fix self link to status groups by implementing route /status-groups/{id}, fixes #3357

Closes #3357

Merge request studip/studip!2284

lib/classes/JsonApi/RouteMap.php

@@ -115,6 +115,8 @@ class RouteMap
         $group->get('/config-values/{id}', Routes\ConfigValues\ConfigValuesShow::class);
         $group->patch('/config-values/{id}', Routes\ConfigValues\ConfigValuesUpdate::class);
 
+        $group->get('/status-groups/{id}', Routes\StatusgroupShow::class);
+
         $this->addAuthenticatedBlubberRoutes($group);
         $this->addAuthenticatedConsultationRoutes($group);
         $this->addAuthenticatedContactsRoutes($group);

lib/classes/JsonApi/Routes/StatusgroupShow.php

+<?php
+
+namespace JsonApi\Routes;
+
+use JsonApi\Errors\AuthorizationFailedException;
+use Psr\Http\Message\ResponseInterface as Response;
+use Psr\Http\Message\ServerRequestInterface as Request;
+use JsonApi\JsonApiController;
+use JsonApi\Errors\RecordNotFoundException;
+
+class StatusgroupShow extends JsonApiController
+{
+    protected $allowedIncludePaths = [
+        'range'
+    ];
+
+    public function __invoke(Request $request, Response $response, $args)
+    {
+        $group = \Statusgruppen::find($args['id']);
+        if (!$group) {
+            throw new RecordNotFoundException();
+        }
+
+        $user = $this->getUser($request);
+        $range = $group->range;
+
+        if ($range && !$range->isAccessibleToUser($user->id)) {
+            throw new AuthorizationFailedException();
+        }
+
+        return $this->getContentResponse($group);
+    }
+}

lib/models/Statusgruppen.php

@@ -42,6 +42,7 @@
  * @property BlubberStatusgruppeThread $blubberthread has_one BlubberStatusgruppeThread
  * @property SimpleORMapCollection|CourseDate[] $dates has_and_belongs_to_many CourseDate
  * @property mixed $children additional field
+ * @property-read Range|null $range
  */
 class Statusgruppen extends SimpleORMap implements PrivacyObject
 {
@@ -96,6 +97,12 @@ class Statusgruppen extends SimpleORMap implements PrivacyObject
 
         $config['additional_fields']['children'] = true;
 
+        $config['additional_fields']['range'] = [
+            'get' => function (Statusgruppen $group): ?Range {
+                return RangeFactory::find($group->range_id);
+            },
+        ];
+
         $config['default_values']['position'] = null;
 
         $config['registered_callbacks']['before_store'][] = 'cbAddPosition';