feat: disable/block teamer users as admin

src/Controller/Admin/Teamer/DisableUserController.php

@@ -0,0 +1,81 @@
+<?php
+
+namespace App\Controller\Admin\Teamer;
+
+use App\Entity\Teamer;
+use App\Form\DisableUserType;
+use App\Htmx\HxRedirectResponse;
+use Doctrine\ORM\EntityManagerInterface;
+use Psr\Log\LoggerInterface;
+use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
+use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\Routing\Attribute\Route;
+use Symfony\Component\Security\Http\Attribute\IsGranted;
+
+class DisableUserController extends AbstractController
+{
+    public function __construct(
+        private readonly EntityManagerInterface $entityManager,
+        private readonly LoggerInterface $logger,
+    ) {
+    }
+
+    #[Route('/admin/teamer/disable-user/{uuid}', name: 'app_admin_teamer_disable_user')]
+    #[IsGranted('ROLE_ADMIN')]
+    public function index(Teamer $teamer, Request $request): Response
+    {
+        $user = $teamer->getUser();
+        $form = $this->createForm(DisableUserType::class, $user, ['hx_post' => $request->getUri()]);
+        $form->handleRequest($request);
+        if ($form->isSubmitted() && $form->isValid()) {
+            $user->setDisabledAt(new \DateTimeImmutable());
+
+            $this->entityManager->flush();
+
+            $this->addFlash('success', 'Der Benutzeraccount wurde gesperrt');
+
+            $this->logger->info('Disable user', [
+                'teamer' => $teamer->getFullName(),
+                'user' => $user->getEmail(),
+            ]);
+
+            return new HxRedirectResponse($this->generateUrl('app_administrative_teamer_index'));
+        }
+
+        return $this->render('admin/teamer/modal_disable_user.html.twig', [
+            'form' => $form->createView(),
+            'teamer' => $teamer,
+        ]);
+    }
+
+    #[Route('/administrative/teamer/enable-user/{uuid}', name: 'app_admin_teamer_enable_user')]
+    #[IsGranted('ROLE_ADMIN')]
+    public function enable(Teamer $teamer, Request $request): Response
+    {
+        $user = $teamer->getUser();
+
+        if (true === $request->isMethod(Request::METHOD_POST)) {
+            $user
+                ->setDisabledAt(null)
+                ->setDisabledReason(null)
+                ->setDisabledReasonInternal(null)
+            ;
+
+            $this->entityManager->flush();
+
+            $this->addFlash('success', 'Der Benutzeraccount wurde reaktiviert');
+
+            $this->logger->info('Enable user', [
+                'teamer' => $teamer->getFullName(),
+                'user' => $user->getEmail(),
+            ]);
+
+            return new HxRedirectResponse($this->generateUrl('app_administrative_teamer_index'));
+        }
+
+        return $this->render('admin/teamer/modal_enable_user.html.twig', [
+            'teamer' => $teamer,
+        ]);
+    }
+}

src/Entity/User.php

@@ -4,6 +4,7 @@ namespace App\Entity;
 
 use App\Entity\Traits\TimestampableEntity;
 use App\Repository\UserRepository;
+use Doctrine\DBAL\Types\Types;
 use Doctrine\ORM\Mapping as ORM;
 use Symfony\Component\Security\Core\User\UserInterface;
 use Symfony\Component\Uid\Uuid;
@@ -57,6 +58,15 @@ class User implements UserInterface, TimestampableEntityInterface
     #[ORM\Column]
     private bool $muteNotifications = false;
 
+    #[ORM\Column(type: 'datetime_immutable', nullable: true)]
+    private ?\DateTimeImmutable $disabledAt = null;
+
+    #[ORM\Column(type: Types::TEXT, nullable: true)]
+    private ?string $disabledReason = null;
+
+    #[ORM\Column(type: Types::TEXT, nullable: true)]
+    private ?string $disabledReasonInternal = null;
+
     public function __construct()
     {
         $this->uuid = Uuid::v4();
@@ -169,7 +179,7 @@ class User implements UserInterface, TimestampableEntityInterface
         $labels = [];
 
         foreach ($this->roles as $role) {
-            $labels[] = match($role) {
+            $labels[] = match ($role) {
                 'ROLE_ADMIN' => 'Admin',
                 'ROLE_MANAGER' => 'Reisemanager',
                 'ROLE_HOUSE_MANAGER' => 'Hausleitung',
@@ -300,4 +310,45 @@ class User implements UserInterface, TimestampableEntityInterface
 
         return false;
     }
+
+    public function getDisabledAt(): ?\DateTimeImmutable
+    {
+        return $this->disabledAt;
+    }
+
+    public function setDisabledAt(?\DateTimeImmutable $disabledAt): static
+    {
+        $this->disabledAt = $disabledAt;
+
+        return $this;
+    }
+
+    public function isDisabled(): bool
+    {
+        return null !== $this->disabledAt;
+    }
+
+    public function getDisabledReason(): ?string
+    {
+        return $this->disabledReason;
+    }
+
+    public function setDisabledReason(?string $disabledReason): static
+    {
+        $this->disabledReason = $disabledReason;
+
+        return $this;
+    }
+
+    public function getDisabledReasonInternal(): ?string
+    {
+        return $this->disabledReasonInternal;
+    }
+
+    public function setDisabledReasonInternal(?string $disabledReasonInternal): static
+    {
+        $this->disabledReasonInternal = $disabledReasonInternal;
+
+        return $this;
+    }
 }

src/Form/DisableUserType.php

@@ -0,0 +1,46 @@
+<?php
+
+namespace App\Form;
+
+use App\Entity\User;
+use Symfony\Component\Form\AbstractType;
+use Symfony\Component\Form\Extension\Core\Type\TextareaType;
+use Symfony\Component\Form\FormBuilderInterface;
+use Symfony\Component\OptionsResolver\OptionsResolver;
+use Symfony\Component\Validator\Constraints\NotBlank;
+
+class DisableUserType extends AbstractType
+{
+    public function buildForm(FormBuilderInterface $builder, array $options): void
+    {
+        $builder
+            ->add('disabledReason', TextareaType::class, [
+                'label' => 'Begründung',
+                'attr' => [
+                    'data-controller' => 'textarea-autosize',
+                    'data-action' => 'textarea-autosize#resize',
+                ],
+                'constraints' => [
+                    new NotBlank([
+                        'message' => 'Bitte gib die Begründung ein',
+                    ]),
+                ],
+            ])
+            ->add('disabledReasonInternal', TextareaType::class, [
+                'label' => 'Begründung intern',
+                'required' => false,
+                'attr' => [
+                    'data-controller' => 'textarea-autosize',
+                    'data-action' => 'textarea-autosize#resize',
+                ],
+            ])
+        ;
+    }
+
+    public function configureOptions(OptionsResolver $resolver): void
+    {
+        $resolver->setDefaults([
+            'data_class' => User::class,
+        ]);
+    }
+}

src/Security/UserChecker.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Security;
+
+use App\Entity\User;
+use Symfony\Component\Security\Core\Exception\CustomUserMessageAccountStatusException;
+use Symfony\Component\Security\Core\User\UserCheckerInterface;
+use Symfony\Component\Security\Core\User\UserInterface;
+
+class UserChecker implements UserCheckerInterface
+{
+    public function checkPreAuth(UserInterface $user): void
+    {
+        if (!$user instanceof User) {
+            return;
+        }
+
+        if (true === $user->isDisabled()) {
+            throw new CustomUserMessageAccountStatusException('Dein Account wurde gesperrt: '.$user->getDisabledReason());
+        }
+    }
+
+    public function checkPostAuth(UserInterface $user): void
+    {
+    }
+}