<?php

namespace Acelle\Policies;

use Illuminate\Auth\Access\HandlesAuthorization;
use Acelle\Model\SendingServer;
use Acelle\Model\User;

class SendingServerPolicy
{
    use HandlesAuthorization;

    public function read(User $user, SendingServer $item, $role)
    {
        // @important: in case of non-saas mode, it falls upon admin case
        switch ($role) {
            case 'admin':
                $can = $user->admin->getPermission('sending_server_read') != 'no';
                break;
            case 'customer':
                // RBAC check
                if (!$user->hasPermission('sending_server.full_access') && !$user->hasPermission('sending_server.read_only')) {
                    return false;
                }

                $can = $user->customer->getCurrentActiveGeneralSubscription()->planGeneral->useOwnSendingServer(); // non-saas safe
                break;
        }

        return $can;
    }

    public function readAll(User $user, SendingServer $item, $role)
    {
        switch ($role) {
            case 'admin':
                $can = $user->admin->getPermission('sending_server_read') == 'all';
                break;
            case 'customer':
                // RBAC check
                if (!$user->hasPermission('sending_server.full_access') && !$user->hasPermission('sending_server.read_only')) {
                    return false;
                }

                $can = false;
                break;
        }

        return $can;
    }

    public function create(User $user, $role)
    {
        switch ($role) {
            case 'admin':
                // non-SAAS mode fall upon here
                $can = $user->admin->getPermission('sending_server_create') == 'yes';

                // config/limit.php
                $limit = app_profile('sending_server.limit');
                if (!is_null($limit)) {
                    $sendingServerCount = SendingServer::system()->count();
                    $can = $can && ($sendingServerCount < $limit);
                } else {
                    // ignore limit because it is null
                }

                break;
            case 'customer':
                // RBAC check
                if (!$user->hasPermission('sending_server.full_access')) {
                    return false;
                }

                // init
                $can = true;
                $useOwnServer = $user->customer->getCurrentActiveGeneralSubscription()->planGeneral->useOwnSendingServer(); // non-saas safe

                if ($useOwnServer) {
                    // check max campaigns
                    $max = get_tmp_quota($user->customer, 'sending_servers_max');
                    $isUnlimited = $max == -1; // -1 means unlimited
                    $notReachMax = $user->customer->sendingServersCount() < $max;
                    $can = $isUnlimited || $notReachMax; // check max campaigns: unlimited or is not reach max

                    // check if user can create server type
                    // $can = $can && $user->customer->isAllowCreateSendingServerType($item->type);
                } else {
                    // use system server than do not check max
                }

                // config/limit.php
                $limit = app_profile('sending_server.limit');
                if (!is_null($limit)) {
                    $sendingServerCount = $user->customer->sendingServers()->count();
                    $can = $can && ($sendingServerCount < $limit);
                } else {
                    // ignore limit because it is null
                }

                break;
        }

        return $can;
    }

    public function update(User $user, SendingServer $item, $role)
    {
        switch ($role) {
            case 'admin':
                // non-SAAS mode fall upon here
                $ability = $user->admin->getPermission('sending_server_update');
                $can = $ability == 'all'
                    || ($ability == 'own' && $user->admin->id == $item->admin_id);
                break;
            case 'customer':
                // RBAC check
                if (!$user->hasPermission('sending_server.full_access')) {
                    return false;
                }

                $can = $user->customer->getCurrentActiveGeneralSubscription()->planGeneral->useOwnSendingServer() && $user->customer->id == $item->customer_id; // non-saas safe
                break;
        }

        return $can;
    }

    public function delete(User $user, SendingServer $item, $role)
    {
        switch ($role) {
            case 'admin':
                // non-SAAS mode fall upon here
                $ability = $user->admin->getPermission('sending_server_delete');
                $can = $ability == 'all'
                    || ($ability == 'own' && $user->admin->id == $item->admin_id);
                break;
            case 'customer':
                // RBAC check
                if (!$user->hasPermission('sending_server.full_access')) {
                    return false;
                }

                $can = $user->customer->getCurrentActiveGeneralSubscription()->planGeneral->useOwnSendingServer() && $user->customer->id == $item->customer_id; // non-saas safe
                break;
        }

        return $can;
    }

    public function disable(User $user, SendingServer $item, $role)
    {
        switch ($role) {
            case 'admin':
                // non-SAAS mode fall upon here
                $ability = $user->admin->getPermission('sending_server_update');
                $can = $ability == 'all'
                    || ($ability == 'own' && $user->admin->id == $item->admin_id);
                break;
            case 'customer':
                // RBAC check
                if (!$user->hasPermission('sending_server.full_access')) {
                    return false;
                }

                $can = $user->customer->getCurrentActiveGeneralSubscription()->planGeneral->useOwnSendingServer() && $user->customer->id == $item->customer_id;// non-saas safe
                break;
        }

        return $can && $item->status != "inactive";
    }

    public function enable(User $user, SendingServer $item, $role)
    {
        switch ($role) {
            case 'admin':
                // non-SAAS mode fall upon here
                $ability = $user->admin->getPermission('sending_server_update');
                $can = $ability == 'all'
                    || ($ability == 'own' && $user->admin->id == $item->admin_id);
                break;
            case 'customer':
                // RBAC check
                if (!$user->hasPermission('sending_server.full_access')) {
                    return false;
                }

                $can = $user->customer->getCurrentActiveGeneralSubscription()->planGeneral->useOwnSendingServer() && $user->customer->id == $item->customer_id; // non-saas safe
                break;
        }

        return $can && $item->status != "active";
    }

    public function test(User $user, SendingServer $item, $role)
    {
        return $this->update($user, $item, $role) || !isset($item->id);
    }
}