<?php

namespace App\Security\Voter;

use App\Entity\Application;
use App\Entity\Assignment;
use App\Entity\Disposition;
use App\Entity\User;
use Doctrine\ORM\EntityManagerInterface;
use Symfony\Bundle\SecurityBundle\Security;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Core\Authorization\Voter\Voter;

class AssignmentVoter extends Voter
{
    public const VIEW = 'VIEW';
    public const EDIT = 'EDIT';
    public const APPLY = 'APPLY';
    public const PUBLISH = 'PUBLISH';
    public const CALL_OFF = 'CALL_OFF';

    public function __construct(
        private readonly Security $security,
        private readonly EntityManagerInterface $entityManager
    ) {
    }

    protected function supports(string $attribute, mixed $subject): bool
    {
        if (!$subject instanceof Assignment) {
            return false;
        }

        return in_array($attribute, [static::VIEW, static::EDIT, static::APPLY, static::PUBLISH, static::CALL_OFF]);
    }

    protected function voteOnAttribute(string $attribute, mixed $subject, TokenInterface $token): bool
    {
        /** @var Assignment $assignment */
        $assignment = $subject;

        // All authenticated users may view assignments
        if (static::VIEW === $attribute && null !== $token->getUser()) {
            return true;
        }

        // Only users with administrative role may edit assignments
        if (static::EDIT === $attribute) {
            return $this->security->isGranted('ROLE_ADMINISTRATIVE');
        }

        // Only users with administrative role may publish assignments currently in draft
        if (static::PUBLISH === $attribute) {
            return Assignment::STATUS_DRAFT === $assignment->getStatus()
                && $this->security->isGranted('ROLE_ADMINISTRATIVE');
        }

        // Only users with administrative role may call off assignments
        if (static::CALL_OFF === $attribute) {
            return Assignment::STATUS_CALLED_OFF !== $assignment->getStatus()
                && $this->security->isGranted('ROLE_ADMINISTRATIVE');
        }

        // Only allow applications to published, not deleted and not called off assignments
        if (
            true === in_array($assignment->getStatus(), [
                Assignment::STATUS_DRAFT,
                Assignment::STATUS_DELETED,
                Assignment::STATUS_CALLED_OFF,
            ])) {
            return false;
        }

        // Only allow applications on empty slots
        $availableSlots = (int) $assignment->getAvailableDispositions();
        if (0 < $availableSlots) {
            return $assignment->getDispositions()->count() < $availableSlots;
        }

        // Only teamers without existing applications may apply to the assignment
        if ($this->security->isGranted('ROLE_TEAMER')) {
            /** @var User $user */
            $user = $token->getUser();
            $teamer = $user->getTeamer();
            $application = $this
                ->entityManager
                ->getRepository(Application::class)
                ->findOneBy(['teamer' => $teamer, 'assignment' => $assignment]);

            return null === $application;
        }

        return false;
    }
}