routes.php 26 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. use Symfony\Component\HttpFoundation\Request;
  4. use \ChamiloSession as Session;
  5. /** Setting course session and group global values */
  6. $settingCourseConditions = function (Request $request) use ($cidReset, $app) {
  7. $cidReq = $request->get('cidReq');
  8. $sessionId = $request->get('id_session');
  9. $groupId = $request->get('gidReq');
  10. $tempCourseId = api_get_course_id();
  11. $tempGroupId = api_get_group_id();
  12. $tempSessionId = api_get_session_id();
  13. $courseReset = false;
  14. if ((!empty($cidReq) && $tempCourseId != $cidReq) || empty($tempCourseId) || empty($tempCourseId) == -1) {
  15. $courseReset = true;
  16. }
  17. if (isset($cidReset) && $cidReset == 1) {
  18. $courseReset = true;
  19. }
  20. Session::write('courseReset', $courseReset);
  21. $groupReset = false;
  22. if ($tempGroupId != $groupId || empty($tempGroupId)) {
  23. $groupReset = true;
  24. }
  25. $sessionReset = false;
  26. if ($tempSessionId != $sessionId || empty($tempSessionId)) {
  27. $sessionReset = true;
  28. }
  29. /*
  30. $app['monolog']->addDebug('Start');
  31. $app['monolog']->addDebug($courseReset);
  32. $app['monolog']->addDebug($cidReq);
  33. $app['monolog']->addDebug($tempCourseId);
  34. $app['monolog']->addDebug('End');
  35. */
  36. if ($courseReset) {
  37. if (!empty($cidReq) && $cidReq != -1) {
  38. $courseInfo = api_get_course_info($cidReq, true, true);
  39. if (!empty($courseInfo)) {
  40. $courseCode = $courseInfo['code'];
  41. $courseId = $courseInfo['real_id'];
  42. Session::write('_real_cid', $courseId);
  43. Session::write('_cid', $courseCode);
  44. Session::write('_course', $courseInfo);
  45. } else {
  46. $app->abort(404, 'Course not available');
  47. }
  48. } else {
  49. Session::erase('_real_cid');
  50. Session::erase('_cid');
  51. Session::erase('_course');
  52. }
  53. }
  54. $courseCode = api_get_course_id();
  55. if (!empty($courseCode) && $courseCode != -1) {
  56. $tbl_course = Database::get_main_table(TABLE_MAIN_COURSE);
  57. $time = api_get_utc_datetime();
  58. $sql = "UPDATE $tbl_course SET last_visit= '$time' WHERE code='$courseCode'";
  59. Database::query($sql);
  60. }
  61. if ($sessionReset) {
  62. Session::erase('session_name');
  63. Session::erase('id_session');
  64. if (!empty($sessionId)) {
  65. $sessionInfo = api_get_session_info($sessionId);
  66. if (empty($sessionInfo)) {
  67. $app->abort(404, 'Session not available');
  68. } else {
  69. Session::write('id_session', $sessionId);
  70. }
  71. }
  72. }
  73. if ($groupReset) {
  74. Session::erase('_gid');
  75. if (!empty($groupId)) {
  76. Session::write('_gid', $groupId);
  77. }
  78. }
  79. if (!isset($_SESSION['login_as'])) {
  80. $userId = api_get_user_id();
  81. // Course login
  82. if (isset($userId)) {
  83. event_course_login(api_get_course_int_id(), $userId, api_get_session_id());
  84. }
  85. }
  86. };
  87. $userCourseAdmin = function(Request $request) use ($app) {
  88. if (api_is_allowed_to_edit()) {
  89. return null;
  90. } else {
  91. return $app->abort(401);
  92. }
  93. };
  94. /** Checks user permissions inside a course teacher? coach? etc */
  95. $userPermissionsInsideACourse = function (Request $request) use ($app) {
  96. $courseId = api_get_course_int_id();
  97. $userId = api_get_user_id();
  98. $sessionId = api_get_session_id();
  99. //If I'm the admin platform i'm a teacher of the course
  100. $is_platformAdmin = api_is_platform_admin();
  101. $courseReset = Session::read('courseReset');
  102. //$app['monolog']->addDebug($courseReset);
  103. //$app['monolog']->addDebug($courseId);
  104. // Course
  105. $is_courseMember = false;
  106. $is_courseAdmin = false;
  107. $is_courseTutor = false;
  108. $is_courseCoach = false;
  109. $is_sessionAdmin = false;
  110. if ($courseReset) {
  111. if (isset($courseId) && $courseId && $courseId != -1) {
  112. $courseInfo = api_get_course_info();
  113. $userId = isset($userId) ? intval($userId) : 0;
  114. $variable = 'accept_legal_'.$userId.'_'.$courseInfo['real_id'].'_'.$sessionId;
  115. $user_pass_open_course = false;
  116. if (api_check_user_access_to_legal($courseInfo['visibility']) && Session::read($variable)) {
  117. $user_pass_open_course = true;
  118. }
  119. //Checking if the user filled the course legal agreement
  120. if ($courseInfo['activate_legal'] == 1 && !api_is_platform_admin()) {
  121. $user_is_subscribed = CourseManager::is_user_accepted_legal(
  122. $userId,
  123. $courseInfo,
  124. $sessionId
  125. ) || $user_pass_open_course;
  126. if (!$user_is_subscribed) {
  127. $url = api_get_path(WEB_CODE_PATH).'course_info/legal.php?course_code='.$courseInfo['code'].'&session_id='.$sessionId;
  128. header('Location: '.$url);
  129. exit;
  130. }
  131. }
  132. //Check if user is subscribed in a course
  133. $course_user_table = Database::get_main_table(TABLE_MAIN_COURSE_USER);
  134. $sql = "SELECT * FROM $course_user_table WHERE user_id = '".$userId."' AND
  135. relation_type <> ".COURSE_RELATION_TYPE_RRHH." AND c_id = ".api_get_course_int_id();
  136. $result = Database::query($sql);
  137. $cuData = null;
  138. if (Database::num_rows($result) > 0) { // this user have a recorded state for this course
  139. $cuData = Database::fetch_array($result, 'ASSOC');
  140. $is_courseAdmin = (bool)($cuData['status'] == 1);
  141. $is_courseTutor = (bool)($cuData['tutor_id'] == 1);
  142. $is_courseMember = true;
  143. $_courseUser['role'] = $cuData['role'];
  144. Session::write('_courseUser', $_courseUser);
  145. }
  146. //We are in a session course? Check session permissions
  147. if (!empty($session_id)) {
  148. //I'm not the teacher of the course
  149. if ($is_courseAdmin == false) {
  150. // this user has no status related to this course
  151. // The user is subscribed in a session? The user is a Session coach a Session admin ?
  152. $tbl_session = Database :: get_main_table(TABLE_MAIN_SESSION);
  153. $tbl_session_course_user = Database :: get_main_table(TABLE_MAIN_SESSION_COURSE_USER);
  154. //Session coach, session admin, course coach admin
  155. $sql = "SELECT session.id_coach, session_admin_id, session_rcru.id_user
  156. FROM $tbl_session session, $tbl_session_course_user session_rcru
  157. WHERE session_rcru.id_session = session.id AND
  158. session_rcru.c_id = ".$courseInfo['real_id']." AND
  159. session_rcru.id_user = $userId AND
  160. session_rcru.id_session = $sessionId AND
  161. session_rcru.status = 2 ";
  162. $result = Database::query($sql);
  163. $row = Database::store_result($result);
  164. //I'm a session admin?
  165. if (isset($row) && isset($row[0]) && $row[0]['session_admin_id'] == $userId) {
  166. $_courseUser['role'] = 'Professor';
  167. $is_courseMember = false;
  168. $is_courseTutor = false;
  169. $is_courseAdmin = false;
  170. $is_courseCoach = false;
  171. $is_sessionAdmin = true;
  172. } else {
  173. //Im a coach or a student?
  174. $sql = "SELECT cu.id_user, cu.status FROM $tbl_session_course_user cu
  175. WHERE c_id = '$courseId' AND
  176. cu.id_user = '".$userId."' AND
  177. cu.id_session = '".$sessionId."'
  178. LIMIT 1";
  179. $result = Database::query($sql);
  180. if (Database::num_rows($result)) {
  181. $row = Database::fetch_array($result, 'ASSOC');
  182. $session_course_status = $row['status'];
  183. switch ($session_course_status) {
  184. case '2': // coach - teacher
  185. $_courseUser['role'] = 'Professor';
  186. $is_courseMember = true;
  187. $is_courseTutor = true;
  188. $is_courseCoach = true;
  189. $is_sessionAdmin = false;
  190. if (api_get_setting('extend_rights_for_coach') == 'true') {
  191. $is_courseAdmin = true;
  192. } else {
  193. $is_courseAdmin = false;
  194. }
  195. Session::write('_courseUser', $_courseUser);
  196. break;
  197. case '0': //Student
  198. $_courseUser['role'] = '';
  199. $is_courseMember = true;
  200. $is_courseTutor = false;
  201. $is_courseAdmin = false;
  202. $is_courseCoach = false;
  203. $is_sessionAdmin = false;
  204. Session::write('_courseUser', $_courseUser);
  205. break;
  206. default:
  207. // Unregister user
  208. $_courseUser['role'] = '';
  209. $is_courseMember = false;
  210. $is_courseTutor = false;
  211. $is_courseAdmin = false;
  212. $is_sessionAdmin = false;
  213. $is_courseCoach = false;
  214. Session::erase('_courseUser');
  215. break;
  216. }
  217. } else {
  218. //Unregister user
  219. $is_courseMember = false;
  220. $is_courseTutor = false;
  221. $is_courseAdmin = false;
  222. $is_sessionAdmin = false;
  223. $is_courseCoach = false;
  224. Session::erase('_courseUser');
  225. }
  226. }
  227. }
  228. if ($is_platformAdmin) {
  229. $is_courseAdmin = true;
  230. }
  231. }
  232. }
  233. // Checking the course access
  234. $is_allowed_in_course = false;
  235. if (isset($_course)) {
  236. switch ($_course['visibility']) {
  237. case COURSE_VISIBILITY_OPEN_WORLD: //3
  238. $is_allowed_in_course = true;
  239. break;
  240. case COURSE_VISIBILITY_OPEN_PLATFORM: //2
  241. if (isset($user_id) && !api_is_anonymous($user_id)) {
  242. $is_allowed_in_course = true;
  243. }
  244. break;
  245. case COURSE_VISIBILITY_REGISTERED: //1
  246. if ($is_platformAdmin || $is_courseMember) {
  247. $is_allowed_in_course = true;
  248. }
  249. break;
  250. case COURSE_VISIBILITY_CLOSED: //0
  251. if ($is_platformAdmin || $is_courseAdmin) {
  252. $is_allowed_in_course = true;
  253. }
  254. break;
  255. }
  256. }
  257. if (!$is_platformAdmin) {
  258. if (!$is_courseMember && isset($courseInfo['registration_code']) && !empty($courseInfo['registration_code'])) {
  259. $is_courseMember = false;
  260. $is_courseAdmin = false;
  261. $is_courseTutor = false;
  262. $is_courseCoach = false;
  263. $is_sessionAdmin = false;
  264. $is_allowed_in_course = false;
  265. }
  266. }
  267. // check the session visibility
  268. if ($is_allowed_in_course == true) {
  269. //if I'm in a session
  270. if ($sessionId != 0) {
  271. if (!$is_platformAdmin) {
  272. // admin is not affected to the invisible session mode
  273. $session_visibility = api_get_session_visibility($sessionId);
  274. switch ($session_visibility) {
  275. case SESSION_INVISIBLE:
  276. $is_allowed_in_course = false;
  277. break;
  278. }
  279. }
  280. }
  281. }
  282. // save the states
  283. Session::write('is_courseAdmin', $is_courseAdmin);
  284. Session::write('is_courseMember', $is_courseMember);
  285. Session::write('is_courseTutor', $is_courseTutor);
  286. Session::write('is_courseCoach', $is_courseCoach);
  287. Session::write('is_allowed_in_course', $is_allowed_in_course);
  288. Session::write('is_sessionAdmin', $is_sessionAdmin);
  289. } else {
  290. // continue with the previous values
  291. /*
  292. $_courseUser = Session::read('_courseUser');
  293. $is_courseAdmin = Session::read('is_courseAdmin');
  294. $is_courseTutor = Session::read('is_courseTutor');
  295. $is_courseCoach = Session::read('is_courseCoach');
  296. $is_courseMember = Session::read('is_courseMember');
  297. $is_allowed_in_course = Session::read('is_allowed_in_course');*/
  298. }
  299. };
  300. /**
  301. * Deletes the exam_password user extra field *only* to students
  302. * @todo improve the login hook system
  303. * @param Request $request
  304. */
  305. $afterLogin = function (Request $request) use ($app) {
  306. if (isset($app['current_user']) && isset($app['current_user']['user_id']) && $app['current_user']['status'] == STUDENT) {
  307. $extraField = new ExtraField('user');
  308. $extraFieldData = $extraField->get_handler_field_info_by_field_variable('exam_password');
  309. if ($extraFieldData && !empty($extraFieldData)) {
  310. $extraField = new ExtraFieldValue('user');
  311. $extraFieldValue = $extraField->get_values_by_handler_and_field_variable($app['current_user']['user_id'], 'exam_password');
  312. if (!empty($extraFieldValue)) {
  313. $extraField->delete_values_by_handler_and_field_id($app['current_user']['user_id'], $extraFieldValue['id']);
  314. }
  315. }
  316. }
  317. };
  318. $removeCidReset = function (Request $request) use ($app) {
  319. // Deleting course info.
  320. Session::erase('_cid');
  321. Session::erase('_real_cid');
  322. Session::erase('_course');
  323. if (!empty($_SESSION)) {
  324. foreach ($_SESSION as $key => $item) {
  325. if (strpos($key, 'lp_autolunch_') === false) {
  326. continue;
  327. } else {
  328. if (isset($_SESSION[$key])) {
  329. Session::erase($key);
  330. }
  331. }
  332. }
  333. }
  334. // Deleting session info.
  335. Session::erase('id_session');
  336. Session::erase('session_name');
  337. // Deleting group info.
  338. Session::erase('_gid');
  339. };
  340. $removeCidResetDependingOfSection = function (Request $request) use ($app, $removeCidReset) {
  341. $file = $request->get('file');
  342. if (!empty($file)) {
  343. $info = pathinfo($file);
  344. $section = $info['dirname'];
  345. if ($section == 'admin') {
  346. $removeCidReset($request);
  347. }
  348. }
  349. };
  350. /** / and /index paths */
  351. $app->match('/', 'index.controller:indexAction', 'GET')
  352. ->assert('type', '.+') //allowing slash "/"
  353. ->before($removeCidReset)
  354. ->after($afterLogin);
  355. $app->match('/index', 'index.controller:indexAction', 'GET')
  356. ->before($removeCidReset)
  357. ->after($afterLogin)
  358. ->bind('index');
  359. /** Userportal */
  360. $app->get('/userportal', 'userPortal.controller:indexAction')
  361. ->before($removeCidReset);
  362. $app->get('/userportal/{type}/{filter}/{page}', 'userPortal.controller:indexAction')
  363. ->before($removeCidReset)
  364. ->value('type', 'courses') //default values
  365. ->value('filter', 'current')
  366. ->value('page', '1')
  367. ->bind('userportal');
  368. /** main files */
  369. $app->match('/main/{file}', 'legacy.controller:classicAction', 'GET|POST')
  370. ->before($removeCidResetDependingOfSection)
  371. ->before($settingCourseConditions)
  372. ->before(
  373. function() use ($app) {
  374. // Do not load breadcrumbs
  375. $app['template']->loadBreadcrumb = false;
  376. })
  377. ->assert('file', '.+')
  378. ->assert('type', '.+');
  379. /** Logout already implemented by the the security service provider */
  380. /* $app->get('/logout', 'index.controller:logoutAction')
  381. ->bind('logout')
  382. ->after($cleanCourseSession);*/
  383. /** Login form */
  384. $app->match('/login', 'index.controller:loginAction', 'GET|POST')
  385. ->bind('login');
  386. /*$app->match('/admin/login-check', 'index.controller:checkLoginAction', 'GET|POST')
  387. ->bind('login_check');*/
  388. /** Course home instead of courses/MATHS the new URL is web/courses/MATHS */
  389. $app->match('/courses/{cidReq}/{id_session}/', 'course_home.controller:indexAction', 'GET|POST')
  390. ->assert('id_session', '\d+')
  391. ->assert('type', '.+')
  392. ->before($settingCourseConditions)
  393. ->before($userPermissionsInsideACourse)
  394. ->bind('course');
  395. $app->match('/courses/{cidReq}', 'course_home.controller:indexAction', 'GET|POST')
  396. ->assert('type', '.+')
  397. ->before($settingCourseConditions)
  398. ->before($userPermissionsInsideACourse);
  399. // @todo this is the same as above but with out slash (otherwise we will have an httpexception)
  400. $app->match('/courses/{cidReq}/', 'course_home.controller:indexAction', 'GET|POST')
  401. ->assert('type', '.+')
  402. ->before($settingCourseConditions)
  403. ->before($userPermissionsInsideACourse);
  404. // Introduction
  405. $app->match('/introduction/edit/{tool}', 'introduction_tool.controller:editAction', 'GET|POST')
  406. ->assert('type', '.+')
  407. ->before($settingCourseConditions)
  408. ->before($userPermissionsInsideACourse)
  409. ->bind('introduction_edit');
  410. $app->match('/introduction/delete/{tool}', 'introduction_tool.controller:deleteAction', 'GET|POST')
  411. ->assert('type', '.+')
  412. ->before($settingCourseConditions)
  413. ->before($userPermissionsInsideACourse)
  414. ->bind('introduction_delete');
  415. /** Course documents */
  416. $app->get('/data/courses/{courseCode}/document/{file}', 'index.controller:getDocumentAction')
  417. ->assert('file', '.+')
  418. ->assert('type', '.+');
  419. /** Scorm documents */
  420. $app->get('/data/courses/{courseCode}/scorm/{file}', 'index.controller:getScormDocumentAction')
  421. ->assert('file', '.+')
  422. ->assert('type', '.+');
  423. /** Certificates */
  424. $app->match('/certificates/{id}', 'certificate.controller:indexAction', 'GET');
  425. /** Username */
  426. $app->match('/user/{username}', 'user.controller:indexAction', 'GET');
  427. /** Who is online */
  428. /*$app->match('/users/online', 'user.controller:onlineAction', 'GET');
  429. $app->match('/users/online-in-course', 'user.controller:onlineInCourseAction', 'GET');
  430. $app->match('/users/online-in-session', 'user.controller:onlineInSessionAction', 'GET');*/
  431. /** Portal news */
  432. $app->match('/news/{id}', 'news.controller:indexAction', 'GET')
  433. ->bind('portal_news');
  434. /** LP controller (subscribe users to a LP) */
  435. $app->match('/learnpath/subscribe_users/{lpId}', 'learnpath.controller:indexAction', 'GET|POST')
  436. ->bind('subscribe_users');
  437. /** Data document_templates files */
  438. $app->get('/data/document_templates/{file}', 'index.controller:getDocumentTemplateAction')
  439. ->bind('data');
  440. /** Data default_platform_document files */
  441. $app->get('/data/default_platform_document/{file}', 'index.controller:getDefaultPlatformDocumentAction')
  442. ->assert('file', '.+')
  443. ->assert('type', '.+');
  444. /** User files */
  445. $app->match('/data/upload/users/{file}', 'index.controller:getUserFile', 'GET|POST')
  446. ->assert('file', '.+');
  447. /** Group files */
  448. $app->get('/data/upload/groups/{groupId}/{file}', 'index.controller:getGroupFile')
  449. ->assert('file', '.+')
  450. ->assert('type', '.+');
  451. /** Admin */
  452. $app->get('/admin/dashboard', 'index.controller:dashboardAction')
  453. ->assert('type', '.+')
  454. ->bind('admin_dashboard');
  455. /** Question manager - admin */
  456. $app->get('/admin/questionmanager/', 'question_manager.controller:questionManagerIndexAction')
  457. ->assert('type', '.+')
  458. ->bind('admin_questionmanager');
  459. $app->match('/admin/questionmanager/questions', 'question_manager.controller:questionsAction', 'GET|POST')
  460. ->assert('type', '.+')
  461. ->bind('admin_questions');
  462. $app->match('/admin/questionmanager/questions/{id}/edit', 'question_manager.controller:editQuestionAction', 'GET|POST')
  463. ->assert('type', '.+')
  464. ->bind('admin_questions_edit');
  465. $app->match('/admin/questionmanager/questions/{id}', 'exercise_manager.controller:getQuestionAction', 'GET|POST')
  466. ->assert('type', '.+')
  467. ->bind('admin_questions_show');
  468. $app->get('/admin/questionmanager/questions/get-categories/{id}', 'question_manager.controller:getCategoriesAction')
  469. ->bind('admin_questions_get_categories');
  470. $app->get('/admin/questionmanager/questions/get-questions-by-category/{categoryId}', 'question_manager.controller:getQuestionsByCategoryAction')
  471. ->bind('admin_get_questions_by_category');
  472. $app->match('/admin/questionmanager/categories/{id}/edit', 'question_manager.controller:editCategoryAction', 'GET|POST')
  473. ->assert('type', '.+')
  474. ->bind('admin_category_edit');
  475. $app->match('/admin/questionmanager/categories/{id}', 'question_manager.controller:showCategoryAction', 'GET')
  476. ->assert('id', '\d+')
  477. ->assert('type', '.+')
  478. ->bind('admin_category_show');
  479. $app->match('/admin/questionmanager/categories/new', 'question_manager.controller:newCategoryAction', 'GET|POST')
  480. ->bind('admin_category_new');
  481. $app->match('/admin/questionmanager/categories/{id}/delete', 'question_manager.controller:deleteCategoryAction', 'POST')
  482. ->bind('admin_category_delete');
  483. /** Editor */
  484. $app->match('/editor/filemanager', 'editor.controller:filemanagerAction', 'GET|POST')
  485. ->assert('type', '.+')
  486. ->bind('filemanager');
  487. $app->match('/editor/connector', 'editor.controller:connectorAction', 'GET|POST')
  488. ->assert('type', '.+')
  489. ->bind('editor_connector');
  490. /** Exercises */
  491. $app->match('courses/{cidReq}/{id_session}/exercise/question-pool', 'exercise_manager.controller:questionPoolAction', 'POST')
  492. ->before($settingCourseConditions)
  493. ->before($userPermissionsInsideACourse)
  494. ->bind('exercise_question_pool_global');
  495. $app->match('courses/{cidReq}/{id_session}/exercise/{exerciseId}/question-pool', 'exercise_manager.controller:questionPoolAction', 'GET|POST')
  496. ->assert('exerciseId', '\d+')
  497. ->before($settingCourseConditions)
  498. ->before($userCourseAdmin)
  499. ->before($userPermissionsInsideACourse)
  500. ->bind('exercise_question_pool');
  501. $app->match('courses/{cidReq}/{id_session}/exercise/{exerciseId}/copy-question/{questionId}', 'exercise_manager.controller:copyQuestionAction', 'GET|POST')
  502. ->assert('questionId', '\d+')
  503. ->assert('exerciseId', '\d+')
  504. ->before($settingCourseConditions)
  505. ->before($userCourseAdmin)
  506. ->before($userPermissionsInsideACourse)
  507. ->bind('exercise_copy_question');
  508. $app->match('courses/{cidReq}/{id_session}/exercise/{exerciseId}/reuse-question/{questionId}', 'exercise_manager.controller:reuseQuestionAction', 'GET|POST')
  509. ->assert('questionId', '\d+')
  510. ->assert('exerciseId', '\d+')
  511. ->before($settingCourseConditions)
  512. ->before($userCourseAdmin)
  513. ->before($userPermissionsInsideACourse)
  514. ->bind('exercise_reuse_question');
  515. /** Course home instead of courses/MATHS the new URL is web/courses/MATHS */
  516. $app->match('/courses/{cidReq}/{id_session}/exercise/question/{id}', 'exercise_manager.controller:getQuestionAction', 'GET')
  517. ->assert('id_session', '\d+')
  518. ->assert('id', '\d+')
  519. ->assert('type', '.+')
  520. ->before($settingCourseConditions)
  521. ->before($userPermissionsInsideACourse)
  522. ->before($userCourseAdmin)
  523. ->bind('question_show');
  524. $app->match('/courses/{cidReq}/{id_session}/exercise/{exerciseId}/question/{id}', 'exercise_manager.controller:getQuestionAction', 'GET')
  525. ->assert('id_session', '\d+')
  526. ->assert('exerciseId', '\d+')
  527. ->assert('id', '\d+')
  528. ->assert('type', '.+')
  529. ->before($settingCourseConditions)
  530. ->before($userPermissionsInsideACourse)
  531. ->before($userCourseAdmin)
  532. ->bind('exercise_question_show');
  533. $app->match('/courses/{cidReq}/{id_session}/exercise/{exerciseId}/dashboard', 'exercise_manager.controller:dashboardAction', 'GET')
  534. ->assert('id_session', '\d+')
  535. ->assert('exerciseId', '\d+')
  536. ->assert('type', '.+')
  537. ->before($settingCourseConditions)
  538. ->before($userPermissionsInsideACourse)
  539. ->before($userCourseAdmin)
  540. ->bind('exercise_dashboard');
  541. $app->match('/courses/{cidReq}/{id_session}/exercise/question/{id}/edit', 'exercise_manager.controller:editQuestionAction', 'GET|POST')
  542. ->assert('type', '.+')
  543. ->before($settingCourseConditions)
  544. ->before($userPermissionsInsideACourse)
  545. ->before($userCourseAdmin)
  546. ->bind('exercise_question_edit');
  547. $app->match('/admin/administrator/', 'admin.controller:indexAction', 'GET')
  548. ->assert('type', '.+')
  549. ->bind('admin_administrator');
  550. $app->match('/ajax', 'model_ajax.controller:indexAction', 'GET')
  551. ->assert('type', '.+')
  552. ->bind('model_ajax');
  553. // Roles
  554. // @todo improve route creation. Use mount() to write less
  555. /* @todo use Flint to manage controllers */
  556. if ($alreadyInstalled) {
  557. // Takes a some time to load @todo improve this calls
  558. $app->mount('/admin/administrator/roles', new ChamiloLMS\Provider\ReflectionControllerProvider('role.controller'));
  559. $app->mount('/admin/administrator/question_scores', new ChamiloLMS\Provider\ReflectionControllerProvider('question_score.controller'));
  560. $app->mount('/admin/administrator/question_score_names', new ChamiloLMS\Provider\ReflectionControllerProvider('question_score_name.controller'));
  561. }