luos/workflow/engine/controllers/strategicDashboard.php

<?php

use ProcessMaker\Core\System;
use ProcessMaker\Exception\RBACException;

/**
 * StrategicDashboard controller
 * @inherits Controller
 *
 * @access public
 */

class StrategicDashboard extends Controller
{

    // Class properties
    private $urlProxy;
    private $clientToken;
    private $usrId;
    private $usrUnitCost;

    // Class constructor
    public function __construct()
    {
        global $RBAC;

        $this->usrId = $RBAC->aUserInfo['USER_INFO']['USR_UID'];
        $user = new Users();
        $user = $user->load($RBAC->aUserInfo['USER_INFO']['USR_UID']);
        $this->usrUnitCost = $this->currencySymbolToShow($user);
        $this->urlProxy = System::getHttpServerHostnameRequestsFrontEnd() . '/api/1.0/' . config("system.workspace") . '/';
        //change
        $clientId = 'x-pm-local-client';
        $client = $this->getClientCredentials($clientId);
        $authCode = $this->getAuthorizationCode($client);
        $debug = false; //System::isDebugMode();

        $loader = Maveriks\Util\ClassLoader::getInstance();
        $loader->add(PATH_TRUNK . 'vendor/bshaffer/oauth2-server-php/src/', "OAuth2");

        $request = array(
            'grant_type' => 'authorization_code',
            'code' => $authCode
        );
        $server = array(
            'REQUEST_METHOD' => 'POST'
        );
        $headers = array(
            "PHP_AUTH_USER" => $client['CLIENT_ID'],
            "PHP_AUTH_PW" => $client['CLIENT_SECRET'],
            "Content-Type" => "multipart/form-data;",
            "Authorization" => "Basic " . base64_encode($client['CLIENT_ID'] . ":" . $client['CLIENT_SECRET'])
        );

        $request = new \OAuth2\Request(array(), $request, array(), array(), array(), $server, null, $headers);
        $oauthServer = new \ProcessMaker\Services\OAuth2\Server();
        $response = $oauthServer->postToken($request, true);
        $this->clientToken = $response->getParameters();
        $this->clientToken["client_id"] = $client['CLIENT_ID'];
        $this->clientToken["client_secret"] = $client['CLIENT_SECRET'];
    }

    private function currencySymbolToShow($user)
    {
        $result = '$';
        if (isset($user['USR_UNIT_COST']) && !empty($user['USR_UNIT_COST'])) {
            $result = $user['USR_UNIT_COST'];
        } else {
            $processModel = new Process();
            $processList = $processModel->getAllConfiguredCurrencies();
            $defaultProcessCurrency = '';
            foreach ($processList as $key => $value) {
                if (!empty($value)) {
                    $defaultProcessCurrency = $value;
                }
            }
            if (!empty($defaultProcessCurrency)) {
                $result = $defaultProcessCurrency;
            }
        }
        return $result;
    }

    private function getClientCredentials($clientId)
    {
        $oauthQuery = new ProcessMaker\Services\OAuth2\PmPdo($this->getDsn());
        return $oauthQuery->getClientDetails($clientId);
    }

    private function getAuthorizationCode($client)
    {
        \ProcessMaker\Services\OAuth2\Server::setDatabaseSource($this->getDsn());
        \ProcessMaker\Services\OAuth2\Server::setPmClientId($client['CLIENT_ID']);

        $oauthServer = new \ProcessMaker\Services\OAuth2\Server();
        $userId = $_SESSION['USER_LOGGED'];
        $authorize = true;
        $_GET = array_merge($_GET, array(
            'response_type' => 'code',
            'client_id' => $client['CLIENT_ID'],
            'scope' => implode(' ', $oauthServer->getScope())
        ));

        $response = $oauthServer->postAuthorize($authorize, $userId, true);
        $code = substr($response->getHttpHeader('Location'), strpos($response->getHttpHeader('Location'), 'code=')+5, 40);

        return $code;
    }

    private function getDsn()
    {
        list($host, $port) = strpos(DB_HOST, ':') !== false ? explode(':', DB_HOST) : array(DB_HOST, '');
        $port = empty($port) ? '' : ";port=$port";
        $dsn = DB_ADAPTER.':host='.$host.';dbname='.DB_NAME.$port;

        return array('dsn' => $dsn, 'username' => DB_USER, 'password' => DB_PASS);
    }

    // Functions for the StrategicDashboards

    public function dashboardList()
    {
        // Include global object RBAC
        global $RBAC;

        // Check if the current user have the correct permissions to access to this resource, if not throws a RBAC Exception with code 403
        if ($RBAC->userCanAccess('PM_SETUP') !== 1 || $RBAC->userCanAccess('PM_SETUP_DASHBOARDS') !== 1) {
            throw new RBACException('ID_ACCESS_DENIED', 403);
        }

        try {
            $this->includeExtJS('strategicDashboard/dashboardList');
            if (isset($_SESSION['__StrategicDashboard_ERROR__'])) {
                $this->setJSVar('__StrategicDashboard_ERROR__', $_SESSION['__StrategicDashboard_ERROR__']);
                unset($_SESSION['__StrategicDashboard_ERROR__']);
            }
            $this->setView('strategicDashboard/dashboardList');

            $this->setJSVar('urlProxy', $this->urlProxy);
            $this->setJSVar('credentials', $this->clientToken);
            G::RenderPage('publish', 'extJs');
        } catch (Exception $error) {
            $_SESSION['__DASHBOARD_ERROR__'] = $error->getMessage();
            die();
        }
    }

    public function formDashboard($data)
    {
        try {
            $this->includeExtJS('strategicDashboard/formDashboard', true, true);
            $this->setView('strategicDashboard/formDashboard');

            $this->setJSVar('DAS_UID', '');
            $this->setJSVar('urlProxy', $this->urlProxy);
            $this->setJSVar('credentials', $this->clientToken);

            G::RenderPage('publish', 'extJs');
            return null;
        } catch (Exception $error) {
            $_SESSION['__DASHBOARD_ERROR__'] = $error->getMessage();
            G::header('Location: dashboardList');
            die();
        }
    }

    public function formEditDashboard($data)
    {
        try {
            $this->includeExtJS('strategicDashboard/formDashboard', true, true);
            $this->setView('strategicDashboard/formDashboard');

            $dasUid = isset($_REQUEST['DAS_UID']) ? $_REQUEST['DAS_UID'] : '';
            $this->setJSVar('DAS_UID', $dasUid);
            $this->setJSVar('urlProxy', $this->urlProxy);
            $this->setJSVar('credentials', $this->clientToken);

            G::RenderPage('publish', 'extJs');
            return null;
        } catch (Exception $error) {
            $_SESSION['__DASHBOARD_ERROR__'] = $error->getMessage();
            G::header('Location: dashboardList');
            die();
        }
    }

    public function viewDashboard()
    {
        // Include global object RBAC
        global $RBAC;

        // Check if the current user have the correct permissions to access to this resource, if not throws a RBAC Exception with code 403
        if ($RBAC->userCanAccess('PM_DASHBOARD') !== 1) {
            throw new RBACException('ID_ACCESS_DENIED', 403);
        }

        try {
            if (isset($_SESSION['__StrategicDashboard_ERROR__'])) {
                $this->setJSVar('__StrategicDashboard_ERROR__', $_SESSION['__StrategicDashboard_ERROR__']);
                unset($_SESSION['__StrategicDashboard_ERROR__']);
            }
            $this->setView('strategicDashboard/viewDashboard');

            $this->setVar('urlProxy', $this->urlProxy);
            $this->setVar('SYS_SYS', config("system.workspace"));
            $this->setVar('usrId', $this->usrId);
            $this->setVar('credentials', $this->clientToken);
            $this->setVar('unitCost', $this->usrUnitCost);

            $translation = $this->getTranslations();
            $this->setVar('translation', $translation);
            $this->render();
        } catch (Exception $error) {
            $_SESSION['__DASHBOARD_ERROR__'] = $error->getMessage();
            die();
        }
    }

    public function viewDashboardIE()
    {
        try {
            $this->setView('strategicDashboard/viewDashboardIE');
            $this->setVar('urlProxy', $this->urlProxy);
            $this->setVar('usrId', $this->usrId);
            $this->setVar('credentials', $this->clientToken);
            $this->setVar('unitCost', $this->usrUnitCost);

            $translation = $this->getTranslations();
            $this->setVar('translation', $translation);
            $this->render();
        } catch (Exception $error) {
        } catch (Exception $error) {
            $_SESSION['__DASHBOARD_ERROR__'] = $error->getMessage();
            die();
        }
    }

    private function getTranslations()
    {
        $translation = array();
        $translation['ID_MANAGERS_DASHBOARDS'] = G::LoadTranslation('ID_MANAGERS_DASHBOARDS');
        $translation['ID_PRO_EFFICIENCY_INDEX'] = G::LoadTranslation('ID_PRO_EFFICIENCY_INDEX');
        $translation['ID_EFFICIENCY_USER'] = G::LoadTranslation('ID_EFFICIENCY_USER');
        $translation['ID_COMPLETED_CASES'] = G::LoadTranslation('ID_COMPLETED_CASES');
        $translation['ID_WELL_DONE'] = G::LoadTranslation('ID_WELL_DONE');
        $translation['ID_NUMBER_CASES'] = G::LoadTranslation('ID_NUMBER_CASES');
        $translation['ID_EFFICIENCY_INDEX'] = G::LoadTranslation('ID_EFFICIENCY_INDEX');
        $translation['ID_INEFFICIENCY_COST'] = G::LoadTranslation('ID_INEFFICIENCY_COST');
        $translation['ID_EFFICIENCY_COST'] = G::LoadTranslation('ID_EFFICIENCY_COST');
        $translation['ID_RELATED_PROCESS'] = G::LoadTranslation('ID_RELATED_PROCESS');
        $translation['ID_RELATED_GROUPS'] = G::LoadTranslation('ID_RELATED_GROUPS');
        $translation['ID_RELATED_TASKS'] = G::LoadTranslation('ID_RELATED_TASKS');
        $translation['ID_RELATED_USERS'] = G::LoadTranslation('ID_RELATED_USERS');
        $translation['ID_GRID_PAGE_NO_DASHBOARD_MESSAGE'] = G::LoadTranslation('ID_GRID_PAGE_NO_DASHBOARD_MESSAGE');
        $translation['ID_PROCESS_TASKS'] = G::LoadTranslation('ID_PROCESS_TASKS');
        $translation['ID_TIME_HOURS'] = G::LoadTranslation('ID_TIME_HOURS');
        $translation['ID_GROUPS'] = G::LoadTranslation('ID_GROUPS');
        $translation['ID_COSTS'] = G::LoadTranslation('ID_COSTS');
        $translation['ID_TASK'] = G::LoadTranslation('ID_TASK');
        $translation['ID_USER'] = G::LoadTranslation('ID_USER');
        $translation['ID_YEAR'] = G::LoadTranslation('ID_YEAR');
        $translation['ID_USERS'] = G::LoadTranslation('ID_USERS');
        $translation['ID_USERS'] = G::LoadTranslation('ID_USERS');
        $translation['ID_OVERDUE'] = G::LoadTranslation('ID_OVERDUE');
        $translation['ID_AT_RISK'] = G::LoadTranslation('ID_AT_RISK');
        $translation['ID_ON_TIME'] = G::LoadTranslation('ID_ON_TIME');
        $translation['ID_NO_INEFFICIENT_PROCESSES'] = G::LoadTranslation('ID_NO_INEFFICIENT_PROCESSES');
        $translation['ID_NO_INEFFICIENT_TASKS'] = G::LoadTranslation('ID_NO_INEFFICIENT_TASKS');
        $translation['ID_NO_INEFFICIENT_USER_GROUPS'] = G::LoadTranslation('ID_NO_INEFFICIENT_USER_GROUPS');
        $translation['ID_NO_INEFFICIENT_USERS'] = G::LoadTranslation('ID_NO_INEFFICIENT_USERS');
        $translation['ID_DISPLAY_EMPTY'] = G::LoadTranslation('ID_DISPLAY_EMPTY');
        $translation['ID_INBOX_EMPTY'] = G::LoadTranslation('ID_INBOX_EMPTY');
        $translation['ID_INDICATOR'] = G::LoadTranslation('ID_INDICATOR');
        $translation['ID_PERIODICITY'] = G::LoadTranslation('ID_PERIODICITY');
        $translation['ID_MONTH'] = G::LoadTranslation('ID_MONTH');
        $translation['ID_QUARTER'] = G::LoadTranslation('ID_QUARTER');
        $translation['ID_SEMESTER'] = G::LoadTranslation('ID_SEMESTER');
        $translation['ID_TO'] = G::LoadTranslation('ID_TO');
        $translation['ID_FROM'] = G::LoadTranslation('ID_FROM');
        $translation['ID_MONTH_ABB_1'] = G::LoadTranslation('ID_MONTH_ABB_1');
        $translation['ID_MONTH_ABB_2'] = G::LoadTranslation('ID_MONTH_ABB_2');
        $translation['ID_MONTH_ABB_3'] = G::LoadTranslation('ID_MONTH_ABB_3');
        $translation['ID_MONTH_ABB_4'] = G::LoadTranslation('ID_MONTH_ABB_4');
        $translation['ID_MONTH_ABB_5'] = G::LoadTranslation('ID_MONTH_ABB_5');
        $translation['ID_MONTH_ABB_6'] = G::LoadTranslation('ID_MONTH_ABB_6');
        $translation['ID_MONTH_ABB_7'] = G::LoadTranslation('ID_MONTH_ABB_7');
        $translation['ID_MONTH_ABB_8'] = G::LoadTranslation('ID_MONTH_ABB_8');
        $translation['ID_MONTH_ABB_9'] = G::LoadTranslation('ID_MONTH_ABB_9');
        $translation['ID_MONTH_ABB_10'] = G::LoadTranslation('ID_MONTH_ABB_10');
        $translation['ID_MONTH_ABB_11'] = G::LoadTranslation('ID_MONTH_ABB_11');
        $translation['ID_MONTH_ABB_12'] = G::LoadTranslation('ID_MONTH_ABB_12');
        return $translation;
    }
}