cis-rest-api/app/Http/Controllers/GradingController.php

<?php

namespace App\Http\Controllers;

use App\Criterion;
use App\Http\Controllers\UserController;
use App\Championship;
use App\Member;
use App\Module;
use App\Result;
use Illuminate\Http\Request;

class GradingController extends Controller
{
    public function get(Request $request, $id)
    {
        /*
         * Загружаем пользователя, который выполняет действие
         */

        $expert = UserController::getUserByToken($request->bearerToken());

        /*
         * Если пользователь не имеет статус 1 (главный эксперт), возвращаем ошибку 403
         */

        if ($expert->position !== 1)
            return response()
                ->json(["status" => false, "message" => "Permission denied"])
                ->setStatusCode(403, 'Permission denied');

        $champ = Championship::find($id);

        if (!$champ)
            return response()
                ->json(["status" => false, "message" => "Championship not found"])
                ->setStatusCode(404, 'Championship not found');

        if ($expert->position !== $champ->expert)
            return response()
                ->json(["status" => false, "message" => "Permission denied"])
                ->setStatusCode(403, 'Permission denied');


        $res = [
            "title" => $champ->title,
            "group" => $champ->group,
            "members" => $champ->members,
            "modules" => $champ->modules
        ];

        return response()->json($res, 200);

    }

    public function getCriteria(Request $request, $id)
    {
        /*
        * Загружаем пользователя, который выполняет действие
        */

        $expert = UserController::getUserByToken($request->bearerToken());

        /*
         * Если пользователь не имеет статус 1 (главный эксперт), возвращаем ошибку 403
         */

        if ($expert->position !== 1)
            return response()
                ->json(["status" => false, "message" => "Permission denied"])
                ->setStatusCode(403, 'Permission denied');

        $champ = Championship::find($id);

        if (!$champ)
            return response()
                ->json(["status" => false, "message" => "Championship not found"])
                ->setStatusCode(404, 'Championship not found');

        if ($expert->position !== $champ->expert)
            return response()
                ->json(["status" => false, "message" => "Permission denied"])
                ->setStatusCode(403, 'Permission denied');

        $module = Module::find($request->module);

        if ($module->championship != $champ->id || !$module)
            return response()
                ->json(["status" => false, "message" => "Module not found"])
                ->setStatusCode(404, 'Module not found');

        $member = Member::find($request->member);

        if (!$member || $member->championship != $champ->id)
            return response()
                ->json(["status" => false, "message" => "Member not found"])
                ->setStatusCode(404, 'Member not found');

        $criteria = Criterion::where('module', $module->id)->get();

        $res = [
            "results" => [],
            "criteria" => []
        ];

        foreach ($criteria as $criterion) {

            $result = Result::where('criterion_id', $criterion->id)
                ->where('module_id', $module->id)
                ->where('member_id', $member->id)
                ->first();

            if ($result) {
                $res["results"][] = [
                    "title" => $result->criterion->title,
                    "type" => $result->criterion->type,
                    "max" => $result->criterion->max,
                    "points" => $result->points
                ];
                continue;
            }

            $res["criteria"][] = $criterion;
        }

        return response()
            ->json($res,200);
    }

    public function lockCriterion(Request $request, $id)
    {
        /*
        * Загружаем пользователя, который выполняет действие
        */

        $expert = UserController::getUserByToken($request->bearerToken());

        /*
         * Если пользователь не имеет статус 1 (главный эксперт), возвращаем ошибку 403
         */

        if ($expert->position !== 1)
            return response()
                ->json(["status" => false, "message" => "Permission denied"])
                ->setStatusCode(403, 'Permission denied');

        $champ = Championship::find($id);

        if (!$champ)
            return response()
                ->json(["status" => false, "message" => "Championship not found"])
                ->setStatusCode(404, 'Championship not found');

        if ($expert->position !== $champ->expert)
            return response()
                ->json(["status" => false, "message" => "Permission denied"])
                ->setStatusCode(403, 'Permission denied');

        $module = Module::find($request->module);

        if ($module->championship != $champ->id || !$module)
            return response()
                ->json(["status" => false, "message" => "Module not found"])
                ->setStatusCode(404, 'Module not found');

        $member = Member::find($request->member);

        if (!$member || $member->championship != $champ->id)
            return response()
                ->json(["status" => false, "message" => "Member not found"])
                ->setStatusCode(404, 'Member not found');

        $criterion = Criterion::find($request->criterion);

        if ($criterion->module != $module->id || !$criterion)
            return response()
                ->json(["status" => false, "message" => "Criterion not found"])
                ->setStatusCode(404, 'Criterion not found');

        $result = Result::where('criterion_id', $criterion->id)
            ->where('module_id', $module->id)
            ->where('member_id', $member->id)
            ->first();

        if ($result)
            return response()
                ->json(["status" => false, "message" => "Result already exists"])
                ->setStatusCode(400, 'Result already exists');

        $result = new Result();
        $result->criterion_id = $criterion->id;
        $result->module_id = $module->id;
        $result->member_id = $member->id;
        $result->points = $request->points;

        $result->save();

        return response()
            ->json(["status" => true, "message" => "Result is saved"])
            ->setStatusCode(200, 'Result is saved');
    }
}