Add an isAdmin property for principals (1/2)

src/Controller/AdminController.php

@@ -79,12 +79,14 @@ class AdminController extends AbstractController
 
         $form->get('displayName')->setData($principal->getDisplayName());
         $form->get('email')->setData($principal->getEmail());
+        $form->get('isAdmin')->setData($principal->getIsAdmin());
 
         $form->handleRequest($request);
 
         if ($form->isSubmitted() && $form->isValid()) {
             $displayName = $form->get('displayName')->getData();
             $email = $form->get('email')->getData();
+            $isAdmin = $form->get('isAdmin')->getData();
 
             // Create password for user
             if ($username && is_null($user->getPassword())) {
@@ -131,7 +133,8 @@ class AdminController extends AbstractController
             }
 
             $principal->setDisplayName($displayName)
-                      ->setEmail($email);
+                      ->setEmail($email)
+                      ->setIsAdmin($isAdmin);
 
             $entityManager->persist($user);
             $entityManager->flush();

src/Entity/Principal.php

@@ -54,6 +54,12 @@ class Principal
      */
     private $isMain;
 
+    /**
+     * @ORM\Column(type="boolean")
+     * @Assert\NotBlank
+     */
+    private $isAdmin;
+
     /**
      * @ORM\ManyToMany(targetEntity="Principal")
      * @ORM\JoinTable(
@@ -73,6 +79,7 @@ class Principal
     {
         $this->delegees = new ArrayCollection();
         $this->isMain = true;
+        $this->isAdmin = false;
     }
 
     public function getId(): ?int
@@ -173,4 +180,16 @@ class Principal
 
         return $this;
     }
+
+    public function getIsAdmin(): ?bool
+    {
+        return $this->isAdmin;
+    }
+
+    public function setIsAdmin(bool $isAdmin): self
+    {
+        $this->isAdmin = $isAdmin;
+
+        return $this;
+    }
 }

src/Form/UserType.php

@@ -4,6 +4,7 @@ namespace App\Form;
 
 use App\Entity\User;
 use Symfony\Component\Form\AbstractType;
+use Symfony\Component\Form\Extension\Core\Type\CheckboxType;
 use Symfony\Component\Form\Extension\Core\Type\EmailType;
 use Symfony\Component\Form\Extension\Core\Type\PasswordType;
 use Symfony\Component\Form\Extension\Core\Type\RepeatedType;
@@ -38,6 +39,12 @@ class UserType extends AbstractType
                 'first_options' => ['label' => 'form.password'],
                 'second_options' => ['label' => 'form.password.repeat'],
             ])
+            ->add('isAdmin', CheckboxType::class, [
+                'label' => 'form.admin',
+                'help' => 'form.admin.help',
+                'required' => false,
+                'mapped' => false,
+            ])
             ->add('save', SubmitType::class, [
                 'label' => 'save',
             ]);

templates/users/index.html.twig

@@ -19,7 +19,7 @@
             </div>
         </div>
         <p class="mb-1">{{ "users.username"|trans }} : <code>{{ principal.username }}</code></p>
-        <small>{{ "users.uri"|trans }} : <code>{{ principal.uri }}</code></small>
+        <small>{{ "users.uri"|trans }} : <code>{{ principal.uri }}</code>{% if principal.isAdmin %} — <span class="badge badge-primary">{{ "users.administrator"|trans }}</span>{% endif %}</small>
         <div class="btn-group btn-group-sm mt-3 d-flex d-lg-none" role="group">
             <a href="{{ path('calendars',{username: principal.username}) }}" class="btn btn-outline-secondary flex-fill w-100"><span class="d-none d-sm-inline">🗓&nbsp;</span>{{ "users.calendars"|trans }}</a>
             <a href="{{ path('address_books',{username: principal.username})}}" class="btn btn-outline-secondary flex-fill w-100"><span class="d-none d-sm-inline">📖&nbsp;</span>{{ "users.addressbooks"|trans }}</a>

translations/messages+intl-icu.en.xlf

@@ -177,6 +177,10 @@
         <source>users.uri</source>
         <target>Principal URI</target>
       </trans-unit>
+      <trans-unit id="Xq.ID4c" resname="users.administrator">
+        <source>users.administrator</source>
+        <target>Administrator</target>
+      </trans-unit>
       <trans-unit id="rzn9R3M" resname="users.calendars">
         <source>users.calendars</source>
         <target>Calendars</target>
@@ -253,6 +257,14 @@
         <source>form.email</source>
         <target>Email</target>
       </trans-unit>
+      <trans-unit id="_YeuWGA" resname="form.admin">
+        <source>form.admin</source>
+        <target>Is this user an administrator ?</target>
+      </trans-unit>
+      <trans-unit id="hIz1KP1" resname="form.admin.help">
+        <source>form.admin.help</source>
+        <target>If checked, this user (namely, its principal) will be injected in every single ACL rule with the '{DAV:}all' privileges.</target>
+      </trans-unit>
       <trans-unit id="k660.eC" resname="form.displayName">
         <source>form.displayName</source>
         <target>Display name</target>