firefly-iii/app/Rules/BelongsUser.php

<?php

/**
 * BelongsUser.php
 * Copyright (c) 2018 thegrumpydictator@gmail.com
 *
 * This file is part of Firefly III.
 *
 * Firefly III is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * Firefly III is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with Firefly III. If not, see <http://www.gnu.org/licenses/>.
 */

declare(strict_types=1);

namespace FireflyIII\Rules;

use FireflyIII\Exceptions\FireflyException;
use FireflyIII\Models\Account;
use FireflyIII\Models\Bill;
use FireflyIII\Models\Budget;
use FireflyIII\Models\Category;
use FireflyIII\Models\PiggyBank;
use Illuminate\Contracts\Validation\Rule;

/**
 * Class BelongsUser
 */
class BelongsUser implements Rule
{
    /**
     * Create a new rule instance.
     *
     * @return void
     */
    public function __construct()
    {
        //
    }

    /**
     * Get the validation error message.
     *
     * @return string
     */
    public function message()
    {
        return trans('validation.belongs_user');
    }

    /**
     * Determine if the validation rule passes.
     *
     * @param  string $attribute
     * @param  mixed  $value
     *
     * @return bool
     * @throws FireflyException
     */
    public function passes($attribute, $value)
    {
        $attribute = $this->parseAttribute($attribute);
        if (!auth()->check()) {
            return true; // @codeCoverageIgnore
        }
        $attribute = (string)$attribute;
        switch ($attribute) {
            case 'piggy_bank_id':
                $count = PiggyBank::leftJoin('accounts', 'accounts.id', '=', 'piggy_banks.account_id')
                                  ->where('piggy_banks.id', '=', (int)$value)
                                  ->where('accounts.user_id', '=', auth()->user()->id)->count();

                return $count === 1;
                break;
            case 'piggy_bank_name':
                $count = $this->countField(PiggyBank::class, 'name', $value);

                return $count === 1;
                break;
            case 'bill_id':
                $count = Bill::where('id', '=', (int)$value)->where('user_id', '=', auth()->user()->id)->count();

                return $count === 1;
            case 'bill_name':
                $count = $this->countField(Bill::class, 'name', $value);

                return $count === 1;
                break;
            case 'budget_id':
                $count = Budget::where('id', '=', (int)$value)->where('user_id', '=', auth()->user()->id)->count();

                return $count === 1;
                break;
            case 'category_id':
                $count = Category::where('id', '=', (int)$value)->where('user_id', '=', auth()->user()->id)->count();

                return $count === 1;
                break;
            case 'budget_name':
                $count = $this->countField(Budget::class, 'name', $value);

                return $count === 1;
                break;
            case 'source_id':
            case 'destination_id':
                $count = Account::where('id', '=', (int)$value)->where('user_id', '=', auth()->user()->id)->count();

                return $count === 1;
                break;

            default:
                throw new FireflyException(sprintf('Rule BelongUser cannot handle "%s"', $attribute)); // @codeCoverageIgnore
        }
    }

    /**
     * @param string $class
     * @param string $field
     * @param string $value
     *
     * @return int
     */
    protected function countField(string $class, string $field, string $value): int
    {
        // get all objects belonging to user:
        switch ($class) {
            case PiggyBank::class:
                $objects = PiggyBank::leftJoin('accounts', 'accounts.id', '=', 'piggy_banks.account_id')
                                    ->where('accounts.user_id', '=', auth()->user()->id)->get(['piggy_banks.*']);
                break;
            default:
                $objects = $class::where('user_id', '=', auth()->user()->id)->get();
                break;
        }
        $count = 0;
        foreach ($objects as $object) {
            if (trim((string)$object->$field) === trim($value)) {
                $count++;
            }
        }

        return $count;
    }

    /**
     * @param string $attribute
     *
     * @return string
     */
    private function parseAttribute(string $attribute): string
    {
        $parts = explode('.', $attribute);
        if (\count($parts) === 1) {
            return $attribute;
        }
        if (\count($parts) === 3) {
            return $parts[2];
        }

        return $attribute; // @codeCoverageIgnore
    }
}