mirror of
				https://github.com/invoiceninja/invoiceninja.git
				synced 2025-10-28 03:13:26 -04:00 
			
		
		
		
	* Enable identifying a user who submits a report to sentry for tracking purposes * Minor fix for setup page * Fixes for Tests * Fixes for tests * Generic Entity Emailer * Fixes for emailing a generic entity
		
			
				
	
	
		
			95 lines
		
	
	
		
			2.4 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
			
		
		
	
	
			95 lines
		
	
	
		
			2.4 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
| <?php
 | |
| /**
 | |
|  * Invoice Ninja (https://invoiceninja.com)
 | |
|  *
 | |
|  * @link https://github.com/invoiceninja/invoiceninja source repository
 | |
|  *
 | |
|  * @copyright Copyright (c) 2020. Invoice Ninja LLC (https://invoiceninja.com)
 | |
|  *
 | |
|  * @license https://opensource.org/licenses/AAL
 | |
|  */
 | |
| 
 | |
| namespace App\Http\Requests\Email;
 | |
| 
 | |
| use App\Http\Requests\Request;
 | |
| use App\Utils\Traits\MakesHash;
 | |
| 
 | |
| class SendEmailRequest extends Request
 | |
| {
 | |
|     use MakesHash;
 | |
| 
 | |
|     /**
 | |
|      * Determine if the user is authorized to make this request.
 | |
|      *
 | |
|      * @return bool
 | |
|      */
 | |
|     public function authorize() : bool
 | |
|     {
 | |
|         return $this->checkUserAbleToSend();
 | |
|     }
 | |
| 
 | |
|     /**
 | |
|      * Get the validation rules that apply to the request.
 | |
|      *
 | |
|      * @return array
 | |
|      */
 | |
|     public function rules()
 | |
|     {
 | |
|         return [
 | |
|             "template" => "required",
 | |
|             "entity" => "required",
 | |
|             "entity_id" => "required",
 | |
|             "subject" => "required",
 | |
|             "body" => "required",
 | |
|         ];
 | |
|     }
 | |
| 
 | |
|     protected function prepareForValidation()
 | |
|     {
 | |
|         $input = $this->all();
 | |
| 
 | |
|         $settings = auth()->user()->company()->settings;
 | |
| 
 | |
|         if(empty($input['template']))
 | |
|             $input['template'] = '';
 | |
| 
 | |
|         if(!property_exists($settings, $input['template']))
 | |
|             unset($input['template']);
 | |
| 
 | |
|         $input['entity_id'] = $this->decodePrimaryKey($input['entity_id']);
 | |
|         $input['entity'] = "App\Models\\". ucfirst($input['entity']);
 | |
| 
 | |
|         $this->replace($input);
 | |
|     }
 | |
| 
 | |
|     public function message()
 | |
|     {
 | |
|         return [
 | |
|             'template' => 'Invalid template.',
 | |
|         ];
 | |
|     }
 | |
| 
 | |
|     private function checkUserAbleToSend()
 | |
|     {
 | |
|         $input = $this->all();
 | |
| 
 | |
|         /*Make sure we have all the require ingredients to send a template*/
 | |
|         if(array_key_exists('entity', $input) && array_key_exists('entity_id', $input) && is_string($input['entity']) && $input['entity_id']) {
 | |
| 
 | |
|             $company = auth()->user()->company();
 | |
| 
 | |
|             $entity = $input['entity'];
 | |
| 
 | |
|             /* Harvest the entity*/
 | |
|             $entity_obj = $entity::whereId($input['entity_id'])->company()->first();
 | |
| 
 | |
|             /* Check object, check user and company id is same as users, and check user can edit the object */
 | |
|             if($entity_obj && ($company->id == $entity_obj->company_id) && auth()->user()->can('edit', $entity_obj))
 | |
|                 return true;
 | |
| 
 | |
|         }
 | |
| 
 | |
|         return false;
 | |
|     }
 | |
| }
 |