moodle/public/course/pending.php

<?php
// This file is part of Moodle - https://moodle.org/
//
// Moodle is free software: you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.
//
// Moodle is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with Moodle.  If not, see <https://www.gnu.org/licenses/>.

/**
 * Allow the administrator to look through a list of course requests and approve or reject them.
 *
 * @license https://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
 * @package course
 * @copyright Moodle Pty Ltd
 */

use core\context\course as context_course;
use core\context\system as context_system;
use core\exception\moodle_exception;
use core\url;
use core\output\html_writer;
use core_course\form\reject_course_request as reject_course_request_form;

require_once(__DIR__ . '/../config.php');
require_once($CFG->libdir . '/adminlib.php');
require_once($CFG->dirroot . '/course/lib.php');

$approve = optional_param('approve', 0, PARAM_INT);
$reject = optional_param('reject', 0, PARAM_INT);

$baseurl = $CFG->wwwroot . '/course/pending.php';
$context = context_system::instance();
if (has_capability('moodle/site:approvecourse', $context)) {
    // Similar to course management capabilities, if user has approve capability in system context
    // we add the link to the admin menu. Otherwise we check if user has capability anywhere.
    admin_externalpage_setup('coursespending');
} else {
    require_login(null, false);
    $categories = core_course_category::make_categories_list('moodle/site:approvecourse');
    if (!$categories) {
        require_capability('moodle/site:approvecourse', $context);
    }
    $PAGE->set_context($context);
    $PAGE->set_url(new url('/course/pending.php'));
}

// Process approval of a course.
if (!empty($approve) && confirm_sesskey()) {
    // Load the request.
    $course = new course_request($approve);
    $courseid = $course->approve();

    if ($courseid !== false) {
        if (has_capability('moodle/course:update', context_course::instance($courseid))) {
            redirect(new url('/course/edit.php', ['id' => $courseid, 'returnto' => 'pending']));
        } else {
            redirect(new url('/course/view.php', ['id' => $courseid]));
        }
    } else {
        throw new moodle_exception('courseapprovedfailed');
    }
}

// Process rejection of a course.
if (!empty($reject)) {
    // Load the request.
    $course = new course_request($reject);

    // Prepare the form.
    $rejectform = new reject_course_request_form($baseurl);
    $default = new stdClass();
    $default->reject = $course->id;
    $rejectform->set_data($default);

    // Standard form processing if statement.
    if ($rejectform->is_cancelled()) {
        redirect($baseurl);
    } else if ($data = $rejectform->get_data()) {
        // Reject the request.
        $course->reject($data->rejectnotice);

        // Redirect back to the course listing.
        redirect($baseurl, get_string('courserejected'));
    }

    // Display the form for giving a reason for rejecting the request.
    echo $OUTPUT->header($rejectform->focus());
    $rejectform->display();
    echo $OUTPUT->footer();
    exit;
}

// Print a list of all the pending requests.
echo $OUTPUT->header();

$pending = $DB->get_records('course_request');
if (empty($pending)) {
    echo $OUTPUT->heading(get_string('nopendingcourses'));
} else {
    echo $OUTPUT->heading(get_string('coursespending'));

    $role = $DB->get_record('role', ['id' => $CFG->creatornewroleid]);
    if ($role) {
        echo $OUTPUT->notification(get_string('courserequestwarning', 'core', role_get_name($role)), 'notifyproblem');
    } else {
        $userpoliciesurl = new url('/admin/settings.php', ['section' => 'userpolicies']);
        echo $OUTPUT->notification(get_string('courserequestroleerror', 'core', (string) $userpoliciesurl), 'notifyerror');
    }

    // Build a table of all the requests.
    $table = new html_table();
    $table->attributes['class'] = 'pendingcourserequests table generaltable table-hover';
    $table->align = ['center', 'center', 'center', 'center', 'center', 'center'];
    $table->head = [get_string('requestedby'), get_string('shortnamecourse'), get_string('fullnamecourse'),
            get_string('summary'), get_string('category'), get_string('requestreason'), get_string('action')];

    foreach ($pending as $course) {
        $course = new course_request($course);

        // Check here for shortname collisions and warn about them.
        $course->check_shortname_collision();

        if (!$course->can_approve()) {
            continue;
        }
        $category = $course->get_category();

        // Fullname of the user who requested the course (with link to profile if current user can view it).
        $requesterfullname = $OUTPUT->user_picture(
            $course->get_requester(),
            [
                'includefullname' => true,
                'link' => user_can_view_profile($course->get_requester()),
            ],
        );

        $row = [
            $requesterfullname,
            format_string($course->shortname),
            format_string($course->fullname),
            format_text($course->summary, $course->summaryformat),
            $category->get_formatted_name(),
            format_string($course->reason),
        ];

        $controls = [
            $OUTPUT->single_button(
                new url($baseurl, ['approve' => $course->id, 'sesskey' => sesskey()]),
                get_string('approve'),
                'get',
            ),
            $OUTPUT->single_button(
                new url($baseurl, ['reject' => $course->id]),
                get_string('rejectdots'),
                'get',
            ),
        ];

        $row[] = implode(' ', $controls);

        // Add the row to the table.
        $table->data[] = $row;
    }

    // Display the table.
    echo html_writer::table($table);

    // Message about name collisions, if necessary.
    if (!empty($collision)) {
        print_string('shortnamecollisionwarning');
    }
}

// Finish off the page.
echo $OUTPUT->single_button($CFG->wwwroot . '/course/index.php', get_string('backtocourselisting'));
echo $OUTPUT->footer();