new file mode 100644

@@ -0,0 +1,29 @@

+<?php

+

+/**

+ * This file is part of contao-weinanlieferung-bundle.

+ *

+ * (c) vonRotenberg

+ *

+ * @license commercial

+ */

+

+use Contao\CoreBundle\DataContainer\PaletteManipulator;

+

+// Extend the default palette

+PaletteManipulator::create()

+    ->addLegend('standort_legend', 'redirect_legend', PaletteManipulator::POSITION_BEFORE)

+    ->addField('standorts', 'standort_legend', PaletteManipulator::POSITION_APPEND)

+    ->applyToPalette('default', 'tl_member_group')

+;

+

+// Add fields to tl_member_group

+$GLOBALS['TL_DCA']['tl_member_group']['fields']['standorts'] = array

+(

+    'label'                   => &$GLOBALS['TL_LANG']['tl_member_group']['standorts'],

+    'exclude'                 => true,

+    'inputType'               => 'checkbox',

+    'foreignKey'              => 'tl_vr_wa_standort.title',

+    'eval'                    => array('multiple'=>true),

+    'sql'                     => "blob NULL"

+);

new file mode 100644

@@ -0,0 +1,15 @@

+<?php

+

+/**

+ * This file is part of contao-weinanlieferung-bundle.

+ *

+ * (c) vonRotenberg

+ *

+ * @license commercial

+ */

+

+// Legends

+$GLOBALS['TL_LANG']['tl_member_group']['standort_legend'] = 'Standort-Berechtigungen';

+

+// Fields

+$GLOBALS['TL_LANG']['tl_member_group']['standorts'] = ['Standorte', 'Wählen Sie die Standorte aus, auf die diese Mitgliedergruppe Zugriff haben soll.'];

@@ -15,8 +15,10 @@ namespace vonRotenberg\WeinanlieferungBundle\Model;

 use Contao\Controller;

 use Contao\Database;

 use Contao\Date;

+use Contao\FrontendUser;

 use Contao\Model;

 use Contao\Model\Registry;

+use Contao\StringUtil;

 use Doctrine\DBAL\Connection;

 class WeinanlieferungSlotsModel extends Model

@@ -27,6 +29,40 @@ class WeinanlieferungSlotsModel extends Model

      */

     protected static $strTable = 'tl_vr_wa_slot';

+    /**

+     * Get allowed standort IDs for the current frontend user

+     * @return array

+     */

+    protected static function getAllowedStandortIds(): array

+    {

+        // If no frontend user is logged in, return empty array

+        if (!FrontendUser::getInstance()->id) {

+            return [];

+        }

+

+        // Get member groups

+        $memberGroups = StringUtil::deserialize(FrontendUser::getInstance()->groups, true);

+        if (empty($memberGroups)) {

+            return [];

+        }

+

+        // Get allowed standorts from member groups

+        $db = Database::getInstance();

+        $allowedStandorts = [];

+

+        foreach ($memberGroups as $groupId) {

+            $group = $db->prepare("SELECT standorts FROM tl_member_group WHERE id=?")

+                        ->execute($groupId);

+

+            if ($group->standorts) {

+                $groupStandorts = StringUtil::deserialize($group->standorts, true);

+                $allowedStandorts = array_merge($allowedStandorts, $groupStandorts);

+            }

+        }

+

+        return array_unique($allowedStandorts);

+    }

+

     public static function findPublishedById($intId, array $arrOptions=array())

     {

         $time = time();

@@ -39,6 +75,12 @@ class WeinanlieferungSlotsModel extends Model

         $arrColumns[] = "($t.buchbar_ab<=$time OR $t.buchbar_ab = 0 OR $t.buchbar_ab IS NULL) AND $t.buchbar_bis>$time";

+        // Check standort permissions

+        $allowedStandortIds = static::getAllowedStandortIds();

+        if (!empty($allowedStandortIds)) {

+            $arrColumns[] = "$t.pid IN (" . implode(',', $allowedStandortIds) . ")";

+        }

+

         if (!isset($arrOptions['order']))

         {

             $arrOptions['order'] = "$t.time ASC";

@@ -59,6 +101,12 @@ class WeinanlieferungSlotsModel extends Model

         $arrColumns[] = "($t.buchbar_ab<=$time OR $t.buchbar_ab = 0 OR $t.buchbar_ab IS NULL) AND $t.buchbar_bis>$time";

+        // Check standort permissions

+        $allowedStandortIds = static::getAllowedStandortIds();

+        if (!empty($allowedStandortIds) && !in_array($intPid, $allowedStandortIds)) {

+            return null; // Return null if the requested standort is not allowed

+        }

+

         if (!isset($arrOptions['order']))

         {

             $arrOptions['order'] = "$t.time ASC";

@@ -83,6 +131,17 @@ class WeinanlieferungSlotsModel extends Model

             return null;

         }

+        // Check standort permissions

+        $allowedStandortIds = static::getAllowedStandortIds();

+        if (!empty($allowedStandortIds)) {

+            // Filter the provided PIDs by the allowed standort IDs

+            $arrPids = array_intersect($arrPids, $allowedStandortIds);

+

+            if (empty($arrPids)) {

+                return null; // Return null if none of the requested standorts are allowed

+            }

+        }

+

         $time = time();

         $t = static::$strTable;

         $arrColumns = array("$t.pid IN (".implode(',',$arrPids).")");

@@ -112,12 +171,21 @@ class WeinanlieferungSlotsModel extends Model

         $t = static::$strTable;

         $time = Date::floorToMinute();

+        // Check standort permissions

+        $allowedStandortIds = static::getAllowedStandortIds();

+        $arrColumns = array("$t.time >= ?", "$t.tstamp!=0", "$t.published='1' AND ($t.buchbar_ab<=$time OR $t.buchbar_ab = 0 OR $t.buchbar_ab IS NULL) AND $t.buchbar_bis > ?");

+        $arrValues = [$time, $time, $time];

+

+        if (!empty($allowedStandortIds)) {

+            $arrColumns[] = "$t.pid IN (" . implode(',', $allowedStandortIds) . ")";

+        }

+

         if (!isset($arrOptions['order']))

         {

             $arrOptions['order'] = "$t.time ASC";

         }

-        return static::findBy(array("$t.time >= ?","$t.tstamp!=0","$t.published='1' AND ($t.buchbar_ab<=$time OR $t.buchbar_ab = 0 OR $t.buchbar_ab IS NULL) AND $t.buchbar_bis > ?"), [$time,$time,$time], $arrOptions);

+        return static::findBy($arrColumns, $arrValues, $arrOptions);

     }

     public function getAvailableBehaelter(bool $inclOvercapacity = false, ?int $intOffset=null)