CrisisFlag/src/Controller/InfosController.php

<?php
namespace App\Controller;

use App\Controller\AppController;
use Cake\Event\Event;
use Cake\Datasource\ConnectionManager;

/**
 * Infos Controller
 *
 * @property \App\Model\Table\InfosTable $Infos
 */
class InfosController extends AppController
{
    public function beforeFilter(Event $event)
    {
        parent::beforeFilter($event);
        $this->Auth->allow(['view','index']);
    }
    /**
     * Index method
     *
     * @return void
     */
    public function index()
    {
        $this->paginate = [
            'contain' => ['Crisis', 'Users']
        ];
        $this->set('infos', $this->paginate($this->Infos));
        $this->set('_serialize', ['infos']);
    }

    /**
     * View method
     *
     * @param string|null $id Info id.
     * @return void
     * @throws \Cake\Network\Exception\NotFoundException When record not found.
     */
    public function view($id = null)
    {
        $info = $this->Infos->get($id, [
            'contain' => ['Crisis', 'Users']
        ]);
        $this->set('info', $info);
        $this->set('_serialize', ['info']);
    }

    /**
     * Add method
     *
     * @return void Redirects on successful add, renders view otherwise.
     */
    public function add($crisis_id = null)
    {
        if($this->Infos->find('all')->count() === 0)
        {
            ConnectionManager::get('default')->execute('ALTER TABLE infos AUTO_INCREMENT 1');
        }

        if($crisis_id != null)
        {
            $user_id = $this->Auth->user()['id'];
            $info = $this->Infos->newEntity();
            if ($this->request->is('post'))
            {
                $info->crisis_id = $crisis_id;
                $info->user_id = $user_id;
                $info = $this->Infos->patchEntity($info, $this->request->data);
                if ($this->Infos->save($info)) {
                    $this->Flash->success(__('L\'information a bien été enregistrée.'));
                    return $this->redirect(['controller' => 'crisis', 'action' => 'view', $crisis_id]);
                } else {
                    $this->Flash->error(__('L\'information n\'a pas pu être enregistrée.'));
                }
            }

            $Crisis = $this->Infos->Crisis->find('list', ['limit' => 200]);
            $users = $this->Infos->Users->find('list', ['limit' => 200]);
            $this->set(compact('info', 'Crisis', 'users', 'crisis_id'));
            $this->set('_serialize', ['info']);
        }
        else
        {
            $this->Flash->error(__('Vous devez spécifier la crise liée à cette information.'));
            return $this->redirect(['controller' => 'Homes', 'action' => 'index']);
        }
    }

    /**
     * Edit method
     *
     * @param string|null $id Info id.
     * @return void Redirects on successful edit, renders view otherwise.
     * @throws \Cake\Network\Exception\NotFoundException When record not found.
     */
    public function edit($id = null)
    {
        $info = $this->Infos->get($id, [
            'contain' => []
        ]);
        if ($this->request->is(['patch', 'post', 'put'])) {
            $info = $this->Infos->patchEntity($info, $this->request->data);
            if ($this->Infos->save($info)) {
                $this->Flash->success(__('L\'information a bien été enregistrée.'));
                return $this->redirect(['controller' => 'Crisis', 'action' => 'view', $id]);
            } else {
                $this->Flash->error(__('L\'information n\'a pas pu être enregistrée.'));
            }
        }
        $Crisis = $this->Infos->Crisis->find('list', ['limit' => 200]);
        $users = $this->Infos->Users->find('list', ['limit' => 200]);
        $this->set(compact('info', 'Crisis', 'users'));
        $this->set('_serialize', ['info']);
    }

    /**
     * Delete method
     *
     * @param string|null $id Info id.
     * @return \Cake\Network\Response|null Redirects to index.
     * @throws \Cake\Network\Exception\NotFoundException When record not found.
     */
    public function delete($id = null)
    {
        $this->request->allowMethod(['post', 'delete']);
        $info = $this->Infos->get($id);
        if ($this->Infos->delete($info)) {
            $this->Flash->success(__('L\'information a bien été supprimée.'));
        } else {
            $this->Flash->error(__('L\'information n\'a pas pu être supprimée.'));
        }
        return $this->redirect(['controller' => 'Crisis', 'action' => 'index']);
    }

    public function isAuthorized($user)
    {
        //A logged user can do an action about infos
        if(isset($user) && $this->request->action === 'add')
        {
            return true;
        }

        if(isset($user) && in_array($this->request->action, ['edit', 'delete']))
        {
            $infoId = (int)$this->request->params['pass'][0];

            if($this->Infos->isOwnedBy($infoId, $user['id']))
            {
                return true;
            }
        }

        return parent::isAuthorized($user);
    }
}