feat: soft-delete for teamer accounts

addresses #869dv9br3

src/Controller/Admin/Teamer/DeleteAccountController.php

@@ -0,0 +1,62 @@
+<?php
+
+namespace App\Controller\Admin\Teamer;
+
+use App\Entity\Teamer;
+use App\Htmx\HxRedirectResponse;
+use App\Repository\ApplicationRepository;
+use App\Repository\DispositionRepository;
+use App\Service\Teamer\AccountDeletionHandler;
+use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
+use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\Routing\Attribute\Route;
+use Symfony\Component\Security\Http\Attribute\IsGranted;
+
+class DeleteAccountController extends AbstractController
+{
+    public function __construct(
+        private readonly AccountDeletionHandler $accountDeletionHandler,
+        private readonly ApplicationRepository $applicationRepository,
+        private readonly DispositionRepository $dispositionRepository,
+    ) {
+    }
+
+    #[Route('/admin/teamer/delete-account/{uuid}', name: 'app_admin_teamer_delete_account')]
+    #[IsGranted('ROLE_ADMIN')]
+    public function index(Teamer $teamer, Request $request): Response
+    {
+        if (true === $request->isMethod(Request::METHOD_POST)) {
+            $this->accountDeletionHandler->delete($teamer, AccountDeletionHandler::SOURCE_ADMIN);
+
+            $this->addFlash('success', 'Der Account wurde gelöscht');
+
+            return new HxRedirectResponse($this->generateUrl('app_administrative_teamer_index'));
+        }
+
+        // open commitments survive the deletion and stay visible, but the teamer is no
+        // longer written to about them - withdrawing them is the admin's decision
+        return $this->render('admin/teamer/modal_delete_account.html.twig', [
+            'teamer' => $teamer,
+            'pendingApplicationCount' => count($this->applicationRepository->getPendingForTeamer($teamer, 100)),
+            'upcomingDispositionCount' => count($this->dispositionRepository->getUpcomingDispositionsByTeamer($teamer, 100)),
+        ]);
+    }
+
+    #[Route('/admin/teamer/restore-account/{uuid}', name: 'app_admin_teamer_restore_account')]
+    #[IsGranted('ROLE_ADMIN')]
+    public function restore(Teamer $teamer, Request $request): Response
+    {
+        if (true === $request->isMethod(Request::METHOD_POST)) {
+            $this->accountDeletionHandler->restore($teamer);
+
+            $this->addFlash('success', 'Der Account wurde wiederhergestellt');
+
+            return new HxRedirectResponse($this->generateUrl('app_administrative_teamer_index'));
+        }
+
+        return $this->render('admin/teamer/modal_restore_account.html.twig', [
+            'teamer' => $teamer,
+        ]);
+    }
+}

src/Controller/Teamer/Profile/DeleteAccountController.php

@@ -0,0 +1,45 @@
+<?php
+
+namespace App\Controller\Teamer\Profile;
+
+use App\Entity\User;
+use App\Form\DeleteAccountType;
+use App\Htmx\HxRedirectResponse;
+use App\Service\Teamer\AccountDeletionHandler;
+use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
+use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\Routing\Attribute\Route;
+use Symfony\Component\Security\Http\Attribute\IsGranted;
+
+class DeleteAccountController extends AbstractController
+{
+    public function __construct(private readonly AccountDeletionHandler $accountDeletionHandler)
+    {
+    }
+
+    #[Route('/teamer/profile/delete-account', name: 'app_teamer_profile_delete_account')]
+    #[IsGranted('ROLE_TEAMER')]
+    public function index(Request $request): Response
+    {
+        /** @var User $user */
+        $user = $this->getUser();
+
+        $form = $this->createForm(DeleteAccountType::class, null, ['hx_post' => $request->getUri()]);
+        $form->handleRequest($request);
+
+        if ($form->isSubmitted() && $form->isValid()) {
+            $this->accountDeletionHandler->delete($user, AccountDeletionHandler::SOURCE_SELF);
+
+            $this->addFlash('success', 'Dein Account wurde gelöscht');
+
+            // the session stays authenticated until the next request, so the logout is
+            // done here rather than left to the DeletedUserSubscriber
+            return new HxRedirectResponse($this->generateUrl('app_security_logout'));
+        }
+
+        return $this->render('teamer/profile/modal_delete_account.html.twig', [
+            'form' => $form->createView(),
+        ]);
+    }
+}