<?php

namespace Oro\Bundle\SecurityBundle\Acl\Domain;

use Oro\Bundle\SecurityBundle\Acl\Exception\InvalidAclException;
use Oro\Bundle\SecurityBundle\Acl\Extension\AclExtensionSelector;
use Symfony\Component\Security\Acl\Domain\ObjectIdentity;
use Symfony\Component\Security\Acl\Exception\InvalidDomainObjectException;

/**
 * A factory class to create ACL ObjectIdentity objects
 */
class ObjectIdentityFactory
{
    const ROOT_IDENTITY_TYPE = '(root)';

    /**
     * @var AclExtensionSelector
     */
    protected $extensionSelector;

    /**
     * Constructor
     *
     * @param AclExtensionSelector $extensionSelector
     */
    public function __construct(AclExtensionSelector $extensionSelector)
    {
        $this->extensionSelector = $extensionSelector;
    }

    /**
     * Constructs an ObjectIdentity is used for grant default permissions
     * if more appropriate permissions are not specified
     *
     * @param ObjectIdentity|string $oidOrExtensionKey Can be ObjectIdentity or string:
     *              ObjectIdentity: The object identity the root identity should be constructed for
     *              string: The ACL extension key
     * @return ObjectIdentity
     */
    public function root($oidOrExtensionKey)
    {
        if ($oidOrExtensionKey instanceof ObjectIdentity) {
            $oidOrExtensionKey = $this->extensionSelector
                ->select($oidOrExtensionKey)
                ->getExtensionKey();
        } else {
            $oidOrExtensionKey = strtolower($oidOrExtensionKey);
        }

        return new ObjectIdentity($oidOrExtensionKey, static::ROOT_IDENTITY_TYPE);
    }

    /**
     * Constructs an underlying ObjectIdentity for given ObjectIdentity
     * Underlying is class level ObjectIdentity for given object level ObjectIdentity.
     *
     * @param ObjectIdentity $oid
     * @throws InvalidAclException
     * @return ObjectIdentity
     */
    public function underlying(ObjectIdentity $oid)
    {
        if ($oid->getIdentifier() === self::ROOT_IDENTITY_TYPE
            || $oid->getIdentifier() === ($extensionKey = $this->extensionSelector->select($oid)->getExtensionKey())
        ) {
            throw new InvalidAclException(sprintf('Cannot get underlying ACL for %s', $oid));
        }

        return new ObjectIdentity($extensionKey, $oid->getType());
    }

    /**
     * Constructs an ObjectIdentity for the given domain object or based on the given descriptor.
     *
     * The descriptor is a string in the following format: "ExtensionKey:Class"
     *
     * Examples:
     *     get($object)
     *     get('Entity:AcmeBundle\SomeClass')
     *     get('Entity:AcmeBundle:SomeEntity')
     *     get('Action:Some Action')
     *
     * @param mixed $val An domain object, object identity descriptor (id:type) or ACL annotation
     * @throws InvalidDomainObjectException
     * @return ObjectIdentity
     */
    public function get($val)
    {
        try {
            $result = $this->extensionSelector
                ->select($val)
                ->getObjectIdentity($val);

            if ($result === null) {
                $objInfo = is_object($val)
                    ? get_class($val)
                    : (string)$val;
                throw new \InvalidArgumentException(sprintf('Cannot create ObjectIdentity for: %s.', $objInfo));
            }
        } catch (\InvalidArgumentException $ex) {
            throw new InvalidDomainObjectException($ex->getMessage(), 0, $ex);
        }

        return $result;
    }
}