lib/classes/JsonApi/Routes/StatusgroupShow.php


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33

<?php

namespace JsonApi\Routes;

use JsonApi\Errors\AuthorizationFailedException;
use Psr\Http\Message\ResponseInterface as Response;
use Psr\Http\Message\ServerRequestInterface as Request;
use JsonApi\JsonApiController;
use JsonApi\Errors\RecordNotFoundException;

class StatusgroupShow extends JsonApiController
{
    protected $allowedIncludePaths = [
        'range'
    ];

    public function __invoke(Request $request, Response $response, $args)
    {
        $group = \Statusgruppen::find($args['id']);
        if (!$group) {
            throw new RecordNotFoundException();
        }

        $user = $this->getUser($request);
        $range = $group->range;

        if ($range && !$range->isAccessibleToUser($user->id)) {
            throw new AuthorizationFailedException();
        }

        return $this->getContentResponse($group);
    }
}