<?php
declare(strict_types=1);

namespace App\Doctrine\Network;

use ApiPlatform\Metadata\Operation;
use App\Doctrine\AbstractExtension;
use App\Entity\Access\Access;
use App\Entity\Network\NetworkOrganization;
use Doctrine\ORM\QueryBuilder;
use Symfony\Bundle\SecurityBundle\Security;

/**
 * Class CurrentNetworkOrganizationExtension : Filtre de sécurité par défaut pour une resource NetworkOrganization
 * @package App\Doctrine\Core
 */
final class CurrentNetworkOrganizationExtension extends AbstractExtension
{
    public function __construct(private Security $security)
    { }

    public function supports(string $resourceClass, ?Operation $operation): bool {
        return $resourceClass === NetworkOrganization::class;
    }

    protected function addWhere(QueryBuilder $queryBuilder, string $resourceClass, ?Operation $operation): void
    {
        /** @var Access $currentUser */
        $currentUser = $this->security->getUser();
        $rootAlias = $queryBuilder->getRootAliases()[0];
        $queryBuilder
            ->andWhere(sprintf('%s.organization = :organization', $rootAlias))
            ->setParameter('organization', $currentUser->getOrganization())
        ;
    }
}
