[Technique] Mise en place AuthorizationChecker #1328

backend/controllers/AccessController.php

     public function behaviors()
     {
         return [
-            'verbs' => [
-                'class' => VerbFilter::class,
-                'actions' => [
-                ],
-            ],
             'access' => [
                 'class' => AccessControl::class,
                 'rules' => [
                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->hasAccessBackend();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsProducer($this->getUserCurrent());
                         }
                     ]
                 ],

backend/controllers/CommunicateAdminController.php

                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->isCurrentAdmin();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsAdministrator($this->getUserCurrent());
                         }
                     ]
                 ],

backend/controllers/CommunicateController.php

                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->hasAccessBackend();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsProducer($this->getUserCurrent());
                         }
                     ]
                 ],

backend/controllers/CreditController.php

                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->hasAccessBackend();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsProducer($this->getUserCurrent());
                         }
                     ]
                 ],

backend/controllers/DashboardController.php

                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->hasAccessBackend();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsProducer($this->getUserCurrent());
                         }
                     ],
                 ],
             ],
-            'verbs' => [
-                'class' => VerbFilter::class,
-                'actions' => [
-                ],
-            ],
         ];
     }
 

backend/controllers/DeliveryNoteController.php

     public function behaviors()
     {
         return [
-            'verbs' => [
-                'class' => VerbFilter::class,
-                'actions' => [
-                ],
-            ],
             'access' => [
                 'class' => AccessControl::class,
                 'rules' => [
                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->hasAccessBackend();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsProducer($this->getUserCurrent());
                         }
                     ]
                 ],

backend/controllers/DevelopmentController.php

                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->hasAccessBackend();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsProducer($this->getUserCurrent());
                         }
                     ]
                 ],

backend/controllers/DistributionController.php

                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            $userModule = $this->getUserModule();
-                            return $userModule->isCurrentAdmin() || $userModule->isCurrentProducer();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsProducer($this->getUserCurrent());
                         }
                     ]
                 ],

backend/controllers/DocumentController.php

     public function behaviors()
     {
         return [
-            'verbs' => [
-                'class' => VerbFilter::class,
-                'actions' => [
-                ],
-            ],
             'access' => [
                 'class' => AccessControl::class,
                 'rules' => [
                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->hasAccessBackend();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsProducer($this->getUserCurrent());
                         }
                     ]
                 ],

backend/controllers/OrderController.php

                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->isCurrentProducer()
-                                || $this->getUserModule()->isCurrentAdmin();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsProducer($this->getUserCurrent());
                         }
                     ]
                 ],

backend/controllers/PointSaleController.php

     public function behaviors()
     {
         return [
-            'verbs' => [
-                'class' => VerbFilter::class,
-                'actions' => [
-                ],
-            ],
             'access' => [
                 'class' => AccessControl::class,
                 'rules' => [
                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->hasAccessBackend();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsProducer($this->getUserCurrent());
                         }
                     ],
                 ],

backend/controllers/ProducerAdminController.php

                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->isCurrentAdmin();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsAdministrator($this->getUserCurrent());
                         }
                     ]
                 ],

backend/controllers/ProducerController.php

                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->hasAccessBackend();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsProducer($this->getUserCurrent());
                         }
                     ]
                 ],

backend/controllers/ProducerPriceRangeAdminController.php

     public function behaviors()
     {
         return [
-            'verbs' => [
-                'class' => VerbFilter::class,
-                'actions' => [
-                ],
-            ],
             'access' => [
                 'class' => AccessControl::class,
                 'rules' => [
                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->isCurrentAdmin();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsAdministrator($this->getUserCurrent());
                         }
                     ]
                 ],

backend/controllers/ProductCategoryController.php

     public function behaviors()
     {
         return [
-            'verbs' => [
-                'class' => VerbFilter::class,
-                'actions' => [
-                ],
-            ],
             'access' => [
                 'class' => AccessControl::class,
                 'rules' => [
                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->hasAccessBackend();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsProducer($this->getUserCurrent());
                         }
                     ],
                 ],

backend/controllers/ProductController.php

     public function behaviors()
     {
         return [
-            'verbs' => [
-                'class' => VerbFilter::class,
-                'actions' => [
-                ],
-            ],
             'access' => [
                 'class' => AccessControl::class,
                 'rules' => [
                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->hasAccessBackend();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsProducer($this->getUserCurrent());
                         }
                     ]
                 ],

backend/controllers/QuotationController.php

 use common\helpers\GlobalParam;
 use common\logic\Document\Quotation\Model\QuotationSearch;
 use common\logic\Order\Order\Model\Order;
-use Yii;
 use yii\base\UserException;
 use yii\filters\AccessControl;
-use yii\filters\VerbFilter;
 use yii\helpers\Html;
 
 class QuotationController extends DocumentController
     public function behaviors()
     {
         return [
-            'verbs' => [
-                'class' => VerbFilter::class,
-                'actions' => [
-                ],
-            ],
             'access' => [
                 'class' => AccessControl::class,
                 'rules' => [
                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->hasAccessBackend();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsProducer($this->getUserCurrent());
                         }
                     ]
                 ],

backend/controllers/ReportController.php

                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->hasAccessBackend();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsProducer($this->getUserCurrent());
                         }
                     ]
                 ],

backend/controllers/SiteController.php

                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->hasAccessBackend();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsProducer($this->getUserCurrent());
                         }
                     ],
                     [
                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->getCurrentStatus() == User::STATUS_ADMIN;
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsAdministrator($this->getUserCurrent());
                         }
                     ],
                 ],

backend/controllers/StatsAdminController.php

                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->isUserCurrentAdmin();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsAdministrator($this->getUserCurrent());
                         }
                     ]
                 ],

backend/controllers/StatsController.php

 use common\helpers\GlobalParam;
 use yii\filters\AccessControl;
 use Yii;
-use DateTime;
-use DateInterval;
-use DatePeriod;
 
 class StatsController extends BackendController
 {
                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->hasAccessBackend();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsProducer($this->getUserCurrent());
                         }
                     ]
                 ],

backend/controllers/SubscriptionController.php

                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->hasAccessBackend();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsProducer($this->getUserCurrent());
                         }
                     ]
                 ],

backend/controllers/SupportAdminController.php

     public function behaviors()
     {
         return [
-            'verbs' => [
-                'class' => VerbFilter::class,
-                'actions' => [],
-            ],
             'access' => [
                 'class' => AccessControl::class,
                 'rules' => [
                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->isCurrentAdmin();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsProducer($this->getUserCurrent());
                         }
                     ]
                 ],

backend/controllers/SupportController.php

 use common\logic\Ticket\Ticket\Model\Ticket;
 use common\logic\Ticket\Ticket\Model\TicketSearch;
 use yii\filters\AccessControl;
-use yii\filters\VerbFilter;
 use yii\helpers\Html;
 use yii\web\NotFoundHttpException;
 
     public function behaviors()
     {
         return [
-            'verbs' => [
-                'class' => VerbFilter::class,
-                'actions' => [
-                ],
-            ],
             'access' => [
                 'class' => AccessControl::class,
                 'rules' => [
                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->hasAccessBackend();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsProducer($this->getUserCurrent());
                         }
                     ]
                 ],

backend/controllers/TaxRateAdminController.php

 namespace backend\controllers;
 
 use common\logic\Config\TaxRate\Model\TaxRate;
-use Yii;
 use yii\web\NotFoundHttpException;
 use yii\filters\VerbFilter;
 use yii\filters\AccessControl;
                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->isUserCurrentAdmin();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsAdministrator($this->getUserCurrent());
                         }
                     ]
                 ],

backend/controllers/UserController.php

 use backend\models\CreditForm;
 use common\helpers\GlobalParam;
 use backend\models\MailForm;
-use common\helpers\MeanPayment;
 use common\helpers\Password;
 use common\logic\Order\Order\Model\OrderSearch;
 use common\logic\PointSale\PointSale\Model\PointSale;
 use common\logic\PointSale\UserPointSale\Model\UserPointSale;
-use common\logic\Payment\Model\Payment;
 use common\logic\User\User\Model\User;
 use common\logic\User\User\Model\UserSearch;
-use common\logic\User\User\Wrapper\UserModule;
 use common\logic\User\UserProducer\Model\UserProducer;
 use common\logic\User\UserUserGroup\Model\UserUserGroup;
 use yii\base\UserException;
                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->hasAccessBackend();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsProducer($this->getUserCurrent());
                         }
                     ]
                 ],

backend/controllers/UserGroupController.php

 use common\helpers\GlobalParam;
 use common\logic\User\UserGroup\Model\UserGroupSearch;
 use common\logic\User\UserUserGroup\Model\UserUserGroup;
-use Yii;
 use yii\filters\AccessControl;
 use yii\web\NotFoundHttpException;
-use yii\filters\VerbFilter;
 use yii\helpers\Html;
 
 /**
     public function behaviors()
     {
         return [
-            'verbs' => [
-                'class' => VerbFilter::class,
-                'actions' => [
-                ],
-            ],
             'access' => [
                 'class' => AccessControl::class,
                 'rules' => [
                         'allow' => true,
                         'roles' => ['@'],
                         'matchCallback' => function ($rule, $action) {
-                            return $this->getUserModule()->hasAccessBackend();
+                            return $this->getUserModule()
+                                ->getAuthorizationChecker()
+                                ->isGrantedAsProducer($this->getUserCurrent());
                         }
                     ],
                 ],

common/logic/User/User/Model/User.php

         return $this->lastname;
     }
 
+    public function getStatus(): string
+    {
+        return $this->status;
+    }
+
     /**
      * @inheritdoc
      */

common/logic/User/User/Service/AuthorizationChecker.php

+<?php
+
+namespace common\logic\User\User\Service;
+
+use common\logic\AbstractUtils;
+use common\logic\User\User\Model\User;
+
+class AuthorizationChecker extends AbstractUtils
+{
+    protected UserSolver $userSolver;
+
+    public function loadDependencies(): void
+    {
+        $this->userSolver = $this->loadService(UserSolver::class);
+    }
+
+    public function isGrantedAsAdministrator(User $user = null): bool
+    {
+        if(!$user) {
+            return false;
+        }
+
+        return $this->userSolver->isStatusAdministrator($user);
+    }
+
+    public function isGrantedAsProducer(User $user = null): bool
+    {
+        if(!$user) {
+            return false;
+        }
+
+        return $this->isGrantedAsAdministrator($user)
+            || $this->userSolver->isStatusProducer($user);
+    }
+
+    public function isGrantedAsUser(User $user = null): bool
+    {
+        if(!$user) {
+            return false;
+        }
+
+        return $this->isGrantedAsProducer($user)
+            || $this->userSolver->isStatusUser($user);
+    }
+}

common/logic/User/User/Service/UserSolver.php

         return $user->status == User::STATUS_ADMIN;
     }
 
+    public function isStatusAdministrator(User $user): bool
+    {
+        return $user->getStatus() == User::STATUS_ADMIN;
+    }
+
     /**
      * Retourne si l'utilisateur est un producteur ou non.
      *
                 || $user->status == User::STATUS_PRODUCER) && $user->id_producer;
     }
 
+    public function isStatusProducer(User $user): bool
+    {
+        return $user->getStatus() == User::STATUS_PRODUCER;
+    }
+
+    public function isStatusUser(User $user): bool
+    {
+        return $user->getStatus() == User::STATUS_ACTIVE;
+    }
+
     /**
      * Retourne l'utilisateur courant.
      *

common/logic/User/User/Wrapper/UserContainer.php

 use common\logic\AbstractContainer;
 use common\logic\User\User\Repository\UserRepository;
 use common\logic\User\User\Repository\UserRepositoryQuery;
+use common\logic\User\User\Service\AuthorizationChecker;
 use common\logic\User\User\Service\NewsletterManager;
-use common\logic\User\User\Service\NewsletterUtils;
 use common\logic\User\User\Service\UserBuilder;
 use common\logic\User\User\Service\UserDefinition;
 use common\logic\User\User\Service\UserNotifier;
 use common\logic\User\User\Service\UsersCreditCsvGenerator;
 use common\logic\User\User\Service\UserSolver;
-use common\logic\User\User\Service\UserUtils;
 
 class UserContainer extends AbstractContainer
 {
             UserNotifier::class,
             UsersCreditCsvGenerator::class,
             NewsletterManager::class,
+            AuthorizationChecker::class,
         ];
     }
 
     {
         return NewsletterManager::getInstance();
     }
+
+    public function getAuthorizationChecker(): AuthorizationChecker
+    {
+        return AuthorizationChecker::getInstance();
+    }
 }

common/logic/User/User/Wrapper/UserModule.php

 
 use common\logic\AbstractModule;
 use common\logic\User\User\Repository\UserRepository;
+use common\logic\User\User\Service\AuthorizationChecker;
 use common\logic\User\User\Service\NewsletterManager;
 use common\logic\User\User\Service\UserBuilder;
 use common\logic\User\User\Service\UserDefinition;
  * @mixin UserNotifier
  * @mixin UsersCreditCsvGenerator
  * @mixin NewsletterManager
+ * @mixin AuthorizationChecker
  */
 class UserModule extends AbstractModule
 {
     {
         return $this->container;
     }
+
+    public function getAuthorizationChecker(): AuthorizationChecker
+    {
+        return AuthorizationChecker::getInstance();
+    }
 }

producer/controllers/CreditController.php

 use common\helpers\MeanPayment;
 use common\logic\Payment\Model\Payment;
 use producer\models\CreditForm;
-use yii\data\ActiveDataProvider;
 use yii\filters\VerbFilter;
 
 class CreditController extends ProducerBaseController
     {
         return [
             'verbs' => [
-                'class' => VerbFilter::className(),
+                'class' => VerbFilter::class,
                 'actions' => [
                     'stripe-verification' => ['post'],
                 ],