<?php

namespace App\Http\Controllers\Admin;

use App\Enumerations\UserRoles;
use App\Enumerations\UserStates;
use App\Events\EditUser as EditUserEvent;
use App\Http\Controllers\Controller;
use App\Http\Requests;
use App\Http\Requests\EditUserRequest;
use App\Models\User;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\Event;
use Illuminate\Support\Facades\Hash;

class EditUser extends Controller
{
    public function getEditUser($id = null)
    {
        // when no user specified, lets assume we want to edit "me"
        if (!$id) {
            $id = Auth::user()->id;
        }

        // @todo add some authorization (e.g. via can/cannot methods)

        // try to find given user
        $user = User::where('status', '!=', User::STATE_DELETED)
                    ->findOrFail($id);

        $states = UserStates::getWithTranslations();
        $roles = UserRoles::getWithTranslations();

        return view('admin.userManagement.edit', [
            'user'   => $user,
            'states' => $states,
            'roles'  => $roles
        ]);
    }

    /**
     * @param EditUserRequest $request
     * @param                 $id
     *
     * @return \Illuminate\Http\RedirectResponse
     */
    public function postEdit(EditUserRequest $request, $id)
    {
        $loggedUser = Auth::user();

        $user = User::findOrFail($id);

        // non-admin user is trying to edit someone else
        if ($loggedUser->role != User::ROLE_ADMIN && $id != $loggedUser->id) {
            return redirect()
                ->back()
                ->with('error', trans('auth.accessDenied'));
        }

        // update username if set
        if (isset($request->username)) {
            $user->username = $request->username;
        }

        // change name (if set)
        if (isset($request->name)) {
            $user->name = $request->name;
        }

        if (isset($request->role)) {
            $user->role = $request->role;
        }

        if (isset($request->status)) {
            $user->status = $request->status;
        }

        if (isset($request->password)) {
            $user->password = Hash::make($request->password);
        }

        $user->email = $request->email;

        $user->save();

        // fire event about editing user
        Event::fire(new EditUserEvent($user));

        return redirect()
            ->route('users.detail', ['id' => $id])
            ->with('success', trans('admin/userManagement.userSuccessfullyEdited'));
    }
}