routes.php 26 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. use Symfony\Component\HttpFoundation\Request;
  4. use \ChamiloSession as Session;
  5. /**
  6. * All calls made in Chamilo (olds ones) are manage in the LegacyController::classicAction function located here:
  7. * src/ChamiloLMS/Controller/LegacyController.php
  8. */
  9. $userAccessConditions = function (Request $request) use ($app) {
  10. };
  11. /** Setting course session and group global values */
  12. $settingCourseConditions = function (Request $request) use ($cidReset, $app) {
  13. $cidReq = $request->get('cidReq');
  14. $sessionId = $request->get('id_session');
  15. $groupId = $request->get('gidReq');
  16. $tempCourseId = api_get_course_id();
  17. $tempGroupId = api_get_group_id();
  18. $tempSessionId = api_get_session_id();
  19. $courseReset = false;
  20. if ((!empty($cidReq) && $tempCourseId != $cidReq) || empty($tempCourseId) || empty($tempCourseId) == -1) {
  21. $courseReset = true;
  22. }
  23. if (isset($cidReset) && $cidReset == 1) {
  24. $courseReset = true;
  25. }
  26. Session::write('courseReset', $courseReset);
  27. $groupReset = false;
  28. if ($tempGroupId != $groupId || empty($tempGroupId)) {
  29. $groupReset = true;
  30. }
  31. $sessionReset = false;
  32. if ($tempSessionId != $sessionId || empty($tempSessionId)) {
  33. $sessionReset = true;
  34. }
  35. /*
  36. $app['monolog']->addDebug('Start');
  37. $app['monolog']->addDebug($courseReset);
  38. $app['monolog']->addDebug($cidReq);
  39. $app['monolog']->addDebug($tempCourseId);
  40. $app['monolog']->addDebug('End');
  41. */
  42. if ($courseReset) {
  43. if (!empty($cidReq) && $cidReq != -1) {
  44. $courseInfo = api_get_course_info($cidReq, true, true);
  45. if (!empty($courseInfo)) {
  46. $courseCode = $courseInfo['code'];
  47. $courseId = $courseInfo['real_id'];
  48. Session::write('_real_cid', $courseId);
  49. Session::write('_cid', $courseCode);
  50. Session::write('_course', $courseInfo);
  51. } else {
  52. $app->abort(404, 'Course not available');
  53. }
  54. } else {
  55. Session::erase('_real_cid');
  56. Session::erase('_cid');
  57. Session::erase('_course');
  58. }
  59. }
  60. $courseCode = api_get_course_id();
  61. if (!empty($courseCode) && $courseCode != -1) {
  62. $tbl_course = Database::get_main_table(TABLE_MAIN_COURSE);
  63. $time = api_get_utc_datetime();
  64. $sql = "UPDATE $tbl_course SET last_visit= '$time' WHERE code='$courseCode'";
  65. Database::query($sql);
  66. }
  67. if ($sessionReset) {
  68. Session::erase('session_name');
  69. Session::erase('id_session');
  70. if (!empty($sessionId)) {
  71. $sessionInfo = api_get_session_info($sessionId);
  72. if (empty($sessionInfo)) {
  73. $app->abort(404, 'Session not available');
  74. } else {
  75. Session::write('id_session', $sessionId);
  76. }
  77. }
  78. }
  79. if ($groupReset) {
  80. Session::erase('_gid');
  81. if (!empty($groupId)) {
  82. Session::write('_gid', $groupId);
  83. }
  84. }
  85. if (!isset($_SESSION['login_as'])) {
  86. $userId = api_get_user_id();
  87. // Course login
  88. if (isset($userId)) {
  89. event_course_login(api_get_course_int_id(), $userId, api_get_session_id());
  90. }
  91. }
  92. };
  93. $userCourseAdmin = function(Request $request) use ($app) {
  94. if (api_is_allowed_to_edit()) {
  95. return null;
  96. } else {
  97. return $app->abort(401);
  98. }
  99. };
  100. /** Checks user permissions inside a course teacher? coach? etc */
  101. $userPermissionsInsideACourse = function (Request $request) use ($app) {
  102. $courseId = api_get_course_int_id();
  103. $userId = api_get_user_id();
  104. $sessionId = api_get_session_id();
  105. //If I'm the admin platform i'm a teacher of the course
  106. $is_platformAdmin = api_is_platform_admin();
  107. $courseReset = Session::read('courseReset');
  108. //$app['monolog']->addDebug($courseReset);
  109. //$app['monolog']->addDebug($courseId);
  110. // Course
  111. $is_courseMember = false;
  112. $is_courseAdmin = false;
  113. $is_courseTutor = false;
  114. $is_courseCoach = false;
  115. $is_sessionAdmin = false;
  116. if ($courseReset) {
  117. if (isset($courseId) && $courseId && $courseId != -1) {
  118. $courseInfo = api_get_course_info();
  119. $userId = isset($userId) ? intval($userId) : 0;
  120. $variable = 'accept_legal_'.$userId.'_'.$courseInfo['real_id'].'_'.$sessionId;
  121. $user_pass_open_course = false;
  122. if (api_check_user_access_to_legal($courseInfo['visibility']) && Session::read($variable)) {
  123. $user_pass_open_course = true;
  124. }
  125. //Checking if the user filled the course legal agreement
  126. if ($courseInfo['activate_legal'] == 1 && !api_is_platform_admin()) {
  127. $user_is_subscribed = CourseManager::is_user_accepted_legal(
  128. $userId,
  129. $courseInfo,
  130. $sessionId
  131. ) || $user_pass_open_course;
  132. if (!$user_is_subscribed) {
  133. $url = api_get_path(WEB_CODE_PATH).'course_info/legal.php?course_code='.$courseInfo['code'].'&session_id='.$sessionId;
  134. header('Location: '.$url);
  135. exit;
  136. }
  137. }
  138. //Check if user is subscribed in a course
  139. $course_user_table = Database::get_main_table(TABLE_MAIN_COURSE_USER);
  140. $sql = "SELECT * FROM $course_user_table WHERE user_id = '".$userId."' AND
  141. relation_type <> ".COURSE_RELATION_TYPE_RRHH." AND c_id = ".api_get_course_int_id();
  142. $result = Database::query($sql);
  143. $cuData = null;
  144. if (Database::num_rows($result) > 0) { // this user have a recorded state for this course
  145. $cuData = Database::fetch_array($result, 'ASSOC');
  146. $is_courseAdmin = (bool)($cuData['status'] == 1);
  147. $is_courseTutor = (bool)($cuData['tutor_id'] == 1);
  148. $is_courseMember = true;
  149. $_courseUser['role'] = $cuData['role'];
  150. Session::write('_courseUser', $_courseUser);
  151. }
  152. //We are in a session course? Check session permissions
  153. if (!empty($session_id)) {
  154. //I'm not the teacher of the course
  155. if ($is_courseAdmin == false) {
  156. // this user has no status related to this course
  157. // The user is subscribed in a session? The user is a Session coach a Session admin ?
  158. $tbl_session = Database :: get_main_table(TABLE_MAIN_SESSION);
  159. $tbl_session_course_user = Database :: get_main_table(TABLE_MAIN_SESSION_COURSE_USER);
  160. //Session coach, session admin, course coach admin
  161. $sql = "SELECT session.id_coach, session_admin_id, session_rcru.id_user
  162. FROM $tbl_session session, $tbl_session_course_user session_rcru
  163. WHERE session_rcru.id_session = session.id AND
  164. session_rcru.c_id = ".$courseInfo['real_id']." AND
  165. session_rcru.id_user = $userId AND
  166. session_rcru.id_session = $sessionId AND
  167. session_rcru.status = 2 ";
  168. $result = Database::query($sql);
  169. $row = Database::store_result($result);
  170. //I'm a session admin?
  171. if (isset($row) && isset($row[0]) && $row[0]['session_admin_id'] == $userId) {
  172. $_courseUser['role'] = 'Professor';
  173. $is_courseMember = false;
  174. $is_courseTutor = false;
  175. $is_courseAdmin = false;
  176. $is_courseCoach = false;
  177. $is_sessionAdmin = true;
  178. } else {
  179. //Im a coach or a student?
  180. $sql = "SELECT cu.id_user, cu.status FROM $tbl_session_course_user cu
  181. WHERE c_id = '$courseId' AND
  182. cu.id_user = '".$userId."' AND
  183. cu.id_session = '".$sessionId."'
  184. LIMIT 1";
  185. $result = Database::query($sql);
  186. if (Database::num_rows($result)) {
  187. $row = Database::fetch_array($result, 'ASSOC');
  188. $session_course_status = $row['status'];
  189. switch ($session_course_status) {
  190. case '2': // coach - teacher
  191. $_courseUser['role'] = 'Professor';
  192. $is_courseMember = true;
  193. $is_courseTutor = true;
  194. $is_courseCoach = true;
  195. $is_sessionAdmin = false;
  196. if (api_get_setting('extend_rights_for_coach') == 'true') {
  197. $is_courseAdmin = true;
  198. } else {
  199. $is_courseAdmin = false;
  200. }
  201. Session::write('_courseUser', $_courseUser);
  202. break;
  203. case '0': //Student
  204. $_courseUser['role'] = '';
  205. $is_courseMember = true;
  206. $is_courseTutor = false;
  207. $is_courseAdmin = false;
  208. $is_courseCoach = false;
  209. $is_sessionAdmin = false;
  210. Session::write('_courseUser', $_courseUser);
  211. break;
  212. default:
  213. // Unregister user
  214. $_courseUser['role'] = '';
  215. $is_courseMember = false;
  216. $is_courseTutor = false;
  217. $is_courseAdmin = false;
  218. $is_sessionAdmin = false;
  219. $is_courseCoach = false;
  220. Session::erase('_courseUser');
  221. break;
  222. }
  223. } else {
  224. //Unregister user
  225. $is_courseMember = false;
  226. $is_courseTutor = false;
  227. $is_courseAdmin = false;
  228. $is_sessionAdmin = false;
  229. $is_courseCoach = false;
  230. Session::erase('_courseUser');
  231. }
  232. }
  233. }
  234. if ($is_platformAdmin) {
  235. $is_courseAdmin = true;
  236. }
  237. }
  238. }
  239. // Checking the course access
  240. $is_allowed_in_course = false;
  241. if (isset($_course)) {
  242. switch ($_course['visibility']) {
  243. case COURSE_VISIBILITY_OPEN_WORLD: //3
  244. $is_allowed_in_course = true;
  245. break;
  246. case COURSE_VISIBILITY_OPEN_PLATFORM: //2
  247. if (isset($user_id) && !api_is_anonymous($user_id)) {
  248. $is_allowed_in_course = true;
  249. }
  250. break;
  251. case COURSE_VISIBILITY_REGISTERED: //1
  252. if ($is_platformAdmin || $is_courseMember) {
  253. $is_allowed_in_course = true;
  254. }
  255. break;
  256. case COURSE_VISIBILITY_CLOSED: //0
  257. if ($is_platformAdmin || $is_courseAdmin) {
  258. $is_allowed_in_course = true;
  259. }
  260. break;
  261. }
  262. }
  263. if (!$is_platformAdmin) {
  264. if (!$is_courseMember && isset($courseInfo['registration_code']) && !empty($courseInfo['registration_code'])) {
  265. $is_courseMember = false;
  266. $is_courseAdmin = false;
  267. $is_courseTutor = false;
  268. $is_courseCoach = false;
  269. $is_sessionAdmin = false;
  270. $is_allowed_in_course = false;
  271. }
  272. }
  273. // check the session visibility
  274. if ($is_allowed_in_course == true) {
  275. //if I'm in a session
  276. if ($sessionId != 0) {
  277. if (!$is_platformAdmin) {
  278. // admin is not affected to the invisible session mode
  279. $session_visibility = api_get_session_visibility($sessionId);
  280. switch ($session_visibility) {
  281. case SESSION_INVISIBLE:
  282. $is_allowed_in_course = false;
  283. break;
  284. }
  285. }
  286. }
  287. }
  288. // save the states
  289. Session::write('is_courseAdmin', $is_courseAdmin);
  290. Session::write('is_courseMember', $is_courseMember);
  291. Session::write('is_courseTutor', $is_courseTutor);
  292. Session::write('is_courseCoach', $is_courseCoach);
  293. Session::write('is_allowed_in_course', $is_allowed_in_course);
  294. Session::write('is_sessionAdmin', $is_sessionAdmin);
  295. } else {
  296. // continue with the previous values
  297. /*
  298. $_courseUser = Session::read('_courseUser');
  299. $is_courseAdmin = Session::read('is_courseAdmin');
  300. $is_courseTutor = Session::read('is_courseTutor');
  301. $is_courseCoach = Session::read('is_courseCoach');
  302. $is_courseMember = Session::read('is_courseMember');
  303. $is_allowed_in_course = Session::read('is_allowed_in_course');*/
  304. }
  305. };
  306. /**
  307. * Removes course-session data
  308. * @param Request $request
  309. */
  310. $cleanCourseSession = function (Request $request) use ($app) {
  311. Session::erase('_cid');
  312. Session::erase('_real_cid');
  313. Session::erase('_course');
  314. };
  315. $adminAndQuestionManagerCondition = function (Request $request) use ($app) {
  316. if (!(api_is_platform_admin() || api_is_question_manager())) {
  317. $app->abort(401);
  318. }
  319. return null;
  320. };
  321. /**
  322. * Deletes the exam_password user extra field *only* to students
  323. * @todo improve the login hook system
  324. * @param Request $request
  325. */
  326. $afterLogin = function (Request $request) use ($app) {
  327. if (isset($app['current_user']) && isset($app['current_user']['user_id']) && $app['current_user']['status'] == STUDENT) {
  328. $extraField = new ExtraField('user');
  329. $extraFieldData = $extraField->get_handler_field_info_by_field_variable('exam_password');
  330. if ($extraFieldData && !empty($extraFieldData)) {
  331. $extraField = new ExtraFieldValue('user');
  332. $extraFieldValue = $extraField->get_values_by_handler_and_field_variable($app['current_user']['user_id'], 'exam_password');
  333. if (!empty($extraFieldValue)) {
  334. $extraField->delete_values_by_handler_and_field_id($app['current_user']['user_id'], $extraFieldValue['id']);
  335. }
  336. }
  337. }
  338. };
  339. /** Legacy controller */
  340. $app->get('/', 'legacy.controller:classicAction')
  341. ->before($userAccessConditions)
  342. ->before($settingCourseConditions)
  343. ->before($userPermissionsInsideACourse);
  344. $app->post('/', 'legacy.controller:classicAction')
  345. ->before($userAccessConditions)
  346. ->before($settingCourseConditions)
  347. ->before($userPermissionsInsideACourse);
  348. /** web/index */
  349. $app->match('/index', 'index.controller:indexAction', 'GET|POST')
  350. ->after($afterLogin)
  351. ->bind('index');
  352. /** Userportal */
  353. $app->get('/userportal', 'userPortal.controller:indexAction');
  354. $app->get('/userportal/{type}/{filter}/{page}', 'userPortal.controller:indexAction')
  355. ->value('type', 'courses') //default values
  356. ->value('filter', 'current')
  357. ->value('page', '1')
  358. ->bind('userportal')
  359. ->after($cleanCourseSession);
  360. //->assert('type', '.+'); //allowing slash "/"
  361. /** Logout */
  362. $app->get('/logout', 'index.controller:logoutAction')
  363. ->bind('logout')
  364. ->after($cleanCourseSession);
  365. /** Login */
  366. $app->match('/login', 'index.controller:loginAction', 'GET|POST')
  367. ->bind('login');
  368. /*$app->match('/admin/login-check', 'index.controller:checkLoginAction', 'GET|POST')
  369. ->bind('login_check');*/
  370. /** Course home instead of courses/MATHS the new URL is web/courses/MATHS */
  371. $app->match('/courses/{cidReq}/{id_session}/', 'course_home.controller:indexAction', 'GET|POST')
  372. ->assert('id_session', '\d+')
  373. ->assert('type', '.+')
  374. ->before($settingCourseConditions)
  375. ->before($userPermissionsInsideACourse)
  376. ->bind('course');
  377. $app->match('/courses/{cidReq}/', 'course_home.controller:indexAction', 'GET|POST')
  378. ->assert('type', '.+')
  379. ->before($settingCourseConditions)
  380. ->before($userPermissionsInsideACourse);
  381. // Introduction
  382. $app->match('/introduction/edit/{tool}', 'introduction_tool.controller:editAction', 'GET|POST')
  383. ->assert('type', '.+')
  384. ->before($settingCourseConditions)
  385. ->before($userPermissionsInsideACourse)
  386. ->bind('introduction_edit');
  387. $app->match('/introduction/delete/{tool}', 'introduction_tool.controller:deleteAction', 'GET|POST')
  388. ->assert('type', '.+')
  389. ->before($settingCourseConditions)
  390. ->before($userPermissionsInsideACourse)
  391. ->bind('introduction_delete');
  392. /** Course documents */
  393. $app->get('/data/courses/{courseCode}/document/{file}', 'index.controller:getDocumentAction')
  394. ->assert('file', '.+')
  395. ->assert('type', '.+');
  396. /** Scorm documents */
  397. $app->get('/data/courses/{courseCode}/scorm/{file}', 'index.controller:getScormDocumentAction')
  398. ->assert('file', '.+')
  399. ->assert('type', '.+');
  400. /** Certificates */
  401. $app->match('/certificates/{id}', 'certificate.controller:indexAction', 'GET');
  402. /** Username */
  403. $app->match('/user/{username}', 'user.controller:indexAction', 'GET');
  404. /** Who is online */
  405. /*$app->match('/users/online', 'user.controller:onlineAction', 'GET');
  406. $app->match('/users/online-in-course', 'user.controller:onlineInCourseAction', 'GET');
  407. $app->match('/users/online-in-session', 'user.controller:onlineInSessionAction', 'GET');*/
  408. /** Portal news */
  409. $app->match('/news/{id}', 'news.controller:indexAction', 'GET')
  410. ->bind('portal_news');
  411. /** LP controller (subscribe users to a LP) */
  412. $app->match('/learnpath/subscribe_users/{lpId}', 'learnpath.controller:indexAction', 'GET|POST')
  413. ->bind('subscribe_users');
  414. /** Data document_templates files */
  415. $app->get('/data/document_templates/{file}', 'index.controller:getDocumentTemplateAction')
  416. ->bind('data');
  417. /** Data default_platform_document files */
  418. $app->get('/data/default_platform_document/{file}', 'index.controller:getDefaultPlatformDocumentAction')
  419. ->assert('file', '.+')
  420. ->assert('type', '.+');
  421. /** User files */
  422. $app->match('/data/upload/users/{file}', 'index.controller:getUserFile', 'GET|POST')
  423. ->assert('file', '.+');
  424. /** Group files */
  425. $app->get('/data/upload/groups/{groupId}/{file}', 'index.controller:getGroupFile')
  426. ->assert('file', '.+')
  427. ->assert('type', '.+');
  428. /** Admin - admin */
  429. $app->get('/admin/administrator/roles', 'role.controller:IndexAction')
  430. ->assert('type', '.+')
  431. ->before($adminAndQuestionManagerCondition)
  432. ->bind('admin_administrator_roles');
  433. /** Question manager - admin */
  434. $app->get('/admin/questionmanager/', 'question_manager.controller:questionManagerIndexAction')
  435. ->assert('type', '.+')
  436. ->before($adminAndQuestionManagerCondition)
  437. ->bind('admin_questionmanager');
  438. $app->match('/admin/questionmanager/questions', 'question_manager.controller:questionsAction', 'GET|POST')
  439. ->assert('type', '.+')
  440. ->before($adminAndQuestionManagerCondition)
  441. ->bind('admin_questions');
  442. $app->match('/admin/questionmanager/questions/{id}/edit', 'question_manager.controller:editQuestionAction', 'GET|POST')
  443. ->assert('type', '.+')
  444. ->before($adminAndQuestionManagerCondition)
  445. ->bind('admin_questions_edit');
  446. $app->match('/admin/questionmanager/questions/{id}', 'exercise_manager.controller:getQuestionAction', 'GET|POST')
  447. ->assert('type', '.+')
  448. ->before($adminAndQuestionManagerCondition)
  449. ->bind('admin_questions_show');
  450. $app->get('/admin/questionmanager/questions/get-categories/{id}', 'question_manager.controller:getCategoriesAction')
  451. ->before($adminAndQuestionManagerCondition)
  452. ->bind('admin_questions_get_categories');
  453. $app->get('/admin/questionmanager/questions/get-questions-by-category/{categoryId}', 'question_manager.controller:getQuestionsByCategoryAction')
  454. ->before($adminAndQuestionManagerCondition)
  455. ->bind('admin_get_questions_by_category');
  456. $app->match('/admin/questionmanager/categories/{id}/edit', 'question_manager.controller:editCategoryAction', 'GET|POST')
  457. ->assert('type', '.+')
  458. ->before($adminAndQuestionManagerCondition)
  459. ->bind('admin_category_edit');
  460. $app->match('/admin/questionmanager/categories/{id}', 'question_manager.controller:showCategoryAction', 'GET')
  461. ->assert('id', '\d+')
  462. ->assert('type', '.+')
  463. ->before($adminAndQuestionManagerCondition)
  464. ->bind('admin_category_show');
  465. $app->match('/admin/questionmanager/categories/new', 'question_manager.controller:newCategoryAction', 'GET|POST')
  466. ->before($adminAndQuestionManagerCondition)
  467. ->bind('admin_category_new');
  468. $app->match('/admin/questionmanager/categories/{id}/delete', 'question_manager.controller:deleteCategoryAction', 'POST')
  469. ->before($adminAndQuestionManagerCondition)
  470. ->bind('admin_category_delete');
  471. /** Editor */
  472. $app->match('/editor/filemanager', 'editor.controller:filemanagerAction', 'GET|POST')
  473. ->assert('type', '.+')
  474. ->bind('filemanager');
  475. $app->match('/editor/connector', 'editor.controller:connectorAction', 'GET|POST')
  476. ->assert('type', '.+')
  477. ->bind('editor_connector');
  478. /** Exercises */
  479. $app->match('courses/{cidReq}/{id_session}/exercise/question-pool', 'exercise_manager.controller:questionPoolAction', 'POST')
  480. ->before($settingCourseConditions)
  481. ->before($userPermissionsInsideACourse)
  482. ->bind('exercise_question_pool_global');
  483. $app->match('courses/{cidReq}/{id_session}/exercise/{exerciseId}/question-pool', 'exercise_manager.controller:questionPoolAction', 'GET|POST')
  484. ->assert('exerciseId', '\d+')
  485. ->before($settingCourseConditions)
  486. ->before($userCourseAdmin)
  487. ->before($userPermissionsInsideACourse)
  488. ->bind('exercise_question_pool');
  489. $app->match('courses/{cidReq}/{id_session}/exercise/{exerciseId}/copy-question/{questionId}', 'exercise_manager.controller:copyQuestionAction', 'GET|POST')
  490. ->assert('questionId', '\d+')
  491. ->assert('exerciseId', '\d+')
  492. ->before($settingCourseConditions)
  493. ->before($userCourseAdmin)
  494. ->before($userPermissionsInsideACourse)
  495. ->bind('exercise_copy_question');
  496. $app->match('courses/{cidReq}/{id_session}/exercise/{exerciseId}/reuse-question/{questionId}', 'exercise_manager.controller:reuseQuestionAction', 'GET|POST')
  497. ->assert('questionId', '\d+')
  498. ->assert('exerciseId', '\d+')
  499. ->before($settingCourseConditions)
  500. ->before($userCourseAdmin)
  501. ->before($userPermissionsInsideACourse)
  502. ->bind('exercise_reuse_question');
  503. /** Course home instead of courses/MATHS the new URL is web/courses/MATHS */
  504. $app->match('/courses/{cidReq}/{id_session}/exercise/question/{id}', 'exercise_manager.controller:getQuestionAction', 'GET')
  505. ->assert('id_session', '\d+')
  506. ->assert('id', '\d+')
  507. ->assert('type', '.+')
  508. ->before($settingCourseConditions)
  509. ->before($userPermissionsInsideACourse)
  510. ->before($userCourseAdmin)
  511. ->bind('question_show');
  512. $app->match('/courses/{cidReq}/{id_session}/exercise/{exerciseId}/question/{id}', 'exercise_manager.controller:getQuestionAction', 'GET')
  513. ->assert('id_session', '\d+')
  514. ->assert('exerciseId', '\d+')
  515. ->assert('id', '\d+')
  516. ->assert('type', '.+')
  517. ->before($settingCourseConditions)
  518. ->before($userPermissionsInsideACourse)
  519. ->before($userCourseAdmin)
  520. ->bind('exercise_question_show');
  521. $app->match('/courses/{cidReq}/{id_session}/exercise/{exerciseId}/dashboard', 'exercise_manager.controller:dashboardAction', 'GET')
  522. ->assert('id_session', '\d+')
  523. ->assert('exerciseId', '\d+')
  524. ->assert('type', '.+')
  525. ->before($settingCourseConditions)
  526. ->before($userPermissionsInsideACourse)
  527. ->before($userCourseAdmin)
  528. ->bind('exercise_dashboard');
  529. $app->match('/courses/{cidReq}/{id_session}/exercise/question/{id}/edit', 'exercise_manager.controller:editQuestionAction', 'GET|POST')
  530. ->assert('type', '.+')
  531. ->before($settingCourseConditions)
  532. ->before($userPermissionsInsideACourse)
  533. ->before($userCourseAdmin)
  534. ->bind('exercise_question_edit');
  535. $app->match('/admin/administrator/roles/', 'role.controller:indexAction', 'GET')
  536. ->assert('type', '.+')
  537. ->bind('admin_administrator_roles');
  538. $app->match('/admin/administrator/roles/{id}', 'role.controller:readAction', 'GET')
  539. ->assert('type', '.+')
  540. ->assert('id', '\d+')
  541. ->bind('admin_administrator_roles_read');
  542. $app->match('/admin/administrator/roles/add', 'role.controller:addAction', 'GET')
  543. ->assert('type', '.+')
  544. ->bind('admin_administrator_roles_add');
  545. $app->match('/admin/administrator/roles/create', 'role.controller:createAction', 'POST')
  546. ->assert('type', '.+')
  547. ->bind('admin_administrator_roles_create');
  548. $app->match('/admin/administrator/roles/{id}/edit', 'role.controller:editAction', 'POST')
  549. ->assert('type', '.+')
  550. ->bind('admin_administrator_roles_edit');
  551. $app->match('/admin/administrator/roles/{id}/update', 'role.controller:updateAction', 'POST')
  552. ->assert('type', '.+')
  553. ->bind('admin_administrator_roles_update');
  554. $app->match('/admin/administrator/roles/{id}/delete', 'role.controller:deleteAction', 'DELETE')
  555. ->assert('type', '.+')
  556. ->bind('admin_administrator_roles_delete');
  557. // Takes a lot of time to load
  558. //$app->mount('/roles', 'exercise_manager.controller:getProvider');
  559. // Takes a lot of time to load
  560. //$app->mount('/roles', new ChamiloLMS\Provider\ReflectionControllerProvider('role.controller'));
  561. $app->match('/ajax', 'model_ajax.controller:indexAction', 'GET')
  562. ->assert('type', '.+')
  563. ->bind('model_ajax');