grocy/controllers/UsersController.php

<?php

namespace Grocy\Controllers;

use Grocy\Controllers\Users\User;

class UsersController extends BaseController
{
	public function UsersList(\Psr\Http\Message\ServerRequestInterface $request, \Psr\Http\Message\ResponseInterface $response, array $args)
	{
		User::checkPermission($request, User::PERMISSION_READ_USER);
		return $this->renderPage($response, 'users', [
			'users' => $this->getDatabase()->users()->orderBy('username')
		]);
	}

	public function UserEditForm(\Psr\Http\Message\ServerRequestInterface $request, \Psr\Http\Message\ResponseInterface $response, array $args)
	{
		if ($args['userId'] == 'new')
		{
			User::checkPermission($request, User::PERMISSION_CREATE_USER);
			return $this->renderPage($response, 'userform', [
				'mode' => 'create'
			]);
		}
		else
		{
			if($args['userId'] == GROCY_USER_ID)
				User::checkPermission($request, User::PERMISSION_EDIT_SELF);
			else User::checkPermission($request, User::PERMISSION_EDIT_USER);
			return $this->renderPage($response, 'userform', [
				'user' =>  $this->getDatabase()->users($args['userId']),
				'mode' => 'edit'
			]);
		}
	}

	public function PermissionList(\Psr\Http\Message\ServerRequestInterface $request, \Psr\Http\Message\ResponseInterface $response, array $args)
	{
		User::checkPermission($request, User::PERMISSION_READ_USER);
		return $this->renderPage($response, 'userpermissions', [
			'user' => $this->getDatabase()->users($args['userId']),
			'permissions' => $this->getDatabase()->uihelper_user_permissions()
				->where('parent IS NULL')->where('user_id', $args['userId']),
		]);
	}
}