/**
 * Description of UserController
 *
 * @author Oleg Gutnikov <[email protected]>
 * @package api\Users
 */
class UsersController extends ApiController{
    
    public function __construct($id, $module = null) {
        $this->model = new User('read');
        parent::__construct($id, $module);
    }
    
    /**
     * Function returns user data
     * 
     * @method GET
     * @param integer $id user id
     */
    public function actionView( ){
        if(!Yii::app()->user->checkAccess('getUser')){
            $this->accessDenied();
        }
        $userData = $this->getView(false);
        $this->sendJson($this->sanitizeUserData($userData), $this->statusCode);
    }
    
    /**
     * Function returns user list
     * @method GET
     */
    public function actionList(){
        if(!Yii::app()->user->checkAccess('getUser')){
            $this->accessDenied();
        }
        
        $userData = $this->getList(false);
        
        $this->sendJson(
            $this->sanitizeUserData($userData), 
            $this->statusCode,
            $this->statusCode==200?array($this->getContentRangeHeader()) : array()
        );
    }
    
    /**
     * Function creates new user.
     * @method POST
     */
    public function actionCreate(){
        if(!Yii::app()->user->checkAccess('createUser')){
            $this->accessDenied();
        }
        
        $this->model->setScenario('create'); 
        
        $userData = $this->create(false);
        
        $this->sendJson(
            $this->sanitizeUserData($userData),
            $this->statusCode
        );
    }
    
    /**
     * Function updates user.
     * @method PUT
     */
    public function actionUpdate( ){
        if(!Yii::app()->user->checkAccess('updateUser')){
            $this->accessDenied();
        }
        
        $this->model->setScenario('update'); 

        $userData = $this->update(false);
        
        $this->sendJson(
            $this->sanitizeUserData($userData),
            $this->statusCode
        );
    }
    
    /**
     * Function deletes user.
     * @method DELETE
     */
    public function actionDelete( ){
        if(!Yii::app()->user->checkAccess('deleteUser')){
            $this->accessDenied();
        }
        
        $this->model->setScenario('delete'); 

        $userData = $this->delete(false);
        
        $this->sendJson(
            $this->sanitizeUserData($userData),
            $this->statusCode
        );
    }
    
    public function getRelations() {
        return array(
            'comments'=>array( // relation GET parameter name (...?with=comments)
                'relationName'=>'comments', //model relation name
                'columnName'=>'comments', //column name in response
                'return'=>'array' //return array of arrays or array of models
            )
        );
    }

    /**
     * Function returns sanitized user data
     * 
     * @param array $userData user data or collection of user data
     * @return array sanitized user data
     */
    private function sanitizeUserData( $userData ){
        function unsetData(&$data){
            unset($data['password']);
            unset($data['guid']);
            return $data;
        }
        
        if($this->isCollection($userData)){
            foreach($userData as &$data){
                unsetData($data);
            }
        }
        else{
            unsetData($userData);
        }
        return $userData;
    }
    
}