Lib/UsersUICDRFilter.php - master - mikopbx/ModuleUsersUI

Lib/UsersUICDRFilter.php
143 строки5 KB
Nikolay Beketov
feat: migrate ACL system to REST API v3 with auto-linking
06 дек 2025, 12:46
06 дек 2025, 12:46cf445cc
<?php

/*
 * MikoPBX - free phone system for small business
 * Copyright © 2017-2023 Alexey Portnov and Nikolay Beketov
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License along with this program.
 * If not, see <https://www.gnu.org/licenses/>.
 */

namespace Modules\ModuleUsersUI\Lib;

use MikoPBX\Common\Models\Extensions;
use MikoPBX\Common\Models\Users;
use MikoPBX\Core\System\Util;
use Modules\ModuleUsersUI\Models\AccessGroupCDRFilter;
use Modules\ModuleUsersUI\Models\AccessGroups;
use Phalcon\Di\Injectable;

class UsersUICDRFilter extends Injectable
{
    /**
     * Applies CDR filter rules based on the given access group ID.
     *
     * @param string $accessGroupId The access group ID.
     * @param array $cdrRequestParameters The CDR request parameters (passed by reference).
     *
     * @return void
     */
    public static function applyCDRFilterRules(string $accessGroupId, array &$cdrRequestParameters): void
    {
        $di = MikoPBXVersion::getDefaultDi();

        $modelsManager = $di->get('modelsManager');

        // Get CDR filter mode and fullAccess flag
        $parameters = [
            'models' => [
                'AccessGroups' => AccessGroups::class,
            ],
            'conditions' => 'id=:accessGroupId:',
            'bind' => [
                'accessGroupId' => $accessGroupId,
            ],
            'columns' => [
                'cdrFilterMode',
                'fullAccess',
            ],
        ];

        $accessGroup = $modelsManager->createBuilder($parameters)->getQuery()->execute()->getFirst();

        // Skip filter for groups with full access
        if ($accessGroup === null || $accessGroup->fullAccess === '1') {
            return;
        }

        $cdrFilterMode = $accessGroup->cdrFilterMode;

        // Disabled filter
        if ($cdrFilterMode === Constants::CDR_FILTER_DISABLED) {
            return;
        }

        // Get filtered users based on the access group ID
        $parameters = [
            'models' => [
                'AccessGroupCDRFilter' => AccessGroupCDRFilter::class,
            ],
            'columns' => [
                'user_id'
            ],
            'conditions' => 'group_id=:group_id:',
            'bind' => [
                'group_id' => $accessGroupId,
            ],
        ];
        $filteredUsers = $modelsManager->createBuilder($parameters)->getQuery()->execute()->toArray();



        // Get filtered extensions based on the filtered users
        $parameters = [
            'models' => [
                'Extensions' => Extensions::class,
            ],
            'columns' => [
                'number' => 'Extensions.number',
            ],
            'conditions' => 'Users.id IN ({ids:array})',
            'bind' => [
                'ids' => array_column($filteredUsers, 'user_id'),
            ],
            'joins' => [
                'Users' => [
                    0 => Users::class,
                    1 => 'Users.id = Extensions.userid',
                    2 => 'Users',
                    3 => 'INNER',
                ],
            ],
        ];
        if (count($filteredUsers) > 0) {
            $filteredExtensions = array_column($modelsManager->createBuilder($parameters)->getQuery()->execute()->toArray(), 'number');
        } else {
            $filteredExtensions = [];
        }
        if (count($filteredExtensions) > 0) {
            $oldConditions = $cdrRequestParameters['conditions'];
            // Update CDR request parameters with filtered extensions
            $cdrRequestParameters['bind']['filteredExtensions'] = $filteredExtensions;
            if ($cdrFilterMode === Constants::CDR_FILTER_ONLY_SELECTED) {
                // Only show CDRs for the filtered extensions from the AccessGroupCDRFilter list
                $cdrRequestParameters['conditions'] = '(src_num IN ({filteredExtensions:array}) OR dst_num IN ({filteredExtensions:array}))';
            } elseif ($cdrFilterMode === Constants::CDR_FILTER_OUTGOING_SELECTED) {
                $cdrRequestParameters['conditions'] = 'src_num IN ({filteredExtensions:array})';
            } elseif ($cdrFilterMode === Constants::CDR_FILTER_EXCEPT_SELECTED) {
                // Only show CDRs for the filtered extensions NOT in the AccessGroupCDRFilter list
                $cdrRequestParameters['conditions'] = '(src_num NOT IN ({filteredExtensions:array}) AND dst_num NOT IN ({filteredExtensions:array}))';
            }
            if(!empty($oldConditions)){
                $cdrRequestParameters['conditions'] .= ' AND ('.$oldConditions.')';
            }
        } elseif ($cdrFilterMode === Constants::CDR_FILTER_ONLY_SELECTED) {
            // No users to filter - hide all CDRs
            $cdrRequestParameters['conditions'] = '1=0';
            Util::sysLogMsg(
                __CLASS__,
                "CDR filter applied: mode='$cdrFilterMode', groupId='$accessGroupId', filteredExtensions=[], result='1=0' (empty result)"
            );
        }
    }
}