vendor/uvdesk/support-center-bundle/Controller/Ticket.php line 76

Open in your IDE?
  1. <?php
  3. namespace Webkul\UVDesk\SupportCenterBundle\Controller;
  5. use Symfony\Component\HttpFoundation\Request;
  6. use Symfony\Component\HttpFoundation\Response;
  7. use Symfony\Component\EventDispatcher\GenericEvent;
  8. use Symfony\Component\Validator\Constraints\DateTime;
  9. use Symfony\Component\Security\Core\User\UserInterface;
  10. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  11. use Webkul\UVDesk\SupportCenterBundle\Form\Ticket as TicketForm;
  12. use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
  13. use Webkul\UVDesk\CoreFrameworkBundle\Workflow\Events as CoreWorkflowEvents;
  14. use Symfony\Component\EventDispatcher\EventDispatcherInterface;
  15. use Webkul\UVDesk\CoreFrameworkBundle\Services\UserService;
  16. use Webkul\UVDesk\CoreFrameworkBundle\Services\UVDeskService;
  17. use Webkul\UVDesk\CoreFrameworkBundle\Services\TicketService;
  18. use Webkul\UVDesk\CoreFrameworkBundle\Services\CustomFieldsService;
  19. use Webkul\UVDesk\CoreFrameworkBundle\FileSystem\FileSystem;
  20. use Symfony\Contracts\Translation\TranslatorInterface;
  21. use Webkul\UVDesk\CoreFrameworkBundle\Services\ReCaptchaService;
  22. use Symfony\Component\DependencyInjection\ContainerInterface;
  23. use Symfony\Component\HttpKernel\KernelInterface;
  24. use Webkul\UVDesk\SupportCenterBundle\Entity as SupportEntites;
  25. use Webkul\UVDesk\CoreFrameworkBundle\Entity as CoreEntites;
  28. class Ticket extends AbstractController
  29. {
  30.     private $userService;
  31.     private $eventDispatcher;
  32.     private $translator;
  33.     private $uvdeskService;
  34.     private $ticketService;
  35.     private $CustomFieldsService;
  36.     private $recaptchaService;
  37.     private $kernel;
  39.     public function __construct(UserService $userService, UVDeskService $uvdeskService,EventDispatcherInterface $eventDispatcher, TranslatorInterface $translator, TicketService $ticketService, CustomFieldsService $CustomFieldsService, ReCaptchaService $recaptchaService, KernelInterface $kernel)
  40.     {
  41.         $this->userService = $userService;
  42.         $this->eventDispatcher = $eventDispatcher;
  43.         $this->translator = $translator;
  44.         $this->uvdeskService = $uvdeskService;
  45.         $this->ticketService = $ticketService;
  46.         $this->CustomFieldsService = $CustomFieldsService;
  47.         $this->recaptchaService = $recaptchaService;
  48.         $this->kernel = $kernel;
  49.     }
  51.     protected function isWebsiteActive()
  52.     {
  53.         $entityManager = $this->getDoctrine()->getManager();
  54.         $website = $entityManager->getRepository(CoreEntites\Website::class)->findOneByCode('knowledgebase');
  56.         if (!empty($website)) {
  57.             $knowledgebaseWebsite = $entityManager->getRepository(SupportEntites\KnowledgebaseWebsite::class)->findOneBy(['website' => $website->getId(), 'status' => 1]);
  58.             
  59.             if (!empty($knowledgebaseWebsite) && true == $knowledgebaseWebsite->getIsActive()) {
  60.                 return true;
  61.             }
  62.         }
  64.         $this->noResultFound();
  65.     }
  67.     /**
  68.      * If customer is playing with url and no result is found then what will happen
  69.      * @return
  70.      */
  71.     protected function noResultFound()
  72.     {
  73.         throw new NotFoundHttpException('Not found !');
  74.     }
  76.     public function ticketadd(Request $request, ContainerInterface $container)
  77.     {
  78.         $this->isWebsiteActive();
  79.         
  80.         $formErrors = $errors = array();
  81.         $em = $this->getDoctrine()->getManager();
  82.         $website = $em->getRepository(CoreEntites\Website::class)->findOneByCode('knowledgebase');
  83.         $websiteConfiguration = $this->uvdeskService->getActiveConfiguration($website->getId());
  85.         if (!$websiteConfiguration || !$websiteConfiguration->getTicketCreateOption() || ($websiteConfiguration->getLoginRequiredToCreate() && !$this->getUser())) {
  86.             return $this->redirect($this->generateUrl('helpdesk_knowledgebase'));
  87.         }
  89.         $post = $request->request->all();
  90.         $recaptchaDetails = $this->recaptchaService->getRecaptchaDetails();
  92.         if($request->getMethod() == "POST") {
  93.             if ($recaptchaDetails && $recaptchaDetails->getIsActive() == true && $this->recaptchaService->getReCaptchaResponse($request->request->get('g-recaptcha-response'))
  94.             ) {
  95.                 $this->addFlash('warning', $this->translator->trans("Warning ! Please select correct CAPTCHA !"));
  96.             } else {
  97.                 if($_POST) {
  98.                     $error = false;
  99.                     $message = '';
  100.                     $ticketType = $em->getRepository(CoreEntites\TicketType::class)->find($request->request->get('type'));
  101.                     
  102.                     if($request->files->get('customFields') && !$this->CustomFieldsService->validateAttachmentsSize($request->files->get('customFields'))) {
  103.                         $error = true;
  104.                         $this->addFlash(
  105.                                 'warning',
  106.                                 $this->translator->trans("Warning ! Files size can not exceed %size% MB", [
  107.                                     '%size%' => $this->getParameter('max_upload_size')
  108.                                 ])
  109.                             );
  110.                     }
  111.     
  112.                     $ticket = new CoreEntites\Ticket();
  113.                     $loggedUser = $this->get('security.token_storage')->getToken()->getUser();
  114.                     
  115.                     if(!empty($loggedUser) && $loggedUser != 'anon.') {
  116.                         
  117.                         $form = $this->createForm(TicketForm::class, $ticket, [
  118.                             'container' => $container,
  119.                             'entity_manager' => $em,
  120.                         ]);
  121.                         $email = $loggedUser->getEmail();
  122.                         try {
  123.                             $name = $loggedUser->getFirstName() . ' ' . $loggedUser->getLastName();
  124.                         } catch(\Exception $e) {
  125.                             $name = explode(' ', strstr($email, '@', true));
  126.                         }
  127.                     } else {
  128.                         $form = $this->createForm(TicketForm::class, $ticket, [
  129.                             'container' => $container,
  130.                             'entity_manager' => $em,
  131.                         ]);
  132.                         $email = $request->request->get('from');
  133.                         $name = explode(' ', $request->request->get('name'));
  134.                     }
  135.     
  136.                     $website = $em->getRepository(CoreEntites\Website::class)->findOneByCode('knowledgebase');
  137.                     if(!empty($email) && $this->ticketService->isEmailBlocked($email, $website)) {
  138.                         $request->getSession()->getFlashBag()->set('warning', $this->translator->trans('Warning ! Cannot create ticket, given email is blocked by admin.'));
  139.                         return $this->redirect($this->generateUrl('helpdesk_customer_create_ticket'));
  140.                     }
  141.     
  142.                     if($request->request->all())
  143.                         $form->submit($request->request->all());
  144.     
  145.                     if ($form->isValid() && !count($formErrors) && !$error) {
  146.                         $data = array(
  147.                             'from' => $email, //email$request->getSession()->getFlashBag()->set('success', $this->translator->trans('Success ! Ticket has been created successfully.'));
  148.                             'subject' => $request->request->get('subject'),
  149.                             // @TODO: We need to filter js (XSS) instead of html
  150.                             'reply' => str_replace(['&lt;script&gt;', '&lt;/script&gt;'], '', htmlspecialchars($request->request->get('reply'))),
  151.                             'firstName' => $name[0],
  152.                             'lastName' => isset($name[1]) ? $name[1] : '',
  153.                             'role' => 4,
  154.                             'active' => true
  155.                         );
  156.     
  157.                         $em = $this->getDoctrine()->getManager();
  158.                         $data['type'] = $em->getRepository(CoreEntites\TicketType::class)->find($request->request->get('type'));
  159.     
  160.                         if(!is_object($data['customer'] = $this->container->get('security.token_storage')->getToken()->getUser()) == "anon.") {
  161.                             $supportRole = $em->getRepository(CoreEntites\SupportRole::class)->findOneByCode("ROLE_CUSTOMER");
  162.     
  163.                             $customerEmail = $params['email'] = $request->request->get('from');
  164.                             $customer = $em->getRepository(CoreEntites\User::class)->findOneBy(array('email' => $customerEmail));
  165.                             $params['flag'] = (!$customer) ? 1 : 0;
  166.     
  167.                             $data['firstName'] = current($nameDetails = explode(' ', $request->request->get('name')));
  168.                             $data['fullname'] = $request->request->get('name');
  169.                             $data['lastName'] = ($data['firstName'] != end($nameDetails)) ? end($nameDetails) : " ";
  170.                             $data['from'] = $customerEmail;
  171.                             $data['role'] = 4;
  172.                             $data['customer'] = $this->userService->createUserInstance($customerEmail, $data['fullname'], $supportRole, $extras = ["active" => true]);
  173.                         } else {
  174.                             $userDetail = $em->getRepository(CoreEntites\User::class)->find($data['customer']->getId());
  175.                             $data['email'] = $customerEmail = $data['customer']->getEmail();
  176.                             $nameCollection = [$userDetail->getFirstName(), $userDetail->getLastName()];
  177.                             $name = implode(' ', $nameCollection);
  178.                             $data['fullname'] = $name;
  179.                         }
  180.                         $data['user'] = $data['customer'];
  181.                         $data['subject'] = $request->request->get('subject');
  182.                         $data['source'] = 'website';
  183.                         $data['threadType'] = 'create';
  184.                         $data['message'] = $data['reply'];
  185.                         $data['createdBy'] = 'customer';
  186.                         $data['attachments'] = $request->files->get('attachments');
  187.     
  188.                         if(!empty($request->server->get("HTTP_CF_CONNECTING_IP") )) {
  189.                             $data['ipAddress'] = $request->server->get("HTTP_CF_CONNECTING_IP");
  190.                             if(!empty($request->server->get("HTTP_CF_IPCOUNTRY"))) {
  191.                                 $data['ipAddress'] .= '(' . $request->server->get("HTTP_CF_IPCOUNTRY") . ')';
  192.                             }
  193.                         }
  194.     
  195.                         $thread = $this->ticketService->createTicketBase($data);
  196.                         
  197.                         if (!empty($thread)) {
  198.                             $ticket = $thread->getTicket();
  199.                             if($request->request->get('customFields') || $request->files->get('customFields')) {
  200.                                 $this->ticketService->addTicketCustomFields($thread, $request->request->get('customFields'), $request->files->get('customFields'));                        
  201.                             }
  202.                             $this->addFlash('success', $this->translator->trans('Success ! Ticket has been created successfully.'));
  203.                         } else {
  204.                             $this->addFlash('warning', $this->translator->trans('Warning ! Can not create ticket, invalid details.'));
  205.                         }
  206.                         // Trigger ticket created event
  207.                         $event = new GenericEvent(CoreWorkflowEvents\Ticket\Create::getId(), [
  208.                             'entity' => $thread->getTicket(),
  209.                         ]);
  210.     
  211.                         $this->eventDispatcher->dispatch($event, 'uvdesk.automation.workflow.execute');
  212.     
  213.                         if(null != $this->getUser()) {
  214.                             return $this->redirect($this->generateUrl('helpdesk_customer_ticket_collection'));
  215.                         } else {
  216.                             return $this->redirect($this->generateUrl('helpdesk_knowledgebase'));
  217.                         }
  218.                         
  219.                     } else {
  220.                         $errors = $this->getFormErrors($form);
  221.                         $errors = array_merge($errors, $formErrors);
  222.                     }
  223.                 } else {
  224.                     $this->addFlash(
  225.                         'warning',
  226.                         $this->translator->trans("Warning ! Post size can not exceed 25MB")
  227.                     );
  228.                 }
  229.     
  230.                 if(isset($errors) && count($errors)) {
  231.                     $this->addFlash('warning', key($errors) . ': ' . reset($errors));
  232.                 }
  233.             }
  234.         }
  236.         $breadcrumbs = [
  237.             [
  238.                 'label' => $this->translator->trans('Support Center'),
  239.                 'url' => $this->generateUrl('helpdesk_knowledgebase')
  240.             ],
  241.             [
  242.                 'label' => $this->translator->trans("Create Ticket Request"),
  243.                 'url' => '#'
  244.             ],
  245.         ];
  247.         return $this->render('@UVDeskSupportCenter/Knowledgebase/ticket.html.twig',
  248.             array(
  249.                 'formErrors' => $formErrors,
  250.                 'errors' => json_encode($errors),
  251.                 'customFieldsValues' => $request->request->get('customFields'),
  252.                 'breadcrumbs' => $breadcrumbs,
  253.                 'post' => $post
  254.             )
  255.         );
  256.     }
  258.     public function ticketList(Request $request)
  259.     {
  260.         $em = $this->getDoctrine()->getManager();
  261.         $ticketRepo = $em->getRepository(CoreEntites\Ticket::class);
  263.         $currentUser = $this->get('security.token_storage')->getToken()->getUser();
  264.         if(!$currentUser || $currentUser == "anon.") {
  265.             //throw error
  266.         }
  267.         
  268.         $tickets = $ticketRepo->getAllCustomerTickets($currentUser);
  269.         
  270.         return $this->render('@UVDeskSupportCenter/Knowledgebase/ticketList.html.twig', array(
  271.             'ticketList' => $tickets,
  272.         ));
  273.     }
  275.     public function saveReply(int $id, Request $request)
  276.     {
  277.         $this->isWebsiteActive();
  278.         $data = $request->request->all();
  279.         $ticket = $this->getDoctrine()->getRepository(CoreEntites\Ticket::class)->find($id);
  280.         $user = $this->userService->getSessionUser();
  282.         // process only if access for the resource.
  283.         if (empty($ticket) || ( (!empty($user)) && $user->getId() != $ticket->getCustomer()->getId()) ) {
  284.             if(!$this->isCollaborator($ticket, $user)) {
  285.                 throw new \Exception('Access Denied', 403);
  286.             }
  287.         }
  289.         if($_POST) {
  290.             if(str_replace(' ','',str_replace('&nbsp;','',trim(strip_tags($data['message'], '<img>')))) != "") {
  291.                 if(!$ticket)
  292.                     $this->noResultFound();
  293.                 $data['ticket'] = $ticket;
  294.                 $data['user'] = $this->userService->getCurrentUser();
  296.                 // Checking if reply is from collaborator end
  297.                 $isTicketCollaborator = $ticket->getCollaborators() ? $ticket->getCollaborators()->toArray() : [];
  298.                 $isCollaborator = false;
  299.                 foreach ($isTicketCollaborator as $value) {
  300.                     if($value->getId() == $data['user']->getId()){
  301.                         $isCollaborator = true;
  302.                     }
  303.                 }
  305.                 // @TODO: Refactor -> Why are we filtering only these two characters?
  306.                 $data['message'] = str_replace(['&lt;script&gt;', '&lt;/script&gt;'], '', htmlspecialchars($data['message']));
  308.                 $userDetail = $this->userService->getCustomerPartialDetailById($data['user']->getId());
  309.                 $data['fullname'] = $userDetail['name'];
  310.                 $data['source'] = 'website';
  311.                 $data['createdBy'] = $isCollaborator ? 'collaborator' : 'customer';
  312.                 $data['attachments'] = $request->files->get('attachments');
  313.                 $thread = $this->ticketService->createThread($ticket, $data);
  315.                 $em = $this->getDoctrine()->getManager();
  316.                 $status = $em->getRepository(CoreEntites\TicketStatus::class)->findOneByCode($data['status']);
  317.                 if($status) {
  318.                     $flag = 0;
  319.                     if($ticket->getStatus() != $status) {
  320.                         $flag = 1;
  321.                     }
  323.                     $ticket->setStatus($status);
  324.                     $em->persist($ticket);
  325.                     $em->flush();
  326.                 }
  328.                 if ($thread->getcreatedBy() == 'customer') {
  329.                     $event = new GenericEvent(CoreWorkflowEvents\Ticket\CustomerReply::getId(), [
  330.                         'entity' =>  $ticket,
  331.                         'thread' =>  $thread
  332.                     ]);
  333.                 } else {
  334.                     $event = new GenericEvent(CoreWorkflowEvents\Ticket\CollaboratorReply::getId(), [
  335.                         'entity' =>  $ticket,
  336.                         'thread' =>  $thread
  337.                     ]);
  338.                 }
  340.                 $this->eventDispatcher->dispatch($event, 'uvdesk.automation.workflow.execute');
  342.                 $this->addFlash('success', $this->translator->trans('Success ! Reply added successfully.'));
  343.             } else {
  344.                 $this->addFlash('warning', $this->translator->trans('Warning ! Reply field can not be blank.'));
  345.             }
  346.         } else {
  347.             $this->addFlash('warning', $this->translator->trans('Warning ! Post size can not exceed 25MB'));
  348.         }
  350.         return $this->redirect($this->generateUrl('helpdesk_customer_ticket',array(
  351.             'id' => $ticket->getId()
  352.         )));
  353.     }
  355.     public function tickets(Request $request)
  356.     {
  357.         $this->isWebsiteActive();
  359.         // List Announcement if any
  360.         $announcements =  $this->getDoctrine()->getRepository(SupportEntites\Announcement::class)->findBy(['isActive' => 1]);
  362.         $groupAnnouncement = [];
  363.         foreach($announcements as $announcement) {
  364.             $announcementGroupId = $announcement->getGroup();
  365.             $isTicketExist =  $this->getDoctrine()->getRepository(CoreEntites\Ticket::class)->findBy(['supportGroup' => $announcementGroupId, 'customer' => $this->userService->getCurrentUser()]);
  367.             if (!empty($isTicketExist)) {
  368.                 $groupAnnouncement[] = $announcement;
  369.             }
  370.         }
  372.         return $this->render('@UVDeskSupportCenter/Knowledgebase/ticketList.html.twig',
  373.             array(
  374.                 'searchDisable' => true,
  375.                 'groupAnnouncement' => $groupAnnouncement
  376.             )
  377.         );
  378.     }
  380.     /**
  381.      * ticketListXhrAction "Filter and sort ticket collection on ajax request"
  382.      * @param Object $request "HTTP Request object"
  383.      * @return JSON "JSON response"
  384.      */
  385.     public function ticketListXhr(Request $request, ContainerInterface $container)
  386.     {
  387.         $this->isWebsiteActive();
  389.         $json = array();
  390.         if($request->isXmlHttpRequest()) {
  391.             $repository = $this->getDoctrine()->getRepository(CoreEntites\Ticket::class);
  392.     
  393.             $json = $repository->getAllCustomerTickets($request->query, $container);
  394.         }
  396.         $response = new Response(json_encode($json));
  397.         $response->headers->set('Content-Type', 'application/json');
  399.         return $response;
  400.     }
  402.     /**
  403.      * threadListXhrAction "Filter and sort user collection on ajx request"
  404.      * @param Object $request "HTTP Request object"
  405.      * @return JSON "JSON response"
  406.      */
  407.     public function threadListXhr(Request $request, ContainerInterface $container)
  408.     {
  409.         $this->isWebsiteActive();
  411.         $json = array();
  412.         if($request->isXmlHttpRequest()) {
  413.             $ticket = $this->getDoctrine()->getRepository(CoreEntites\Ticket::class)->find($request->attributes->get('id'));
  414.             // $this->denyAccessUnlessGranted('FRONT_VIEW', $ticket);
  416.             $repository = $this->getDoctrine()->getRepository(CoreEntites\Thread::class);
  417.             $json = $repository->getAllCustomerThreads($request->attributes->get('id'),$request->query, $container);
  418.         }
  420.         $response = new Response(json_encode($json));
  421.         $response->headers->set('Content-Type', 'application/json');
  422.         return $response;
  423.     }
  425.     public function ticketView($id, Request $request)
  426.     {
  427.         $this->isWebsiteActive();
  429.         $entityManager = $this->getDoctrine()->getManager();
  430.         $user = $this->userService->getSessionUser();
  431.         $ticket = $entityManager->getRepository(CoreEntites\Ticket::class)->findOneBy(['id' => $id]);
  432.         $isConfirmColl = false;
  434.         if ($ticket == null && empty($ticket)) {
  435.             throw new NotFoundHttpException('Page Not Found!');
  436.         }
  438.         if (!empty($ticket) && ( (!empty($user)) && $user->getId() != $ticket->getCustomer()->getId()) ) {
  439.             if($this->isCollaborator($ticket, $user)) {
  440.                 $isConfirmColl = true;
  441.             }
  442.             if ($isConfirmColl != true) {
  443.                 throw new \Exception('Access Denied', 403);
  444.             } 
  445.         }
  447.         if (!empty($user) && $user->getId() == $ticket->getCustomer()->getId()) {
  448.             $ticket->setIsCustomerViewed(1);
  450.             $entityManager->persist($ticket);
  451.             $entityManager->flush();
  452.         }
  454.         $checkTicket = $entityManager->getRepository(CoreEntites\Ticket::class)->isTicketCollaborator($ticket, $user->getEmail());
  455.         
  456.         $twigResponse = [
  457.             'ticket' => $ticket,
  458.             'searchDisable' => true,
  459.             'initialThread' => $this->ticketService->getTicketInitialThreadDetails($ticket),
  460.             'localizedCreateAtTime' => $this->userService->getLocalizedFormattedTime($ticket->getCreatedAt(), $user),
  461.             'isCollaborator' => $checkTicket,
  462.         ];
  464.         return $this->render('@UVDeskSupportCenter/Knowledgebase/ticketView.html.twig', $twigResponse);
  465.     }
  467.     // Check if user is collaborator for the ticket
  468.     public function isCollaborator($ticket, $user) {
  469.         $isCollaborator = false;
  470.         if(!empty($ticket->getCollaborators()->toArray())) {
  471.             foreach($ticket->getCollaborators()->toArray() as $collaborator) {
  472.                 if($collaborator->getId() == $user->getId()) {
  473.                     $isCollaborator = true;
  474.                 }
  475.             }
  476.         }
  477.         return $isCollaborator;
  478.     }
  480.     // Ticket rating
  481.     public function rateTicket(Request $request) {
  483.         $this->isWebsiteActive();
  484.         $json = array();
  485.         $em = $this->getDoctrine()->getManager();
  486.         $data = json_decode($request->getContent(), true);
  487.         $id = $data['id'];
  488.         $count = intval($data['rating']);
  489.         
  490.         if($count > 0 || $count < 6) {
  491.             $ticket = $em->getRepository(CoreEntites\Ticket::class)->find($id);
  492.             $customer = $this->userService->getCurrentUser();
  493.             $rating = $em->getRepository(CoreEntites\TicketRating::class)->findOneBy(array('ticket' => $id,'customer'=>$customer->getId()));
  494.             if($rating) {
  495.                 $rating->setcreatedAt(new \DateTime);
  496.                 $rating->setStars($count);
  497.                 $em->persist($rating);
  498.                 $em->flush();
  499.             } else {
  500.                 $rating = new CoreEntites\TicketRating();
  501.                 $rating->setStars($count);
  502.                 $rating->setCustomer($customer);
  503.                 $rating->setTicket($ticket);
  504.                 $em->persist($rating);
  505.                 $em->flush();
  506.             }
  507.             $json['alertClass'] = 'success';
  508.             $json['alertMessage'] = $this->translator->trans('Success ! Rating has been successfully added.');
  509.         } else {
  510.             $json['alertClass'] = 'danger';
  511.             $json['alertMessage'] = $this->translator->trans('Warning ! Invalid rating.');
  512.         }
  514.         $response = new Response(json_encode($json));
  515.         $response->headers->set('Content-Type', 'application/json');
  516.         return $response;
  517.     }
  519.     public function downloadAttachmentZip(Request $request)
  520.     {
  521.         $threadId = $request->attributes->get('threadId');
  522.         $attachmentRepository = $this->getDoctrine()->getManager()->getRepository(CoreEntites\Attachment::class);
  523.         $threadRepository = $this->getDoctrine()->getManager()->getRepository(CoreEntites\Thread::class);
  525.         $thread = $threadRepository->findOneById($threadId);
  527.         $attachment = $attachmentRepository->findByThread($threadId);
  529.         if (!$attachment) {
  530.             $this->noResultFound();
  531.         }
  533.         $ticket = $thread->getTicket();
  534.         $user = $this->userService->getSessionUser();
  535.         
  536.         // process only if access for the resource.
  537.         if (empty($ticket) || ( (!empty($user)) && $user->getId() != $ticket->getCustomer()->getId()) ) {
  538.             if(!$this->isCollaborator($ticket, $user)) {
  539.                 throw new \Exception('Access Denied', 403);
  540.             }
  541.         }
  543.         $zipname = 'attachments/' .$threadId.'.zip';
  544.         $zip = new \ZipArchive;
  546.         $zip->open($zipname, \ZipArchive::CREATE);
  547.         if(count($attachment)){
  548.             foreach ($attachment as $attach) {
  549.                 $zip->addFile(substr($attach->getPath(), 1)); 
  550.             }
  551.         }
  552.         $zip->close();
  554.         $response = new Response();
  555.         $response->setStatusCode(200);
  556.         $response->headers->set('Content-type', 'application/zip');
  557.         $response->headers->set('Content-Disposition', 'attachment; filename=' . $threadId . '.zip');
  558.         $response->sendHeaders();
  559.         $response->setContent(readfile($zipname));
  561.         return $response;
  562.     }
  564.     public function downloadAttachment(Request $request)
  565.     {
  566.         $attachmendId = $request->attributes->get('attachmendId');
  567.         $attachmentRepository = $this->getDoctrine()->getManager()->getRepository(CoreEntites\Attachment::class);
  568.         $attachment = $attachmentRepository->findOneById($attachmendId);
  569.         $baseurl = $request->getScheme() . '://' . $request->getHttpHost() . $request->getBasePath();
  571.         if (!$attachment) {
  572.             $this->noResultFound();
  573.         }
  575.         $ticket = $attachment->getThread()->getTicket();
  576.         $user = $this->userService->getSessionUser();
  577.         
  578.         // process only if access for the resource.
  579.         if (empty($ticket) || ( (!empty($user)) && $user->getId() != $ticket->getCustomer()->getId()) ) {
  580.             if(!$this->isCollaborator($ticket, $user)) {
  581.                 throw new \Exception('Access Denied', 403);
  582.             }
  583.         }
  585.         $path = $this->kernel->getProjectDir() . "/public/". $attachment->getPath();
  587.         $response = new Response();
  588.         $response->setStatusCode(200);
  589.         
  590.         $response->headers->set('Content-type', $attachment->getContentType());
  591.         $response->headers->set('Content-Disposition', 'attachment; filename='. $attachment->getName());
  592.         $response->headers->set('Content-Length', $attachment->getSize());
  593.         $response->sendHeaders();
  594.         $response->setContent(readfile($path));
  595.         
  596.         return $response;
  597.     }
  598.     
  599.     public function ticketCollaboratorXhr(Request $request)
  600.     {
  601.         $json = array();
  602.         $content = json_decode($request->getContent(), true);
  603.         $em = $this->getDoctrine()->getManager();
  604.         $ticket = $em->getRepository(CoreEntites\Ticket::class)->find($content['ticketId']);
  605.         $user = $this->userService->getSessionUser();
  606.         
  607.         // process only if access for the resource.
  608.         if (empty($ticket) || ( (!empty($user)) && $user->getId() != $ticket->getCustomer()->getId()) ) {
  609.             if(!$this->isCollaborator($ticket, $user)) {
  610.                 throw new \Exception('Access Denied', 403);
  611.             }
  612.         }
  613.         
  614.         if ($request->getMethod() == "POST") {
  615.             if ($content['email'] == $ticket->getCustomer()->getEmail()) {
  616.                 $json['alertClass'] = 'danger';
  617.                 $json['alertMessage'] = $this->translator->trans('Error ! Can not add customer as a collaborator.');
  618.             } else {
  619.                 $data = array(
  620.                     'from' => $content['email'],
  621.                     'firstName' => ($firstName = ucfirst(current(explode('@', $content['email'])))),
  622.                     'lastName' => ' ',
  623.                     'role' => 4,
  624.                 );
  626.                 $supportRole = $em->getRepository(CoreEntites\SupportRole::class)->findOneByCode('ROLE_CUSTOMER');
  627.                 $collaborator = $this->userService->createUserInstance($data['from'], $data['firstName'], $supportRole, $extras = ["active" => true]);
  628.                 
  629.                 $checkTicket = $em->getRepository(CoreEntites\Ticket::class)->isTicketCollaborator($ticket,$content['email']);
  630.                 
  631.                 if (!$checkTicket) {
  632.                     $ticket->addCollaborator($collaborator);
  633.                     $em->persist($ticket);
  634.                     $em->flush();
  636.                     $ticket->lastCollaborator = $collaborator;
  638.                     $collaborator = $em->getRepository(CoreEntites\User::class)->find($collaborator->getId());
  639.                     
  640.                     $event = new GenericEvent(CoreWorkflowEvents\Ticket\Collaborator::getId(), [
  641.                         'entity' => $ticket,
  642.                     ]);
  644.                     $this->eventDispatcher->dispatch($event, 'uvdesk.automation.workflow.execute');
  645.                    
  646.                     $json['collaborator'] =  $this->userService->getCustomerPartialDetailById($collaborator->getId());
  647.                     $json['alertClass'] = 'success';
  648.                     $json['alertMessage'] = $this->translator->trans('Success ! Collaborator added successfully.');
  649.                 } else {
  650.                     $json['alertClass'] = 'danger';
  651.                     $json['alertMessage'] = $this->translator->trans('Error ! Collaborator is already added.');
  652.                 }
  653.             }
  654.         } elseif ($request->getMethod() == "DELETE") {
  655.             $collaborator = $em->getRepository(CoreEntites\User::class)->findOneBy(array('id' => $request->attributes->get('id')));
  656.             
  657.             if ($collaborator) {
  658.                 $ticket->removeCollaborator($collaborator);
  659.                 $em->persist($ticket);
  660.                 $em->flush();
  662.                 $json['alertClass'] = 'success';
  663.                 $json['alertMessage'] = $this->translator->trans('Success ! Collaborator removed successfully.');
  664.             } else {
  665.                 $json['alertClass'] = 'danger';
  666.                 $json['alertMessage'] = $this->translator->trans('Error ! Invalid Collaborator.');
  667.             }
  668.         }
  670.         $response = new Response(json_encode($json));
  671.         $response->headers->set('Content-Type', 'application/json');
  672.         return $response;
  673.     }
  674. }