routes.php 27 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. use Symfony\Component\HttpFoundation\Request;
  4. use \ChamiloSession as Session;
  5. /** Setting course session and group global values */
  6. $settingCourseConditions = function (Request $request) use ($cidReset, $app) {
  7. $cidReq = $request->get('cidReq');
  8. $sessionId = $request->get('id_session');
  9. $groupId = $request->get('gidReq');
  10. $tempCourseId = api_get_course_id();
  11. $tempGroupId = api_get_group_id();
  12. $tempSessionId = api_get_session_id();
  13. $courseReset = false;
  14. if ((!empty($cidReq) && $tempCourseId != $cidReq) || empty($tempCourseId) || empty($tempCourseId) == -1) {
  15. $courseReset = true;
  16. }
  17. if (isset($cidReset) && $cidReset == 1) {
  18. $courseReset = true;
  19. }
  20. Session::write('courseReset', $courseReset);
  21. $groupReset = false;
  22. if ($tempGroupId != $groupId || empty($tempGroupId)) {
  23. $groupReset = true;
  24. }
  25. $sessionReset = false;
  26. if ($tempSessionId != $sessionId || empty($tempSessionId)) {
  27. $sessionReset = true;
  28. }
  29. /*
  30. $app['monolog']->addDebug('Start');
  31. $app['monolog']->addDebug($courseReset);
  32. $app['monolog']->addDebug($cidReq);
  33. $app['monolog']->addDebug($tempCourseId);
  34. $app['monolog']->addDebug('End');
  35. */
  36. if ($courseReset) {
  37. if (!empty($cidReq) && $cidReq != -1) {
  38. $courseInfo = api_get_course_info($cidReq, true, true);
  39. if (!empty($courseInfo)) {
  40. $courseCode = $courseInfo['code'];
  41. $courseId = $courseInfo['real_id'];
  42. Session::write('_real_cid', $courseId);
  43. Session::write('_cid', $courseCode);
  44. Session::write('_course', $courseInfo);
  45. } else {
  46. $app->abort(404, 'Course not available');
  47. }
  48. } else {
  49. Session::erase('_real_cid');
  50. Session::erase('_cid');
  51. Session::erase('_course');
  52. }
  53. }
  54. $courseCode = api_get_course_id();
  55. if (!empty($courseCode) && $courseCode != -1) {
  56. $tbl_course = Database::get_main_table(TABLE_MAIN_COURSE);
  57. $time = api_get_utc_datetime();
  58. $sql = "UPDATE $tbl_course SET last_visit= '$time' WHERE code='$courseCode'";
  59. Database::query($sql);
  60. }
  61. if ($sessionReset) {
  62. Session::erase('session_name');
  63. Session::erase('id_session');
  64. if (!empty($sessionId)) {
  65. $sessionInfo = api_get_session_info($sessionId);
  66. if (empty($sessionInfo)) {
  67. $app->abort(404, 'Session not available');
  68. } else {
  69. Session::write('id_session', $sessionId);
  70. }
  71. }
  72. }
  73. if ($groupReset) {
  74. Session::erase('_gid');
  75. if (!empty($groupId)) {
  76. Session::write('_gid', $groupId);
  77. }
  78. }
  79. if (!isset($_SESSION['login_as'])) {
  80. $userId = api_get_user_id();
  81. // Course login
  82. if (isset($userId)) {
  83. event_course_login(api_get_course_int_id(), $userId, api_get_session_id());
  84. }
  85. }
  86. };
  87. $userCourseAdmin = function(Request $request) use ($app) {
  88. if (api_is_allowed_to_edit()) {
  89. return null;
  90. } else {
  91. return $app->abort(401);
  92. }
  93. };
  94. /** Checks user permissions inside a course teacher? coach? etc */
  95. $userPermissionsInsideACourse = function (Request $request) use ($app) {
  96. $courseId = api_get_course_int_id();
  97. $userId = api_get_user_id();
  98. $sessionId = api_get_session_id();
  99. //If I'm the admin platform i'm a teacher of the course
  100. $is_platformAdmin = api_is_platform_admin();
  101. $courseReset = Session::read('courseReset');
  102. //$app['monolog']->addDebug($courseReset);
  103. //$app['monolog']->addDebug($courseId);
  104. // Course
  105. $is_courseMember = false;
  106. $is_courseAdmin = false;
  107. $is_courseTutor = false;
  108. $is_courseCoach = false;
  109. $is_sessionAdmin = false;
  110. if ($courseReset) {
  111. if (isset($courseId) && $courseId && $courseId != -1) {
  112. $courseInfo = api_get_course_info();
  113. $userId = isset($userId) ? intval($userId) : 0;
  114. $variable = 'accept_legal_'.$userId.'_'.$courseInfo['real_id'].'_'.$sessionId;
  115. $user_pass_open_course = false;
  116. if (api_check_user_access_to_legal($courseInfo['visibility']) && Session::read($variable)) {
  117. $user_pass_open_course = true;
  118. }
  119. //Checking if the user filled the course legal agreement
  120. if ($courseInfo['activate_legal'] == 1 && !api_is_platform_admin()) {
  121. $user_is_subscribed = CourseManager::is_user_accepted_legal(
  122. $userId,
  123. $courseInfo,
  124. $sessionId
  125. ) || $user_pass_open_course;
  126. if (!$user_is_subscribed) {
  127. $url = api_get_path(WEB_CODE_PATH).'course_info/legal.php?course_code='.$courseInfo['code'].'&session_id='.$sessionId;
  128. header('Location: '.$url);
  129. exit;
  130. }
  131. }
  132. //Check if user is subscribed in a course
  133. $course_user_table = Database::get_main_table(TABLE_MAIN_COURSE_USER);
  134. $sql = "SELECT * FROM $course_user_table WHERE user_id = '".$userId."' AND
  135. relation_type <> ".COURSE_RELATION_TYPE_RRHH." AND c_id = ".api_get_course_int_id();
  136. $result = Database::query($sql);
  137. $cuData = null;
  138. if (Database::num_rows($result) > 0) { // this user have a recorded state for this course
  139. $cuData = Database::fetch_array($result, 'ASSOC');
  140. $is_courseAdmin = (bool)($cuData['status'] == 1);
  141. $is_courseTutor = (bool)($cuData['tutor_id'] == 1);
  142. $is_courseMember = true;
  143. $_courseUser['role'] = $cuData['role'];
  144. Session::write('_courseUser', $_courseUser);
  145. }
  146. //We are in a session course? Check session permissions
  147. if (!empty($sessionId)) {
  148. //I'm not the teacher of the course
  149. if ($is_courseAdmin == false) {
  150. // this user has no status related to this course
  151. // The user is subscribed in a session? The user is a Session coach a Session admin ?
  152. $tbl_session = Database :: get_main_table(TABLE_MAIN_SESSION);
  153. $tbl_session_course_user = Database :: get_main_table(TABLE_MAIN_SESSION_COURSE_USER);
  154. //Session coach, session admin, course coach admin
  155. $sql = "SELECT session.id_coach, session_admin_id, session_rcru.id_user
  156. FROM $tbl_session session, $tbl_session_course_user session_rcru
  157. WHERE session_rcru.id_session = session.id AND
  158. session_rcru.c_id = ".$courseInfo['real_id']." AND
  159. session_rcru.id_user = $userId AND
  160. session_rcru.id_session = $sessionId AND
  161. session_rcru.status = 2 ";
  162. $result = Database::query($sql);
  163. $row = Database::store_result($result);
  164. //I'm a session admin?
  165. if (isset($row) && isset($row[0]) && $row[0]['session_admin_id'] == $userId) {
  166. $_courseUser['role'] = 'Professor';
  167. $is_courseMember = false;
  168. $is_courseTutor = false;
  169. $is_courseAdmin = false;
  170. $is_courseCoach = false;
  171. $is_sessionAdmin = true;
  172. } else {
  173. //Im a coach or a student?
  174. $sql = "SELECT cu.id_user, cu.status FROM $tbl_session_course_user cu
  175. WHERE c_id = '$courseId' AND
  176. cu.id_user = '".$userId."' AND
  177. cu.id_session = '".$sessionId."'
  178. LIMIT 1";
  179. $result = Database::query($sql);
  180. if (Database::num_rows($result)) {
  181. $row = Database::fetch_array($result, 'ASSOC');
  182. $session_course_status = $row['status'];
  183. switch ($session_course_status) {
  184. case '2': // coach - teacher
  185. $_courseUser['role'] = 'Professor';
  186. $is_courseMember = true;
  187. $is_courseTutor = true;
  188. $is_courseCoach = true;
  189. $is_sessionAdmin = false;
  190. if (api_get_setting('extend_rights_for_coach') == 'true') {
  191. $is_courseAdmin = true;
  192. } else {
  193. $is_courseAdmin = false;
  194. }
  195. Session::write('_courseUser', $_courseUser);
  196. break;
  197. case '0': //Student
  198. $_courseUser['role'] = '';
  199. $is_courseMember = true;
  200. $is_courseTutor = false;
  201. $is_courseAdmin = false;
  202. $is_courseCoach = false;
  203. $is_sessionAdmin = false;
  204. Session::write('_courseUser', $_courseUser);
  205. break;
  206. default:
  207. // Unregister user
  208. $_courseUser['role'] = '';
  209. $is_courseMember = false;
  210. $is_courseTutor = false;
  211. $is_courseAdmin = false;
  212. $is_sessionAdmin = false;
  213. $is_courseCoach = false;
  214. Session::erase('_courseUser');
  215. break;
  216. }
  217. } else {
  218. //Unregister user
  219. $is_courseMember = false;
  220. $is_courseTutor = false;
  221. $is_courseAdmin = false;
  222. $is_sessionAdmin = false;
  223. $is_courseCoach = false;
  224. Session::erase('_courseUser');
  225. }
  226. }
  227. }
  228. if ($is_platformAdmin) {
  229. $is_courseAdmin = true;
  230. }
  231. }
  232. }
  233. // Checking the course access
  234. $is_allowed_in_course = false;
  235. if (isset($courseInfo)) {
  236. switch ($courseInfo['visibility']) {
  237. case COURSE_VISIBILITY_OPEN_WORLD: //3
  238. $is_allowed_in_course = true;
  239. break;
  240. case COURSE_VISIBILITY_OPEN_PLATFORM: //2
  241. if (isset($userId) && !api_is_anonymous($userId)) {
  242. $is_allowed_in_course = true;
  243. }
  244. break;
  245. case COURSE_VISIBILITY_REGISTERED: //1
  246. if ($is_platformAdmin || $is_courseMember) {
  247. $is_allowed_in_course = true;
  248. }
  249. break;
  250. case COURSE_VISIBILITY_CLOSED: //0
  251. if ($is_platformAdmin || $is_courseAdmin) {
  252. $is_allowed_in_course = true;
  253. }
  254. break;
  255. }
  256. }
  257. if (!$is_platformAdmin) {
  258. if (!$is_courseMember && isset($courseInfo['registration_code']) && !empty($courseInfo['registration_code'])) {
  259. $is_courseMember = false;
  260. $is_courseAdmin = false;
  261. $is_courseTutor = false;
  262. $is_courseCoach = false;
  263. $is_sessionAdmin = false;
  264. $is_allowed_in_course = false;
  265. }
  266. }
  267. // check the session visibility
  268. if ($is_allowed_in_course == true) {
  269. //if I'm in a session
  270. if ($sessionId != 0) {
  271. if (!$is_platformAdmin) {
  272. // admin is not affected to the invisible session mode
  273. $session_visibility = api_get_session_visibility($sessionId);
  274. switch ($session_visibility) {
  275. case SESSION_INVISIBLE:
  276. $is_allowed_in_course = false;
  277. break;
  278. }
  279. }
  280. }
  281. }
  282. // save the states
  283. Session::write('is_courseAdmin', $is_courseAdmin);
  284. Session::write('is_courseMember', $is_courseMember);
  285. Session::write('is_courseTutor', $is_courseTutor);
  286. Session::write('is_courseCoach', $is_courseCoach);
  287. Session::write('is_allowed_in_course', $is_allowed_in_course);
  288. Session::write('is_sessionAdmin', $is_sessionAdmin);
  289. }
  290. };
  291. /**
  292. * Deletes the exam_password user extra field *only* to students
  293. * @todo move to the login hook system
  294. * @param Request $request
  295. */
  296. $afterLogin = function (Request $request) use ($app) {
  297. if (isset($app['current_user']) && isset($app['current_user']['user_id']) && $app['current_user']['status'] == STUDENT) {
  298. $extraField = new ExtraField('user');
  299. $extraFieldData = $extraField->get_handler_field_info_by_field_variable('exam_password');
  300. if ($extraFieldData && !empty($extraFieldData)) {
  301. $extraField = new ExtraFieldValue('user');
  302. $extraFieldValue = $extraField->get_values_by_handler_and_field_variable($app['current_user']['user_id'], 'exam_password');
  303. if (!empty($extraFieldValue)) {
  304. $extraField->delete_values_by_handler_and_field_id($app['current_user']['user_id'], $extraFieldValue['id']);
  305. }
  306. }
  307. }
  308. };
  309. $removeCidReset = function (Request $request) use ($app) {
  310. // Deleting course info.
  311. Session::erase('_cid');
  312. Session::erase('_real_cid');
  313. Session::erase('_course');
  314. if (!empty($_SESSION)) {
  315. foreach ($_SESSION as $key => $item) {
  316. if (strpos($key, 'lp_autolunch_') === false) {
  317. continue;
  318. } else {
  319. if (isset($_SESSION[$key])) {
  320. Session::erase($key);
  321. }
  322. }
  323. }
  324. }
  325. // Deleting session info.
  326. Session::erase('id_session');
  327. Session::erase('session_name');
  328. // Deleting group info.
  329. Session::erase('_gid');
  330. };
  331. $removeCidResetDependingOfSection = function (Request $request) use ($app, $removeCidReset) {
  332. $file = $request->get('file');
  333. if (!empty($file)) {
  334. $info = pathinfo($file);
  335. $section = $info['dirname'];
  336. if ($section == 'admin') {
  337. $removeCidReset($request);
  338. }
  339. }
  340. };
  341. /** / and /index paths */
  342. $app->match('/', 'index.controller:indexAction', 'GET')
  343. ->assert('type', '.+') //allowing slash "/"
  344. ->before($removeCidReset)
  345. ->after($afterLogin);
  346. $app->match('/index', 'index.controller:indexAction', 'GET')
  347. ->before($removeCidReset)
  348. ->after($afterLogin)
  349. ->bind('index');
  350. /** Userportal */
  351. $app->get('/userportal', 'userPortal.controller:indexAction')
  352. ->before($removeCidReset);
  353. $app->get('/userportal/{type}/{filter}/{page}', 'userPortal.controller:indexAction')
  354. ->before($removeCidReset)
  355. ->value('type', 'courses') //default values
  356. ->value('filter', 'current')
  357. ->value('page', '1')
  358. ->bind('userportal');
  359. /** main files */
  360. $app->match('/main/{file}', 'legacy.controller:classicAction', 'GET|POST')
  361. ->before($removeCidResetDependingOfSection)
  362. ->before($settingCourseConditions)
  363. ->before(
  364. function() use ($app) {
  365. // Do not load breadcrumbs
  366. $app['template']->loadBreadcrumb = false;
  367. })
  368. ->assert('file', '.+')
  369. ->assert('type', '.+');
  370. /** Login form */
  371. $app->match('/login', 'index.controller:loginAction', 'GET|POST')
  372. ->bind('login');
  373. /** Course home instead of courses/MATHS the new URL is web/courses/MATHS */
  374. $app->match('/courses/{cidReq}/{id_session}/', 'course_home.controller:indexAction', 'GET|POST')
  375. ->assert('id_session', '\d+')
  376. ->assert('type', '.+')
  377. ->before($settingCourseConditions)
  378. ->before($userPermissionsInsideACourse)
  379. ->bind('course');
  380. $app->match('/courses/{cidReq}', 'course_home.controller:indexAction', 'GET|POST')
  381. ->assert('type', '.+')
  382. ->before($settingCourseConditions)
  383. ->before($userPermissionsInsideACourse);
  384. // @todo this is the same as above but with out slash (otherwise we will have an httpexception)
  385. $app->match('/courses/{cidReq}/', 'course_home.controller:indexAction', 'GET|POST')
  386. ->assert('type', '.+')
  387. ->before($settingCourseConditions)
  388. ->before($userPermissionsInsideACourse);
  389. // Introduction
  390. $app->match('/introduction/edit/{tool}', 'introduction_tool.controller:editAction', 'GET|POST')
  391. ->assert('type', '.+')
  392. ->before($settingCourseConditions)
  393. ->before($userPermissionsInsideACourse)
  394. ->bind('introduction_edit');
  395. $app->match('/introduction/delete/{tool}', 'introduction_tool.controller:deleteAction', 'GET|POST')
  396. ->assert('type', '.+')
  397. ->before($settingCourseConditions)
  398. ->before($userPermissionsInsideACourse)
  399. ->bind('introduction_delete');
  400. /** Course documents */
  401. $app->get('/data/courses/{courseCode}/document/{file}', 'index.controller:getDocumentAction')
  402. ->assert('file', '.+')
  403. ->assert('type', '.+');
  404. /** Scorm documents */
  405. $app->get('/data/courses/{courseCode}/scorm/{file}', 'index.controller:getScormDocumentAction')
  406. ->assert('file', '.+')
  407. ->assert('type', '.+');
  408. /** Certificates */
  409. $app->match('/certificates/{id}', 'certificate.controller:indexAction', 'GET');
  410. /** Username */
  411. $app->match('/user/{username}', 'user.controller:indexAction', 'GET');
  412. /** Who is online */
  413. /*$app->match('/users/online', 'user.controller:onlineAction', 'GET');
  414. $app->match('/users/online-in-course', 'user.controller:onlineInCourseAction', 'GET');
  415. $app->match('/users/online-in-session', 'user.controller:onlineInSessionAction', 'GET');*/
  416. /** Portal news */
  417. $app->match('/news/{id}', 'news.controller:indexAction', 'GET')
  418. ->bind('portal_news');
  419. /** LP controller (subscribe users to a LP) */
  420. $app->match('/learnpath/subscribe_users/{lpId}', 'learnpath.controller:indexAction', 'GET|POST')
  421. ->bind('subscribe_users');
  422. /** Data document_templates files */
  423. $app->get('/data/document_templates/{file}', 'index.controller:getDocumentTemplateAction')
  424. ->bind('data');
  425. /** Data default_platform_document files */
  426. $app->get('/data/default_platform_document/{file}', 'index.controller:getDefaultPlatformDocumentAction')
  427. ->assert('file', '.+')
  428. ->assert('type', '.+');
  429. /** Data default_platform_document files */
  430. $app->get('/data/default_course_document/{file}', 'index.controller:getDefaultCourseDocumentAction')
  431. ->assert('file', '.+')
  432. ->assert('type', '.+');
  433. /** User files */
  434. $app->match('/data/upload/users/{file}', 'index.controller:getUserFile', 'GET|POST')
  435. ->assert('file', '.+');
  436. /** Group files */
  437. $app->get('/data/upload/groups/{groupId}/{file}', 'index.controller:getGroupFile')
  438. ->assert('file', '.+')
  439. ->assert('type', '.+');
  440. /** Admin */
  441. $app->get('/admin/dashboard', 'index.controller:dashboardAction')
  442. ->assert('type', '.+')
  443. ->bind('admin_dashboard');
  444. /** Question manager - admin */
  445. $app->get('/admin/questionmanager', 'question_manager.controller:questionManagerIndexAction')
  446. ->assert('type', '.+')
  447. ->bind('admin_questionmanager');
  448. $app->match('/admin/questionmanager/questions', 'question_manager.controller:questionsAction', 'GET|POST')
  449. ->assert('type', '.+')
  450. ->bind('admin_questions');
  451. $app->match('/admin/questionmanager/questions/{id}/edit', 'question_manager.controller:editQuestionAction', 'GET|POST')
  452. ->assert('type', '.+')
  453. ->bind('admin_questions_edit');
  454. $app->match('/admin/questionmanager/questions/{id}', 'exercise_manager.controller:getQuestionAction', 'GET|POST')
  455. ->assert('type', '.+')
  456. ->bind('admin_questions_show');
  457. $app->get('/admin/questionmanager/questions/get-categories/{id}', 'question_manager.controller:getCategoriesAction')
  458. ->bind('admin_questions_get_categories');
  459. $app->get('/admin/questionmanager/questions/get-questions-by-category/{categoryId}', 'question_manager.controller:getQuestionsByCategoryAction')
  460. ->bind('admin_get_questions_by_category');
  461. $app->match('/admin/questionmanager/categories/{id}/edit', 'question_manager.controller:editCategoryAction', 'GET|POST')
  462. ->assert('type', '.+')
  463. ->bind('admin_category_edit');
  464. $app->match('/admin/questionmanager/categories/{id}', 'question_manager.controller:showCategoryAction', 'GET')
  465. ->assert('id', '\d+')
  466. ->assert('type', '.+')
  467. ->bind('admin_category_show');
  468. $app->match('/admin/questionmanager/categories/new', 'question_manager.controller:newCategoryAction', 'GET|POST')
  469. ->bind('admin_category_new');
  470. $app->match('/admin/questionmanager/categories/{id}/delete', 'question_manager.controller:deleteCategoryAction', 'POST')
  471. ->bind('admin_category_delete');
  472. /** Editor */
  473. $app->match('/editor/filemanager', 'editor.controller:filemanagerAction', 'GET|POST')
  474. ->assert('type', '.+')
  475. ->bind('filemanager');
  476. $app->match('/editor/connector', 'editor.controller:connectorAction', 'GET|POST')
  477. ->assert('type', '.+')
  478. ->bind('editor_connector');
  479. /** Exercises */
  480. $app->match('courses/{cidReq}/{id_session}/exercise/question-pool', 'exercise_manager.controller:questionPoolAction', 'POST')
  481. ->before($settingCourseConditions)
  482. ->before($userPermissionsInsideACourse)
  483. ->bind('exercise_question_pool_global');
  484. $app->match('courses/{cidReq}/{id_session}/exercise/{exerciseId}/question-pool', 'exercise_manager.controller:questionPoolAction', 'GET|POST')
  485. ->assert('exerciseId', '\d+')
  486. ->before($settingCourseConditions)
  487. ->before($userCourseAdmin)
  488. ->before($userPermissionsInsideACourse)
  489. ->bind('exercise_question_pool');
  490. $app->match('courses/{cidReq}/{id_session}/exercise/{exerciseId}/copy-question/{questionId}', 'exercise_manager.controller:copyQuestionAction', 'GET|POST')
  491. ->assert('questionId', '\d+')
  492. ->assert('exerciseId', '\d+')
  493. ->before($settingCourseConditions)
  494. ->before($userCourseAdmin)
  495. ->before($userPermissionsInsideACourse)
  496. ->bind('exercise_copy_question');
  497. $app->match('courses/{cidReq}/{id_session}/exercise/{exerciseId}/reuse-question/{questionId}', 'exercise_manager.controller:reuseQuestionAction', 'GET|POST')
  498. ->assert('questionId', '\d+')
  499. ->assert('exerciseId', '\d+')
  500. ->before($settingCourseConditions)
  501. ->before($userCourseAdmin)
  502. ->before($userPermissionsInsideACourse)
  503. ->bind('exercise_reuse_question');
  504. /** Course home instead of courses/MATHS the new URL is web/courses/MATHS */
  505. $app->match('/courses/{cidReq}/{id_session}/exercise/question/{id}', 'exercise_manager.controller:getQuestionAction', 'GET')
  506. ->assert('id_session', '\d+')
  507. ->assert('id', '\d+')
  508. ->assert('type', '.+')
  509. ->before($settingCourseConditions)
  510. ->before($userPermissionsInsideACourse)
  511. ->before($userCourseAdmin)
  512. ->bind('question_show');
  513. $app->match('/courses/{cidReq}/{id_session}/exercise/{exerciseId}/question/{id}', 'exercise_manager.controller:getQuestionAction', 'GET')
  514. ->assert('id_session', '\d+')
  515. ->assert('exerciseId', '\d+')
  516. ->assert('id', '\d+')
  517. ->assert('type', '.+')
  518. ->before($settingCourseConditions)
  519. ->before($userPermissionsInsideACourse)
  520. ->before($userCourseAdmin)
  521. ->bind('exercise_question_show');
  522. $app->match('/courses/{cidReq}/{id_session}/exercise/{exerciseId}/dashboard', 'exercise_manager.controller:dashboardAction', 'GET')
  523. ->assert('id_session', '\d+')
  524. ->assert('exerciseId', '\d+')
  525. ->assert('type', '.+')
  526. ->before($settingCourseConditions)
  527. ->before($userPermissionsInsideACourse)
  528. ->before($userCourseAdmin)
  529. ->bind('exercise_dashboard');
  530. $app->match('/courses/{cidReq}/{id_session}/exercise/question/{id}/edit', 'exercise_manager.controller:editQuestionAction', 'GET|POST')
  531. ->assert('type', '.+')
  532. ->before($settingCourseConditions)
  533. ->before($userPermissionsInsideACourse)
  534. ->before($userCourseAdmin)
  535. ->bind('exercise_question_edit');
  536. $app->match('/admin/administrator/', 'admin.controller:indexAction', 'GET')
  537. ->assert('type', '.+')
  538. ->bind('admin_administrator');
  539. $app->match('/ajax', 'model_ajax.controller:indexAction', 'GET')
  540. ->assert('type', '.+')
  541. ->bind('model_ajax');
  542. if ($alreadyInstalled) {
  543. $app->mount('/admin/', new ChamiloLMS\Provider\ReflectionControllerProvider('admin.controller'));
  544. $app->mount('/admin/administrator/upgrade', new ChamiloLMS\Provider\ReflectionControllerProvider('upgrade.controller'));
  545. $app->mount('/admin/administrator/roles', new ChamiloLMS\Provider\ReflectionControllerProvider('role.controller'));
  546. $app->mount('/admin/administrator/question_scores', new ChamiloLMS\Provider\ReflectionControllerProvider('question_score.controller'));
  547. $app->mount('/admin/administrator/question_score_names', new ChamiloLMS\Provider\ReflectionControllerProvider('question_score_name.controller'));
  548. $app->mount('/courses/{course}/curriculum/category', new ChamiloLMS\Provider\ReflectionControllerProvider('curriculum_category.controller'));
  549. $app->mount('/courses/{course}/curriculum/item', new ChamiloLMS\Provider\ReflectionControllerProvider('curriculum_item.controller'));
  550. $app->mount('/courses/{course}/curriculum/user', new ChamiloLMS\Provider\ReflectionControllerProvider('curriculum_user.controller'));
  551. $app->mount('/courses/{course}/curriculum', new ChamiloLMS\Provider\ReflectionControllerProvider('curriculum.controller'));
  552. // Ministerio routes:
  553. $app->mount('/admin/administrator/branches', new ChamiloLMS\Provider\ReflectionControllerProvider('branch.controller'));
  554. $app->mount('/admin/administrator/juries', new ChamiloLMS\Provider\ReflectionControllerProvider('jury.controller'));
  555. $app->mount('/admin/director', new ChamiloLMS\Provider\ReflectionControllerProvider('branch_director.controller'));
  556. $app->mount('/admin/jury_president', new ChamiloLMS\Provider\ReflectionControllerProvider('jury_president.controller'));
  557. $app->mount('/admin/jury_member', new ChamiloLMS\Provider\ReflectionControllerProvider('jury_member.controller'));
  558. }