params, $where)
	{
		if (!$this->getAcl()->check($this->name, 'read')) {
			throw new Forbidden();
		}
		$service = $this->getService();

		$where = $data['where'];
		$offset = $data['offset'];
		$limit = $data['limit'];
		$asc = $data['asc'];
		$sortBy = $data['sortBy'];

		$entityList = $service->findEntities({
			'where' => $where,
			'offset' => $offset,
			'limit' => $limit,
			'asc' => $asc,
			'sortBy' => $sortBy,
		});

		return $entityList;
	}

	protected function actionDelete($params)
	{
		$id = $params['id'];

		$service = $this->getService();
		$entity = $service->getEntity($id);

		if (!$this->getAcl()->check($entity, 'delete')) {
			throw new Forbidden();
		}

		if ($service->deleteEntity($entity)) {
			return true;
		}
		throw new Error();
	}

	protected function actionMassUpdate($params, $data)
	{
		if (!$this->getAcl()->check($this->name, 'edit')) {
			throw new Forbidden();
		}
		$service = $this->getService();

		$ids = $data['ids'];
		$where = $data['where'];

		$idsUpdated = $service->massUpdate($ids, $where);

		return $idsUpdated;
	}

	protected function actionMassDelete($params, $data)
	{
		if (!$this->getAcl()->check($this->name, 'delete')) {
			throw new Forbidden();
		}
		$service = $this->getService();

		$ids = $data['ids'];
		$where = $data['where'];

		$idsDeleted = $service->massDelete($ids, $where);

		return $idsDeleted;
	}

	protected function actionListLinked($params, $data)
	{
		$id = $params['id'];
		$link = $params['link'];

		$service = $this->getService();
		$entity = $service->getEntity($id);
		$foreignEntityName = $entity->defs['links'][$link]['entity'];

		if (!$this->getAcl()->check($entity, 'read')) {
			throw new Forbidden();
		}
		if (!$this->getAcl()->check($foreignEntityName, 'read')) {
			throw new Forbidden();
		}

		$where = $data['where'];
		$offset = $data['offset'];
		$limit = $data['limit'];
		$asc = $data['asc'];
		$sortBy = $data['sortBy'];

		$entityList = $service->findLinkedEntities($entity, $link, {
			'where' => $where,
			'offset' => $offset,
			'limit' => $limit,
			'asc' => $asc,
			'sortBy' => $sortBy,
		});

		return $entityList;
	}

	protected function actionCreateLink($params)
	{
		$id = $params['id'];
		$link = $params['link'];
		$foreignId = $params['foreignId'];

		$service = $this->getService();
		$entity = $service->getEntity($id);
		$foreignEntityName = $entity->defs['links'][$link]['entity'];

		if (!$this->getAcl()->check($entity, 'edit')) {
			throw new Forbidden();
		}

		if ($service->linkEntity($entity, $link, $foreignId)) {
			return true;
		}

		throw new Error();
	}