CUR-3978 implement default UI and backend permissions for all default roles of all organizations

database/migrations/2022_09_23_500023_organization_role_ui_permission.php

@@ -0,0 +1,30 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+
+class OrganizationRoleUiPermission extends Migration
+{
+    /**
+     * Run the migrations.
+     *
+     * @return void
+     */
+    public function up()
+    {
+        //
+        \Artisan::call('db:seed', [
+            '--class' => OrganizationRoleUiPermissionSeeder::class,
+            '--force' => true
+        ]);
+    }
+
+    /**
+     * Reverse the migrations.
+     *
+     * @return void
+     */
+    public function down()
+    {
+        //
+    }
+}

database/seeds/OrganizationRoleUiPermissionSeeder.php

@@ -0,0 +1,168 @@
+<?php
+
+use App\Models\OrganizationRoleType;
+use App\Repositories\UiOrganizationPermissionMapping\UiOrganizationPermissionMappingRepositoryInterface;
+use Illuminate\Database\Seeder;
+
+class OrganizationRoleUiPermissionSeeder extends Seeder
+{
+    public $uiModules;
+    public $uiModulePermissions;
+    public $domain;
+
+    /**
+     * Run the database seeds.
+     *
+     * @return void
+     */
+    public function run()
+    {
+        $adminUiPermissions = [
+            "Organiziation" => "Edit",
+            "All Independent Activities" => "Edit",
+            "Export/Import Activities" => "Edit",
+            "All Projects" => "Edit",
+            "Import/Export Projects" => "Edit",
+            "Activity Types" => "Edit",
+            "Activity Items" => "Edit",
+            "Manage Users" => "Edit",
+            "Manage Roles" => "Edit",
+            "LMS Settings" => "Edit",
+            "LTI Tools" => "Edit",
+            "BrightCove" => "Edit",
+            "Project" => "Edit",
+            "Playlist" => "Edit",
+            "Activity" => "Edit",
+            "Team" => "Edit",
+            "Independent Activity" => "Edit",
+            "My Interactive Video" => "None"
+        ];
+
+        $courseCreatorUiPermissions = [
+            "Organiziation" => "None",
+            "All Independent Activities" => "None",
+            "Export/Import Activities" => "None",
+            "All Projects" => "None",
+            "Import/Export Projects" => "None",
+            "Activity Types" => "None",
+            "Activity Items" => "None",
+            "Manage Users" => "None",
+            "Manage Roles" => "None",
+            "LMS Settings" => "None",
+            "LTI Tools" => "None",
+            "BrightCove" => "None",
+            "Project" => "Edit",
+            "Playlist" => "Edit",
+            "Activity" => "Edit",
+            "Team" => "Edit",
+            "Independent Activity" => "Edit",
+            "My Interactive Video" => "None"
+        ];
+
+        $memberUiPermissions = [
+            "Organiziation" => "None",
+            "All Independent Activities" => "None",
+            "Export/Import Activities" => "None",
+            "All Projects" => "None",
+            "Import/Export Projects" => "None",
+            "Activity Types" => "None",
+            "Activity Items" => "None",
+            "Manage Users" => "None",
+            "Manage Roles" => "None",
+            "LMS Settings" => "None",
+            "LTI Tools" => "None",
+            "BrightCove" => "None",
+            "Project" => "View",
+            "Playlist" => "View",
+            "Activity" => "View",
+            "Team" => "View",
+            "Independent Activity" => "View",
+            "My Interactive Video" => "None"
+        ];
+
+        $selfRegisteredUiPermissions = [
+            "Organiziation" => "None",
+            "All Independent Activities" => "None",
+            "Export/Import Activities" => "None",
+            "All Projects" => "None",
+            "Import/Export Projects" => "None",
+            "Activity Types" => "None",
+            "Activity Items" => "None",
+            "Manage Users" => "None",
+            "Manage Roles" => "None",
+            "LMS Settings" => "None",
+            "LTI Tools" => "None",
+            "BrightCove" => "None",
+            "Project" => "Edit",
+            "Playlist" => "Edit",
+            "Activity" => "Edit",
+            "Team" => "Edit",
+            "Independent Activity" => "Edit",
+            "My Interactive Video" => "None"
+        ];
+
+        $roleTypes = OrganizationRoleType::whereIn('name', ['admin', 'course_creator', 'member', 'self_registered'])->get();
+        $this->uiModules = DB::table('ui_modules')->whereNotNull('parent_id')->pluck('id', 'title');
+
+        $uiModulePermissionsList = [];
+        $uiModulePermissionsResult = DB::table('ui_module_permissions')->get();
+
+        foreach ($uiModulePermissionsResult as $uiModulePermission) {
+            $uiModulePermissionsList[$uiModulePermission->title][$uiModulePermission->ui_module_id] = $uiModulePermission->id;
+        }
+
+        $this->uiModulePermissions = $uiModulePermissionsList;
+
+        $this->domain = request()->getHttpHost();
+
+        return DB::transaction(function () use($roleTypes, $adminUiPermissions, $courseCreatorUiPermissions, $memberUiPermissions, $selfRegisteredUiPermissions) {
+            foreach ($roleTypes as $roleType) {
+                if ($roleType->name === 'admin') {
+                    $this->assignPermissions($adminUiPermissions, $roleType);
+                } else if ($roleType->name === 'course_creator') {
+                    $this->assignPermissions($courseCreatorUiPermissions, $roleType);
+                } else if ($roleType->name === 'member') {
+                    $this->assignPermissions($memberUiPermissions, $roleType);
+                } else if ($roleType->name === 'self_registered') {
+                    $this->assignPermissions($selfRegisteredUiPermissions, $roleType);
+                }
+            }
+        });
+    }
+
+    function assignPermissions($uiPermissions, $roleType)
+    { 
+        $uiModulePermissionIds = [];
+
+        foreach ($uiPermissions as $permissionName => $permissionType) {
+
+            if (
+                $this->domain === 'currikistudio.org' && 
+                $permissionName === 'Team' &&
+                ($roleType->name === 'course_creator' || $roleType->name === 'self_registered')
+            ) {
+                $permissionType = 'View';
+            } else if ($this->domain === 'oci.currikistudio.org') {
+                if ($permissionName === 'Independent Activity') {
+                    $permissionType = 'None';
+                } else if ($permissionName === 'My Interactive Video') {
+                    $permissionType = 'View';
+                }
+            }
+
+            if (isset($this->uiModules[$permissionName])) {
+                $uiPermissionName = $this->uiModules[$permissionName];
+                if (isset($this->uiModulePermissions[$permissionType][$uiPermissionName])) {
+                    $uiModulePermissionIds[] = $this->uiModulePermissions[$permissionType][$uiPermissionName];
+                }
+            }
+        }
+
+        // assign ui role permissions
+        $roleType->uiModulePermissions()->sync($uiModulePermissionIds);
+        // assign backend role permissions 
+        $UiOrganizationPermissionMappingRepository = resolve(UiOrganizationPermissionMappingRepositoryInterface::class);
+        $organizationPermissionTypeIds = $UiOrganizationPermissionMappingRepository->getOrganizationPermissionTypeIds($uiModulePermissionIds);
+        $roleType->permissions()->sync($organizationPermissionTypeIds);
+    }
+}