routes.php 26 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. use Symfony\Component\HttpFoundation\Request;
  4. use \ChamiloSession as Session;
  5. /** Setting course session and group global values */
  6. $settingCourseConditions = function (Request $request) use ($cidReset, $app) {
  7. $cidReq = $request->get('cidReq');
  8. $sessionId = $request->get('id_session');
  9. $groupId = $request->get('gidReq');
  10. $tempCourseId = api_get_course_id();
  11. $tempGroupId = api_get_group_id();
  12. $tempSessionId = api_get_session_id();
  13. $courseReset = false;
  14. if ((!empty($cidReq) && $tempCourseId != $cidReq) || empty($tempCourseId) || empty($tempCourseId) == -1) {
  15. $courseReset = true;
  16. }
  17. if (isset($cidReset) && $cidReset == 1) {
  18. $courseReset = true;
  19. }
  20. Session::write('courseReset', $courseReset);
  21. $groupReset = false;
  22. if ($tempGroupId != $groupId || empty($tempGroupId)) {
  23. $groupReset = true;
  24. }
  25. $sessionReset = false;
  26. if ($tempSessionId != $sessionId || empty($tempSessionId)) {
  27. $sessionReset = true;
  28. }
  29. /*
  30. $app['monolog']->addDebug('Start');
  31. $app['monolog']->addDebug($courseReset);
  32. $app['monolog']->addDebug($cidReq);
  33. $app['monolog']->addDebug($tempCourseId);
  34. $app['monolog']->addDebug('End');
  35. */
  36. if ($courseReset) {
  37. if (!empty($cidReq) && $cidReq != -1) {
  38. $courseInfo = api_get_course_info($cidReq, true, true);
  39. if (!empty($courseInfo)) {
  40. $courseCode = $courseInfo['code'];
  41. $courseId = $courseInfo['real_id'];
  42. Session::write('_real_cid', $courseId);
  43. Session::write('_cid', $courseCode);
  44. Session::write('_course', $courseInfo);
  45. } else {
  46. $app->abort(404, 'Course not available');
  47. }
  48. } else {
  49. Session::erase('_real_cid');
  50. Session::erase('_cid');
  51. Session::erase('_course');
  52. }
  53. }
  54. $courseCode = api_get_course_id();
  55. if (!empty($courseCode) && $courseCode != -1) {
  56. $tbl_course = Database::get_main_table(TABLE_MAIN_COURSE);
  57. $time = api_get_utc_datetime();
  58. $sql = "UPDATE $tbl_course SET last_visit= '$time' WHERE code='$courseCode'";
  59. Database::query($sql);
  60. }
  61. if ($sessionReset) {
  62. Session::erase('session_name');
  63. Session::erase('id_session');
  64. if (!empty($sessionId)) {
  65. $sessionInfo = api_get_session_info($sessionId);
  66. if (empty($sessionInfo)) {
  67. $app->abort(404, 'Session not available');
  68. } else {
  69. Session::write('id_session', $sessionId);
  70. }
  71. }
  72. }
  73. if ($groupReset) {
  74. Session::erase('_gid');
  75. if (!empty($groupId)) {
  76. Session::write('_gid', $groupId);
  77. }
  78. }
  79. if (!isset($_SESSION['login_as'])) {
  80. $userId = api_get_user_id();
  81. // Course login
  82. if (isset($userId)) {
  83. event_course_login(api_get_course_int_id(), $userId, api_get_session_id());
  84. }
  85. }
  86. };
  87. $userCourseAdmin = function(Request $request) use ($app) {
  88. if (api_is_allowed_to_edit()) {
  89. return null;
  90. } else {
  91. return $app->abort(401);
  92. }
  93. };
  94. /** Checks user permissions inside a course teacher? coach? etc */
  95. $userPermissionsInsideACourse = function (Request $request) use ($app) {
  96. $courseId = api_get_course_int_id();
  97. $userId = api_get_user_id();
  98. $sessionId = api_get_session_id();
  99. //If I'm the admin platform i'm a teacher of the course
  100. $is_platformAdmin = api_is_platform_admin();
  101. $courseReset = Session::read('courseReset');
  102. //$app['monolog']->addDebug($courseReset);
  103. //$app['monolog']->addDebug($courseId);
  104. // Course
  105. $is_courseMember = false;
  106. $is_courseAdmin = false;
  107. $is_courseTutor = false;
  108. $is_courseCoach = false;
  109. $is_sessionAdmin = false;
  110. if ($courseReset) {
  111. if (isset($courseId) && $courseId && $courseId != -1) {
  112. $courseInfo = api_get_course_info();
  113. $userId = isset($userId) ? intval($userId) : 0;
  114. $variable = 'accept_legal_'.$userId.'_'.$courseInfo['real_id'].'_'.$sessionId;
  115. $user_pass_open_course = false;
  116. if (api_check_user_access_to_legal($courseInfo['visibility']) && Session::read($variable)) {
  117. $user_pass_open_course = true;
  118. }
  119. //Checking if the user filled the course legal agreement
  120. if ($courseInfo['activate_legal'] == 1 && !api_is_platform_admin()) {
  121. $user_is_subscribed = CourseManager::is_user_accepted_legal(
  122. $userId,
  123. $courseInfo,
  124. $sessionId
  125. ) || $user_pass_open_course;
  126. if (!$user_is_subscribed) {
  127. $url = api_get_path(WEB_CODE_PATH).'course_info/legal.php?course_code='.$courseInfo['code'].'&session_id='.$sessionId;
  128. header('Location: '.$url);
  129. exit;
  130. }
  131. }
  132. //Check if user is subscribed in a course
  133. $course_user_table = Database::get_main_table(TABLE_MAIN_COURSE_USER);
  134. $sql = "SELECT * FROM $course_user_table WHERE user_id = '".$userId."' AND
  135. relation_type <> ".COURSE_RELATION_TYPE_RRHH." AND c_id = ".api_get_course_int_id();
  136. $result = Database::query($sql);
  137. $cuData = null;
  138. if (Database::num_rows($result) > 0) { // this user have a recorded state for this course
  139. $cuData = Database::fetch_array($result, 'ASSOC');
  140. $is_courseAdmin = (bool)($cuData['status'] == 1);
  141. $is_courseTutor = (bool)($cuData['tutor_id'] == 1);
  142. $is_courseMember = true;
  143. $_courseUser['role'] = $cuData['role'];
  144. Session::write('_courseUser', $_courseUser);
  145. }
  146. //We are in a session course? Check session permissions
  147. if (!empty($session_id)) {
  148. //I'm not the teacher of the course
  149. if ($is_courseAdmin == false) {
  150. // this user has no status related to this course
  151. // The user is subscribed in a session? The user is a Session coach a Session admin ?
  152. $tbl_session = Database :: get_main_table(TABLE_MAIN_SESSION);
  153. $tbl_session_course_user = Database :: get_main_table(TABLE_MAIN_SESSION_COURSE_USER);
  154. //Session coach, session admin, course coach admin
  155. $sql = "SELECT session.id_coach, session_admin_id, session_rcru.id_user
  156. FROM $tbl_session session, $tbl_session_course_user session_rcru
  157. WHERE session_rcru.id_session = session.id AND
  158. session_rcru.c_id = ".$courseInfo['real_id']." AND
  159. session_rcru.id_user = $userId AND
  160. session_rcru.id_session = $sessionId AND
  161. session_rcru.status = 2 ";
  162. $result = Database::query($sql);
  163. $row = Database::store_result($result);
  164. //I'm a session admin?
  165. if (isset($row) && isset($row[0]) && $row[0]['session_admin_id'] == $userId) {
  166. $_courseUser['role'] = 'Professor';
  167. $is_courseMember = false;
  168. $is_courseTutor = false;
  169. $is_courseAdmin = false;
  170. $is_courseCoach = false;
  171. $is_sessionAdmin = true;
  172. } else {
  173. //Im a coach or a student?
  174. $sql = "SELECT cu.id_user, cu.status FROM $tbl_session_course_user cu
  175. WHERE c_id = '$courseId' AND
  176. cu.id_user = '".$userId."' AND
  177. cu.id_session = '".$sessionId."'
  178. LIMIT 1";
  179. $result = Database::query($sql);
  180. if (Database::num_rows($result)) {
  181. $row = Database::fetch_array($result, 'ASSOC');
  182. $session_course_status = $row['status'];
  183. switch ($session_course_status) {
  184. case '2': // coach - teacher
  185. $_courseUser['role'] = 'Professor';
  186. $is_courseMember = true;
  187. $is_courseTutor = true;
  188. $is_courseCoach = true;
  189. $is_sessionAdmin = false;
  190. if (api_get_setting('extend_rights_for_coach') == 'true') {
  191. $is_courseAdmin = true;
  192. } else {
  193. $is_courseAdmin = false;
  194. }
  195. Session::write('_courseUser', $_courseUser);
  196. break;
  197. case '0': //Student
  198. $_courseUser['role'] = '';
  199. $is_courseMember = true;
  200. $is_courseTutor = false;
  201. $is_courseAdmin = false;
  202. $is_courseCoach = false;
  203. $is_sessionAdmin = false;
  204. Session::write('_courseUser', $_courseUser);
  205. break;
  206. default:
  207. // Unregister user
  208. $_courseUser['role'] = '';
  209. $is_courseMember = false;
  210. $is_courseTutor = false;
  211. $is_courseAdmin = false;
  212. $is_sessionAdmin = false;
  213. $is_courseCoach = false;
  214. Session::erase('_courseUser');
  215. break;
  216. }
  217. } else {
  218. //Unregister user
  219. $is_courseMember = false;
  220. $is_courseTutor = false;
  221. $is_courseAdmin = false;
  222. $is_sessionAdmin = false;
  223. $is_courseCoach = false;
  224. Session::erase('_courseUser');
  225. }
  226. }
  227. }
  228. if ($is_platformAdmin) {
  229. $is_courseAdmin = true;
  230. }
  231. }
  232. }
  233. // Checking the course access
  234. $is_allowed_in_course = false;
  235. $_course =& $courseInfo; //fix issue in code rewriting: TODO: do it properly, renaming $_course where appropriate
  236. if (isset($_course)) {
  237. switch ($_course['visibility']) {
  238. case COURSE_VISIBILITY_OPEN_WORLD: //3
  239. $is_allowed_in_course = true;
  240. break;
  241. case COURSE_VISIBILITY_OPEN_PLATFORM: //2
  242. if (isset($user_id) && !api_is_anonymous($user_id)) {
  243. $is_allowed_in_course = true;
  244. }
  245. break;
  246. case COURSE_VISIBILITY_REGISTERED: //1
  247. if ($is_platformAdmin || $is_courseMember) {
  248. $is_allowed_in_course = true;
  249. }
  250. break;
  251. case COURSE_VISIBILITY_CLOSED: //0
  252. if ($is_platformAdmin || $is_courseAdmin) {
  253. $is_allowed_in_course = true;
  254. }
  255. break;
  256. }
  257. }
  258. if (!$is_platformAdmin) {
  259. if (!$is_courseMember && isset($courseInfo['registration_code']) && !empty($courseInfo['registration_code'])) {
  260. $is_courseMember = false;
  261. $is_courseAdmin = false;
  262. $is_courseTutor = false;
  263. $is_courseCoach = false;
  264. $is_sessionAdmin = false;
  265. $is_allowed_in_course = false;
  266. }
  267. }
  268. // check the session visibility
  269. if ($is_allowed_in_course == true) {
  270. //if I'm in a session
  271. if ($sessionId != 0) {
  272. if (!$is_platformAdmin) {
  273. // admin is not affected to the invisible session mode
  274. $session_visibility = api_get_session_visibility($sessionId);
  275. switch ($session_visibility) {
  276. case SESSION_INVISIBLE:
  277. $is_allowed_in_course = false;
  278. break;
  279. }
  280. }
  281. }
  282. }
  283. // save the states
  284. Session::write('is_courseAdmin', $is_courseAdmin);
  285. Session::write('is_courseMember', $is_courseMember);
  286. Session::write('is_courseTutor', $is_courseTutor);
  287. Session::write('is_courseCoach', $is_courseCoach);
  288. Session::write('is_allowed_in_course', $is_allowed_in_course);
  289. Session::write('is_sessionAdmin', $is_sessionAdmin);
  290. } else {
  291. // continue with the previous values
  292. /*
  293. $_courseUser = Session::read('_courseUser');
  294. $is_courseAdmin = Session::read('is_courseAdmin');
  295. $is_courseTutor = Session::read('is_courseTutor');
  296. $is_courseCoach = Session::read('is_courseCoach');
  297. $is_courseMember = Session::read('is_courseMember');
  298. $is_allowed_in_course = Session::read('is_allowed_in_course');*/
  299. }
  300. };
  301. /**
  302. * Deletes the exam_password user extra field *only* to students
  303. * @todo improve the login hook system
  304. * @param Request $request
  305. */
  306. $afterLogin = function (Request $request) use ($app) {
  307. if (isset($app['current_user']) && isset($app['current_user']['user_id']) && $app['current_user']['status'] == STUDENT) {
  308. $extraField = new ExtraField('user');
  309. $extraFieldData = $extraField->get_handler_field_info_by_field_variable('exam_password');
  310. if ($extraFieldData && !empty($extraFieldData)) {
  311. $extraField = new ExtraFieldValue('user');
  312. $extraFieldValue = $extraField->get_values_by_handler_and_field_variable($app['current_user']['user_id'], 'exam_password');
  313. if (!empty($extraFieldValue)) {
  314. $extraField->delete_values_by_handler_and_field_id($app['current_user']['user_id'], $extraFieldValue['id']);
  315. }
  316. }
  317. }
  318. };
  319. $removeCidReset = function (Request $request) use ($app) {
  320. // Deleting course info.
  321. Session::erase('_cid');
  322. Session::erase('_real_cid');
  323. Session::erase('_course');
  324. if (!empty($_SESSION)) {
  325. foreach ($_SESSION as $key => $item) {
  326. if (strpos($key, 'lp_autolunch_') === false) {
  327. continue;
  328. } else {
  329. if (isset($_SESSION[$key])) {
  330. Session::erase($key);
  331. }
  332. }
  333. }
  334. }
  335. // Deleting session info.
  336. Session::erase('id_session');
  337. Session::erase('session_name');
  338. // Deleting group info.
  339. Session::erase('_gid');
  340. };
  341. $removeCidResetDependingOfSection = function (Request $request) use ($app, $removeCidReset) {
  342. $file = $request->get('file');
  343. if (!empty($file)) {
  344. $info = pathinfo($file);
  345. $section = $info['dirname'];
  346. if ($section == 'admin') {
  347. $removeCidReset($request);
  348. }
  349. }
  350. };
  351. /** / and /index paths */
  352. $app->match('/', 'index.controller:indexAction', 'GET')
  353. ->assert('type', '.+') //allowing slash "/"
  354. ->before($removeCidReset)
  355. ->after($afterLogin);
  356. $app->match('/index', 'index.controller:indexAction', 'GET')
  357. ->before($removeCidReset)
  358. ->after($afterLogin)
  359. ->bind('index');
  360. /** Userportal */
  361. $app->get('/userportal', 'userPortal.controller:indexAction')
  362. ->before($removeCidReset);
  363. $app->get('/userportal/{type}/{filter}/{page}', 'userPortal.controller:indexAction')
  364. ->before($removeCidReset)
  365. ->value('type', 'courses') //default values
  366. ->value('filter', 'current')
  367. ->value('page', '1')
  368. ->bind('userportal');
  369. /** main files */
  370. $app->match('/main/{file}', 'legacy.controller:classicAction', 'GET|POST')
  371. ->before($removeCidResetDependingOfSection)
  372. ->before($settingCourseConditions)
  373. ->before(
  374. function() use ($app) {
  375. // Do not load breadcrumbs
  376. $app['template']->loadBreadcrumb = false;
  377. })
  378. ->assert('file', '.+')
  379. ->assert('type', '.+');
  380. /** Logout already implemented by the the security service provider */
  381. /* $app->get('/logout', 'index.controller:logoutAction')
  382. ->bind('logout')
  383. ->after($cleanCourseSession);*/
  384. /** Login form */
  385. $app->match('/login', 'index.controller:loginAction', 'GET|POST')
  386. ->bind('login');
  387. /*$app->match('/admin/login-check', 'index.controller:checkLoginAction', 'GET|POST')
  388. ->bind('login_check');*/
  389. /** Course home instead of courses/MATHS the new URL is web/courses/MATHS */
  390. $app->match('/courses/{cidReq}/{id_session}/', 'course_home.controller:indexAction', 'GET|POST')
  391. ->assert('id_session', '\d+')
  392. ->assert('type', '.+')
  393. ->before($settingCourseConditions)
  394. ->before($userPermissionsInsideACourse)
  395. ->bind('course');
  396. $app->match('/courses/{cidReq}', 'course_home.controller:indexAction', 'GET|POST')
  397. ->assert('type', '.+')
  398. ->before($settingCourseConditions)
  399. ->before($userPermissionsInsideACourse);
  400. // @todo this is the same as above but with out slash (otherwise we will have an httpexception)
  401. $app->match('/courses/{cidReq}/', 'course_home.controller:indexAction', 'GET|POST')
  402. ->assert('type', '.+')
  403. ->before($settingCourseConditions)
  404. ->before($userPermissionsInsideACourse);
  405. // Introduction
  406. $app->match('/introduction/edit/{tool}', 'introduction_tool.controller:editAction', 'GET|POST')
  407. ->assert('type', '.+')
  408. ->before($settingCourseConditions)
  409. ->before($userPermissionsInsideACourse)
  410. ->bind('introduction_edit');
  411. $app->match('/introduction/delete/{tool}', 'introduction_tool.controller:deleteAction', 'GET|POST')
  412. ->assert('type', '.+')
  413. ->before($settingCourseConditions)
  414. ->before($userPermissionsInsideACourse)
  415. ->bind('introduction_delete');
  416. /** Course documents */
  417. $app->get('/data/courses/{courseCode}/document/{file}', 'index.controller:getDocumentAction')
  418. ->assert('file', '.+')
  419. ->assert('type', '.+');
  420. /** Scorm documents */
  421. $app->get('/data/courses/{courseCode}/scorm/{file}', 'index.controller:getScormDocumentAction')
  422. ->assert('file', '.+')
  423. ->assert('type', '.+');
  424. /** Certificates */
  425. $app->match('/certificates/{id}', 'certificate.controller:indexAction', 'GET');
  426. /** Username */
  427. $app->match('/user/{username}', 'user.controller:indexAction', 'GET');
  428. /** Who is online */
  429. /*$app->match('/users/online', 'user.controller:onlineAction', 'GET');
  430. $app->match('/users/online-in-course', 'user.controller:onlineInCourseAction', 'GET');
  431. $app->match('/users/online-in-session', 'user.controller:onlineInSessionAction', 'GET');*/
  432. /** Portal news */
  433. $app->match('/news/{id}', 'news.controller:indexAction', 'GET')
  434. ->bind('portal_news');
  435. /** LP controller (subscribe users to a LP) */
  436. $app->match('/learnpath/subscribe_users/{lpId}', 'learnpath.controller:indexAction', 'GET|POST')
  437. ->bind('subscribe_users');
  438. /** Data document_templates files */
  439. $app->get('/data/document_templates/{file}', 'index.controller:getDocumentTemplateAction')
  440. ->bind('data');
  441. /** Data default_platform_document files */
  442. $app->get('/data/default_platform_document/{file}', 'index.controller:getDefaultPlatformDocumentAction')
  443. ->assert('file', '.+')
  444. ->assert('type', '.+');
  445. /** User files */
  446. $app->match('/data/upload/users/{file}', 'index.controller:getUserFile', 'GET|POST')
  447. ->assert('file', '.+');
  448. /** Group files */
  449. $app->get('/data/upload/groups/{groupId}/{file}', 'index.controller:getGroupFile')
  450. ->assert('file', '.+')
  451. ->assert('type', '.+');
  452. /** Admin */
  453. $app->get('/admin/dashboard', 'index.controller:dashboardAction')
  454. ->assert('type', '.+')
  455. ->bind('admin_dashboard');
  456. /** Question manager - admin */
  457. $app->get('/admin/questionmanager', 'question_manager.controller:questionManagerIndexAction')
  458. ->assert('type', '.+')
  459. ->bind('admin_questionmanager');
  460. $app->match('/admin/questionmanager/questions', 'question_manager.controller:questionsAction', 'GET|POST')
  461. ->assert('type', '.+')
  462. ->bind('admin_questions');
  463. $app->match('/admin/questionmanager/questions/{id}/edit', 'question_manager.controller:editQuestionAction', 'GET|POST')
  464. ->assert('type', '.+')
  465. ->bind('admin_questions_edit');
  466. $app->match('/admin/questionmanager/questions/{id}', 'exercise_manager.controller:getQuestionAction', 'GET|POST')
  467. ->assert('type', '.+')
  468. ->bind('admin_questions_show');
  469. $app->get('/admin/questionmanager/questions/get-categories/{id}', 'question_manager.controller:getCategoriesAction')
  470. ->bind('admin_questions_get_categories');
  471. $app->get('/admin/questionmanager/questions/get-questions-by-category/{categoryId}', 'question_manager.controller:getQuestionsByCategoryAction')
  472. ->bind('admin_get_questions_by_category');
  473. $app->match('/admin/questionmanager/categories/{id}/edit', 'question_manager.controller:editCategoryAction', 'GET|POST')
  474. ->assert('type', '.+')
  475. ->bind('admin_category_edit');
  476. $app->match('/admin/questionmanager/categories/{id}', 'question_manager.controller:showCategoryAction', 'GET')
  477. ->assert('id', '\d+')
  478. ->assert('type', '.+')
  479. ->bind('admin_category_show');
  480. $app->match('/admin/questionmanager/categories/new', 'question_manager.controller:newCategoryAction', 'GET|POST')
  481. ->bind('admin_category_new');
  482. $app->match('/admin/questionmanager/categories/{id}/delete', 'question_manager.controller:deleteCategoryAction', 'POST')
  483. ->bind('admin_category_delete');
  484. /** Editor */
  485. $app->match('/editor/filemanager', 'editor.controller:filemanagerAction', 'GET|POST')
  486. ->assert('type', '.+')
  487. ->bind('filemanager');
  488. $app->match('/editor/connector', 'editor.controller:connectorAction', 'GET|POST')
  489. ->assert('type', '.+')
  490. ->bind('editor_connector');
  491. /** Exercises */
  492. $app->match('courses/{cidReq}/{id_session}/exercise/question-pool', 'exercise_manager.controller:questionPoolAction', 'POST')
  493. ->before($settingCourseConditions)
  494. ->before($userPermissionsInsideACourse)
  495. ->bind('exercise_question_pool_global');
  496. $app->match('courses/{cidReq}/{id_session}/exercise/{exerciseId}/question-pool', 'exercise_manager.controller:questionPoolAction', 'GET|POST')
  497. ->assert('exerciseId', '\d+')
  498. ->before($settingCourseConditions)
  499. ->before($userCourseAdmin)
  500. ->before($userPermissionsInsideACourse)
  501. ->bind('exercise_question_pool');
  502. $app->match('courses/{cidReq}/{id_session}/exercise/{exerciseId}/copy-question/{questionId}', 'exercise_manager.controller:copyQuestionAction', 'GET|POST')
  503. ->assert('questionId', '\d+')
  504. ->assert('exerciseId', '\d+')
  505. ->before($settingCourseConditions)
  506. ->before($userCourseAdmin)
  507. ->before($userPermissionsInsideACourse)
  508. ->bind('exercise_copy_question');
  509. $app->match('courses/{cidReq}/{id_session}/exercise/{exerciseId}/reuse-question/{questionId}', 'exercise_manager.controller:reuseQuestionAction', 'GET|POST')
  510. ->assert('questionId', '\d+')
  511. ->assert('exerciseId', '\d+')
  512. ->before($settingCourseConditions)
  513. ->before($userCourseAdmin)
  514. ->before($userPermissionsInsideACourse)
  515. ->bind('exercise_reuse_question');
  516. /** Course home instead of courses/MATHS the new URL is web/courses/MATHS */
  517. $app->match('/courses/{cidReq}/{id_session}/exercise/question/{id}', 'exercise_manager.controller:getQuestionAction', 'GET')
  518. ->assert('id_session', '\d+')
  519. ->assert('id', '\d+')
  520. ->assert('type', '.+')
  521. ->before($settingCourseConditions)
  522. ->before($userPermissionsInsideACourse)
  523. ->before($userCourseAdmin)
  524. ->bind('question_show');
  525. $app->match('/courses/{cidReq}/{id_session}/exercise/{exerciseId}/question/{id}', 'exercise_manager.controller:getQuestionAction', 'GET')
  526. ->assert('id_session', '\d+')
  527. ->assert('exerciseId', '\d+')
  528. ->assert('id', '\d+')
  529. ->assert('type', '.+')
  530. ->before($settingCourseConditions)
  531. ->before($userPermissionsInsideACourse)
  532. ->before($userCourseAdmin)
  533. ->bind('exercise_question_show');
  534. $app->match('/courses/{cidReq}/{id_session}/exercise/{exerciseId}/dashboard', 'exercise_manager.controller:dashboardAction', 'GET')
  535. ->assert('id_session', '\d+')
  536. ->assert('exerciseId', '\d+')
  537. ->assert('type', '.+')
  538. ->before($settingCourseConditions)
  539. ->before($userPermissionsInsideACourse)
  540. ->before($userCourseAdmin)
  541. ->bind('exercise_dashboard');
  542. $app->match('/courses/{cidReq}/{id_session}/exercise/question/{id}/edit', 'exercise_manager.controller:editQuestionAction', 'GET|POST')
  543. ->assert('type', '.+')
  544. ->before($settingCourseConditions)
  545. ->before($userPermissionsInsideACourse)
  546. ->before($userCourseAdmin)
  547. ->bind('exercise_question_edit');
  548. $app->match('/admin/administrator/', 'admin.controller:indexAction', 'GET')
  549. ->assert('type', '.+')
  550. ->bind('admin_administrator');
  551. $app->match('/ajax', 'model_ajax.controller:indexAction', 'GET')
  552. ->assert('type', '.+')
  553. ->bind('model_ajax');
  554. // Roles
  555. // @todo improve route creation. Use mount() to write less
  556. /* @todo use Flint to manage controllers */
  557. if ($alreadyInstalled) {
  558. // Takes a some time to load @todo improve this calls
  559. $app->mount('/admin/administrator/roles', new ChamiloLMS\Provider\ReflectionControllerProvider('role.controller'));
  560. $app->mount('/admin/administrator/question_scores', new ChamiloLMS\Provider\ReflectionControllerProvider('question_score.controller'));
  561. $app->mount('/admin/administrator/question_score_names', new ChamiloLMS\Provider\ReflectionControllerProvider('question_score_name.controller'));
  562. }