{"path_array": ["src/Service/Governance/GovernanceAuthorizationConfigService.php"]}

==== FILE: src/Service/Governance/GovernanceAuthorizationConfigService.php ====
diff --git a/src/Service/Governance/GovernanceAuthorizationConfigService.php b/src/Service/Governance/GovernanceAuthorizationConfigService.php
new file mode 100644
--- /dev/null
+++ b/src/Service/Governance/GovernanceAuthorizationConfigService.php
@@ -0,0 +1,573 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Service\Governance;
+
+use App\Entity\Company;
+use App\Entity\CompanyMembers;
+use App\Entity\GovernanceAuthorizationApprover;
+use App\Entity\GovernanceAuthorizationConfig;
+use App\Entity\GovernanceAuthorizationType;
+use App\Entity\Roles;
+use App\Entity\User;
+use App\Repository\GovernanceAuthorizationConfigRepository;
+use App\Repository\GovernanceCaseHistoryRepository;
+use Doctrine\ORM\EntityManagerInterface;
+
+final class GovernanceAuthorizationConfigService
+{
+    private const MAX_TYPE_LENGTH = 80;
+    private const MAX_TYPES = 100;
+    private const MAX_APPROVER_IDS = 200;
+
+    public function __construct(
+        private EntityManagerInterface $em,
+        private GovernanceAuthorizationConfigRepository $repository,
+    ) {
+    }
+
+    /**
+     * @return array{
+     *     aut_authorization_types: list<string>,
+     *     aut_authorization_use_members: bool,
+     *     aut_authorization_use_roles: bool,
+     *     aut_authorization_approver_members: list<array{id: int, name: string, all_areas: bool, area_keys: list<string>}>,
+     *     aut_authorization_approver_roles: list<array{id: int, name: string, all_areas: bool, area_keys: list<string>}>,
+     *     aut_company_roles: list<array{id: int, name: string}>
+     * }
+     */
+    public function getViewData(Company $company): array
+    {
+        $config = $this->repository->findOneByCompany($company);
+        $hasConfig = $config instanceof GovernanceAuthorizationConfig;
+        [$useMembers, $useRoles] = $this->resolveUseFlags(
+            $hasConfig ? $config->usesMembers() : true,
+            $hasConfig ? $config->usesRoles() : false,
+        );
+
+        return [
+            'aut_authorization_types' => $hasConfig ? $config->getTypeLabels() : [],
+            'aut_authorization_use_members' => $useMembers,
+            'aut_authorization_use_roles' => $useRoles,
+            'aut_authorization_approver_members' => $hasConfig ? $this->mapApprovers($config->getMemberApprovers(), 'member') : [],
+            'aut_authorization_approver_roles' => $hasConfig ? $this->mapApprovers($config->getRoleApprovers(), 'role') : [],
+            'aut_company_roles' => $this->listCompanyRoles($company),
+        ];
+    }
+
+    /**
+     * @param array<string, mixed> $payload
+     *
+     * @return array{
+     *     authorization_types: list<string>,
+     *     use_members: bool,
+     *     use_roles: bool,
+     *     approver_members: list<array{id: int, name: string, all_areas: bool, area_keys: list<string>}>,
+     *     approver_roles: list<array{id: int, name: string, all_areas: bool, area_keys: list<string>}>
+     * }
+     */
+    public function savePayload(Company $company, array $payload, ?User $user = null): array
+    {
+        $typeLabels = $this->normalizeTypes($payload['authorization_types'] ?? []);
+        [$useMembers, $useRoles] = $this->resolveUseFlags(
+            $this->normalizeBoolean($payload['use_members'] ?? true, 'use_members'),
+            $this->normalizeBoolean($payload['use_roles'] ?? false, 'use_roles'),
+        );
+
+        $memberAssignments = $this->normalizeApproverPayload(
+            $payload['approver_members'] ?? [],
+            $typeLabels,
+            'approver_members'
+        );
+        $roleAssignments = $this->normalizeApproverPayload(
+            $payload['approver_roles'] ?? [],
+            $typeLabels,
+            'approver_roles'
+        );
+
+        $this->assertMembersBelongToCompany($company, array_column($memberAssignments, 'id'));
+        $this->assertRolesBelongToCompany($company, array_column($roleAssignments, 'id'));
+
+        $config = $this->findOrCreate($company, $user);
+        $config
+            ->setUseMembers($useMembers)
+            ->setUseRoles($useRoles)
+            ->setUpdatedBy($user);
+
+        $config->clearApprovers();
+        $typesByKey = $this->syncTypes($config, $typeLabels);
+        $this->syncApprovers($config, $company, $memberAssignments, $roleAssignments, $typesByKey);
+
+        $this->repository->save($config);
+
+        return [
+            'authorization_types' => $config->getTypeLabels(),
+            'use_members' => $config->usesMembers(),
+            'use_roles' => $config->usesRoles(),
+            'approver_members' => $this->mapApprovers($config->getMemberApprovers(), 'member'),
+            'approver_roles' => $this->mapApprovers($config->getRoleApprovers(), 'role'),
+        ];
+    }
+
+    public function resolveTypeLabel(Company $company, string $tipo): ?string
+    {
+        $needle = mb_strtolower(trim($tipo));
+        if ($needle === '') {
+            return null;
+        }
+
+        $config = $this->repository->findOneByCompany($company);
+        if (!$config instanceof GovernanceAuthorizationConfig) {
+            return null;
+        }
+
+        foreach ($config->getTypeLabels() as $label) {
+            if (mb_strtolower($label) === $needle) {
+                return $label;
+            }
+        }
+
+        return null;
+    }
+
+    public function hasConfiguredTypes(Company $company): bool
+    {
+        $config = $this->repository->findOneByCompany($company);
+
+        return $config instanceof GovernanceAuthorizationConfig
+            && $config->getTypeLabels() !== [];
+    }
+
+    private function findOrCreate(Company $company, ?User $user): GovernanceAuthorizationConfig
+    {
+        $config = $this->repository->findOneByCompany($company);
+        if ($config instanceof GovernanceAuthorizationConfig) {
+            return $config;
+        }
+
+        $config = new GovernanceAuthorizationConfig();
+        $config->setCompany($company);
+        if ($user instanceof User) {
+            $config->setCreatedBy($user);
+        }
+
+        return $config;
+    }
+
+    /**
+     * @param list<string> $labels
+     *
+     * @return array<string, GovernanceAuthorizationType>
+     */
+    private function syncTypes(GovernanceAuthorizationConfig $config, array $labels): array
+    {
+        $kept = [];
+        $byKey = [];
+        foreach ($config->getTypes() as $type) {
+            $byKey[mb_strtolower($type->getLabel())] = $type;
+        }
+
+        foreach ($labels as $position => $label) {
+            $key = mb_strtolower($label);
+            $type = $byKey[$key] ?? null;
+            if (!$type instanceof GovernanceAuthorizationType) {
+                $type = new GovernanceAuthorizationType();
+                $config->addType($type);
+            }
+            $type->setLabel($label)->setPosition($position);
+            $kept[] = $type;
+        }
+
+        foreach ($config->getTypes()->toArray() as $type) {
+            if (!in_array($type, $kept, true)) {
+                $config->removeType($type);
+            }
+        }
+
+        $map = [];
+        foreach ($kept as $type) {
+            $map[mb_strtolower($type->getLabel())] = $type;
+        }
+
+        return $map;
+    }
+
+    /**
+     * @param list<array{id: int, all_areas: bool, area_keys: list<string>}> $memberAssignments
+     * @param list<array{id: int, all_areas: bool, area_keys: list<string>}> $roleAssignments
+     * @param array<string, GovernanceAuthorizationType> $typesByKey
+     */
+    private function syncApprovers(
+        GovernanceAuthorizationConfig $config,
+        Company $company,
+        array $memberAssignments,
+        array $roleAssignments,
+        array $typesByKey,
+    ): void {
+        $position = 0;
+
+        foreach ($memberAssignments as $assignment) {
+            $member = $this->findUsableMember($company, $assignment['id']);
+            if (!$member instanceof CompanyMembers) {
+                continue;
+            }
+
+            $config->addApprover($this->buildApprover($member, null, $assignment, $typesByKey, $position));
+            ++$position;
+        }
+
+        foreach ($roleAssignments as $assignment) {
+            $role = $this->findUsableRole($company, $assignment['id']);
+            if (!$role instanceof Roles) {
+                continue;
+            }
+
+            $config->addApprover($this->buildApprover(null, $role, $assignment, $typesByKey, $position));
+            ++$position;
+        }
+    }
+
+    /**
+     * @param array{id: int, all_areas: bool, area_keys: list<string>} $assignment
+     * @param array<string, GovernanceAuthorizationType> $typesByKey
+     */
+    private function buildApprover(
+        ?CompanyMembers $member,
+        ?Roles $role,
+        array $assignment,
+        array $typesByKey,
+        int $position,
+    ): GovernanceAuthorizationApprover {
+        $approver = new GovernanceAuthorizationApprover();
+        $approver
+            ->setMember($member)
+            ->setRole($role)
+            ->setPosition($position);
+
+        $allAreas = !empty($assignment['all_areas']);
+        $areaKeys = $allAreas ? [] : ($assignment['area_keys'] ?? []);
+        if ($areaKeys === []) {
+            $approver->setAllAreas(true);
+
+            return $approver;
+        }
+
+        $approver->setAllAreas(false);
+        foreach ($areaKeys as $label) {
+            $type = $typesByKey[mb_strtolower($label)] ?? null;
+            if ($type instanceof GovernanceAuthorizationType) {
+                $approver->addApplicationType($type);
+            }
+        }
+        if ($approver->getApplicationTypes()->isEmpty()) {
+            $approver->setAllAreas(true);
+        }
+
+        return $approver;
+    }
+
+    /**
+     * @param list<GovernanceAuthorizationApprover> $approvers
+     *
+     * @return list<array{id: int, name: string, all_areas: bool, area_keys: list<string>}>
+     */
+    private function mapApprovers(array $approvers, string $kind): array
+    {
+        $rows = [];
+        foreach ($approvers as $approver) {
+            if ($kind === 'member') {
+                $subject = $approver->getMember();
+                if (!$subject instanceof CompanyMembers || $subject->getIsRemoved()) {
+                    continue;
+                }
+                $name = trim(GovernanceCaseHistoryRepository::resolveMemberDisplayName($subject));
+                $fallback = 'Membro #' . $subject->getId();
+            } else {
+                $subject = $approver->getRole();
+                if (!$subject instanceof Roles || $subject->getIsRemoved()) {
+                    continue;
+                }
+                $name = trim((string) $subject->getName());
+                $fallback = 'Cargo #' . $subject->getId();
+            }
+
+            $rows[] = [
+                'id' => (int) $subject->getId(),
+                'name' => $name !== '' ? $name : $fallback,
+                'all_areas' => $approver->usesAllAreas(),
+                'area_keys' => $approver->getApplicationTypeLabels(),
+            ];
+        }
+
+        return $rows;
+    }
+
+    /**
+     * @param mixed $raw
+     *
+     * @return list<string>
+     */
+    private function normalizeTypes(mixed $raw): array
+    {
+        if (!is_array($raw)) {
+            throw new \InvalidArgumentException('Tipos de autorização inválidos.');
+        }
+
+        $normalized = [];
+        $seen = [];
+
+        foreach ($raw as $item) {
+            if (!is_string($item) && !is_numeric($item)) {
+                throw new \InvalidArgumentException('Tipos de autorização inválidos.');
+            }
+
+            $label = trim((string) $item);
+            if ($label === '') {
+                continue;
+            }
+
+            if (mb_strlen($label) > self::MAX_TYPE_LENGTH) {
+                throw new \InvalidArgumentException(sprintf(
+                    'Tipo de autorização deve ter no máximo %d caracteres.',
+                    self::MAX_TYPE_LENGTH
+                ));
+            }
+
+            $key = mb_strtolower($label);
+            if (isset($seen[$key])) {
+                continue;
+            }
+
+            $seen[$key] = true;
+            $normalized[] = $label;
+
+            if (count($normalized) > self::MAX_TYPES) {
+                throw new \InvalidArgumentException(sprintf(
+                    'É permitido cadastrar no máximo %d tipos de autorização.',
+                    self::MAX_TYPES
+                ));
+            }
+        }
+
+        return $normalized;
+    }
+
+    /**
+     * @param list<int> $memberIds
+     */
+    private function assertMembersBelongToCompany(Company $company, array $memberIds): void
+    {
+        foreach ($memberIds as $memberId) {
+            if (!$this->findUsableMember($company, $memberId) instanceof CompanyMembers) {
+                throw new \InvalidArgumentException('Membro aprovador inválido.');
+            }
+        }
+    }
+
+    /**
+     * @param list<int> $roleIds
+     */
+    private function assertRolesBelongToCompany(Company $company, array $roleIds): void
+    {
+        foreach ($roleIds as $roleId) {
+            if (!$this->findUsableRole($company, $roleId) instanceof Roles) {
+                throw new \InvalidArgumentException('Cargo aprovador inválido.');
+            }
+        }
+    }
+
+    private function findUsableMember(Company $company, int $memberId): ?CompanyMembers
+    {
+        $member = $this->em->getRepository(CompanyMembers::class)->findOneBy([
+            'id' => $memberId,
+            'company' => $company,
+            'isRemoved' => 0,
+        ]);
+
+        return $member instanceof CompanyMembers ? $member : null;
+    }
+
+    private function findUsableRole(Company $company, int $roleId): ?Roles
+    {
+        $role = $this->em->getRepository(Roles::class)->find($roleId);
+        if (
+            !$role instanceof Roles
+            || $role->getCompany()?->getId() !== $company->getId()
+            || $role->getIsRemoved()
+        ) {
+            return null;
+        }
+
+        return $role;
+    }
+
+    /**
+     * @return array{0: bool, 1: bool}
+     */
+    private function resolveUseFlags(bool $useMembers, bool $useRoles): array
+    {
+        if (!$useMembers && !$useRoles) {
+            $useMembers = true;
+        }
+
+        return [$useMembers, $useRoles];
+    }
+
+    /**
+     * @param mixed $raw
+     * @param list<string> $types
+     *
+     * @return list<array{id: int, all_areas: bool, area_keys: list<string>}>
+     */
+    private function normalizeApproverPayload(mixed $raw, array $types, string $field): array
+    {
+        if (!is_array($raw)) {
+            throw new \InvalidArgumentException(sprintf('Lista inválida: %s.', $field));
+        }
+
+        $canonicalTypes = [];
+        foreach ($types as $label) {
+            $canonicalTypes[mb_strtolower($label)] = $label;
+        }
+
+        $normalized = [];
+        $seen = [];
+
+        foreach ($raw as $item) {
+            if (is_bool($item)) {
+                throw new \InvalidArgumentException(sprintf('Identificador inválido em %s.', $field));
+            }
+
+            $id = 0;
+            $allAreas = true;
+            $areaKeys = [];
+
+            if (is_array($item)) {
+                $id = (int) ($item['id'] ?? 0);
+                $allAreasSpecified = array_key_exists('all_areas', $item);
+                if ($allAreasSpecified) {
+                    $allAreas = $this->normalizeBoolean($item['all_areas'], 'all_areas');
+                }
+                $areaKeys = $this->filterAreaKeys($item['area_keys'] ?? [], $canonicalTypes);
+                if (!$allAreasSpecified && $areaKeys !== []) {
+                    $allAreas = false;
+                }
+            } else {
+                $id = (int) $item;
+            }
+
+            if ($id <= 0 || isset($seen[$id])) {
+                continue;
+            }
+
+            if ($allAreas || $areaKeys === []) {
+                $allAreas = true;
+                $areaKeys = [];
+            }
+
+            $seen[$id] = true;
+            $normalized[] = [
+                'id' => $id,
+                'all_areas' => $allAreas,
+                'area_keys' => $areaKeys,
+            ];
+
+            if (count($normalized) > self::MAX_APPROVER_IDS) {
+                throw new \InvalidArgumentException(sprintf(
+                    'É permitido cadastrar no máximo %d aprovadores em %s.',
+                    self::MAX_APPROVER_IDS,
+                    $field
+                ));
+            }
+        }
+
+        return $normalized;
+    }
+
+    /**
+     * @param mixed $raw
+     * @param array<string, string> $canonicalTypes
+     *
+     * @return list<string>
+     */
+    private function filterAreaKeys(mixed $raw, array $canonicalTypes): array
+    {
+        if (!is_array($raw)) {
+            return [];
+        }
+
+        $keys = [];
+        $seen = [];
+        foreach ($raw as $item) {
+            if (!is_string($item) && !is_numeric($item)) {
+                continue;
+            }
+            $label = trim((string) $item);
+            if ($label === '') {
+                continue;
+            }
+            $lookup = mb_strtolower($label);
+            if (!isset($canonicalTypes[$lookup]) || isset($seen[$lookup])) {
+                continue;
+            }
+            $seen[$lookup] = true;
+            $keys[] = $canonicalTypes[$lookup];
+        }
+
+        return $keys;
+    }
+
+    /**
+     * @return list<array{id: int, name: string}>
+     */
+    private function listCompanyRoles(Company $company): array
+    {
+        $roles = $this->em->getRepository(Roles::class)->findBy(
+            ['company' => $company],
+            ['name' => 'ASC']
+        );
+
+        $rows = [];
+        foreach ($roles as $role) {
+            if (!$role instanceof Roles || $role->getIsRemoved()) {
+                continue;
+            }
+
+            $name = trim((string) $role->getName());
+            if ($name === '') {
+                continue;
+            }
+
+            $rows[] = [
+                'id' => (int) $role->getId(),
+                'name' => $name,
+            ];
+        }
+
+        return $rows;
+    }
+
+    private function normalizeBoolean(mixed $value, string $field): bool
+    {
+        if (is_bool($value)) {
+            return $value;
+        }
+
+        if (is_int($value)) {
+            return $value === 1;
+        }
+
+        if (is_string($value)) {
+            $normalized = strtolower(trim($value));
+            if (in_array($normalized, ['1', 'true', 'on', 'yes'], true)) {
+                return true;
+            }
+            if (in_array($normalized, ['0', 'false', 'off', 'no'], true)) {
+                return false;
+            }
+        }
+
+        throw new \InvalidArgumentException(sprintf('Campo booleano inválido: %s.', $field));
+    }
+}

{"search_text": "canManageAuthorizationConfig", "file_patterns": ["src/"]}

File: src/Controller/GovernanceController.php
Match lines: 6
2895|        if (!$this->canManageAuthorizationConfig()) {
2926|        if (!$this->canManageAuthorizationConfig()) {
2951|        if (!$this->canManageAuthorizationConfig()) {
2989|        if (!$this->canManageAuthorizationConfig()) {
3092|            'ssmaCanManageConfig' => $this->canManageAuthorizationConfig(),
4186|    private function canManageAuthorizationConfig(): bool

{"search_text": "function currentGovernanceCompany", "file_patterns": ["src/Controller/GovernanceController.php"]}

File: src/Controller/GovernanceController.php
Match lines: 1
3933|    private function currentGovernanceCompany(): ?Company

{"file_path": "src/Controller/GovernanceController.php", "start_line": 3900, "end_line": 3990}

File: src/Controller/GovernanceController.php (Total lines: 6154)
IS_TRUNCATED: false
LINE_RANGE: 3900-3990
3900|        if (!$company) {
3901|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
3902|        }
3903|
3904|        $authorization = $this->entityManager->getRepository(GovernanceAuthorization::class)
3905|            ->findOneBy(['id' => $autId, 'company' => $company]);
3906|        if (!$authorization) {
3907|            return $this->json(['success' => false, 'message' => 'Autorização não encontrada.'], 404);
3908|        }
3909|
3910|        return $authorization;
3911|    }
3912|
3913|    private function findGovernanceCompanyMember(int $memberId): CompanyMembers|JsonResponse
3914|    {
3915|        $company = $this->currentGovernanceCompany();
3916|        if (!$company instanceof Company) {
3917|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
3918|        }
3919|
3920|        $member = $this->entityManager->getRepository(CompanyMembers::class)->findOneBy([
3921|            'id' => $memberId,
3922|            'company' => $company,
3923|            'isRemoved' => 0,
3924|        ]);
3925|
3926|        if (!$member instanceof CompanyMembers) {
3927|            return $this->json(['success' => false, 'message' => 'Membro não encontrado.'], 404);
3928|        }
3929|
3930|        return $member;
3931|    }
3932|
3933|    private function currentGovernanceCompany(): ?Company
3934|    {
3935|        $request = $this->requestStack->getCurrentRequest();
3936|        $currentCompany = $request?->attributes->get('current_company');
3937|        if ($currentCompany instanceof Company) {
3938|            return $currentCompany;
3939|        }
3940|
3941|        if ($request !== null && $request->hasSession()) {
3942|            $selectedWorkspace = (string) $request->getSession()->get('selected_workspace', '');
3943|            if ($selectedWorkspace !== '' && str_starts_with($selectedWorkspace, 'company_')) {
3944|                $companyId = (int) str_replace('company_', '', $selectedWorkspace);
3945|                if ($companyId > 0) {
3946|                    $companyFromWorkspace = $this->entityManager->getRepository(Company::class)->find($companyId);
3947|                    if ($companyFromWorkspace instanceof Company) {
3948|                        return $companyFromWorkspace;
3949|                    }
3950|                }
3951|            }
3952|        }
3953|
3954|        /** @var User|null $user */
3955|        $user = $this->getUser();
3956|
3957|        return $user ? $user->getCompany() : null;
3958|    }
3959|
3960|    /**
3961|     * @return int[]|null null significa acesso à empresa inteira.
3962|     */
3963|    private function visibleCompanyMemberIdsForCurrentRequest(Company $company): ?array
3964|    {
3965|        $request = $this->requestStack->getCurrentRequest();
3966|        if (!$request || !(bool) $request->attributes->get('team_limitation', false)) {
3967|            return null;
3968|        }
3969|
3970|        $companyMember = $request->attributes->get('company_member');
3971|        if (!$companyMember instanceof CompanyMembers || (int) $companyMember->getCompany()?->getId() !== (int) $company->getId()) {
3972|            return [];
3973|        }
3974|
3975|        $teamIds = $this->parseCompanyMemberTeamIds($companyMember);
3976|
3977|        if ($teamIds === []) {
3978|            return $companyMember->getId() !== null ? [(int) $companyMember->getId()] : [];
3979|        }
3980|
3981|        $visibleIds = $this->visibleCompanyMemberIdsFromListenerUserScope($company);
3982|        $members = $this->entityManager->getRepository(CompanyMembers::class)->findBy([
3983|            'company' => $company,
3984|            'isRemoved' => 0,
3985|        ]);
3986|
3987|        foreach ($members as $member) {
3988|            if (!$member instanceof CompanyMembers || $member->getId() === null) {
3989|                continue;
3990|            }

{"file_path": "src/Controller/GovernanceController.php", "start_line": 4140, "end_line": 4240}

File: src/Controller/GovernanceController.php (Total lines: 6154)
IS_TRUNCATED: false
LINE_RANGE: 4140-4240
4140|
4141|        return $request && (bool) $request->attributes->get('can_view', false);
4142|    }
4143|
4144|    private function canAccessAuthorizationSupervisorSurface(): bool
4145|    {
4146|        return $this->canManageAuthorizations() || $this->isAuthorizationViewer();
4147|    }
4148|
4149|    private function canManageAuthorizations(): bool
4150|    {
4151|        if ($this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER') || $this->isGranted('ROLE_MANAGER_GESTOR')) {
4152|            return true;
4153|        }
4154|
4155|        $request = $this->requestStack->getCurrentRequest();
4156|        if (!$request) {
4157|            return false;
4158|        }
4159|
4160|        return (bool) $request->attributes->get('can_create', false)
4161|            || (bool) $request->attributes->get('can_edit', false)
4162|            || (bool) $request->attributes->get('can_delete', false);
4163|    }
4164|
4165|    private function isAuthorizationViewer(): bool
4166|    {
4167|        if ($this->isGranted('ROLE_MANAGER_VIEWER')
4168|            && !$this->isGranted('ROLE_MANAGER')
4169|            && !$this->isGranted('ROLE_MANAGER_GESTOR')
4170|            && !$this->isGranted('ROLE_SUPER_ADMIN')
4171|        ) {
4172|            return true;
4173|        }
4174|
4175|        $request = $this->requestStack->getCurrentRequest();
4176|        if (!$request) {
4177|            return false;
4178|        }
4179|
4180|        return (bool) $request->attributes->get('can_view', false)
4181|            && !(bool) $request->attributes->get('can_create', false)
4182|            && !(bool) $request->attributes->get('can_edit', false)
4183|            && !(bool) $request->attributes->get('can_delete', false);
4184|    }
4185|
4186|    private function canManageAuthorizationConfig(): bool
4187|    {
4188|        return $this->canManageAuthorizations();
4189|    }
4190|
4191|    private function canAccessBadgeHub(): bool
4192|    {
4193|        if ($this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER') || $this->isGranted('ROLE_MANAGER_GESTOR')) {
4194|            return true;
4195|        }
4196|
4197|        if ($this->canManageBadges() || $this->isBadgeViewer()) {
4198|            return true;
4199|        }
4200|
4201|        $request = $this->requestStack->getCurrentRequest();
4202|
4203|        return $request && (bool) $request->attributes->get('can_view', false);
4204|    }
4205|
4206|    private function isBadgeViewer(): bool
4207|    {
4208|        if ($this->isGranted('ROLE_MANAGER_VIEWER')
4209|            && !$this->isGranted('ROLE_MANAGER')
4210|            && !$this->isGranted('ROLE_MANAGER_GESTOR')
4211|            && !$this->isGranted('ROLE_SUPER_ADMIN')
4212|        ) {
4213|            return true;
4214|        }
4215|
4216|        $request = $this->requestStack->getCurrentRequest();
4217|        if (!$request) {
4218|            return false;
4219|        }
4220|
4221|        return (bool) $request->attributes->get('can_view', false)
4222|            && !(bool) $request->attributes->get('can_create', false)
4223|            && !(bool) $request->attributes->get('can_edit', false)
4224|            && !(bool) $request->attributes->get('can_delete', false);
4225|    }
4226|
4227|    private function canManageBadgeConfig(): bool
4228|    {
4229|        return $this->canEditBadges();
4230|    }
4231|
4232|    private function canManageBadges(): bool
4233|    {
4234|        return $this->canCreateBadges() || $this->canEditBadges() || $this->canDeleteBadges();
4235|    }
4236|
4237|    private function canCreateBadges(): bool
4238|    {
4239|        return $this->hasBadgePermission('can_create');
4240|    }

{"end_line": 1380, "file_path": "src/Controller/GovernanceController.php", "start_line": 1270}

File: src/Controller/GovernanceController.php (Total lines: 6154)
IS_TRUNCATED: false
LINE_RANGE: 1270-1380
1270|                    'charts' => $dashboard['charts'] ?? [],
1271|                    'attention' => $dashboard['attention'] ?? [],
1272|                    'adriana' => $dashboard['adriana'] ?? [],
1273|                ],
1274|            );
1275|
1276|            return [
1277|                'cases_list_html' => $openListHtml,
1278|                'cases_resolved_list_html' => $resolvedListHtml,
1279|                'resolved_list_html' => $resolvedListHtml,
1280|                'cases_dashboard_html' => $dashboardHtml,
1281|                'cases_dashboard_chart_data' => $dashboard['charts'] ?? [],
1282|            ];
1283|        } catch (\Throwable $e) {
1284|            $this->logger->error(sprintf('[GovCases] renderCasesListFragments failed: %s', $e->getMessage()));
1285|
1286|            return [];
1287|        }
1288|    }
1289|
1290|    private function buildAuthorizationHubContext(): array
1291|    {
1292|        $viewData = $this->buildAuthorizationViewData();
1293|
1294|        $company = $this->currentGovernanceCompany();
1295|
1296|        $autData = $company
1297|            ? $this->loadAuthorizationsData(
1298|                $company,
1299|                $viewData['allMembers'],
1300|                $viewData['teams'] ?? [],
1301|                $viewData['governanceVisibleMemberIds'] ?? null
1302|            )
1303|            : [
1304|                'aut_rows' => [],
1305|                'aut_all' => [],
1306|                'aut_ativas' => 0,
1307|                'aut_vencidas' => 0,
1308|                'aut_a_vencer' => 0,
1309|                'aut_colabs_sem_aut' => 0,
1310|                'aut_perc_conformidade' => 0,
1311|                'aut_teams_by_status' => [],
1312|                'aut_kpi_total' => 0,
1313|                'aut_kpi_ativas' => 0,
1314|                'aut_kpi_inativas' => 0,
1315|                'aut_kpi_colaboradores' => 0,
1316|                'aut_alertas' => [],
1317|                'aut_chart_data' => ['vencidas' => 0, 'proximos_30' => 0, 'dias_31_60' => 0, 'dias_61_90' => 0],
1318|                'aut_expired_by_team' => [],
1319|                'aut_requisitos_catalog' => AutorizacaoRequisitoCatalog::labelsOrdered(),
1320|            ];
1321|
1322|        $autConditions = $company
1323|            ? $this->authorizationConditionConfig->getConditionsForFrontend($company)
1324|            : [];
1325|        $contractorRequirements = $company
1326|            ? array_values(array_filter(
1327|                $this->contractorRequirementService->listForFrontend($company),
1328|                static fn (array $requirement): bool => ($requirement['active'] ?? true) !== false
1329|            ))
1330|            : [];
1331|
1332|        $companyAreas = [];
1333|        $authorizationConfigView = [
1334|            'aut_authorization_types' => [],
1335|            'aut_authorization_use_members' => true,
1336|            'aut_authorization_use_roles' => false,
1337|            'aut_authorization_approver_members' => [],
1338|            'aut_authorization_approver_roles' => [],
1339|            'aut_company_roles' => [],
1340|        ];
1341|        if ($company) {
1342|            /** @var CompanyAreaRepository $areaRepo */
1343|            $areaRepo = $this->entityManager->getRepository(CompanyArea::class);
1344|            foreach ($areaRepo->findForCompany($company, true) as $area) {
1345|                $companyAreas[] = [
1346|                    'id' => $area->getId(),
1347|                    'name' => (string) $area->getName(),
1348|                ];
1349|            }
1350|
1351|            $authorizationConfigView = $this->authorizationConfigService->getViewData($company);
1352|        }
1353|
1354|        return array_merge($viewData, $autData, $authorizationConfigView, [
1355|            'aut_conditions' => $autConditions,
1356|            'aut_classif_catalog' => GovernanceAuthorizationConditionConfigService::classificacoesPorTipo(),
1357|            'aut_contractor_requirements' => $contractorRequirements,
1358|            'aut_company_areas' => $companyAreas,
1359|        ]);
1360|    }
1361|
1362|    public function authorizationSave(Request $request): JsonResponse
1363|    {
1364|        if (!$this->canManageAuthorizations()) {
1365|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
1366|        }
1367|
1368|        $company = $this->currentGovernanceCompany();
1369|
1370|        if (!$company) {
1371|            return $this->json(['success' => false, 'message' => 'Empresa não encontrada.'], 403);
1372|        }
1373|
1374|        $data = json_decode($request->getContent(), true) ?? [];
1375|        $titulo = trim((string) ($data['titulo'] ?? ''));
1376|        $desc = trim((string) ($data['descricao'] ?? ''));
1377|
1378|        if ($titulo === '') {
1379|            return $this->json(['success' => false, 'message' => 'Título da autorização é obrigatório.'], 400);
1380|        }

{"end_line": 280, "file_path": "src/Repository/GovernanceAuthorizationRepository.php", "start_line": 120}

File: src/Repository/GovernanceAuthorizationRepository.php (Total lines: 277)
IS_TRUNCATED: false
LINE_RANGE: 120-277
120|    /**
121|     * @param int[] $memberIds
122|     */
123|    private function syncColaboradores(GovernanceAuthorization $aut, array $memberIds, Company $company, \Doctrine\ORM\EntityManagerInterface $em): void
124|    {
125|        $repoM = $em->getRepository(CompanyMembers::class);
126|        $valid = [];
127|        foreach ($memberIds as $mid) {
128|            $m = $repoM->find($mid);
129|            if ($m && $m->getCompany()->getId() === $company->getId()) {
130|                $valid[$mid] = $m;
131|            }
132|        }
133|        if ($valid === []) {
134|            throw new \InvalidArgumentException('Nenhum colaborador válido para esta autorização.');
135|        }
136|
137|        $present = [];
138|        foreach ($aut->getColaboradoresVinculos()->toArray() as $v) {
139|            $cid = $v->getCompanyMember()?->getId();
140|            if ($cid === null) {
141|                continue;
142|            }
143|            $present[$cid] = $v;
144|        }
145|
146|        foreach ($present as $cid => $v) {
147|            if (!isset($valid[$cid])) {
148|                $aut->removeColaboradorVinculo($v);
149|            }
150|        }
151|
152|        foreach ($valid as $cid => $m) {
153|            if (isset($present[$cid])) {
154|                continue;
155|            }
156|            $link = new GovernanceAuthorizationCollaborator();
157|            $link->setGovernanceAuthorization($aut);
158|            $link->setCompanyMember($m);
159|            $aut->addColaboradorVinculo($link);
160|            $em->persist($link);
161|        }
162|    }
163|
164|    public function unlinkMember(GovernanceAuthorization $aut, CompanyMembers $member): void
165|    {
166|        $vinculo = null;
167|        foreach ($aut->getColaboradoresVinculos() as $link) {
168|            if ($link->getCompanyMember()?->getId() === $member->getId()) {
169|                $vinculo = $link;
170|                break;
171|            }
172|        }
173|
174|        if (!$vinculo instanceof GovernanceAuthorizationCollaborator) {
175|            throw new \InvalidArgumentException('Esta autorização não inclui este colaborador.');
176|        }
177|
178|        $em = $this->getEntityManager();
179|        $aut->removeColaboradorVinculo($vinculo);
180|        $em->remove($vinculo);
181|        $em->flush();
182|    }
183|
184|    public function removeAutorizacao(int $id, Company $company): void
185|    {
186|        $aut = $this->findOneBy(['id' => $id, 'company' => $company]);
187|        if (!$aut) {
188|            throw new \InvalidArgumentException('Autorização não encontrada.');
189|        }
190|
191|        $em = $this->getEntityManager();
192|        $em->remove($aut);
193|        $em->flush();
194|    }
195|
196|    public function toArray(GovernanceAuthorization $aut): array
197|    {
198|        $membros = $aut->getColaboradoresMembros();
199|        usort($membros, static fn (CompanyMembers $a, CompanyMembers $b) => ($a->getId() ?? 0) <=> ($b->getId() ?? 0));
200|
201|        $titulo = $aut->getTitulo();
202|        $descCat = AutorizacaoTipoCatalog::descricaoPorTitulo($titulo);
203|        $descGravada = $aut->getDescricao();
204|        $descExibicao = $descCat ?? ($descGravada !== null && $descGravada !== '' ? $descGravada : null);
205|
206|        $validadeRaw    = $aut->getValidade();
207|        $validadeDias   = $this->parseValidadeDias($validadeRaw);
208|        $emitidaDate    = $aut->getEmitida();
209|        $validadeExpira = null;
210|
211|        if ($validadeRaw !== null && $validadeRaw !== '') {
212|            if ($this->isDateString($validadeRaw)) {
213|                $validadeExpira = $validadeRaw;
214|            } elseif ($validadeDias !== null && $emitidaDate !== null) {
215|                $expira = (clone \DateTime::createFromInterface($emitidaDate))->modify('+' . $validadeDias . ' days');
216|                $validadeExpira = $expira->format('Y-m-d');
217|            }
218|        }
219|
220|        return [
221|            'id'                  => $aut->getId(),
222|            'titulo'              => $titulo,
223|            'descricao'           => $descGravada,
224|            'descricao_exibicao'  => $descExibicao,
225|            'validade'            => $validadeRaw,
226|            'validade_dias'       => $validadeDias,
227|            'validade_expira'     => $validadeExpira,
228|            'emitida'             => $emitidaDate?->format('Y-m-d'),
229|            'status'              => $aut->getStatus(),
230|            'requisitos'          => $aut->getRequisitosList(),
231|            'contractor_requirement_dependencies' => $aut->getContractorRequirementDependencies(),
232|            'responsavel_id'      => $aut->getResponsavelMember()?->getId(),
233|            'area_id'             => $aut->getArea()?->getId(),
234|            'aprovador_id'        => $aut->getAprovadorMember()?->getId(),
235|            'aprovador_role_id'   => $aut->getAprovadorRole()?->getId(),
236|            'tipo'                => $aut->getTipo(),
237|            'colaboradores'       => array_map(fn (CompanyMembers $cm) => $this->colaboradorRow($cm), $membros),
238|        ];
239|    }
240|
241|    private function parseValidadeDias(?string $val): ?int
242|    {
243|        if ($val === null || $val === '') {
244|            return null;
245|        }
246|        if (ctype_digit($val)) {
247|            return (int) $val;
248|        }
249|
250|        return null;
251|    }
252|
253|    /**
254|     * Returns true when the string is a Y-m-d date (SSMA flow stores expiry date directly).
255|     */
256|    private function isDateString(?string $val): bool
257|    {
258|        if ($val === null || $val === '') {
259|            return false;
260|        }
261|
262|        return (bool) preg_match('/^\d{4}-\d{2}-\d{2}$/', $val);
263|    }
264|
265|    private function colaboradorRow(CompanyMembers $cm): array
266|    {
267|        $row = $cm->__toArray();
268|
269|        return [
270|            'id'     => $row['id'],
271|            'name'   => $row['name'] ?? '',
272|            'avatar' => $row['avatar'] ?? null,
273|            'email'  => $row['email'] ?? null,
274|        ];
275|    }
276|}
277|

{"file_patterns": ["src/"], "search_text": "GovernanceAuthorizationRepository"}

File: src/Controller/CompanyMemberController.php
Match lines: 5
51|use App\Repository\GovernanceAuthorizationRepository;
3098|        /** @var GovernanceAuthorizationRepository $repo */
3149|        /** @var GovernanceAuthorizationRepository $repo */
3265|        /** @var GovernanceAuthorizationRepository $autRepo */
3334|        /** @var GovernanceAuthorizationRepository $repo */

File: src/Controller/Governance/MemberGovernancePendenciesController.php
Match lines: 2
13|use App\Repository\GovernanceAuthorizationRepository;
244|        /** @var GovernanceAuthorizationRepository $repo */

File: src/Controller/GovernanceController.php
Match lines: 3
22|use App\Repository\GovernanceAuthorizationRepository;
1456|            /** @var GovernanceAuthorizationRepository $autRepo */
1857|        /** @var GovernanceAuthorizationRepository $repo */

File: src/Entity/GovernanceAuthorization.php
Match lines: 2
7|use App\Repository\GovernanceAuthorizationRepository;
13| * @ORM\Entity(repositoryClass=GovernanceAuthorizationRepository::class)

File: src/Repository/GovernanceAuthorizationRepository.php
Match lines: 1
23|class GovernanceAuthorizationRepository extends ServiceEntityRepository

File: src/Service/Governance/GovernanceMemberAuthorizationHistoryService.php
Match lines: 2
10|use App\Repository\GovernanceAuthorizationRepository;
227|        /** @var GovernanceAuthorizationRepository $authorizationRepo */

File: src/Service/Governance/GovernanceMemberPendenciesService.php
Match lines: 3
12|use App\Repository\GovernanceAuthorizationRepository;
43|        /** @var GovernanceAuthorizationRepository $repo */
59|        /** @var GovernanceAuthorizationRepository $repo */

{"file_patterns": ["src/Repository/GovernanceAuthorizationRepository.php"], "search_text": "function |->toArray\\(", "use_perl_regexp": true}

File: src/Repository/GovernanceAuthorizationRepository.php
Match lines: 13
25|    public function __construct(ManagerRegistry $registry)
35|    public function findByMember(CompanyMembers $member): array
46|    public function memberParticipates(GovernanceAuthorization $aut, CompanyMembers $member): bool
57|    public function saveAutorizacao(array $data, Company $company, CompanyMembers $member): GovernanceAuthorization
107|    private function normalizeColaboradorMemberIds($raw, CompanyMembers $principal): array
123|    private function syncColaboradores(GovernanceAuthorization $aut, array $memberIds, Company $company, \Doctrine\ORM\EntityManagerInterface $em): void
138|        foreach ($aut->getColaboradoresVinculos()->toArray() as $v) {
164|    public function unlinkMember(GovernanceAuthorization $aut, CompanyMembers $member): void
184|    public function removeAutorizacao(int $id, Company $company): void
196|    public function toArray(GovernanceAuthorization $aut): array
241|    private function parseValidadeDias(?string $val): ?int
256|    private function isDateString(?string $val): bool
265|    private function colaboradorRow(CompanyMembers $cm): array

{"file_patterns": ["src/Controller/GovernanceController.php"], "search_text": "function loadAuthorizationsData"}

File: src/Controller/GovernanceController.php
Match lines: 1
3101|    private function loadAuthorizationsData(Company $company, array $allMembers, array $teams, ?array $visibleMemberIds = null): array

{"end_line": 3240, "file_path": "src/Controller/GovernanceController.php", "start_line": 3101}

File: src/Controller/GovernanceController.php (Total lines: 6154)
IS_TRUNCATED: false
LINE_RANGE: 3101-3240
3101|    private function loadAuthorizationsData(Company $company, array $allMembers, array $teams, ?array $visibleMemberIds = null): array
3102|    {
3103|        /** @var GovernanceAuthorization[] $autorizacoes */
3104|        $autorizacoes = $this->entityManager->getRepository(GovernanceAuthorization::class)
3105|            ->findBy(['company' => $company], ['createdAt' => 'DESC']);
3106|
3107|        $today = new \DateTime();
3108|        $today->setTime(0, 0, 0);
3109|
3110|        $ativas = 0;
3111|        $vencidas = 0;
3112|        $chartVencidas = 0;
3113|        $chartProx30 = 0;
3114|        $chartDias3160 = 0;
3115|        $chartDias6190 = 0;
3116|        $tableRows = [];
3117|        $alertas = [];
3118|        $membersWithActiveAuth = [];
3119|        $memberTeamsMap = [];
3120|        foreach ($teams as $team) {
3121|            $teamName = trim((string) ($team['name'] ?? ''));
3122|            if ($teamName === '') {
3123|                continue;
3124|            }
3125|            foreach (($team['members'] ?? []) as $memberId) {
3126|                $memberTeamsMap[(int) $memberId][] = $teamName;
3127|            }
3128|        }
3129|        $expiredByTeam = [];
3130|        $aVencerRows = 0;
3131|        $teamsByStatus = [];
3132|        foreach ($teams as $team) {
3133|            $teamName = trim((string) ($team['name'] ?? ''));
3134|            if ($teamName === '') {
3135|                continue;
3136|            }
3137|            $teamsByStatus[$teamName] = [
3138|                'name' => $teamName,
3139|                'member_count' => count($team['members'] ?? []),
3140|                'conforme' => 0,
3141|                'a_vencer' => 0,
3142|                'inativo' => 0,
3143|            ];
3144|        }
3145|
3146|        $membersWithoutTeam = [];
3147|        foreach ($allMembers as $memberRow) {
3148|            $memberId = (int) ($memberRow['id'] ?? 0);
3149|            if ($memberId > 0 && empty($memberTeamsMap[$memberId])) {
3150|                $membersWithoutTeam[$memberId] = true;
3151|            }
3152|        }
3153|        $membersWithoutTeamCount = count($membersWithoutTeam);
3154|
3155|        $avatarColors = ['#EA151C', '#186073', '#25AD52', '#FFC107', '#6F42C1', '#FD7E14', '#20C997', '#DC3545'];
3156|        $visibleMemberIdSet = is_array($visibleMemberIds) ? array_fill_keys(array_map('intval', $visibleMemberIds), true) : null;
3157|
3158|        foreach ($autorizacoes as $aut) {
3159|            if ($visibleMemberIdSet !== null) {
3160|                $hasVisibleCollaborator = false;
3161|                foreach ($aut->getColaboradoresMembros() as $cm) {
3162|                    if (isset($visibleMemberIdSet[(int) $cm->getId()])) {
3163|                        $hasVisibleCollaborator = true;
3164|                        break;
3165|                    }
3166|                }
3167|
3168|                if (!$hasVisibleCollaborator) {
3169|                    continue;
3170|                }
3171|            }
3172|
3173|            $requisitosList = $aut->getRequisitosList();
3174|            $validadeInfo = $this->authorizationConditionConfig->resolveAuthorizationValidadeDisplay($company, $requisitosList);
3175|            $diasRestantes = null;
3176|            $valDate = null;
3177|            $statusReal = 'ativa';
3178|            $category = 'ok';
3179|            $autStatus = strtolower((string) ($aut->getStatus() ?: 'ativa'));
3180|
3181|            if ($autStatus !== 'ativa') {
3182|                $statusReal = 'inativa';
3183|                $category = 'inativa';
3184|            } else {
3185|                $valDate = $this->resolveAuthorizationExpiryDate($aut, $company);
3186|                if ($valDate instanceof \DateTime) {
3187|                    $diff = (int) $today->diff($valDate)->days;
3188|
3189|                    if ($valDate < $today) {
3190|                        $diasRestantes = -$diff;
3191|                        $statusReal = 'vencida';
3192|                        $category = 'vencida';
3193|                        ++$vencidas;
3194|                    } else {
3195|                        $diasRestantes = $diff;
3196|                        ++$ativas;
3197|                        if ($diff <= 30) {
3198|                            $statusReal = 'a_vencer';
3199|                            $category = 'proximos_30';
3200|                        } elseif ($diff <= 60) {
3201|                            $category = 'dias_31_60';
3202|                        } elseif ($diff <= 90) {
3203|                            $category = 'dias_61_90';
3204|                        }
3205|                    }
3206|                } else {
3207|                    ++$ativas;
3208|                }
3209|            }
3210|
3211|            foreach ($aut->getColaboradoresVinculos() as $vinculo) {
3212|                $cm = $vinculo->getCompanyMember();
3213|                if (!$cm instanceof CompanyMembers) {
3214|                    continue;
3215|                }
3216|
3217|                $memberId = (int) $cm->getId();
3218|                if ($visibleMemberIdSet !== null && !isset($visibleMemberIdSet[$memberId])) {
3219|                    continue;
3220|                }
3221|
3222|                $this->authorizationStatusService->recalculateRequirementStatus($vinculo);
3223|
3224|                $statusRequisito = strtolower((string) $vinculo->getStatusRequisito());
3225|                $conformityStatus = $this->authorizationComplianceViewService->resolveMemberVinculoConformityStatus(
3226|                    $aut,
3227|                    $vinculo,
3228|                    $company
3229|                );
3230|                $contextoLabel = $this->authorizationComplianceViewService->resolveMonitoringContextLabel(
3231|                    $statusReal,
3232|                    $statusRequisito,
3233|                    $vinculo
3234|                );
3235|                $vinculoValidade = $this->authorizationComplianceViewService->resolveMonitoringValidadeForVinculo(
3236|                    $vinculo,
3237|                    $aut,
3238|                    $company,
3239|                    $today
3240|                );

{"end_line": 3340, "file_path": "src/Controller/GovernanceController.php", "start_line": 3240}

File: src/Controller/GovernanceController.php (Total lines: 6154)
IS_TRUNCATED: false
LINE_RANGE: 3240-3340
3240|                );
3241|                $rowValidadeData = $vinculoValidade['validade_data'];
3242|                $rowDiasRestantes = $vinculoValidade['dias_restantes'];
3243|                $rowCategory = $this->resolveMonitoringPeriodCategory($rowDiasRestantes, $statusReal);
3244|
3245|                switch ($rowCategory) {
3246|                    case 'vencida':
3247|                        ++$chartVencidas;
3248|                        break;
3249|                    case 'proximos_30':
3250|                        ++$chartProx30;
3251|                        break;
3252|                    case 'dias_31_60':
3253|                        ++$chartDias3160;
3254|                        break;
3255|                    case 'dias_61_90':
3256|                        ++$chartDias6190;
3257|                        break;
3258|                }
3259|
3260|                $memberUser = $cm->getUser();
3261|                $name = $cm->getFullName() ?: ($cm->getEmail() ?? '');
3262|                $avatar = $memberUser ? $memberUser->getAvatar() : null;
3263|                $avatarBg = $avatarColors[$memberId % count($avatarColors)];
3264|                $posObj = $cm->getRoleMember();
3265|                $cargo = $posObj ? $posObj->getName() : ($cm->getRole() ?? '');
3266|                $bondType = 'colaborador';
3267|                $bondLabel = 'Colaborador';
3268|                if ($cm->isPartner()) {
3269|                    $bondType = 'socio';
3270|                    $bondLabel = 'Sócio';
3271|                } elseif ($cm->isAssistant()) {
3272|                    $bondType = 'assistente';
3273|                    $bondLabel = 'Assistente';
3274|                } elseif ($cm->getTreeType() === 'partner') {
3275|                    $bondType = 'parceiro';
3276|                    $bondLabel = 'Parceiro';
3277|                }
3278|
3279|                if ($conformityStatus === 'em_conformidade' || $conformityStatus === 'a_vencer') {
3280|                    $membersWithActiveAuth[$memberId] = true;
3281|                }
3282|                if ($conformityStatus === 'a_vencer') {
3283|                    ++$aVencerRows;
3284|                }
3285|                if ($rowDiasRestantes !== null && $rowDiasRestantes < 0) {
3286|                    $teamNames = $memberTeamsMap[$memberId] ?? ['Sem equipe'];
3287|                    foreach ($teamNames as $teamName) {
3288|                        $expiredByTeam[$teamName] = ($expiredByTeam[$teamName] ?? 0) + 1;
3289|                    }
3290|                }
3291|
3292|                $teamNames = $memberTeamsMap[$memberId] ?? ['Sem equipe'];
3293|                foreach ($teamNames as $teamName) {
3294|                    if (!isset($teamsByStatus[$teamName])) {
3295|                        $teamsByStatus[$teamName] = [
3296|                            'name' => $teamName,
3297|                            'member_count' => $teamName === 'Sem equipe' ? $membersWithoutTeamCount : 0,
3298|                            'conforme' => 0,
3299|                            'a_vencer' => 0,
3300|                            'inativo' => 0,
3301|                        ];
3302|                    }
3303|                    if ($conformityStatus === 'em_conformidade') {
3304|                        ++$teamsByStatus[$teamName]['conforme'];
3305|                    } elseif ($conformityStatus === 'a_vencer') {
3306|                        ++$teamsByStatus[$teamName]['a_vencer'];
3307|                    } elseif (in_array($conformityStatus, ['nao_conforme', 'bloqueado'], true)) {
3308|                        ++$teamsByStatus[$teamName]['inativo'];
3309|                    }
3310|                }
3311|
3312|                $tableRows[] = [
3313|                    'aut_id' => $aut->getId(),
3314|                    'member_id' => $memberId,
3315|                    'member_name' => $name,
3316|                    'member_cargo' => $cargo,
3317|                    'member_avatar' => $avatar,
3318|                    'avatar_bg' => $avatarBg,
3319|                    'bond_type' => $bondType,
3320|                    'bond_label' => $bondLabel,
3321|                    'titulo' => $aut->getTitulo(),
3322|                    'aut_descricao' => $aut->getDescricao() ?? '',
3323|                    'requisitos' => $aut->getRequisitosList(),
3324|                    'status_real' => $statusReal,
3325|                    'conformity_status' => $conformityStatus,
3326|                    'contexto_label' => $contextoLabel,
3327|                    'validade_exibicao' => $validadeInfo['validade_exibicao'],
3328|                    'validade_data' => $rowValidadeData,
3329|                    'dias_restantes' => $rowDiasRestantes,
3330|                    'category' => $rowCategory,
3331|                ];
3332|
3333|                if ($statusReal === 'vencida' || $statusReal === 'a_vencer') {
3334|                    $alertas[] = [
3335|                        'member_id' => $memberId,
3336|                        'member_name' => $name,
3337|                        'member_cargo' => $cargo,
3338|                        'member_avatar' => $avatar,
3339|                        'avatar_bg' => $avatarBg,
3340|                        'titulo' => $aut->getTitulo(),

{"query_name": "Roles.php"}

src/Entity/OrganizationalRoles.php
src/Entity/Roles.php

{"file_patterns": ["src/Entity/Roles.php"], "search_text": "@ORM\\\\Table|@ORM\\\\Entity|class Roles|function getIsRemoved|function getCompany|function getName|function getId", "use_perl_regexp": true}

File: src/Entity/Roles.php
Match lines: 8
12| * @ORM\Entity(repositoryClass=RolesRepository::class)
14|class Roles
191|    public function getId(): ?int
196|    public function getName(): ?string
256|    public function getCompanyBranch(): ?string
405|    public function getCompany(): ?company
417|    public function getCompanyArea(): ?CompanyArea
453|    public function getIsRemoved(): ?bool

{"search_text": "findForCompany", "file_patterns": ["src/Repository/CompanyAreaRepository.php"]}

File: src/Repository/CompanyAreaRepository.php
Match lines: 1
124|    public function findForCompany(?Company $company, bool $activeOnly = true): array

{"query_name": "GovernanceAuthorizationConfig"}

migrations/Version20260831143000_GovernanceAuthorizationConfig.php
src/Entity/GovernanceAuthorizationConfig.php
src/Repository/GovernanceAuthorizationConfigRepository.php
src/Service/Governance/GovernanceAuthorizationConfigService.php

{"end_line": 60, "file_path": "src/Entity/Roles.php", "start_line": 1}

File: src/Entity/Roles.php (Total lines: 594)
IS_TRUNCATED: false
LINE_RANGE: 1-60
1|<?php
2|
3|namespace App\Entity;
4|
5|use App\Entity\Concerns\ResolvesCompanyAreaSafely;
6|use App\Repository\RolesRepository;
7|use Doctrine\Common\Collections\ArrayCollection;
8|use Doctrine\Common\Collections\Collection;
9|use Doctrine\ORM\Mapping as ORM;
10|
11|/**
12| * @ORM\Entity(repositoryClass=RolesRepository::class)
13| */
14|class Roles
15|{
16|    use ResolvesCompanyAreaSafely;
17|
18|    /**
19|     * @ORM\Id
20|     * @ORM\GeneratedValue
21|     * @ORM\Column(type="integer")
22|     */
23|    private $id;
24|
25|    /**
26|     * @ORM\Column(type="string", length=255)
27|     */
28|    private $name;
29|
30|    /**
31|     * @ORM\Column(type="string", length=255, nullable=true)
32|     */
33|    private $description;
34|
35|    /**
36|     * @ORM\Column(type="string", length=255, nullable=true)
37|     */
38|    private $remunerationPolicy;
39|
40|    /**
41|     * @ORM\ManyToOne(targetEntity=TypeContract::class)
42|     * @ORM\JoinColumn(nullable=true)
43|     */
44|    private $typeContract;
45|
46|    /**
47|     * Parent structure (CHEFE). Null for structures and legacy standalone roles.
48|     *
49|     * @ORM\ManyToOne(targetEntity=Roles::class, inversedBy="children")
50|     * @ORM\JoinColumn(name="parent_id", referencedColumnName="id", nullable=true, onDelete="RESTRICT")
51|     */
52|    private $parent;
53|
54|    /**
55|     * Seniorities under this structure.
56|     *
57|     * @ORM\OneToMany(targetEntity=Roles::class, mappedBy="parent")
58|     */
59|    private $children;
60|

{"end_line": 120, "file_path": "src/Entity/GovernanceAuthorization.php", "start_line": 1}

File: src/Entity/GovernanceAuthorization.php (Total lines: 409)
IS_TRUNCATED: false
LINE_RANGE: 1-120
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Entity;
6|
7|use App\Repository\GovernanceAuthorizationRepository;
8|use Doctrine\Common\Collections\ArrayCollection;
9|use Doctrine\Common\Collections\Collection;
10|use Doctrine\ORM\Mapping as ORM;
11|
12|/**
13| * @ORM\Entity(repositoryClass=GovernanceAuthorizationRepository::class)
14| * @ORM\Table(name="member_autorizacao")
15| * @ORM\HasLifecycleCallbacks
16| */
17|class GovernanceAuthorization
18|{
19|    /**
20|     * @ORM\Id
21|     * @ORM\GeneratedValue
22|     * @ORM\Column(type="integer")
23|     */
24|    private $id;
25|
26|    /**
27|     * @ORM\ManyToOne(targetEntity=Company::class)
28|     * @ORM\JoinColumn(nullable=false, onDelete="CASCADE")
29|     */
30|    private $company;
31|
32|    /**
33|     * @ORM\Column(type="string", length=255)
34|     */
35|    private $titulo;
36|
37|    /**
38|     * @ORM\Column(type="text", nullable=true)
39|     */
40|    private $descricao;
41|
42|    /**
43|     * @ORM\Column(type="string", length=100, nullable=true)
44|     */
45|    private $validade;
46|
47|    /**
48|     * @ORM\Column(type="date", nullable=true)
49|     */
50|    private $emitida;
51|
52|    /**
53|     * @ORM\Column(type="string", length=20, options={"default": "ativa"})
54|     */
55|    private $status = 'ativa';
56|
57|    /**
58|     * Lista de requisitos (rótulos do catálogo SSMA), ex.: CNH AB, ASO.
59|     *
60|     * @ORM\Column(type="json", nullable=true)
61|     *
62|     * @var list<string>|null
63|     */
64|    private ?array $requisitos = null;
65|
66|    /**
67|     * IDs de requisitos documentais de empresas parceiras que impactam esta autorização.
68|     *
69|     * @ORM\Column(name="contractor_requirement_dependencies", type="json", nullable=true)
70|     *
71|     * @var list<int>|null
72|     */
73|    private ?array $contractorRequirementDependencies = null;
74|
75|    /**
76|     * @ORM\Column(type="datetime")
77|     */
78|    private $createdAt;
79|
80|    /**
81|     * @ORM\Column(type="datetime", nullable=true)
82|     */
83|    private $updatedAt;
84|
85|    /**
86|     * @ORM\ManyToOne(targetEntity=CompanyMembers::class)
87|     * @ORM\JoinColumn(name="responsavel_member_id", referencedColumnName="id", nullable=true, onDelete="SET NULL")
88|     */
89|    private ?CompanyMembers $responsavelMember = null;
90|
91|    /**
92|     * @ORM\ManyToOne(targetEntity=CompanyArea::class)
93|     * @ORM\JoinColumn(name="area_id", referencedColumnName="id", nullable=true, onDelete="SET NULL")
94|     */
95|    private ?CompanyArea $area = null;
96|
97|    /**
98|     * @ORM\ManyToOne(targetEntity=CompanyMembers::class)
99|     * @ORM\JoinColumn(name="aprovador_member_id", referencedColumnName="id", nullable=true, onDelete="SET NULL")
100|     */
101|    private ?CompanyMembers $aprovadorMember = null;
102|
103|    /**
104|     * Cargo aprovador específico desta autorização (fallback da Configuração quando ausente).
105|     *
106|     * @ORM\ManyToOne(targetEntity=Roles::class)
107|     * @ORM\JoinColumn(name="aprovador_role_id", referencedColumnName="id", nullable=true, onDelete="SET NULL")
108|     */
109|    private ?Roles $aprovadorRole = null;
110|
111|    /**
112|     * Tipo de autorização cadastrado em Configurações.
113|     *
114|     * @ORM\Column(type="string", length=255, nullable=true)
115|     */
116|    private ?string $tipo = null;
117|
118|    /**
119|     * @var Collection<int, GovernanceAuthorizationCollaborator>
120|     * @ORM\OneToMany(targetEntity=GovernanceAuthorizationCollaborator::class, mappedBy="memberAutorizacao", cascade={"persist", "remove"}, orphanRemoval=true)

{"query_name": "GovernanceAuthorizationConfigTest"}

// The file was not found

{"query_name": "GovernanceControllerTest"}

// The file was not found

{"file_patterns": ["migrations/"], "search_text": "CREATE TABLE roles"}

No matches found

{"file_patterns": ["tests/"], "search_text": "authorizations/config|authorizationConfig|GovernanceAuthorizationConfig", "use_perl_regexp": true}

No matches found

{"file_patterns": ["migrations/"], "search_text": "company_area|member_autorizacao"}

No matches found

{"query_name": "migrations"}

.opencodereview/rules/backend/migrations.md
config/packages/doctrine_migrations.yaml
docs/empresas-parceiras/engineering/migrations.md
docs/finance/08-database-migrations.md
docs/merge/MIGRATIONS_POS_MERGE.md
docs/ontology/decisions/adr_009_legacy_unavailable_migrations.md
docs/ssma/MIGRATIONS-MAPEAMENTO.md
migration_archive_20260508/Version20260311120000_UnifyFinancialHubMigrations.php
public/js/ckfinder/core/connector/php/vendor/aws/aws-sdk-php/src/DatabaseMigrationService/DatabaseMigrationServiceClient.php
public/js/ckfinder/core/connector/php/vendor/aws/aws-sdk-php/src/DatabaseMigrationService/Exception/DatabaseMigrationServiceException.php
sh/check_migrations_executed.sh
sh/execute_selected_migrations.sh

{"file_patterns": ["migrations/*.php"], "search_text": "member_autorizacao"}

File: migrations/Version20260526095800.php
Match lines: 1
55|                CONSTRAINT FK_GOVERNANCE_BADGE_AUTH_AUTHORIZATION FOREIGN KEY (authorization_id) REFERENCES member_autorizacao (id) ON DELETE CASCADE,

File: migrations/Version20260609120000_AddResponsavelMemberToMemberAutorizacao.php
Match lines: 7
14|        return 'Adiciona responsavel_member_id em member_autorizacao';
19|        $this->addSql('ALTER TABLE member_autorizacao ADD COLUMN IF NOT EXISTS responsavel_member_id INT DEFAULT NULL');
20|        $this->addSql('CREATE INDEX IF NOT EXISTS IDX_MA_responsavel ON member_autorizacao (responsavel_member_id)');
21|        $this->addSql('ALTER TABLE member_autorizacao ADD CONSTRAINT FK_MA_responsavel FOREIGN KEY (responsavel_member_id) REFERENCES company_members (id) ON DELETE SET NULL');
26|        $this->addSql('ALTER TABLE member_autorizacao DROP FOREIGN KEY FK_MA_responsavel');
27|        $this->addSql('DROP INDEX IDX_MA_responsavel ON member_autorizacao');
28|        $this->addSql('ALTER TABLE member_autorizacao DROP COLUMN IF EXISTS responsavel_member_id');

File: migrations/Version20260623120000_GovernanceAuthorizationCollaboratorCnhValidadePorRequisito.php
Match lines: 2
19|        $this->addSql('ALTER TABLE member_autorizacao_colaborador ADD cnh_validade_por_requisito JSON DEFAULT NULL');
24|        $this->addSql('ALTER TABLE member_autorizacao_colaborador DROP cnh_validade_por_requisito');

File: migrations/Version20260713113000_AddRegraBloqueioToContractorDocumentRequirements.php
Match lines: 9
17| * - Integra dependências de requisitos documentais em member_autorizacao (governança/autorizações).
27| * - ALTER member_autorizacao ADD contractor_requirement_dependencies JSON NULL
36|        return '[Empresas Parceiras] Adiciona regras de bloqueio em requisitos, responsável interno na empresa parceira e dependências em member_autorizacao.';
69|        if ($this->tableExists('member_autorizacao')) {
70|            if (!$this->columnExists('member_autorizacao', 'contractor_requirement_dependencies')) {
71|                $this->addSql('ALTER TABLE member_autorizacao ADD contractor_requirement_dependencies JSON DEFAULT NULL COMMENT \'(DC2Type:json)\'');
78|        if ($this->tableExists('member_autorizacao')) {
79|            if ($this->columnExists('member_autorizacao', 'contractor_requirement_dependencies')) {
80|                $this->addSql('ALTER TABLE member_autorizacao DROP COLUMN contractor_requirement_dependencies');

File: migrations/Version20260831143000_GovernanceAuthorizationConfig.php
Match lines: 15
14|        return 'Cria a configuração normalizada de autorizações e adiciona área, aprovador e tipo em member_autorizacao.';
92|        if (!$schemaManager->tablesExist(['member_autorizacao'])) {
96|        $table = $schemaManager->introspectTable('member_autorizacao');
99|            $this->addSql('ALTER TABLE member_autorizacao ADD area_id INT DEFAULT NULL');
102|            $this->addSql('ALTER TABLE member_autorizacao ADD CONSTRAINT FK_MA_area FOREIGN KEY (area_id) REFERENCES company_area (id) ON DELETE SET NULL');
106|            $this->addSql('ALTER TABLE member_autorizacao ADD aprovador_member_id INT DEFAULT NULL');
109|            $this->addSql('ALTER TABLE member_autorizacao ADD CONSTRAINT FK_MA_aprovador FOREIGN KEY (aprovador_member_id) REFERENCES company_members (id) ON DELETE SET NULL');
113|            $this->addSql('ALTER TABLE member_autorizacao ADD tipo VARCHAR(255) DEFAULT NULL');
121|        if ($schemaManager->tablesExist(['member_autorizacao'])) {
122|            $table = $schemaManager->introspectTable('member_autorizacao');
125|                $this->addSql('ALTER TABLE member_autorizacao DROP FOREIGN KEY FK_MA_aprovador');
128|                $this->addSql('ALTER TABLE member_autorizacao DROP COLUMN aprovador_member_id');
132|                $this->addSql('ALTER TABLE member_autorizacao DROP FOREIGN KEY FK_MA_area');
135|                $this->addSql('ALTER TABLE member_autorizacao DROP COLUMN area_id');
139|                $this->addSql('ALTER TABLE member_autorizacao DROP COLUMN tipo');

File: migrations/Version20260902160000_AuthorizationSpecificApproverRole.php
Match lines: 9
20|        if (!$schemaManager->tablesExist(['member_autorizacao'])) {
24|        $table = $schemaManager->introspectTable('member_autorizacao');
26|            $this->addSql('ALTER TABLE member_autorizacao ADD aprovador_role_id INT DEFAULT NULL');
29|        $table = $schemaManager->introspectTable('member_autorizacao');
31|            $this->addSql('ALTER TABLE member_autorizacao ADD CONSTRAINT FK_MA_aprovador_role FOREIGN KEY (aprovador_role_id) REFERENCES roles (id) ON DELETE SET NULL');
38|        if (!$schemaManager->tablesExist(['member_autorizacao'])) {
42|        $table = $schemaManager->introspectTable('member_autorizacao');
44|            $this->addSql('ALTER TABLE member_autorizacao DROP FOREIGN KEY FK_MA_aprovador_role');
47|            $this->addSql('ALTER TABLE member_autorizacao DROP COLUMN aprovador_role_id');

{"end_line": 420, "file_path": "config/routes_governance.yaml", "start_line": 300}

File: config/routes_governance.yaml (Total lines: 408)
IS_TRUNCATED: false
LINE_RANGE: 300-408
300|  requirements:
301|    autId: '\d+'
302|
303|governance_authorization_documents_list:
304|  path: /manager/governance/authorizations/{autId}/member/{memberId}/documents
305|  controller: App\Controller\GovernanceController::authorizationDocumentsList
306|  methods: [GET]
307|  requirements:
308|    autId: '\d+'
309|    memberId: '\d+'
310|
311|governance_authorization_document_upload:
312|  path: /manager/governance/authorizations/{autId}/member/{memberId}/documents/upload
313|  controller: App\Controller\GovernanceController::authorizationDocumentUpload
314|  methods: [POST]
315|  requirements:
316|    autId: '\d+'
317|    memberId: '\d+'
318|
319|governance_authorization_requirement_validity_save:
320|  path: /manager/governance/authorizations/{autId}/member/{memberId}/requirement-validity
321|  controller: App\Controller\GovernanceController::authorizationRequirementValiditySave
322|  methods: [POST]
323|  requirements:
324|    autId: '\d+'
325|    memberId: '\d+'
326|
327|governance_authorization_document_validate:
328|  path: /manager/governance/authorizations/document/{docId}/validate
329|  controller: App\Controller\GovernanceController::authorizationDocumentValidate
330|  methods: [POST]
331|  requirements:
332|    docId: '\d+'
333|
334|governance_authorization_document_remove:
335|  path: /manager/governance/authorizations/document/{docId}/remove
336|  controller: App\Controller\GovernanceController::authorizationDocumentRemove
337|  methods: [POST]
338|  requirements:
339|    docId: '\d+'
340|
341|governance_authorization_member_cnh_get:
342|  path: /manager/governance/authorizations/member/{memberId}/cnh
343|  controller: App\Controller\GovernanceController::authorizationMemberCnhGet
344|  methods: [GET]
345|  requirements:
346|    memberId: '\d+'
347|
348|governance_authorization_member_cnh_save:
349|  path: /manager/governance/authorizations/member/{memberId}/cnh/save
350|  controller: App\Controller\GovernanceController::authorizationMemberCnhSave
351|  methods: [POST]
352|  requirements:
353|    memberId: '\d+'
354|
355|governance_authorization_conditions_get:
356|  path: /manager/governance/authorizations/conditions
357|  controller: App\Controller\GovernanceController::authorizationConditionsGet
358|  methods: [GET]
359|
360|governance_authorization_conditions_save:
361|  path: /manager/governance/authorizations/conditions
362|  controller: App\Controller\GovernanceController::authorizationConditionsSave
363|  methods: [POST]
364|
365|governance_authorization_condition_usage:
366|  path: /manager/governance/authorizations/conditions/usage
367|  controller: App\Controller\GovernanceController::authorizationConditionUsage
368|  methods: [GET]
369|
370|governance_authorization_config_get:
371|  path: /manager/governance/authorizations/config
372|  controller: App\Controller\GovernanceController::authorizationConfigGet
373|  methods: [GET]
374|
375|governance_authorization_config_save:
376|  path: /manager/governance/authorizations/config
377|  controller: App\Controller\GovernanceController::authorizationConfigSave
378|  methods: [POST]
379|
380|member_governance_pendencies_index:
381|  path: /user/pendencies
382|  controller: App\Controller\Governance\MemberGovernancePendenciesController::index
383|  methods: [GET]
384|
385|member_governance_pendencies_documents_list:
386|  path: /user/pendencies/authorizations/{autId}/documents
387|  controller: App\Controller\Governance\MemberGovernancePendenciesController::documentsList
388|  methods: [GET]
389|  requirements:
390|    autId: '\d+'
391|
392|member_governance_pendencies_document_upload:
393|  path: /user/pendencies/authorizations/{autId}/documents/upload
394|  controller: App\Controller\Governance\MemberGovernancePendenciesController::documentUpload
395|  methods: [POST]
396|  requirements:
397|    autId: '\d+'
398|
399|member_governance_pendencies_profile_cnh:
400|  path: /user/pendencies/profile/cnh
401|  controller: App\Controller\Governance\MemberGovernancePendenciesController::profileCnh
402|  methods: [GET]
403|
404|member_governance_pendencies_profile_cnh_save:
405|  path: /user/pendencies/profile/cnh/save
406|  controller: App\Controller\Governance\MemberGovernancePendenciesController::profileCnhSave
407|  methods: [POST]
408|

{"file_patterns": ["templates/", "*.twig"], "search_text": "aut_authorization_|aut_company_areas|aut_company_roles", "use_perl_regexp": true}

No matches found

{"file_patterns": ["config/packages/security.yaml"], "search_text": "stateless|firewalls|manager"}

No matches found

{"query_name": "database-changes/2026-08-31-governance-authorization-config"}

docs/database-changes/2026-08-31-governance-authorization-config.md

{"query_name": "security"}

.claude/agents/especialistas/symfony/security_specialist.md
agents/especialistas/security_engineer.md
agents/especialistas/symfony/security_specialist.md
config/packages/dev/security.yaml
config/packages/security.yaml
docs/Interview/engineering/session-security.md
docs/adriana-cognitive-layer/SECURITY.md
public/jquery-file-upload/SECURITY.md
public/js/jquery-file-upload/SECURITY.md
src/Controller/SecurityActionEffectivenessController.php
src/Controller/SecurityController.php
src/Controller/SecurityLeadershipEvaluationController.php
src/Service/AdrianaCognitiveLayer/Tools/AdrianaToolSecurityContext.php
src/Service/Interview/InterviewIpSecurityPolicy.php
src/Service/Ssma/Effectiveness/SecurityActionEffectivenessPresenter.php
src/Service/Ssma/Effectiveness/SecurityLeadershipEvaluationPresenter.php
tests/Unit/Product/DocumentTemplatesSignature/SecurityControllerSideEffectTest.php
tests/Unit/Product/PesquisaIaTermoCpfIp/InterviewIpSecurityPolicyTest.php
tests/Unit/Product/PesquisaIaTermoCpfIp/PesquisaIaSessionSecurityServiceTest.php
tests/Unit/Product/Ssma/SecurityActionEffectivenessPresenterTest.php
tests/Unit/Product/Ssma/SecurityLeadershipEvaluationPresenterTest.php

{"file_patterns": ["config/packages/security.yaml"], "search_text": "manager|stateless|firewall"}

No matches found

{"file_path": "config/packages/security.yaml"}

File: config/packages/security.yaml (Total lines: 185)
IS_TRUNCATED: false
LINE_RANGE: 1-185
1|security:
2|    # Guard authenticators only — avoid GuardBridgeAuthenticator deprecation (Symfony 5.3+)
3|    enable_authenticator_manager: true
4|    password_hashers:
5|        App\Entity\User:
6|            algorithm: auto
7|
8|    # https://symfony.com/doc/current/security.html#where-do-users-come-from-user-providers
9|    providers:
10|        # used to reload user from session & other features (e.g. switch_user)
11|        app_user_provider:
12|            id: App\Repository\UserRepository
13|    role_hierarchy:
14|        ROLE_SUPER_ADMIN: [ROLE_MANAGER]
15|        ROLE_MANAGER: [ROLE_ALLOWED_TO_SWITCH, ROLE_MANAGER_COMPANY, ROLE_MANAGER_TEAM, ROLE_MANAGER_PDI]
16|        ROLE_GERENTE_CONTA: [ROLE_USER]
17|        ROLE_DIRETOR_COMERCIAL: [ROLE_USER]
18|        ROLE_CS_ALERTAS: [ROLE_USER]
19|        ROLE_FINANCIAL_ALERT: [ROLE_USER]
20|    #role_hierarchy:
21|    #    ROLE_SUPER_ADMIN:       ROLE_ADMIN
22|    #    ROLE_ADMIN:            ROLE_MANAGER
23|    #    ROLE_COMPANY_ADMIN:    ROLE_COMPANY_MANAGER
24|    #    ROLE_COMPANY_MANAGER:  ROLE_USER
25|    #    ROLE_USER:             ~
26|    firewalls:
27|        dev:
28|            pattern: ^/(_(profiler|wdt)|css|images|js)/
29|            security: false
30|        main:
31|            switch_user: { role: ROLE_MANAGER }
32|            # Necessário com enable_authenticator_manager: false (Guard)
33|            provider: app_user_provider
34|            guard:
35|                authenticators:
36|                    - App\Security\LoginFormAuthenticator
37|            logout:
38|                path: app_logout
39|            # Lembrar-me: o formulário envia _remember_me; sem isto o cookie não era gravado.
40|            remember_me:
41|                secret: '%kernel.secret%'
42|                lifetime: 604800
43|                path: /
44|                name: REMEMBERME
45|                secure: auto
46|                httponly: true
47|                samesite: lax
48|            # activate different ways to authenticate
49|            # https://symfony.com/doc/current/security.html#firewalls-authentication
50|
51|            # https://symfony.com/doc/current/security/impersonating_user.html
52|            # switch_user: true
53|
54|    # Easy way to control access for large sections of your site
55|    # Note: Only the *first* access control that matches will be used
56|    access_control:
57|        - { path: ^/user/show, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER] }
58|        - { path: ^/connect/microsoft/callback, roles: PUBLIC_ACCESS }
59|        - { path: ^/ws, roles: PUBLIC_ACCESS }
60|        - { path: ^/training, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
61|        - { path: ^/notifications-center, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
62|        - { path: ^/manager/communication-center, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
63|        - { path: ^/manager/ssma, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_SUPER_ADMIN, ROLE_MANAGER_VIEWER, ROLE_USER], methods: [POST, PUT, PATCH, DELETE] }
64|        - { path: ^/manager/ssma, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_SUPER_ADMIN, ROLE_MANAGER_VIEWER, ROLE_USER] }
65|        - { path: ^/templates-whatsapp, roles: [ROLE_SUPER_ADMIN] }
66|        - { path: ^/token, roles: PUBLIC_ACCESS }
67|        - { path: ^/manager/ai-training-module/gerenciamento/, roles: [ROLE_MANAGER, ROLE_USER, ROLE_SUPER_ADMIN] }
68|        - { path: ^/manager/ai-training-module/list/, roles: [ROLE_MANAGER, ROLE_USER, ROLE_SUPER_ADMIN] }
69|        - { path: ^/login, roles: PUBLIC_ACCESS }
70|        - { path: ^/user/change-temporary-password, roles: PUBLIC_ACCESS }
71|        - { path: ^/access, roles: PUBLIC_ACCESS }
72|        - { path: ^/manager/ai-training-module/dashboard/, roles: [ROLE_MANAGER, ROLE_USER, ROLE_SUPER_ADMIN] }
73|        - { path: ^/evaluator-registration, roles: PUBLIC_ACCESS }
74|        - { path: ^/user/hub, roles: [ROLE_USER] }
75|        - { path: ^/evaluator-register, roles: PUBLIC_ACCESS }
76|        - { path: ^/evaluator-activation, roles: PUBLIC_ACCESS }
77|        - { path: ^/site-config/smtp, roles: [ROLE_SUPER_ADMIN] }
78|        - { path: ^/manager/process$, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER, ROLE_USER] }
79|        - { path: ^/spaces-control, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
80|        - { path: ^/manager/hub-in-progress, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER, ROLE_SUPER_ADMIN] }
81|        - { path: ^/user/specialist/management_data, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
82|        - { path: ^/management/update-receipt, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
83|        - { path: ^/management/update-recipts, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
84|        - { path: ^/user/specialist/disable, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
85|        - { path: ^/user/specialist/reactivate, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
86|        - { path: ^/user/specialist/(pause|resume), roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
87|        - { path: ^/user/specialist/(block|unblock), roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
88|
89|        - { path: ^/employee-advocacy, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
90|        - { path: ^/manager/chavesdeacesso, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_SUPER_ADMIN] }
91|        - { path: ^/onboarding/\d+/onboarding-\d+, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
92|
93|        - { path: ^/dei_assessment, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER, ROLE_SUPER_ADMIN] }
94|        - { path: ^/manager/professional-assessment, roles: [ROLE_MANAGER, ROLE_SUPER_ADMIN, ROLE_USER] }
95|        - { path: ^/manager/structural-research, roles: [ROLE_MANAGER, ROLE_USER, ROLE_SUPER_ADMIN] }
96|        - { path: ^/manager/free-trial, roles: [ROLE_SUPER_ADMIN] }
97|        - { path: ^/manager/governance, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER, ROLE_SUPER_ADMIN] }
98|
99|        - { path: ^/manager/home, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
100|        - { path: ^/manager/training/dashboard/, roles: [ROLE_MANAGER, ROLE_USER, ROLE_SUPER_ADMIN] }
101|        - { path: ^/manager/participantes, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
102|        - { path: ^/manager/company/invoice, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
103|        - { path: ^/manager/processos, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
104|        - { path: ^/manager/user/data, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_REVIEWER] }
105|        - { path: ^/manager/user/show, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
106|        - { path: ^/manager/process/dashboard/old, roles: [ROLE_SUPER_ADMIN, ROLE_ADMIN, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
107|        - { path: ^/manager/process/dashboard, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
108|        - { path: ^/manager/professional-assessment/dashboard, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER] }
109|        - { path: ^/manager/company, roles: [ROLE_SUPER_ADMIN] }
110|
111|        - { path: ^/manager/department, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER] }
112|        - { path: ^/manager/organizational-structure, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER] }
113|        - { path: ^/manager/position, roles: [ROLE_SUPER_ADMIN] }
114|        - { path: ^/manager/users, roles: [ROLE_SUPER_ADMIN, ROLE_MANAGER, ROLE_MANAGER_GESTOR] }
115|        - { path: ^/manager/license, roles: [ROLE_USER, ROLE_SURVEY, ROLE_MANAGER] }
116|        - { path: ^/company/relink, roles: [ROLE_MANAGER, ROLE_SUPER_ADMIN] }
117|        - { path: ^/manager/benefit, roles: [ROLE_SUPER_ADMIN, ROLE_MANAGER, ROLE_MANAGER_GESTOR] }
118|        - { path: ^/manager/skill, roles: [ROLE_SUPER_ADMIN, ROLE_MANAGER, ROLE_MANAGER_GESTOR] }
119|        - { path: ^/manager/evaluations/create, roles: [ROLE_SUPER_ADMIN, ROLE_MANAGER] }
120|        - { path: ^/manager/service-request-list, roles: [ROLE_SUPER_ADMIN] }
121|        - { path: ^/manager/evaluator/request, roles: [ROLE_SUPER_ADMIN] }
122|        - { path: ^/manager/evaluators-pending-evaluations, roles: [ROLE_SUPER_ADMIN] }
123|        - { path: ^/manager/evaluator/validate/evaluations, roles: [ROLE_SUPER_ADMIN] }
124|        - { path: ^/manager/parentcategorias, roles: [ROLE_SUPER_ADMIN] }
125|        - { path: ^/manager/category, roles: [ROLE_SUPER_ADMIN] }
126|        - { path: ^/manager/level, roles: [ROLE_SUPER_ADMIN] }
127|        - { path: ^/manager/evaluations/recommendations-network/task/options, roles: [ROLE_SUPER_ADMIN] }
128|        - { path: ^/site-config/siteconfig, roles: [ROLE_SUPER_ADMIN] }
129|        - { path: ^/manager/candidate-question/list, roles: [ROLE_SUPER_ADMIN] }
130|        - { path: ^/manager/interview_guide, roles: [ROLE_SUPER_ADMIN, ROLE_MANAGER] }
131|        - { path: ^/manager/permissionstags, roles: [ROLE_SUPER_ADMIN] }
132|        - { path: ^/manager/service-packs, roles: [ROLE_SUPER_ADMIN] }
133|        - { path: ^/manager/tokens, roles: [ROLE_SUPER_ADMIN] }
134|        - { path: ^/manager/logs, roles: [ROLE_SUPER_ADMIN] }
135|        - { path: ^/manager/market-job, roles: [ROLE_SUPER_ADMIN] }
136|        - { path: ^/manager/training-module/get-data, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
137|        - { path: ^/manager/empresas-parceiras, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER, ROLE_SUPER_ADMIN] }
138|        - { path: ^/manager, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER] }
139|        - { path: ^/finance/refunds, roles: [ROLE_MANAGER, ROLE_USER, ROLE_SUPER_ADMIN] }
140|        - { path: ^/evaluator, roles: [ROLE_REVIEWER] }
141|        - { path: ^/my-company/home, roles: [ROLE_USER] }
142|        - { path: ^/my-company, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER, ROLE_USER, ROLE_SUPER_ADMIN] }
143|        - { path: ^/crm, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER] }
144|
145|        # - { path: ^/my-company/list-members-by-teams/, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER, ROLE_USER] }
146|        - { path: ^/subsidiary-companies, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER, ROLE_USER] }
147|        - { path: ^/profile, roles: ROLE_USER }
148|        - { path: ^/user/structural-research, roles: [ROLE_SURVEY, ROLE_USER] }
149|        - { path: ^/calendar-member, roles: [ROLE_SURVEY, ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
150|        - { path: ^/user/registration, roles: PUBLIC_ACCESS }
151|        - { path: ^/user/registration-employee, roles: PUBLIC_ACCESS }
152|        - { path: ^/employee-user, roles: PUBLIC_ACCESS }
153|        - { path: ^/user, roles: ROLE_USER }
154|        - { path: ^/refunds, roles: [ROLE_USER,ROLE_MANAGER] }
155|        - { path: ^/assessment_pf, roles: PUBLIC_ACCESS }
156|        - { path: ^/assessment_pf_dashboard, roles: PUBLIC_ACCESS }
157|        - { path: ^/muralQuestionario, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
158|        - { path: ^/teste/chat, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
159|        - { path: ^/account, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
160|        - { path: ^/offboarding, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
161|        - { path: ^/onboarding, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
162|        - { path: ^/cultural-hub, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
163|        - { path: ^/time-management/presence/signature, roles: PUBLIC_ACCESS }
164|        - { path: ^/v2/file-management/attendance-lists/sign, roles: PUBLIC_ACCESS }
165|        - { path: ^/time-management, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
166|        - { path: ^/welfare-hub, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
167|        - { path: ^/specialists, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
168|        - { path: ^/cognitive_assessment, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
169|        - { path: ^/templates, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
170|        - { path: ^/gestao-documentos, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
171|        - { path: ^/job, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
172|        - { path: ^/process, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
173|        - { path: ^/organograma_index, roles: [ROLE_MANAGER, ROLE_USER, ROLE_SUPER_ADMIN] }
174|        - { path: ^/organograma, roles: [ROLE_MANAGER, ROLE_USER, ROLE_SUPER_ADMIN] }
175|        - { path: ^/sst, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
176|        - { path: ^/api/sst, roles: PUBLIC_ACCESS }
177|        - { path: ^/api/adriana/tools, roles: PUBLIC_ACCESS }
178|        - { path: ^/api/signature-emails, roles: PUBLIC_ACCESS }
179|
180|        - { path: '^/manager/process/\d+(/stage/\d+)?/candidates', roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER, ROLE_USER] }
181|        - { path: ^/manager/live-interview, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER, ROLE_USER] }
182|        - { path: ^/interview/management, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
183|
184|        - { path: ^/test/, roles: PUBLIC_ACCESS }
185|

{"file_patterns": ["src/"], "search_text": "isCsrfTokenValid"}

File: src/Controller/Api/FileManagementV2Controller.php
Match lines: 1
1294|        if (!$this->isCsrfTokenValid('editor_image', $request->request->get('_token'))) {

File: src/Controller/BillingCollectionRuleController.php
Match lines: 3
43|        if (!$this->isCsrfTokenValid('billing_collection_rule_create', (string) $request->request->get('_token', ''))) {
98|        if (!$this->isCsrfTokenValid('billing_collection_rule_update_' . $id, (string) $request->request->get('_token', ''))) {
143|        if (!$this->isCsrfTokenValid('billing_collection_rule_delete_' . $id, (string) $request->request->get('_token', ''))) {

File: src/Controller/CompanyInvitationConfirmationController.php
Match lines: 4
153|            if (!$this->isCsrfTokenValid('company_invitation_confirmation', (string) $request->request->get('_token'))) {
494|        if (!$this->isCsrfTokenValid('company_inactivation_' . $company->getId(), (string) $request->request->get('_token'))) {
527|        if (!$this->isCsrfTokenValid('company_activation_' . $company->getId(), (string) $request->request->get('_token'))) {
598|        if (!$this->isCsrfTokenValid('company_plan_customization', (string) $request->request->get('_token'))) {

File: src/Controller/DecisionSystem/RiskIntelligence/BehavioralIndicatorActionController.php
Match lines: 4
42|        if (!$this->isCsrfTokenValid(self::CSRF_TOKEN_ID, (string) ($data['_token'] ?? ''))) {
71|        if (!$this->isCsrfTokenValid(self::CSRF_TOKEN_ID, (string) ($data['_token'] ?? ''))) {
106|        if (!$this->isCsrfTokenValid(self::CSRF_TOKEN_ID, (string) ($data['_token'] ?? ''))) {
134|        if (!$this->isCsrfTokenValid(self::CSRF_TOKEN_ID, (string) ($data['_token'] ?? ''))) {

File: src/Controller/DecisionSystem/RiskIntelligence/SignalActionPlanController.php
Match lines: 1
55|        if (!$this->isCsrfTokenValid('risk_indicator_context', (string) ($data['_token'] ?? ''))) {

File: src/Controller/DecisionSystemRiskIntelligenceController.php
Match lines: 5
133|        if (!$this->isCsrfTokenValid('risk_signal_status', (string) ($data['_token'] ?? ''))) {
227|        if (!$this->isCsrfTokenValid('risk_indicator_context', (string) ($data['_token'] ?? ''))) {
580|        if (!$this->isCsrfTokenValid('risk_indicator_context', (string) ($data['_token'] ?? ''))) {
620|        if (!$this->isCsrfTokenValid('risk_indicator_context', (string) ($data['_token'] ?? ''))) {
662|        if (!$this->isCsrfTokenValid('risk_indicator_context', (string) ($data['_token'] ?? ''))) {

File: src/Controller/FocusNfseSettingsController.php
Match lines: 1
19|            if (!$this->isCsrfTokenValid('focus_nfse_settings', (string) $request->request->get('_token'))) {

File: src/Controller/GovernanceController.php
Match lines: 1
5566|        if ($token === '' || !$this->isCsrfTokenValid('governance_badge_actions', $token)) {

File: src/Controller/InvoiceController.php
Match lines: 6
142|        if (!$this->isCsrfTokenValid('invoice_billing_type_update', $csrfToken)) {
262|        if (!$this->isCsrfTokenValid('invoice_auto_debit_update', $csrfToken)) {
383|        if (!$this->isCsrfTokenValid('invoice_controlled_extra_credit_update', $csrfToken)) {
626|        if (!$this->isCsrfTokenValid('invoice_extra_credit_purchase', $csrfToken)) {
930|        if (!$this->isCsrfTokenValid('dismiss_auto_debit_failure_' . $paymentRecord->getId(), $csrfToken)) {
993|        if (!$this->isCsrfTokenValid('dismiss_auto_debit_failure_' . $paymentRecord->getId(), $csrfToken)) {

File: src/Controller/PaymentSimulationController.php
Match lines: 2
61|            if (!$this->isCsrfTokenValid('payment_simulation_env_update', (string) $request->request->get('_token'))) {
120|        if (!$this->isCsrfTokenValid('payment_simulation_env_update', (string) ($payload['_token'] ?? ''))) {

File: src/Controller/ProcessSubdepartmentController.php
Match lines: 1
97|        if ($this->isCsrfTokenValid('delete'.$processSubdepartment->getId(), $request->request->get('_token'))) {

File: src/Controller/ScoreController.php
Match lines: 1
249|        if ($this->isCsrfTokenValid('delete' . $goalCompany->getId(), $request->request->get('_token'))) {

File: src/Controller/TokensController.php
Match lines: 3
54|        if (!$this->isCsrfTokenValid('tokens_billing_settings_update', $csrfToken)) {
122|        if (!$this->isCsrfTokenValid('tokens_sync_model_prices', $csrfToken)) {
196|        if (!$this->isCsrfTokenValid('tokens_model_update', $csrfToken)) {

{"file_patterns": ["src/"], "search_text": "csrf"}

Note: The results have been truncated. Only showing first 100 results.
File: src/Controller/Api/FileManagementV2Controller.php
Match lines: 2
1294|        if (!$this->isCsrfTokenValid('editor_image', $request->request->get('_token'))) {
1295|            return $this->json(['error' => 'CSRF inválido'], 403);

File: src/Controller/Api/PeopleAnalytics/AdrianaRiskAlertChatController.php
Match lines: 5
13|use Symfony\Component\Security\Csrf\CsrfToken;
14|use Symfony\Component\Security\Csrf\CsrfTokenManagerInterface;
20|    public const CSRF_TOKEN_ID = 'adriana_risk_alert_context';
25|        private CsrfTokenManagerInterface $csrfTokenManager,
55|        if (!$this->csrfTokenManager->isTokenValid(new CsrfToken(self::CSRF_TOKEN_ID, $token))) {

File: src/Controller/Api/PeopleAnalytics/AdrianaRiskIndicatorChatController.php
Match lines: 5
14|use Symfony\Component\Security\Csrf\CsrfToken;
15|use Symfony\Component\Security\Csrf\CsrfTokenManagerInterface;
20|    private const CSRF_TOKEN_ID = 'adriana_risk_indicator_context';
26|        private CsrfTokenManagerInterface $csrfTokenManager,
59|        if (!$this->csrfTokenManager->isTokenValid(new CsrfToken(self::CSRF_TOKEN_ID, $token))) {

File: src/Controller/BillingCollectionRuleController.php
Match lines: 6
43|        if (!$this->isCsrfTokenValid('billing_collection_rule_create', (string) $request->request->get('_token', ''))) {
47|                'Token CSRF invalido.'
98|        if (!$this->isCsrfTokenValid('billing_collection_rule_update_' . $id, (string) $request->request->get('_token', ''))) {
102|                'Token CSRF invalido.'
143|        if (!$this->isCsrfTokenValid('billing_collection_rule_delete_' . $id, (string) $request->request->get('_token', ''))) {
144|            $this->addFlash('error', 'Token CSRF invalido.');

File: src/Controller/CompanyInvitationConfirmationController.php
Match lines: 4
153|            if (!$this->isCsrfTokenValid('company_invitation_confirmation', (string) $request->request->get('_token'))) {
494|        if (!$this->isCsrfTokenValid('company_inactivation_' . $company->getId(), (string) $request->request->get('_token'))) {
527|        if (!$this->isCsrfTokenValid('company_activation_' . $company->getId(), (string) $request->request->get('_token'))) {
598|        if (!$this->isCsrfTokenValid('company_plan_customization', (string) $request->request->get('_token'))) {

File: src/Controller/DecisionSystem/RiskIntelligence/BehavioralIndicatorActionController.php
Match lines: 10
23|    private const CSRF_TOKEN_ID = 'risk_behavioral_indicator_action';
42|        if (!$this->isCsrfTokenValid(self::CSRF_TOKEN_ID, (string) ($data['_token'] ?? ''))) {
43|            return $this->invalidCsrfResponse();
71|        if (!$this->isCsrfTokenValid(self::CSRF_TOKEN_ID, (string) ($data['_token'] ?? ''))) {
72|            return $this->invalidCsrfResponse();
106|        if (!$this->isCsrfTokenValid(self::CSRF_TOKEN_ID, (string) ($data['_token'] ?? ''))) {
107|            return $this->invalidCsrfResponse();
134|        if (!$this->isCsrfTokenValid(self::CSRF_TOKEN_ID, (string) ($data['_token'] ?? ''))) {
135|            return $this->invalidCsrfResponse();
208|    private function invalidCsrfResponse(): JsonResponse

File: src/Controller/DecisionSystem/RiskIntelligence/SignalActionPlanController.php
Match lines: 1
55|        if (!$this->isCsrfTokenValid('risk_indicator_context', (string) ($data['_token'] ?? ''))) {

File: src/Controller/DecisionSystemRiskIntelligenceController.php
Match lines: 14
34|use Symfony\Component\Security\Csrf\CsrfTokenManagerInterface;
59|        private CsrfTokenManagerInterface $csrfTokenManager
114|            'risk_signal_status_csrf_token' => $this->csrfTokenManager->getToken('risk_signal_status')->getValue(),
115|            'risk_signal_context_csrf_token' => $this->csrfTokenManager->getToken('risk_indicator_context')->getValue(),
118|            'risk_signal_adriana_context_csrf_token' => $this->csrfTokenManager
119|                ->getToken(AdrianaRiskAlertChatController::CSRF_TOKEN_ID)
133|        if (!$this->isCsrfTokenValid('risk_signal_status', (string) ($data['_token'] ?? ''))) {
227|        if (!$this->isCsrfTokenValid('risk_indicator_context', (string) ($data['_token'] ?? ''))) {
403|            'context_csrf_token' => $this->csrfTokenManager->getToken('risk_indicator_context')->getValue(),
404|            'adriana_context_csrf_token' => $this->csrfTokenManager->getToken('adriana_risk_indicator_context')->getValue(),
406|            'behavioral_action_csrf_token' => $this->csrfTokenManager->getToken('risk_behavioral_indicator_action')->getValue(),
580|        if (!$this->isCsrfTokenValid('risk_indicator_context', (string) ($data['_token'] ?? ''))) {
620|        if (!$this->isCsrfTokenValid('risk_indicator_context', (string) ($data['_token'] ?? ''))) {
662|        if (!$this->isCsrfTokenValid('risk_indicator_context', (string) ($data['_token'] ?? ''))) {

File: src/Controller/EmployeeAdvocacy/EmployeeAdvocacyController.php
Match lines: 3
841|            'csrf' => bin2hex(random_bytes(16))
1050|        // Gera state para CSRF protection
1131|        // Verifica state (CSRF protection)

File: src/Controller/FocusNfseSettingsController.php
Match lines: 1
19|            if (!$this->isCsrfTokenValid('focus_nfse_settings', (string) $request->request->get('_token'))) {

File: src/Controller/FreeTrialController.php
Match lines: 3
68|            'csrf_protection' => false,
174|        $options = array('csrf_protection' => false);
257|        $options = array('csrf_protection' => false);

File: src/Controller/GoogleDriveController.php
Match lines: 7
33|                $csrf  = bin2hex(random_bytes(16));
34|                $state = base64_encode(json_encode(['csrf' => $csrf]));
35|                $session->set('gd_state', $csrf);
55|        $csrf  = bin2hex(random_bytes(16));
56|        $state = base64_encode(json_encode(['csrf' => $csrf]));
57|        $session->set('gd_state', $csrf);
82|        if (($decoded['csrf'] ?? '') !== $session->get('gd_state')) {

File: src/Controller/GovernanceController.php
Match lines: 16
5327|        if ($csrfError = $this->validateBadgeCsrf($request)) {
5328|            return $csrfError;
5367|        if ($csrfError = $this->validateBadgeCsrf($request)) {
5368|            return $csrfError;
5405|        if ($csrfError = $this->validateBadgeCsrf($request)) {
5406|            return $csrfError;
5448|        if ($csrfError = $this->validateBadgeCsrf($request)) {
5449|            return $csrfError;
5491|        if ($csrfError = $this->validateBadgeCsrf($request)) {
5492|            return $csrfError;
5555|    private function validateBadgeCsrf(Request $request): ?JsonResponse
5557|        $token = (string) ($request->headers->get('X-CSRF-TOKEN') ?: $request->request->get('_csrf_token') ?: '');
5561|            if (is_array($payload) && isset($payload['_csrf_token'])) {
5562|                $token = (string) $payload['_csrf_token'];
5566|        if ($token === '' || !$this->isCsrfTokenValid('governance_badge_actions', $token)) {
5567|            return $this->json(['success' => false, 'message' => 'Token CSRF inválido.'], 419);

File: src/Controller/InnovationResearchController.php
Match lines: 1
1995|        $options = array('csrf_protection' => false);

File: src/Controller/InvalidatorController.php
Match lines: 6
6|use Symfony\Component\Security\Csrf\CsrfTokenManagerInterface;
11|    private $csrfTokenManager;
13|    public function __construct(SessionInterface $session, CsrfTokenManagerInterface $csrfTokenManager)
16|        $this->csrfTokenManager = $csrfTokenManager;
21|        // Invalidar token CSRF
22|        $this->csrfTokenManager->getTokenStorage()->clear();

File: src/Controller/InvoiceController.php
Match lines: 18
141|        $csrfToken = (string) $request->request->get('_token', '');
142|        if (!$this->isCsrfTokenValid('invoice_billing_type_update', $csrfToken)) {
145|                'message' => 'Token CSRF invalido.',
261|        $csrfToken = (string) $request->request->get('_token', '');
262|        if (!$this->isCsrfTokenValid('invoice_auto_debit_update', $csrfToken)) {
265|                'message' => 'Token CSRF invalido.',
382|        $csrfToken = (string) $request->request->get('_token', '');
383|        if (!$this->isCsrfTokenValid('invoice_controlled_extra_credit_update', $csrfToken)) {
386|                'message' => 'Token CSRF invalido.',
625|        $csrfToken = (string) $request->request->get('_token', '');
626|        if (!$this->isCsrfTokenValid('invoice_extra_credit_purchase', $csrfToken)) {
629|                'message' => 'Token CSRF inválido.',
929|        $csrfToken = (string) $request->request->get('_token', '');
930|        if (!$this->isCsrfTokenValid('dismiss_auto_debit_failure_' . $paymentRecord->getId(), $csrfToken)) {
933|                'message' => 'Token CSRF invalido.',
992|        $csrfToken = (string) $request->request->get('_token', '');
993|        if (!$this->isCsrfTokenValid('dismiss_auto_debit_failure_' . $paymentRecord->getId(), $csrfToken)) {
996|                'message' => 'Token CSRF invalido.',

File: src/Controller/OAuthController.php
Match lines: 1
90|            'state' => bin2hex(random_bytes(16)) // CSRF protection

File: src/Controller/PaymentSimulationController.php
Match lines: 4
61|            if (!$this->isCsrfTokenValid('payment_simulation_env_update', (string) $request->request->get('_token'))) {
62|                throw $this->createAccessDeniedException('Token CSRF inválido.');
120|        if (!$this->isCsrfTokenValid('payment_simulation_env_update', (string) ($payload['_token'] ?? ''))) {
123|                'message' => 'Token CSRF invalido.',

File: src/Controller/ProcessSubdepartmentController.php
Match lines: 1
97|        if ($this->isCsrfTokenValid('delete'.$processSubdepartment->getId(), $request->request->get('_token'))) {

File: src/Controller/RefundsController.php
Match lines: 32
34|use Symfony\Component\Security\Csrf\CsrfToken;
35|use Symfony\Component\Security\Csrf\CsrfTokenManagerInterface;
71|    private CsrfTokenManagerInterface $csrfTokenManager;
85|        CsrfTokenManagerInterface $csrfTokenManager,
98|        $this->csrfTokenManager = $csrfTokenManager;
106|    private function validateCsrfOrFail(Request $request, string $intention): ?JsonResponse
109|        // o que invalida CSRF baseado em sessão e quebra todas as ações AJAX. Em produção mantemos CSRF estrito.
114|        $token = (string)($request->headers->get('X-CSRF-TOKEN') ?: $request->request->get('_csrf_token') ?: '');
117|            if (is_array($payload) && isset($payload['_csrf_token'])) {
118|                $token = (string)$payload['_csrf_token'];
122|            return new JsonResponse(['success' => false, 'message' => 'Token CSRF ausente'], 419);
124|        if (!$this->csrfTokenManager->isTokenValid(new CsrfToken($intention, $token))) {
125|            return new JsonResponse(['success' => false, 'message' => 'Token CSRF inválido'], 419);
406|    private function validateLegacyRefundCsrf(Request $request): bool
411|        $token = (string)$request->request->get('_csrf_token');
413|        return $this->csrfTokenManager->isTokenValid(new CsrfToken('financial_actions', $token));
1544|        if ($bad = $this->validateCsrfOrFail($request, 'financial_actions')) return $bad;
1958|        if ($bad = $this->validateCsrfOrFail($request, 'financial_actions')) {
2232|        if ($bad = $this->validateCsrfOrFail($request, 'financial_actions')) return $bad;
2426|        if ($bad = $this->validateCsrfOrFail($request, 'financial_actions')) return $bad;
3538|        if (!$this->validateLegacyRefundCsrf($request)) {
3539|            $this->addFlash('error', 'Token CSRF inválido ou ausente.');
3612|        if (!$this->validateLegacyRefundCsrf($request)) {
3613|            $this->addFlash('error', 'Token CSRF inválido ou ausente.');
3679|        if ($bad = $this->validateCsrfOrFail($request, 'financial_actions')) return $bad;
3748|        if ($bad = $this->validateCsrfOrFail($request, 'financial_actions')) return $bad;
3809|        if ($bad = $this->validateCsrfOrFail($request, 'financial_actions')) return $bad;
3890|        if ($bad = $this->validateCsrfOrFail($request, 'financial_actions')) return $bad;
3991|        if ($bad = $this->validateCsrfOrFail($request, 'financial_actions')) return $bad;
4073|        if ($bad = $this->validateCsrfOrFail($request, 'financial_actions')) return $bad;
4168|        if ($bad = $this->validateCsrfOrFail($request, 'financial_actions')) return $bad;
4242|        if ($bad = $this->validateCsrfOrFail($request, 'financial_actions')) return $bad;

File: src/Controller/ScoreController.php
Match lines: 1
249|        if ($this->isCsrfTokenValid('delete' . $goalCompany->getId(), $request->request->get('_token'))) {

File: src/Controller/StructuralResearchController.php
Match lines: 1
1763|        $options = array('csrf_protection' => false);

File: src/Controller/TokensController.php
Match lines: 9
53|        $csrfToken = (string) $request->request->get('_token', '');
54|        if (!$this->isCsrfTokenValid('tokens_billing_settings_update', $csrfToken)) {
55|            return $this->json(['status' => 'error', 'message' => 'Token CSRF invalido.'], Response::HTTP_FORBIDDEN);
121|        $csrfToken = (string) $request->request->get('_token', '');
122|        if (!$this->isCsrfTokenValid('tokens_sync_model_prices', $csrfToken)) {
123|            return $this->json(['status' => 'error', 'message' => 'Token CSRF invalido.'], Response::HTTP_FORBIDDEN);
195|        $csrfToken = (string) $request->request->get('_token', '');
196|        if (!$this->isCsrfTokenValid('tokens_model_update', $csrfToken)) {
197|            return $this->json(['status' => 'error', 'message' => 'Token CSRF invalido.'], Response::HTTP_FORBIDDEN);

File: src/EventListener/CsrfListener.php
Match lines: 10
9|class CsrfListener implements EventSubscriberInterface
22|        // Desabilitar CSRF para rotas da API timesheet-v2
24|            $request->attributes->set('_csrf_token_id', null);
27|        // Comité IA — APIs JSON/XHR sob /api/comite-ia (sem token CSRF de formulário Symfony).
32|                $request->attributes->set('_csrf_token_id', null);
39|            $request->attributes->set('_csrf_token_id', null);
44|            $request->attributes->set('_csrf_token_id', null);
49|            $request->attributes->set('_csrf_token_id', null);
58|                $request->attributes->set('_csrf_token_id', null);
65|                $request->attributes->set('_csrf_token_id', null);

File: src/EventSubscriber/FinancialCsrfSubscriber.php
Match lines: 14
9|use Symfony\Component\Security\Csrf\CsrfToken;
10|use Symfony\Component\Security\Csrf\CsrfTokenManagerInterface;
13| * CSRF global para o Hub Financeiro (AJAX e formulários).
18| * - Lê o token de X-CSRF-TOKEN (header) ou _csrf_token (POST)
21|class FinancialCsrfSubscriber implements EventSubscriberInterface
23|    private CsrfTokenManagerInterface $csrf;
25|    public function __construct(CsrfTokenManagerInterface $csrf)
27|        $this->csrf = $csrf;
51|        $token = (string)($request->headers->get('X-CSRF-TOKEN') ?: $request->request->get('_csrf_token') ?: '');
54|            if (is_array($payload) && isset($payload['_csrf_token'])) {
55|                $token = (string)$payload['_csrf_token'];
58|        if ($token === '' || !$this->csrf->isTokenValid(new CsrfToken('financial_actions', $token))) {
63|                    'message' => 'Token CSRF inválido',
68|                    'message' => 'Token CSRF inválido',

File: src/Form/TrainingChapterType.php
Match lines: 1
79|            'csrf_protection' => false,

File: src/Form/TrainingModuleType.php
Match lines: 1
22|            'csrf_protection' => false,

File: src/Form/TrainingPageType.php
Match lines: 1
67|            'csrf_protection' => false,

File: src/Security/LoginFormAuthenticator.php
Match lines: 9
36|use Symfony\Component\Security\Core\Exception\InvalidCsrfTokenException;
40|use Symfony\Component\Security\Csrf\CsrfToken;
41|use Symfony\Component\Security\Csrf\CsrfTokenManagerInterface;
56|    private CsrfTokenManagerInterface $csrfTokenManager;
70|        CsrfTokenManagerInterface $csrfTokenManager,
80|        $this->csrfTokenManager = $csrfTokenManager;
102|            'csrf_token' => $request->request->get('_csrf_token'),
114|        $token = new CsrfToken('authenticate', $credentials['csrf_token']);
115|        if (!$this->csrfTokenManager->isTokenValid($token)) {

{"file_path": "src/EventListener/CsrfListener.php"}

File: src/EventListener/CsrfListener.php (Total lines: 70)
IS_TRUNCATED: false
LINE_RANGE: 1-70
1|<?php
2|
3|namespace App\EventListener;
4|
5|use Symfony\Component\EventDispatcher\EventSubscriberInterface;
6|use Symfony\Component\HttpKernel\Event\RequestEvent;
7|use Symfony\Component\HttpKernel\KernelEvents;
8|
9|class CsrfListener implements EventSubscriberInterface
10|{
11|    public static function getSubscribedEvents(): array
12|    {
13|        return [
14|            KernelEvents::REQUEST => ['onKernelRequest', 1000],
15|        ];
16|    }
17|
18|    public function onKernelRequest(RequestEvent $event): void
19|    {
20|        $request = $event->getRequest();
21|        
22|        // Desabilitar CSRF para rotas da API timesheet-v2
23|        if (str_starts_with($request->getPathInfo(), '/api/timesheet-v2')) {
24|            $request->attributes->set('_csrf_token_id', null);
25|        }
26|
27|        // Comité IA — APIs JSON/XHR sob /api/comite-ia (sem token CSRF de formulário Symfony).
28|        $pathInfo = $request->getPathInfo();
29|        if (str_starts_with($pathInfo, '/api/comite-ia')) {
30|            $method = strtoupper($request->getMethod());
31|            if (!in_array($method, ['GET', 'HEAD', 'OPTIONS'], true)) {
32|                $request->attributes->set('_csrf_token_id', null);
33|            }
34|        }
35|
36|        // MetaHuman — reconhecimento pós-laudo (sessão + JSON; sem formulário Symfony).
37|        if ($request->getMethod() === 'POST'
38|            && preg_match('#^/api/my-company/member/\\d+/dossier-laudo-pdf/\\d+/acknowledge$#', $request->getPathInfo()) === 1) {
39|            $request->attributes->set('_csrf_token_id', null);
40|        }
41|        // MetaHuman — auditoria wizard T1–T5 na ficha (JSON; sem formulário Symfony).
42|        if ($request->getMethod() === 'POST'
43|            && preg_match('#^/api/my-company/member/\\d+/metahuman-sheet-wizard-tx$#', $request->getPathInfo()) === 1) {
44|            $request->attributes->set('_csrf_token_id', null);
45|        }
46|        // MetaHuman — estado servidor wizard T1–T5 (JSON).
47|        if ($request->getMethod() === 'POST'
48|            && preg_match('#^/api/my-company/member/\\d+/metahuman-sheet-wizard-state$#', $request->getPathInfo()) === 1) {
49|            $request->attributes->set('_csrf_token_id', null);
50|        }
51|        // Interpretative operational council — simulate / cases (JSON; async dispatch).
52|        if ($request->getMethod() === 'POST') {
53|            $p = $request->getPathInfo();
54|            if ($p === '/api/interpretative/operational/v1/simulate'
55|                || $p === '/api/interpretative/operational/v1/cases'
56|                || $p === '/api/interpretative/operational/v1/cases/from-hcm-event'
57|                || $p === '/api/interpretative/operational/v1/preview-context') {
58|                $request->attributes->set('_csrf_token_id', null);
59|            }
60|        }
61|        // E2E — apenas APP_ENV=test (controller também valida).
62|        if ($request->getMethod() === 'POST') {
63|            $path = $request->getPathInfo();
64|            if (str_starts_with($path, '/test/')) {
65|                $request->attributes->set('_csrf_token_id', null);
66|            }
67|        }
68|    }
69|}
70|

{"file_patterns": ["src/"], "search_text": "aprovador_id"}

File: src/Repository/GovernanceAuthorizationRepository.php
Match lines: 1
234|            'aprovador_id'        => $aut->getAprovadorMember()?->getId(),

{"file_patterns": ["src/Entity/GovernanceAuthorization.php"], "search_text": "function getAprovador|aprovador"}

No matches found

{"query_name": "2026-09-02-authorization-specific-approver-role"}

docs/database-changes/2026-09-02-authorization-specific-approver-role.md

{"file_path": "docs/database-changes/2026-08-31-governance-authorization-config.md"}

File: docs/database-changes/2026-08-31-governance-authorization-config.md (Total lines: 72)
IS_TRUNCATED: false
LINE_RANGE: 1-72
1|# Mudanca De Banco - Configuracao De Autorizacoes
2|
3|## Objetivo
4|
5|Persistir, por empresa, a configuracao de tipos de autorizacao e aprovadores padrao (membro ou cargo, com escopo de area). Tambem adiciona area, aprovador e tipo no cadastro da autorizacao (`member_autorizacao`), para o fluxo de criacao e validacao de documentos.
6|
7|## Escopo
8|
9|- Nova tabela `governance_authorization_config` (uma linha por empresa).
10|- Nova tabela `governance_authorization_type` (tipos cadastrados na aba Configuracoes).
11|- Nova tabela `governance_authorization_approver` (aprovadores por membro ou cargo).
12|- Nova tabela `governance_authorization_approver_type` (N:N aprovador x tipo).
13|- Novas colunas em `member_autorizacao`: `area_id`, `aprovador_member_id`, `tipo`.
14|- Dados existentes: autorizacoes atuais ficam com as tres colunas nulas. Sem backfill.
15|- Codigo que passa a depender: `GovernanceAuthorizationConfig`, `GovernanceAuthorizationType`, `GovernanceAuthorizationApprover`, `GovernanceAuthorizationConfigService`, rotas `governance_authorization_config_get` / `_save`.
16|
17|## Migration Ou Script
18|
19|```text
20|Arquivo: migrations/Version20260831143000_GovernanceAuthorizationConfig.php
21|Tipo: migration Doctrine (up/down), idempotente via schema manager
22|Ambiente alvo: todos os ambientes
23|```
24|
25|Migration coberta: `Version20260831143000`.
26|
27|## Plano De Execucao
28|
29|1. Antes: `php bin/console doctrine:migrations:status`; confirmar Version ainda `New` se aplicavel.
30|2. Durante: `php bin/console doctrine:migrations:migrate --no-interaction`.
31|3. Depois: abrir Autorizacoes, salvar tipos/aprovadores em Configuracoes e conferir as tabelas novas.
32|
33|## Validacao
34|
35|Antes:
36|
37|```sql
38|SHOW TABLES LIKE 'governance_authorization%';
39|SHOW COLUMNS FROM member_autorizacao LIKE 'area_id';
40|SHOW COLUMNS FROM member_autorizacao LIKE 'aprovador_member_id';
41|SHOW COLUMNS FROM member_autorizacao LIKE 'tipo';
42|```
43|
44|Depois (esperado: 4 tabelas novas; colunas novas em `member_autorizacao`):
45|
46|```sql
47|SHOW TABLES LIKE 'governance_authorization%';
48|SHOW COLUMNS FROM governance_authorization_config;
49|SHOW COLUMNS FROM member_autorizacao LIKE 'area_id';
50|SHOW COLUMNS FROM member_autorizacao LIKE 'aprovador_member_id';
51|SHOW COLUMNS FROM member_autorizacao LIKE 'tipo';
52|```
53|
54|## Rollback Ou Mitigacao
55|
56|O `down` remove as FKs/colunas novas de `member_autorizacao` e as quatro tabelas. Autorizacoes voltam a nao ter area/aprovador/tipo persistidos.
57|
58|Se o codigo novo ja estiver deployado, reverter so o schema quebra o save da aba Configuracoes. Preferir migration corretiva nova em vez de editar `Version20260831143000` ja aplicada.
59|
60|## Riscos
61|
62|- Volume: uma config por empresa; tipos e aprovadores em dezenas, nao milhares.
63|- Lock: `ALTER TABLE member_autorizacao` adiciona colunas nullable; impacto baixo se a tabela nao estiver gigante.
64|- Autorizacoes sem area/aprovador/tipo: esperado ate o recadastro.
65|- Ordem de deploy: aplicar a migration antes ou junto do codigo que mapeia as entidades.
66|- Impacto em jobs, commands, webhooks ou relatorios: nenhum identificado nesta fatia.
67|- Backfill: nao necessario.
68|
69|## Responsavel
70|
71|Time de produto / Central de Governanca.
72|

{"end_line": 2995, "file_path": "src/Controller/GovernanceController.php", "start_line": 2905}

File: src/Controller/GovernanceController.php (Total lines: 6154)
IS_TRUNCATED: false
LINE_RANGE: 2905-2995
2905|                $this->resolveCurrentGovernanceActorDisplayName($company),
2906|            );
2907|        } catch (\InvalidArgumentException $e) {
2908|            return new JsonResponse(['success' => false, 'message' => $e->getMessage()], 422);
2909|        } catch (\Throwable $e) {
2910|            $this->logger->error('authorizationConditionsSave: ' . $e->getMessage(), ['exception' => $e]);
2911|
2912|            return new JsonResponse(['success' => false, 'message' => 'Erro ao salvar condições.'], 500);
2913|        }
2914|
2915|        return new JsonResponse(['success' => true, 'aut_conditions' => $conditions]);
2916|    }
2917|
2918|    public function authorizationConfigGet(): JsonResponse
2919|    {
2920|        /** @var User|null $user */
2921|        $user = $this->getUser();
2922|        $company = $this->currentGovernanceCompany();
2923|        if (!$user || !$company) {
2924|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
2925|        }
2926|        if (!$this->canManageAuthorizationConfig()) {
2927|            return new JsonResponse(['success' => false, 'message' => 'Sem permissão para consultar configurações de Autorizações.'], 403);
2928|        }
2929|
2930|        $view = $this->authorizationConfigService->getViewData($company);
2931|
2932|        return new JsonResponse([
2933|            'success' => true,
2934|            'authorization_types' => $view['aut_authorization_types'],
2935|            'use_members' => $view['aut_authorization_use_members'],
2936|            'use_roles' => $view['aut_authorization_use_roles'],
2937|            'approver_members' => $view['aut_authorization_approver_members'],
2938|            'approver_roles' => $view['aut_authorization_approver_roles'],
2939|            'company_roles' => $view['aut_company_roles'],
2940|        ]);
2941|    }
2942|
2943|    public function authorizationConfigSave(Request $request): JsonResponse
2944|    {
2945|        /** @var User|null $user */
2946|        $user = $this->getUser();
2947|        $company = $this->currentGovernanceCompany();
2948|        if (!$user || !$company) {
2949|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
2950|        }
2951|        if (!$this->canManageAuthorizationConfig()) {
2952|            return new JsonResponse(['success' => false, 'message' => 'Sem permissão para alterar configurações de Autorizações.'], 403);
2953|        }
2954|
2955|        $payload = json_decode($request->getContent(), true);
2956|        if (!is_array($payload)) {
2957|            return new JsonResponse(['success' => false, 'message' => 'Payload inválido.'], 400);
2958|        }
2959|
2960|        try {
2961|            $data = $this->authorizationConfigService->savePayload($company, $payload, $user);
2962|        } catch (\InvalidArgumentException $e) {
2963|            return new JsonResponse(['success' => false, 'message' => $e->getMessage()], 422);
2964|        } catch (\Throwable $e) {
2965|            $this->logger->error('authorizationConfigSave: ' . $e->getMessage(), ['exception' => $e]);
2966|
2967|            return new JsonResponse(['success' => false, 'message' => 'Erro ao salvar configurações.'], 500);
2968|        }
2969|
2970|        return new JsonResponse([
2971|            'success' => true,
2972|            'message' => 'Configurações salvas.',
2973|            'authorization_types' => $data['authorization_types'],
2974|            'use_members' => $data['use_members'],
2975|            'use_roles' => $data['use_roles'],
2976|            'approver_members' => $data['approver_members'],
2977|            'approver_roles' => $data['approver_roles'],
2978|        ]);
2979|    }
2980|
2981|    public function authorizationConditionUsage(Request $request): JsonResponse
2982|    {
2983|        /** @var User|null $user */
2984|        $user = $this->getUser();
2985|        $company = $user?->getCompany();
2986|        if (!$user || !$company) {
2987|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
2988|        }
2989|        if (!$this->canManageAuthorizationConfig()) {
2990|            return new JsonResponse(['success' => false, 'message' => 'Sem permissão para consultar requisitos.'], 403);
2991|        }
2992|
2993|        $nome = trim((string) $request->query->get('nome', ''));
2994|        if ($nome === '') {
2995|            return new JsonResponse(['success' => false, 'message' => 'Informe o nome do requisito.'], 422);

{"query_name": "src/Controller/Governance"}

src/Controller/Governance/GovernanceCasesAutomationBuilderController.php
src/Controller/Governance/MemberGovernancePendenciesController.php
src/Controller/GovernanceController.php

{"end_line": 160, "file_path": "src/Repository/CompanyAreaRepository.php", "start_line": 110}

File: src/Repository/CompanyAreaRepository.php (Total lines: 244)
IS_TRUNCATED: false
LINE_RANGE: 110-160
110|                ->setParameter('status', CompanyArea::STATUS_ACTIVE);
111|        }
112|
113|        return $qb->getQuery()->getResult();
114|    }
115|
116|    public function findAvailableForCompany(int $companyId): array
117|    {
118|        return $this->findByCompany($companyId, true);
119|    }
120|
121|    /**
122|     * @return CompanyArea[]
123|     */
124|    public function findForCompany(?Company $company, bool $activeOnly = true): array
125|    {
126|        if (!$company || !$company->getId()) {
127|            return [];
128|        }
129|
130|        return $activeOnly
131|            ? $this->findAvailableForCompany((int) $company->getId())
132|            : $this->findByCompany((int) $company->getId());
133|    }
134|
135|    public function findOneAvailableByIdAndCompany(int $departmentId, int $companyId): ?CompanyArea
136|    {
137|        $department = $this->find($departmentId);
138|        if (!$department || !$department->isAvailableForCompany($companyId)) {
139|            return null;
140|        }
141|
142|        return $department;
143|    }
144|
145|    public function findOneByNameOrSynonym(string $term, Company|int|null $company = null): ?CompanyArea
146|    {
147|        $trimmedTerm = self::sanitizeLookupTerm($term);
148|        $normalizedTerm = CompanyAreaSynonym::normalizeValue($term);
149|
150|        if ($trimmedTerm === '' || $normalizedTerm === '') {
151|            return null;
152|        }
153|
154|        $qb = $this->createQueryBuilder('area')
155|            ->leftJoin('area.synonyms', 'syn')
156|            ->andWhere('(LOWER(TRIM(area.name)) = :trimmedTerm OR syn.normalizedSynonym = :normalizedTerm)')
157|            ->setParameter('trimmedTerm', mb_strtolower($trimmedTerm, 'UTF-8'))
158|            ->setParameter('normalizedTerm', $normalizedTerm)
159|            ->orderBy('area.id', 'ASC')
160|            ->setMaxResults(1);

{"comments": [{"path": "src/Controller/GovernanceController.php", "existing_code": "    public function authorizationConfigSave(Request $request): JsonResponse", "category": "maintainability", "severity": "high", "content": "Este controller já passa de 6 mil linhas e concentra HTTP, consultas, regras de negócio e montagem de contexto do módulo de governança. Esta PR adiciona dois endpoints de configuração e ainda embute no hub o carregamento de áreas e da config (via getViewData), aumentando o acoplamento e dificultando revisão, teste e manutenção de um fluxo de autorização. Como já existe o padrão de controllers dedicados em App\\Controller\\Governance (ex.: MemberGovernancePendenciesController), o recomendado é mover authorizationConfigGet/authorizationConfigSave e a montagem do contexto do hub (áreas + config) para um controller/query dedicado, deixando este controller apenas com orquestração HTTP."}, {"path": "src/Controller/GovernanceController.php", "existing_code": "    public function authorizationConfigGet(): JsonResponse", "category": "test", "severity": "high", "content": "Os dois endpoints novos de configuração (GET/POST /manager/governance/authorizations/config) e as regras associadas (403 sem permissão, 422 para tipo > 80 caracteres, membro/cargo de outra empresa, flags false, persistência nas quatro tabelas e isolamento por empresa) não têm nenhum teste automatizado nesta PR. Em fluxo de autorização, uma regressão de permissão ou de persistência passaria despercebida. Adicione testes funcionais cobrindo acesso negado/ausente, payloads inválidos (422) e a gravação/leitura da configuração por empresa antes de mesclar."}, {"path": "src/Repository/GovernanceAuthorizationConfigRepository.php", "existing_code": "    public function save(GovernanceAuthorizationConfig $config, bool $flush = true): void\n    {\n        $this->getEntityManager()->persist($config);\n\n        if ($flush) {\n            $this->getEntityManager()->flush();\n        }\n    }", "category": "bug", "severity": "medium", "content": "O salvamento da configuração remove e recria aprovadores, tipos e o vínculo N:N dentro de um único flush sem transação explícita; se o banco falhar no meio do flush (ex.: violação de chave duplicada), parte das escritas já executadas em autocommit fica gravada e a empresa termina com configuração inconsistente, sem rollback. Envolva o fluxo de gravação (persist + flush) em beginTransaction/commit/rollback no serviço de configuração, garantindo atomicidade e que o erro 500 só seja devolvido depois de desfazer tudo."}, {"path": "src/Repository/GovernanceAuthorizationConfigRepository.php", "existing_code": "        return $this->createQueryBuilder('config')\n            ->leftJoin('config.types', 'authType')->addSelect('authType')\n            ->leftJoin('config.approvers', 'approver')->addSelect('approver')\n            ->leftJoin('approver.member', 'approverMember')->addSelect('approverMember')\n            ->leftJoin('approver.role', 'approverRole')->addSelect('approverRole')\n            ->leftJoin('approver.applicationTypes', 'approverType')->addSelect('approverType')", "category": "performance", "severity": "low", "content": "Esta consulta junta três coleções (tipos, aprovadores e tipos de aplicação de cada aprovador) num único SQL, o que produz um produto cartesiano — cada combinação multiplica o resultado — e ela roda em toda chamada do GET da config e em todo carregamento do hub. Dentro dos limites cadastráveis (até 100 tipos e 200 aprovadores, alguns com vários tipos), a leitura pode ficar desnecessariamente pesada. Considere hidratar cada coleção em consultas separadas (uma por coleção) ou usar subselect, mantendo o carregamento enxuto."}]}

(async)

{"state": "DONE"}

{"search_text": "function canManageAuthorizationConfig", "file_patterns": ["src/Controller/GovernanceController.php"]}

File: src/Controller/GovernanceController.php
Match lines: 1
4186|    private function canManageAuthorizationConfig(): bool

{"search_text": "function currentGovernanceCompany", "file_patterns": ["src/Controller/GovernanceController.php"]}

File: src/Controller/GovernanceController.php
Match lines: 1
3933|    private function currentGovernanceCompany(): ?Company

{"file_path": "config/routes_governance.yaml", "start_line": 330, "end_line": 400}

File: config/routes_governance.yaml (Total lines: 408)
IS_TRUNCATED: false
LINE_RANGE: 330-400
330|  methods: [POST]
331|  requirements:
332|    docId: '\d+'
333|
334|governance_authorization_document_remove:
335|  path: /manager/governance/authorizations/document/{docId}/remove
336|  controller: App\Controller\GovernanceController::authorizationDocumentRemove
337|  methods: [POST]
338|  requirements:
339|    docId: '\d+'
340|
341|governance_authorization_member_cnh_get:
342|  path: /manager/governance/authorizations/member/{memberId}/cnh
343|  controller: App\Controller\GovernanceController::authorizationMemberCnhGet
344|  methods: [GET]
345|  requirements:
346|    memberId: '\d+'
347|
348|governance_authorization_member_cnh_save:
349|  path: /manager/governance/authorizations/member/{memberId}/cnh/save
350|  controller: App\Controller\GovernanceController::authorizationMemberCnhSave
351|  methods: [POST]
352|  requirements:
353|    memberId: '\d+'
354|
355|governance_authorization_conditions_get:
356|  path: /manager/governance/authorizations/conditions
357|  controller: App\Controller\GovernanceController::authorizationConditionsGet
358|  methods: [GET]
359|
360|governance_authorization_conditions_save:
361|  path: /manager/governance/authorizations/conditions
362|  controller: App\Controller\GovernanceController::authorizationConditionsSave
363|  methods: [POST]
364|
365|governance_authorization_condition_usage:
366|  path: /manager/governance/authorizations/conditions/usage
367|  controller: App\Controller\GovernanceController::authorizationConditionUsage
368|  methods: [GET]
369|
370|governance_authorization_config_get:
371|  path: /manager/governance/authorizations/config
372|  controller: App\Controller\GovernanceController::authorizationConfigGet
373|  methods: [GET]
374|
375|governance_authorization_config_save:
376|  path: /manager/governance/authorizations/config
377|  controller: App\Controller\GovernanceController::authorizationConfigSave
378|  methods: [POST]
379|
380|member_governance_pendencies_index:
381|  path: /user/pendencies
382|  controller: App\Controller\Governance\MemberGovernancePendenciesController::index
383|  methods: [GET]
384|
385|member_governance_pendencies_documents_list:
386|  path: /user/pendencies/authorizations/{autId}/documents
387|  controller: App\Controller\Governance\MemberGovernancePendenciesController::documentsList
388|  methods: [GET]
389|  requirements:
390|    autId: '\d+'
391|
392|member_governance_pendencies_document_upload:
393|  path: /user/pendencies/authorizations/{autId}/documents/upload
394|  controller: App\Controller\Governance\MemberGovernancePendenciesController::documentUpload
395|  methods: [POST]
396|  requirements:
397|    autId: '\d+'
398|
399|member_governance_pendencies_profile_cnh:
400|  path: /user/pendencies/profile/cnh

{"file_path": "src/Controller/GovernanceController.php", "start_line": 1280, "end_line": 1370}

File: src/Controller/GovernanceController.php (Total lines: 6154)
IS_TRUNCATED: false
LINE_RANGE: 1280-1370
1280|                'cases_dashboard_html' => $dashboardHtml,
1281|                'cases_dashboard_chart_data' => $dashboard['charts'] ?? [],
1282|            ];
1283|        } catch (\Throwable $e) {
1284|            $this->logger->error(sprintf('[GovCases] renderCasesListFragments failed: %s', $e->getMessage()));
1285|
1286|            return [];
1287|        }
1288|    }
1289|
1290|    private function buildAuthorizationHubContext(): array
1291|    {
1292|        $viewData = $this->buildAuthorizationViewData();
1293|
1294|        $company = $this->currentGovernanceCompany();
1295|
1296|        $autData = $company
1297|            ? $this->loadAuthorizationsData(
1298|                $company,
1299|                $viewData['allMembers'],
1300|                $viewData['teams'] ?? [],
1301|                $viewData['governanceVisibleMemberIds'] ?? null
1302|            )
1303|            : [
1304|                'aut_rows' => [],
1305|                'aut_all' => [],
1306|                'aut_ativas' => 0,
1307|                'aut_vencidas' => 0,
1308|                'aut_a_vencer' => 0,
1309|                'aut_colabs_sem_aut' => 0,
1310|                'aut_perc_conformidade' => 0,
1311|                'aut_teams_by_status' => [],
1312|                'aut_kpi_total' => 0,
1313|                'aut_kpi_ativas' => 0,
1314|                'aut_kpi_inativas' => 0,
1315|                'aut_kpi_colaboradores' => 0,
1316|                'aut_alertas' => [],
1317|                'aut_chart_data' => ['vencidas' => 0, 'proximos_30' => 0, 'dias_31_60' => 0, 'dias_61_90' => 0],
1318|                'aut_expired_by_team' => [],
1319|                'aut_requisitos_catalog' => AutorizacaoRequisitoCatalog::labelsOrdered(),
1320|            ];
1321|
1322|        $autConditions = $company
1323|            ? $this->authorizationConditionConfig->getConditionsForFrontend($company)
1324|            : [];
1325|        $contractorRequirements = $company
1326|            ? array_values(array_filter(
1327|                $this->contractorRequirementService->listForFrontend($company),
1328|                static fn (array $requirement): bool => ($requirement['active'] ?? true) !== false
1329|            ))
1330|            : [];
1331|
1332|        $companyAreas = [];
1333|        $authorizationConfigView = [
1334|            'aut_authorization_types' => [],
1335|            'aut_authorization_use_members' => true,
1336|            'aut_authorization_use_roles' => false,
1337|            'aut_authorization_approver_members' => [],
1338|            'aut_authorization_approver_roles' => [],
1339|            'aut_company_roles' => [],
1340|        ];
1341|        if ($company) {
1342|            /** @var CompanyAreaRepository $areaRepo */
1343|            $areaRepo = $this->entityManager->getRepository(CompanyArea::class);
1344|            foreach ($areaRepo->findForCompany($company, true) as $area) {
1345|                $companyAreas[] = [
1346|                    'id' => $area->getId(),
1347|                    'name' => (string) $area->getName(),
1348|                ];
1349|            }
1350|
1351|            $authorizationConfigView = $this->authorizationConfigService->getViewData($company);
1352|        }
1353|
1354|        return array_merge($viewData, $autData, $authorizationConfigView, [
1355|            'aut_conditions' => $autConditions,
1356|            'aut_classif_catalog' => GovernanceAuthorizationConditionConfigService::classificacoesPorTipo(),
1357|            'aut_contractor_requirements' => $contractorRequirements,
1358|            'aut_company_areas' => $companyAreas,
1359|        ]);
1360|    }
1361|
1362|    public function authorizationSave(Request $request): JsonResponse
1363|    {
1364|        if (!$this->canManageAuthorizations()) {
1365|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
1366|        }
1367|
1368|        $company = $this->currentGovernanceCompany();
1369|
1370|        if (!$company) {

{"file_path": "src/Controller/GovernanceController.php", "start_line": 4180, "end_line": 4260}

File: src/Controller/GovernanceController.php (Total lines: 6154)
IS_TRUNCATED: false
LINE_RANGE: 4180-4260
4180|        return (bool) $request->attributes->get('can_view', false)
4181|            && !(bool) $request->attributes->get('can_create', false)
4182|            && !(bool) $request->attributes->get('can_edit', false)
4183|            && !(bool) $request->attributes->get('can_delete', false);
4184|    }
4185|
4186|    private function canManageAuthorizationConfig(): bool
4187|    {
4188|        return $this->canManageAuthorizations();
4189|    }
4190|
4191|    private function canAccessBadgeHub(): bool
4192|    {
4193|        if ($this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER') || $this->isGranted('ROLE_MANAGER_GESTOR')) {
4194|            return true;
4195|        }
4196|
4197|        if ($this->canManageBadges() || $this->isBadgeViewer()) {
4198|            return true;
4199|        }
4200|
4201|        $request = $this->requestStack->getCurrentRequest();
4202|
4203|        return $request && (bool) $request->attributes->get('can_view', false);
4204|    }
4205|
4206|    private function isBadgeViewer(): bool
4207|    {
4208|        if ($this->isGranted('ROLE_MANAGER_VIEWER')
4209|            && !$this->isGranted('ROLE_MANAGER')
4210|            && !$this->isGranted('ROLE_MANAGER_GESTOR')
4211|            && !$this->isGranted('ROLE_SUPER_ADMIN')
4212|        ) {
4213|            return true;
4214|        }
4215|
4216|        $request = $this->requestStack->getCurrentRequest();
4217|        if (!$request) {
4218|            return false;
4219|        }
4220|
4221|        return (bool) $request->attributes->get('can_view', false)
4222|            && !(bool) $request->attributes->get('can_create', false)
4223|            && !(bool) $request->attributes->get('can_edit', false)
4224|            && !(bool) $request->attributes->get('can_delete', false);
4225|    }
4226|
4227|    private function canManageBadgeConfig(): bool
4228|    {
4229|        return $this->canEditBadges();
4230|    }
4231|
4232|    private function canManageBadges(): bool
4233|    {
4234|        return $this->canCreateBadges() || $this->canEditBadges() || $this->canDeleteBadges();
4235|    }
4236|
4237|    private function canCreateBadges(): bool
4238|    {
4239|        return $this->hasBadgePermission('can_create');
4240|    }
4241|
4242|    private function canEditBadges(): bool
4243|    {
4244|        return $this->hasBadgePermission('can_edit');
4245|    }
4246|
4247|    private function canDeleteBadges(): bool
4248|    {
4249|        return $this->hasBadgePermission('can_delete');
4250|    }
4251|
4252|    private function hasBadgePermission(string $attribute): bool
4253|    {
4254|        if ($this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER') || $this->isGranted('ROLE_MANAGER_GESTOR')) {
4255|            return true;
4256|        }
4257|
4258|        if (!in_array($attribute, ['can_create', 'can_edit', 'can_delete'], true)) {
4259|            return false;
4260|        }

{"file_path": "src/Controller/GovernanceController.php", "start_line": 3925, "end_line": 4010}

File: src/Controller/GovernanceController.php (Total lines: 6154)
IS_TRUNCATED: false
LINE_RANGE: 3925-4010
3925|
3926|        if (!$member instanceof CompanyMembers) {
3927|            return $this->json(['success' => false, 'message' => 'Membro não encontrado.'], 404);
3928|        }
3929|
3930|        return $member;
3931|    }
3932|
3933|    private function currentGovernanceCompany(): ?Company
3934|    {
3935|        $request = $this->requestStack->getCurrentRequest();
3936|        $currentCompany = $request?->attributes->get('current_company');
3937|        if ($currentCompany instanceof Company) {
3938|            return $currentCompany;
3939|        }
3940|
3941|        if ($request !== null && $request->hasSession()) {
3942|            $selectedWorkspace = (string) $request->getSession()->get('selected_workspace', '');
3943|            if ($selectedWorkspace !== '' && str_starts_with($selectedWorkspace, 'company_')) {
3944|                $companyId = (int) str_replace('company_', '', $selectedWorkspace);
3945|                if ($companyId > 0) {
3946|                    $companyFromWorkspace = $this->entityManager->getRepository(Company::class)->find($companyId);
3947|                    if ($companyFromWorkspace instanceof Company) {
3948|                        return $companyFromWorkspace;
3949|                    }
3950|                }
3951|            }
3952|        }
3953|
3954|        /** @var User|null $user */
3955|        $user = $this->getUser();
3956|
3957|        return $user ? $user->getCompany() : null;
3958|    }
3959|
3960|    /**
3961|     * @return int[]|null null significa acesso à empresa inteira.
3962|     */
3963|    private function visibleCompanyMemberIdsForCurrentRequest(Company $company): ?array
3964|    {
3965|        $request = $this->requestStack->getCurrentRequest();
3966|        if (!$request || !(bool) $request->attributes->get('team_limitation', false)) {
3967|            return null;
3968|        }
3969|
3970|        $companyMember = $request->attributes->get('company_member');
3971|        if (!$companyMember instanceof CompanyMembers || (int) $companyMember->getCompany()?->getId() !== (int) $company->getId()) {
3972|            return [];
3973|        }
3974|
3975|        $teamIds = $this->parseCompanyMemberTeamIds($companyMember);
3976|
3977|        if ($teamIds === []) {
3978|            return $companyMember->getId() !== null ? [(int) $companyMember->getId()] : [];
3979|        }
3980|
3981|        $visibleIds = $this->visibleCompanyMemberIdsFromListenerUserScope($company);
3982|        $members = $this->entityManager->getRepository(CompanyMembers::class)->findBy([
3983|            'company' => $company,
3984|            'isRemoved' => 0,
3985|        ]);
3986|
3987|        foreach ($members as $member) {
3988|            if (!$member instanceof CompanyMembers || $member->getId() === null) {
3989|                continue;
3990|            }
3991|
3992|            $memberTeamIds = $this->parseCompanyMemberTeamIds($member);
3993|
3994|            if (array_intersect($teamIds, $memberTeamIds) !== []) {
3995|                $visibleIds[] = (int) $member->getId();
3996|            }
3997|        }
3998|
3999|        $visibleIds[] = (int) $companyMember->getId();
4000|
4001|        return array_values(array_unique(array_filter($visibleIds, static fn (int $id): bool => $id > 0)));
4002|    }
4003|
4004|    /**
4005|     * @return string[]
4006|     */
4007|    private function parseCompanyMemberTeamIds(CompanyMembers $member): array
4008|    {
4009|        $raw = trim((string) ($member->getTeams() ?? ''));
4010|        if ($raw === '') {

{"file_path": "src/Service/Governance/GovernanceAuthorizationConfigService.php"}

File: src/Service/Governance/GovernanceAuthorizationConfigService.php (Total lines: 574)
IS_TRUNCATED: true
LINE_RANGE: 1-500
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Service\Governance;
6|
7|use App\Entity\Company;
8|use App\Entity\CompanyMembers;
9|use App\Entity\GovernanceAuthorizationApprover;
10|use App\Entity\GovernanceAuthorizationConfig;
11|use App\Entity\GovernanceAuthorizationType;
12|use App\Entity\Roles;
13|use App\Entity\User;
14|use App\Repository\GovernanceAuthorizationConfigRepository;
15|use App\Repository\GovernanceCaseHistoryRepository;
16|use Doctrine\ORM\EntityManagerInterface;
17|
18|final class GovernanceAuthorizationConfigService
19|{
20|    private const MAX_TYPE_LENGTH = 80;
21|    private const MAX_TYPES = 100;
22|    private const MAX_APPROVER_IDS = 200;
23|
24|    public function __construct(
25|        private EntityManagerInterface $em,
26|        private GovernanceAuthorizationConfigRepository $repository,
27|    ) {
28|    }
29|
30|    /**
31|     * @return array{
32|     *     aut_authorization_types: list<string>,
33|     *     aut_authorization_use_members: bool,
34|     *     aut_authorization_use_roles: bool,
35|     *     aut_authorization_approver_members: list<array{id: int, name: string, all_areas: bool, area_keys: list<string>}>,
36|     *     aut_authorization_approver_roles: list<array{id: int, name: string, all_areas: bool, area_keys: list<string>}>,
37|     *     aut_company_roles: list<array{id: int, name: string}>
38|     * }
39|     */
40|    public function getViewData(Company $company): array
41|    {
42|        $config = $this->repository->findOneByCompany($company);
43|        $hasConfig = $config instanceof GovernanceAuthorizationConfig;
44|        [$useMembers, $useRoles] = $this->resolveUseFlags(
45|            $hasConfig ? $config->usesMembers() : true,
46|            $hasConfig ? $config->usesRoles() : false,
47|        );
48|
49|        return [
50|            'aut_authorization_types' => $hasConfig ? $config->getTypeLabels() : [],
51|            'aut_authorization_use_members' => $useMembers,
52|            'aut_authorization_use_roles' => $useRoles,
53|            'aut_authorization_approver_members' => $hasConfig ? $this->mapApprovers($config->getMemberApprovers(), 'member') : [],
54|            'aut_authorization_approver_roles' => $hasConfig ? $this->mapApprovers($config->getRoleApprovers(), 'role') : [],
55|            'aut_company_roles' => $this->listCompanyRoles($company),
56|        ];
57|    }
58|
59|    /**
60|     * @param array<string, mixed> $payload
61|     *
62|     * @return array{
63|     *     authorization_types: list<string>,
64|     *     use_members: bool,
65|     *     use_roles: bool,
66|     *     approver_members: list<array{id: int, name: string, all_areas: bool, area_keys: list<string>}>,
67|     *     approver_roles: list<array{id: int, name: string, all_areas: bool, area_keys: list<string>}>
68|     * }
69|     */
70|    public function savePayload(Company $company, array $payload, ?User $user = null): array
71|    {
72|        $typeLabels = $this->normalizeTypes($payload['authorization_types'] ?? []);
73|        [$useMembers, $useRoles] = $this->resolveUseFlags(
74|            $this->normalizeBoolean($payload['use_members'] ?? true, 'use_members'),
75|            $this->normalizeBoolean($payload['use_roles'] ?? false, 'use_roles'),
76|        );
77|
78|        $memberAssignments = $this->normalizeApproverPayload(
79|            $payload['approver_members'] ?? [],
80|            $typeLabels,
81|            'approver_members'
82|        );
83|        $roleAssignments = $this->normalizeApproverPayload(
84|            $payload['approver_roles'] ?? [],
85|            $typeLabels,
86|            'approver_roles'
87|        );
88|
89|        $this->assertMembersBelongToCompany($company, array_column($memberAssignments, 'id'));
90|        $this->assertRolesBelongToCompany($company, array_column($roleAssignments, 'id'));
91|
92|        $config = $this->findOrCreate($company, $user);
93|        $config
94|            ->setUseMembers($useMembers)
95|            ->setUseRoles($useRoles)
96|            ->setUpdatedBy($user);
97|
98|        $config->clearApprovers();
99|        $typesByKey = $this->syncTypes($config, $typeLabels);
100|        $this->syncApprovers($config, $company, $memberAssignments, $roleAssignments, $typesByKey);
101|
102|        $this->repository->save($config);
103|
104|        return [
105|            'authorization_types' => $config->getTypeLabels(),
106|            'use_members' => $config->usesMembers(),
107|            'use_roles' => $config->usesRoles(),
108|            'approver_members' => $this->mapApprovers($config->getMemberApprovers(), 'member'),
109|            'approver_roles' => $this->mapApprovers($config->getRoleApprovers(), 'role'),
110|        ];
111|    }
112|
113|    public function resolveTypeLabel(Company $company, string $tipo): ?string
114|    {
115|        $needle = mb_strtolower(trim($tipo));
116|        if ($needle === '') {
117|            return null;
118|        }
119|
120|        $config = $this->repository->findOneByCompany($company);
121|        if (!$config instanceof GovernanceAuthorizationConfig) {
122|            return null;
123|        }
124|
125|        foreach ($config->getTypeLabels() as $label) {
126|            if (mb_strtolower($label) === $needle) {
127|                return $label;
128|            }
129|        }
130|
131|        return null;
132|    }
133|
134|    public function hasConfiguredTypes(Company $company): bool
135|    {
136|        $config = $this->repository->findOneByCompany($company);
137|
138|        return $config instanceof GovernanceAuthorizationConfig
139|            && $config->getTypeLabels() !== [];
140|    }
141|
142|    private function findOrCreate(Company $company, ?User $user): GovernanceAuthorizationConfig
143|    {
144|        $config = $this->repository->findOneByCompany($company);
145|        if ($config instanceof GovernanceAuthorizationConfig) {
146|            return $config;
147|        }
148|
149|        $config = new GovernanceAuthorizationConfig();
150|        $config->setCompany($company);
151|        if ($user instanceof User) {
152|            $config->setCreatedBy($user);
153|        }
154|
155|        return $config;
156|    }
157|
158|    /**
159|     * @param list<string> $labels
160|     *
161|     * @return array<string, GovernanceAuthorizationType>
162|     */
163|    private function syncTypes(GovernanceAuthorizationConfig $config, array $labels): array
164|    {
165|        $kept = [];
166|        $byKey = [];
167|        foreach ($config->getTypes() as $type) {
168|            $byKey[mb_strtolower($type->getLabel())] = $type;
169|        }
170|
171|        foreach ($labels as $position => $label) {
172|            $key = mb_strtolower($label);
173|            $type = $byKey[$key] ?? null;
174|            if (!$type instanceof GovernanceAuthorizationType) {
175|                $type = new GovernanceAuthorizationType();
176|                $config->addType($type);
177|            }
178|            $type->setLabel($label)->setPosition($position);
179|            $kept[] = $type;
180|        }
181|
182|        foreach ($config->getTypes()->toArray() as $type) {
183|            if (!in_array($type, $kept, true)) {
184|                $config->removeType($type);
185|            }
186|        }
187|
188|        $map = [];
189|        foreach ($kept as $type) {
190|            $map[mb_strtolower($type->getLabel())] = $type;
191|        }
192|
193|        return $map;
194|    }
195|
196|    /**
197|     * @param list<array{id: int, all_areas: bool, area_keys: list<string>}> $memberAssignments
198|     * @param list<array{id: int, all_areas: bool, area_keys: list<string>}> $roleAssignments
199|     * @param array<string, GovernanceAuthorizationType> $typesByKey
200|     */
201|    private function syncApprovers(
202|        GovernanceAuthorizationConfig $config,
203|        Company $company,
204|        array $memberAssignments,
205|        array $roleAssignments,
206|        array $typesByKey,
207|    ): void {
208|        $position = 0;
209|
210|        foreach ($memberAssignments as $assignment) {
211|            $member = $this->findUsableMember($company, $assignment['id']);
212|            if (!$member instanceof CompanyMembers) {
213|                continue;
214|            }
215|
216|            $config->addApprover($this->buildApprover($member, null, $assignment, $typesByKey, $position));
217|            ++$position;
218|        }
219|
220|        foreach ($roleAssignments as $assignment) {
221|            $role = $this->findUsableRole($company, $assignment['id']);
222|            if (!$role instanceof Roles) {
223|                continue;
224|            }
225|
226|            $config->addApprover($this->buildApprover(null, $role, $assignment, $typesByKey, $position));
227|            ++$position;
228|        }
229|    }
230|
231|    /**
232|     * @param array{id: int, all_areas: bool, area_keys: list<string>} $assignment
233|     * @param array<string, GovernanceAuthorizationType> $typesByKey
234|     */
235|    private function buildApprover(
236|        ?CompanyMembers $member,
237|        ?Roles $role,
238|        array $assignment,
239|        array $typesByKey,
240|        int $position,
241|    ): GovernanceAuthorizationApprover {
242|        $approver = new GovernanceAuthorizationApprover();
243|        $approver
244|            ->setMember($member)
245|            ->setRole($role)
246|            ->setPosition($position);
247|
248|        $allAreas = !empty($assignment['all_areas']);
249|        $areaKeys = $allAreas ? [] : ($assignment['area_keys'] ?? []);
250|        if ($areaKeys === []) {
251|            $approver->setAllAreas(true);
252|
253|            return $approver;
254|        }
255|
256|        $approver->setAllAreas(false);
257|        foreach ($areaKeys as $label) {
258|            $type = $typesByKey[mb_strtolower($label)] ?? null;
259|            if ($type instanceof GovernanceAuthorizationType) {
260|                $approver->addApplicationType($type);
261|            }
262|        }
263|        if ($approver->getApplicationTypes()->isEmpty()) {
264|            $approver->setAllAreas(true);
265|        }
266|
267|        return $approver;
268|    }
269|
270|    /**
271|     * @param list<GovernanceAuthorizationApprover> $approvers
272|     *
273|     * @return list<array{id: int, name: string, all_areas: bool, area_keys: list<string>}>
274|     */
275|    private function mapApprovers(array $approvers, string $kind): array
276|    {
277|        $rows = [];
278|        foreach ($approvers as $approver) {
279|            if ($kind === 'member') {
280|                $subject = $approver->getMember();
281|                if (!$subject instanceof CompanyMembers || $subject->getIsRemoved()) {
282|                    continue;
283|                }
284|                $name = trim(GovernanceCaseHistoryRepository::resolveMemberDisplayName($subject));
285|                $fallback = 'Membro #' . $subject->getId();
286|            } else {
287|                $subject = $approver->getRole();
288|                if (!$subject instanceof Roles || $subject->getIsRemoved()) {
289|                    continue;
290|                }
291|                $name = trim((string) $subject->getName());
292|                $fallback = 'Cargo #' . $subject->getId();
293|            }
294|
295|            $rows[] = [
296|                'id' => (int) $subject->getId(),
297|                'name' => $name !== '' ? $name : $fallback,
298|                'all_areas' => $approver->usesAllAreas(),
299|                'area_keys' => $approver->getApplicationTypeLabels(),
300|            ];
301|        }
302|
303|        return $rows;
304|    }
305|
306|    /**
307|     * @param mixed $raw
308|     *
309|     * @return list<string>
310|     */
311|    private function normalizeTypes(mixed $raw): array
312|    {
313|        if (!is_array($raw)) {
314|            throw new \InvalidArgumentException('Tipos de autorização inválidos.');
315|        }
316|
317|        $normalized = [];
318|        $seen = [];
319|
320|        foreach ($raw as $item) {
321|            if (!is_string($item) && !is_numeric($item)) {
322|                throw new \InvalidArgumentException('Tipos de autorização inválidos.');
323|            }
324|
325|            $label = trim((string) $item);
326|            if ($label === '') {
327|                continue;
328|            }
329|
330|            if (mb_strlen($label) > self::MAX_TYPE_LENGTH) {
331|                throw new \InvalidArgumentException(sprintf(
332|                    'Tipo de autorização deve ter no máximo %d caracteres.',
333|                    self::MAX_TYPE_LENGTH
334|                ));
335|            }
336|
337|            $key = mb_strtolower($label);
338|            if (isset($seen[$key])) {
339|                continue;
340|            }
341|
342|            $seen[$key] = true;
343|            $normalized[] = $label;
344|
345|            if (count($normalized) > self::MAX_TYPES) {
346|                throw new \InvalidArgumentException(sprintf(
347|                    'É permitido cadastrar no máximo %d tipos de autorização.',
348|                    self::MAX_TYPES
349|                ));
350|            }
351|        }
352|
353|        return $normalized;
354|    }
355|
356|    /**
357|     * @param list<int> $memberIds
358|     */
359|    private function assertMembersBelongToCompany(Company $company, array $memberIds): void
360|    {
361|        foreach ($memberIds as $memberId) {
362|            if (!$this->findUsableMember($company, $memberId) instanceof CompanyMembers) {
363|                throw new \InvalidArgumentException('Membro aprovador inválido.');
364|            }
365|        }
366|    }
367|
368|    /**
369|     * @param list<int> $roleIds
370|     */
371|    private function assertRolesBelongToCompany(Company $company, array $roleIds): void
372|    {
373|        foreach ($roleIds as $roleId) {
374|            if (!$this->findUsableRole($company, $roleId) instanceof Roles) {
375|                throw new \InvalidArgumentException('Cargo aprovador inválido.');
376|            }
377|        }
378|    }
379|
380|    private function findUsableMember(Company $company, int $memberId): ?CompanyMembers
381|    {
382|        $member = $this->em->getRepository(CompanyMembers::class)->findOneBy([
383|            'id' => $memberId,
384|            'company' => $company,
385|            'isRemoved' => 0,
386|        ]);
387|
388|        return $member instanceof CompanyMembers ? $member : null;
389|    }
390|
391|    private function findUsableRole(Company $company, int $roleId): ?Roles
392|    {
393|        $role = $this->em->getRepository(Roles::class)->find($roleId);
394|        if (
395|            !$role instanceof Roles
396|            || $role->getCompany()?->getId() !== $company->getId()
397|            || $role->getIsRemoved()
398|        ) {
399|            return null;
400|        }
401|
402|        return $role;
403|    }
404|
405|    /**
406|     * @return array{0: bool, 1: bool}
407|     */
408|    private function resolveUseFlags(bool $useMembers, bool $useRoles): array
409|    {
410|        if (!$useMembers && !$useRoles) {
411|            $useMembers = true;
412|        }
413|
414|        return [$useMembers, $useRoles];
415|    }
416|
417|    /**
418|     * @param mixed $raw
419|     * @param list<string> $types
420|     *
421|     * @return list<array{id: int, all_areas: bool, area_keys: list<string>}>
422|     */
423|    private function normalizeApproverPayload(mixed $raw, array $types, string $field): array
424|    {
425|        if (!is_array($raw)) {
426|            throw new \InvalidArgumentException(sprintf('Lista inválida: %s.', $field));
427|        }
428|
429|        $canonicalTypes = [];
430|        foreach ($types as $label) {
431|            $canonicalTypes[mb_strtolower($label)] = $label;
432|        }
433|
434|        $normalized = [];
435|        $seen = [];
436|
437|        foreach ($raw as $item) {
438|            if (is_bool($item)) {
439|                throw new \InvalidArgumentException(sprintf('Identificador inválido em %s.', $field));
440|            }
441|
442|            $id = 0;
443|            $allAreas = true;
444|            $areaKeys = [];
445|
446|            if (is_array($item)) {
447|                $id = (int) ($item['id'] ?? 0);
448|                $allAreasSpecified = array_key_exists('all_areas', $item);
449|                if ($allAreasSpecified) {
450|                    $allAreas = $this->normalizeBoolean($item['all_areas'], 'all_areas');
451|                }
452|                $areaKeys = $this->filterAreaKeys($item['area_keys'] ?? [], $canonicalTypes);
453|                if (!$allAreasSpecified && $areaKeys !== []) {
454|                    $allAreas = false;
455|                }
456|            } else {
457|                $id = (int) $item;
458|            }
459|
460|            if ($id <= 0 || isset($seen[$id])) {
461|                continue;
462|            }
463|
464|            if ($allAreas || $areaKeys === []) {
465|                $allAreas = true;
466|                $areaKeys = [];
467|            }
468|
469|            $seen[$id] = true;
470|            $normalized[] = [
471|                'id' => $id,
472|                'all_areas' => $allAreas,
473|                'area_keys' => $areaKeys,
474|            ];
475|
476|            if (count($normalized) > self::MAX_APPROVER_IDS) {
477|                throw new \InvalidArgumentException(sprintf(
478|                    'É permitido cadastrar no máximo %d aprovadores em %s.',
479|                    self::MAX_APPROVER_IDS,
480|                    $field
481|                ));
482|            }
483|        }
484|
485|        return $normalized;
486|    }
487|
488|    /**
489|     * @param mixed $raw
490|     * @param array<string, string> $canonicalTypes
491|     *
492|     * @return list<string>
493|     */
494|    private function filterAreaKeys(mixed $raw, array $canonicalTypes): array
495|    {
496|        if (!is_array($raw)) {
497|            return [];
498|        }
499|
500|        $keys = [];

Note: Results truncated to 500 lines. Please narrow your line range.

{"file_path": "src/Service/Governance/GovernanceAuthorizationConfigService.php", "start_line": 500, "end_line": 574}

File: src/Service/Governance/GovernanceAuthorizationConfigService.php (Total lines: 574)
IS_TRUNCATED: false
LINE_RANGE: 500-574
500|        $keys = [];
501|        $seen = [];
502|        foreach ($raw as $item) {
503|            if (!is_string($item) && !is_numeric($item)) {
504|                continue;
505|            }
506|            $label = trim((string) $item);
507|            if ($label === '') {
508|                continue;
509|            }
510|            $lookup = mb_strtolower($label);
511|            if (!isset($canonicalTypes[$lookup]) || isset($seen[$lookup])) {
512|                continue;
513|            }
514|            $seen[$lookup] = true;
515|            $keys[] = $canonicalTypes[$lookup];
516|        }
517|
518|        return $keys;
519|    }
520|
521|    /**
522|     * @return list<array{id: int, name: string}>
523|     */
524|    private function listCompanyRoles(Company $company): array
525|    {
526|        $roles = $this->em->getRepository(Roles::class)->findBy(
527|            ['company' => $company],
528|            ['name' => 'ASC']
529|        );
530|
531|        $rows = [];
532|        foreach ($roles as $role) {
533|            if (!$role instanceof Roles || $role->getIsRemoved()) {
534|                continue;
535|            }
536|
537|            $name = trim((string) $role->getName());
538|            if ($name === '') {
539|                continue;
540|            }
541|
542|            $rows[] = [
543|                'id' => (int) $role->getId(),
544|                'name' => $name,
545|            ];
546|        }
547|
548|        return $rows;
549|    }
550|
551|    private function normalizeBoolean(mixed $value, string $field): bool
552|    {
553|        if (is_bool($value)) {
554|            return $value;
555|        }
556|
557|        if (is_int($value)) {
558|            return $value === 1;
559|        }
560|
561|        if (is_string($value)) {
562|            $normalized = strtolower(trim($value));
563|            if (in_array($normalized, ['1', 'true', 'on', 'yes'], true)) {
564|                return true;
565|            }
566|            if (in_array($normalized, ['0', 'false', 'off', 'no'], true)) {
567|                return false;
568|            }
569|        }
570|
571|        throw new \InvalidArgumentException(sprintf('Campo booleano inválido: %s.', $field));
572|    }
573|}
574|

{"file_path": "src/Entity/GovernanceAuthorization.php", "start_line": 1, "end_line": 110}

File: src/Entity/GovernanceAuthorization.php (Total lines: 409)
IS_TRUNCATED: false
LINE_RANGE: 1-110
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Entity;
6|
7|use App\Repository\GovernanceAuthorizationRepository;
8|use Doctrine\Common\Collections\ArrayCollection;
9|use Doctrine\Common\Collections\Collection;
10|use Doctrine\ORM\Mapping as ORM;
11|
12|/**
13| * @ORM\Entity(repositoryClass=GovernanceAuthorizationRepository::class)
14| * @ORM\Table(name="member_autorizacao")
15| * @ORM\HasLifecycleCallbacks
16| */
17|class GovernanceAuthorization
18|{
19|    /**
20|     * @ORM\Id
21|     * @ORM\GeneratedValue
22|     * @ORM\Column(type="integer")
23|     */
24|    private $id;
25|
26|    /**
27|     * @ORM\ManyToOne(targetEntity=Company::class)
28|     * @ORM\JoinColumn(nullable=false, onDelete="CASCADE")
29|     */
30|    private $company;
31|
32|    /**
33|     * @ORM\Column(type="string", length=255)
34|     */
35|    private $titulo;
36|
37|    /**
38|     * @ORM\Column(type="text", nullable=true)
39|     */
40|    private $descricao;
41|
42|    /**
43|     * @ORM\Column(type="string", length=100, nullable=true)
44|     */
45|    private $validade;
46|
47|    /**
48|     * @ORM\Column(type="date", nullable=true)
49|     */
50|    private $emitida;
51|
52|    /**
53|     * @ORM\Column(type="string", length=20, options={"default": "ativa"})
54|     */
55|    private $status = 'ativa';
56|
57|    /**
58|     * Lista de requisitos (rótulos do catálogo SSMA), ex.: CNH AB, ASO.
59|     *
60|     * @ORM\Column(type="json", nullable=true)
61|     *
62|     * @var list<string>|null
63|     */
64|    private ?array $requisitos = null;
65|
66|    /**
67|     * IDs de requisitos documentais de empresas parceiras que impactam esta autorização.
68|     *
69|     * @ORM\Column(name="contractor_requirement_dependencies", type="json", nullable=true)
70|     *
71|     * @var list<int>|null
72|     */
73|    private ?array $contractorRequirementDependencies = null;
74|
75|    /**
76|     * @ORM\Column(type="datetime")
77|     */
78|    private $createdAt;
79|
80|    /**
81|     * @ORM\Column(type="datetime", nullable=true)
82|     */
83|    private $updatedAt;
84|
85|    /**
86|     * @ORM\ManyToOne(targetEntity=CompanyMembers::class)
87|     * @ORM\JoinColumn(name="responsavel_member_id", referencedColumnName="id", nullable=true, onDelete="SET NULL")
88|     */
89|    private ?CompanyMembers $responsavelMember = null;
90|
91|    /**
92|     * @ORM\ManyToOne(targetEntity=CompanyArea::class)
93|     * @ORM\JoinColumn(name="area_id", referencedColumnName="id", nullable=true, onDelete="SET NULL")
94|     */
95|    private ?CompanyArea $area = null;
96|
97|    /**
98|     * @ORM\ManyToOne(targetEntity=CompanyMembers::class)
99|     * @ORM\JoinColumn(name="aprovador_member_id", referencedColumnName="id", nullable=true, onDelete="SET NULL")
100|     */
101|    private ?CompanyMembers $aprovadorMember = null;
102|
103|    /**
104|     * Cargo aprovador específico desta autorização (fallback da Configuração quando ausente).
105|     *
106|     * @ORM\ManyToOne(targetEntity=Roles::class)
107|     * @ORM\JoinColumn(name="aprovador_role_id", referencedColumnName="id", nullable=true, onDelete="SET NULL")
108|     */
109|    private ?Roles $aprovadorRole = null;
110|

{"query_name": "CompanyArea"}

migrations/Version20260716163000_AddCompanyAreaParentIdIfMissing.php
migrations/Version20260728140000_CompanyAreaMultipleResponsibles.php
src/Controller/CompanyAreaController.php
src/Entity/CompanyArea.php
src/Entity/CompanyAreaResponsible.php
src/Entity/CompanyAreaSynonym.php
src/Entity/Concerns/ResolvesCompanyAreaSafely.php
src/Form/CompanyAreaType.php
src/Repository/CompanyAreaRepository.php
src/Repository/CompanyAreaResponsibleRepository.php
src/Repository/CompanyAreaSynonymRepository.php
tests/Unit/Product/ProfessionalAreas/CompanyAreaControllerTest.php
tests/Unit/Product/ProfessionalAreas/CompanyAreaEntityTest.php
tests/Unit/Product/ProfessionalAreas/CompanyAreaRenamedReferencesTest.php
tests/Unit/Product/ProfessionalAreas/CompanyAreaRepositoryTest.php
tests/Unit/Product/ProfessionalAreas/CompanyAreaSynonymEntityTest.php

{"search_text": "class Roles", "file_patterns": ["src/Entity/*.php"]}

File: src/Entity/Roles.php
Match lines: 1
14|class Roles

File: src/Entity/RolesBenefits.php
Match lines: 1
11|class RolesBenefits

{"file_path": "src/Entity/Roles.php", "start_line": 1, "end_line": 60}

File: src/Entity/Roles.php (Total lines: 594)
IS_TRUNCATED: false
LINE_RANGE: 1-60
1|<?php
2|
3|namespace App\Entity;
4|
5|use App\Entity\Concerns\ResolvesCompanyAreaSafely;
6|use App\Repository\RolesRepository;
7|use Doctrine\Common\Collections\ArrayCollection;
8|use Doctrine\Common\Collections\Collection;
9|use Doctrine\ORM\Mapping as ORM;
10|
11|/**
12| * @ORM\Entity(repositoryClass=RolesRepository::class)
13| */
14|class Roles
15|{
16|    use ResolvesCompanyAreaSafely;
17|
18|    /**
19|     * @ORM\Id
20|     * @ORM\GeneratedValue
21|     * @ORM\Column(type="integer")
22|     */
23|    private $id;
24|
25|    /**
26|     * @ORM\Column(type="string", length=255)
27|     */
28|    private $name;
29|
30|    /**
31|     * @ORM\Column(type="string", length=255, nullable=true)
32|     */
33|    private $description;
34|
35|    /**
36|     * @ORM\Column(type="string", length=255, nullable=true)
37|     */
38|    private $remunerationPolicy;
39|
40|    /**
41|     * @ORM\ManyToOne(targetEntity=TypeContract::class)
42|     * @ORM\JoinColumn(nullable=true)
43|     */
44|    private $typeContract;
45|
46|    /**
47|     * Parent structure (CHEFE). Null for structures and legacy standalone roles.
48|     *
49|     * @ORM\ManyToOne(targetEntity=Roles::class, inversedBy="children")
50|     * @ORM\JoinColumn(name="parent_id", referencedColumnName="id", nullable=true, onDelete="RESTRICT")
51|     */
52|    private $parent;
53|
54|    /**
55|     * Seniorities under this structure.
56|     *
57|     * @ORM\OneToMany(targetEntity=Roles::class, mappedBy="parent")
58|     */
59|    private $children;
60|

{"file_path": "src/Entity/CompanyArea.php", "start_line": 1, "end_line": 45}

File: src/Entity/CompanyArea.php (Total lines: 591)
IS_TRUNCATED: false
LINE_RANGE: 1-45
1|<?php
2|
3|namespace App\Entity;
4|
5|use App\Repository\CompanyAreaRepository;
6|use Doctrine\Common\Collections\ArrayCollection;
7|use Doctrine\Common\Collections\Collection;
8|use Doctrine\ORM\Mapping as ORM;
9|
10|/**
11| * @ORM\Entity(repositoryClass=CompanyAreaRepository::class)
12| * @ORM\Table(name="company_area")
13| */
14|class CompanyArea
15|{
16|    public const STATUS_ACTIVE = 'active';
17|    public const STATUS_INACTIVE = 'inactive';
18|
19|    public const STATUS_LABELS = [
20|        self::STATUS_ACTIVE => 'Ativo',
21|        self::STATUS_INACTIVE => 'Inativo',
22|    ];
23|    /**
24|     * @ORM\Id
25|     * @ORM\GeneratedValue
26|     * @ORM\Column(type="integer")
27|     */
28|    private $id;
29|
30|    /**
31|     * @ORM\Column(type="string", length=255)
32|     */
33|    private $name;
34|
35|    /**
36|     * @ORM\Column(type="text")
37|     */
38|    private $description;
39|
40|    /**
41|     * @ORM\Column(type="datetime")
42|     */
43|    private $created_at;
44|
45|    /**

{"search_text": "member_autorizacao ADD area_id|member_autorizacao ADD aprovador|governance_authorization_config|aprovador_role_id", "file_patterns": ["migrations/*.php"], "use_perl_regexp": true}

File: migrations/Version20260831143000_GovernanceAuthorizationConfig.php
Match lines: 9
21|        if (!$schemaManager->tablesExist(['governance_authorization_config'])) {
23|                CREATE TABLE governance_authorization_config (
32|                    UNIQUE INDEX uniq_governance_authorization_config_company (company_id),
49|                    CONSTRAINT FK_GOV_AUTH_TYPE_CONFIG FOREIGN KEY (config_id) REFERENCES governance_authorization_config (id) ON DELETE CASCADE,
57|                'CONSTRAINT FK_GOV_AUTH_APPROVER_CONFIG FOREIGN KEY (config_id) REFERENCES governance_authorization_config (id) ON DELETE CASCADE',
99|            $this->addSql('ALTER TABLE member_autorizacao ADD area_id INT DEFAULT NULL');
106|            $this->addSql('ALTER TABLE member_autorizacao ADD aprovador_member_id INT DEFAULT NULL');
152|        if ($schemaManager->tablesExist(['governance_authorization_config'])) {
153|            $this->addSql('DROP TABLE governance_authorization_config');

File: migrations/Version20260902160000_AuthorizationSpecificApproverRole.php
Match lines: 5
25|        if (!$table->hasColumn('aprovador_role_id')) {
26|            $this->addSql('ALTER TABLE member_autorizacao ADD aprovador_role_id INT DEFAULT NULL');
31|            $this->addSql('ALTER TABLE member_autorizacao ADD CONSTRAINT FK_MA_aprovador_role FOREIGN KEY (aprovador_role_id) REFERENCES roles (id) ON DELETE SET NULL');
46|        if ($table->hasColumn('aprovador_role_id')) {
47|            $this->addSql('ALTER TABLE member_autorizacao DROP COLUMN aprovador_role_id');

{"file_path": "src/Repository/GovernanceAuthorizationRepository.php", "start_line": 150, "end_line": 260}

File: src/Repository/GovernanceAuthorizationRepository.php (Total lines: 277)
IS_TRUNCATED: false
LINE_RANGE: 150-260
150|        }
151|
152|        foreach ($valid as $cid => $m) {
153|            if (isset($present[$cid])) {
154|                continue;
155|            }
156|            $link = new GovernanceAuthorizationCollaborator();
157|            $link->setGovernanceAuthorization($aut);
158|            $link->setCompanyMember($m);
159|            $aut->addColaboradorVinculo($link);
160|            $em->persist($link);
161|        }
162|    }
163|
164|    public function unlinkMember(GovernanceAuthorization $aut, CompanyMembers $member): void
165|    {
166|        $vinculo = null;
167|        foreach ($aut->getColaboradoresVinculos() as $link) {
168|            if ($link->getCompanyMember()?->getId() === $member->getId()) {
169|                $vinculo = $link;
170|                break;
171|            }
172|        }
173|
174|        if (!$vinculo instanceof GovernanceAuthorizationCollaborator) {
175|            throw new \InvalidArgumentException('Esta autorização não inclui este colaborador.');
176|        }
177|
178|        $em = $this->getEntityManager();
179|        $aut->removeColaboradorVinculo($vinculo);
180|        $em->remove($vinculo);
181|        $em->flush();
182|    }
183|
184|    public function removeAutorizacao(int $id, Company $company): void
185|    {
186|        $aut = $this->findOneBy(['id' => $id, 'company' => $company]);
187|        if (!$aut) {
188|            throw new \InvalidArgumentException('Autorização não encontrada.');
189|        }
190|
191|        $em = $this->getEntityManager();
192|        $em->remove($aut);
193|        $em->flush();
194|    }
195|
196|    public function toArray(GovernanceAuthorization $aut): array
197|    {
198|        $membros = $aut->getColaboradoresMembros();
199|        usort($membros, static fn (CompanyMembers $a, CompanyMembers $b) => ($a->getId() ?? 0) <=> ($b->getId() ?? 0));
200|
201|        $titulo = $aut->getTitulo();
202|        $descCat = AutorizacaoTipoCatalog::descricaoPorTitulo($titulo);
203|        $descGravada = $aut->getDescricao();
204|        $descExibicao = $descCat ?? ($descGravada !== null && $descGravada !== '' ? $descGravada : null);
205|
206|        $validadeRaw    = $aut->getValidade();
207|        $validadeDias   = $this->parseValidadeDias($validadeRaw);
208|        $emitidaDate    = $aut->getEmitida();
209|        $validadeExpira = null;
210|
211|        if ($validadeRaw !== null && $validadeRaw !== '') {
212|            if ($this->isDateString($validadeRaw)) {
213|                $validadeExpira = $validadeRaw;
214|            } elseif ($validadeDias !== null && $emitidaDate !== null) {
215|                $expira = (clone \DateTime::createFromInterface($emitidaDate))->modify('+' . $validadeDias . ' days');
216|                $validadeExpira = $expira->format('Y-m-d');
217|            }
218|        }
219|
220|        return [
221|            'id'                  => $aut->getId(),
222|            'titulo'              => $titulo,
223|            'descricao'           => $descGravada,
224|            'descricao_exibicao'  => $descExibicao,
225|            'validade'            => $validadeRaw,
226|            'validade_dias'       => $validadeDias,
227|            'validade_expira'     => $validadeExpira,
228|            'emitida'             => $emitidaDate?->format('Y-m-d'),
229|            'status'              => $aut->getStatus(),
230|            'requisitos'          => $aut->getRequisitosList(),
231|            'contractor_requirement_dependencies' => $aut->getContractorRequirementDependencies(),
232|            'responsavel_id'      => $aut->getResponsavelMember()?->getId(),
233|            'area_id'             => $aut->getArea()?->getId(),
234|            'aprovador_id'        => $aut->getAprovadorMember()?->getId(),
235|            'aprovador_role_id'   => $aut->getAprovadorRole()?->getId(),
236|            'tipo'                => $aut->getTipo(),
237|            'colaboradores'       => array_map(fn (CompanyMembers $cm) => $this->colaboradorRow($cm), $membros),
238|        ];
239|    }
240|
241|    private function parseValidadeDias(?string $val): ?int
242|    {
243|        if ($val === null || $val === '') {
244|            return null;
245|        }
246|        if (ctype_digit($val)) {
247|            return (int) $val;
248|        }
249|
250|        return null;
251|    }
252|
253|    /**
254|     * Returns true when the string is a Y-m-d date (SSMA flow stores expiry date directly).
255|     */
256|    private function isDateString(?string $val): bool
257|    {
258|        if ($val === null || $val === '') {
259|            return false;
260|        }

{"search_text": "function findForCompany", "file_patterns": ["src/Repository/CompanyAreaRepository.php"]}

File: src/Repository/CompanyAreaRepository.php
Match lines: 1
124|    public function findForCompany(?Company $company, bool $activeOnly = true): array

{"file_path": "src/Controller/GovernanceController.php", "start_line": 2900, "end_line": 3010}

File: src/Controller/GovernanceController.php (Total lines: 6154)
IS_TRUNCATED: false
LINE_RANGE: 2900-3010
2900|
2901|        try {
2902|            $conditions = $this->authorizationConditionConfig->savePayload(
2903|                $company,
2904|                $payload,
2905|                $this->resolveCurrentGovernanceActorDisplayName($company),
2906|            );
2907|        } catch (\InvalidArgumentException $e) {
2908|            return new JsonResponse(['success' => false, 'message' => $e->getMessage()], 422);
2909|        } catch (\Throwable $e) {
2910|            $this->logger->error('authorizationConditionsSave: ' . $e->getMessage(), ['exception' => $e]);
2911|
2912|            return new JsonResponse(['success' => false, 'message' => 'Erro ao salvar condições.'], 500);
2913|        }
2914|
2915|        return new JsonResponse(['success' => true, 'aut_conditions' => $conditions]);
2916|    }
2917|
2918|    public function authorizationConfigGet(): JsonResponse
2919|    {
2920|        /** @var User|null $user */
2921|        $user = $this->getUser();
2922|        $company = $this->currentGovernanceCompany();
2923|        if (!$user || !$company) {
2924|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
2925|        }
2926|        if (!$this->canManageAuthorizationConfig()) {
2927|            return new JsonResponse(['success' => false, 'message' => 'Sem permissão para consultar configurações de Autorizações.'], 403);
2928|        }
2929|
2930|        $view = $this->authorizationConfigService->getViewData($company);
2931|
2932|        return new JsonResponse([
2933|            'success' => true,
2934|            'authorization_types' => $view['aut_authorization_types'],
2935|            'use_members' => $view['aut_authorization_use_members'],
2936|            'use_roles' => $view['aut_authorization_use_roles'],
2937|            'approver_members' => $view['aut_authorization_approver_members'],
2938|            'approver_roles' => $view['aut_authorization_approver_roles'],
2939|            'company_roles' => $view['aut_company_roles'],
2940|        ]);
2941|    }
2942|
2943|    public function authorizationConfigSave(Request $request): JsonResponse
2944|    {
2945|        /** @var User|null $user */
2946|        $user = $this->getUser();
2947|        $company = $this->currentGovernanceCompany();
2948|        if (!$user || !$company) {
2949|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
2950|        }
2951|        if (!$this->canManageAuthorizationConfig()) {
2952|            return new JsonResponse(['success' => false, 'message' => 'Sem permissão para alterar configurações de Autorizações.'], 403);
2953|        }
2954|
2955|        $payload = json_decode($request->getContent(), true);
2956|        if (!is_array($payload)) {
2957|            return new JsonResponse(['success' => false, 'message' => 'Payload inválido.'], 400);
2958|        }
2959|
2960|        try {
2961|            $data = $this->authorizationConfigService->savePayload($company, $payload, $user);
2962|        } catch (\InvalidArgumentException $e) {
2963|            return new JsonResponse(['success' => false, 'message' => $e->getMessage()], 422);
2964|        } catch (\Throwable $e) {
2965|            $this->logger->error('authorizationConfigSave: ' . $e->getMessage(), ['exception' => $e]);
2966|
2967|            return new JsonResponse(['success' => false, 'message' => 'Erro ao salvar configurações.'], 500);
2968|        }
2969|
2970|        return new JsonResponse([
2971|            'success' => true,
2972|            'message' => 'Configurações salvas.',
2973|            'authorization_types' => $data['authorization_types'],
2974|            'use_members' => $data['use_members'],
2975|            'use_roles' => $data['use_roles'],
2976|            'approver_members' => $data['approver_members'],
2977|            'approver_roles' => $data['approver_roles'],
2978|        ]);
2979|    }
2980|
2981|    public function authorizationConditionUsage(Request $request): JsonResponse
2982|    {
2983|        /** @var User|null $user */
2984|        $user = $this->getUser();
2985|        $company = $user?->getCompany();
2986|        if (!$user || !$company) {
2987|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
2988|        }
2989|        if (!$this->canManageAuthorizationConfig()) {
2990|            return new JsonResponse(['success' => false, 'message' => 'Sem permissão para consultar requisitos.'], 403);
2991|        }
2992|
2993|        $nome = trim((string) $request->query->get('nome', ''));
2994|        if ($nome === '') {
2995|            return new JsonResponse(['success' => false, 'message' => 'Informe o nome do requisito.'], 422);
2996|        }
2997|
2998|        $count = $this->authorizationConditionConfig->countAuthorizationsUsingRequisito($company, $nome);
2999|
3000|        return new JsonResponse([
3001|            'success' => true,
3002|            'in_use' => $count > 0,
3003|            'authorization_count' => $count,
3004|        ]);
3005|    }
3006|
3007|    private function buildAuthorizationViewData(): array
3008|    {
3009|        /** @var User|null $user */
3010|        $user = $this->getUser();

{"search_text": "governance/authorizations|authorizations", "file_patterns": ["config/*.yaml"]}

No matches found

{"query_name": "security.yaml"}

config/packages/dev/security.yaml
config/packages/security.yaml

{"search_text": "ROLE_MANAGER_GESTOR|ROLE_MANAGER", "file_patterns": ["config/packages/security.yaml"]}

No matches found

{"search_text": "function canManageAuthorizations", "file_patterns": ["src/Controller/GovernanceController.php"]}

File: src/Controller/GovernanceController.php
Match lines: 1
4149|    private function canManageAuthorizations(): bool

{"file_path": "src/Controller/GovernanceController.php", "start_line": 4100, "end_line": 4180}

File: src/Controller/GovernanceController.php (Total lines: 6154)
IS_TRUNCATED: false
LINE_RANGE: 4100-4180
4100|            if ($document->getStatus() !== GovernanceAuthorizationDocument::STATUS_APROVADO) {
4101|                continue;
4102|            }
4103|            if (trim((string) $document->getRequisitoLabel()) !== $requisitoLabel) {
4104|                continue;
4105|            }
4106|
4107|            $uploadedAt = $document->getUploadedAt();
4108|            $uploadedKey = $uploadedAt instanceof \DateTimeInterface
4109|                ? $uploadedAt->format('Y-m-d H:i:s')
4110|                : '';
4111|
4112|            if (
4113|                !$latest instanceof GovernanceAuthorizationDocument
4114|                || $uploadedKey > $latestUploadedAt
4115|                || (
4116|                    $uploadedKey === $latestUploadedAt
4117|                    && (int) $document->getId() > (int) $latest->getId()
4118|                )
4119|            ) {
4120|                $latest = $document;
4121|                $latestUploadedAt = $uploadedKey;
4122|            }
4123|        }
4124|
4125|        return $latest;
4126|    }
4127|
4128|    private function canAccessCasesHub(): bool
4129|    {
4130|        return $this->canAccessAuthorizationHub();
4131|    }
4132|
4133|    private function canAccessAuthorizationHub(): bool
4134|    {
4135|        if ($this->canAccessAuthorizationSupervisorSurface()) {
4136|            return true;
4137|        }
4138|
4139|        $request = $this->requestStack->getCurrentRequest();
4140|
4141|        return $request && (bool) $request->attributes->get('can_view', false);
4142|    }
4143|
4144|    private function canAccessAuthorizationSupervisorSurface(): bool
4145|    {
4146|        return $this->canManageAuthorizations() || $this->isAuthorizationViewer();
4147|    }
4148|
4149|    private function canManageAuthorizations(): bool
4150|    {
4151|        if ($this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER') || $this->isGranted('ROLE_MANAGER_GESTOR')) {
4152|            return true;
4153|        }
4154|
4155|        $request = $this->requestStack->getCurrentRequest();
4156|        if (!$request) {
4157|            return false;
4158|        }
4159|
4160|        return (bool) $request->attributes->get('can_create', false)
4161|            || (bool) $request->attributes->get('can_edit', false)
4162|            || (bool) $request->attributes->get('can_delete', false);
4163|    }
4164|
4165|    private function isAuthorizationViewer(): bool
4166|    {
4167|        if ($this->isGranted('ROLE_MANAGER_VIEWER')
4168|            && !$this->isGranted('ROLE_MANAGER')
4169|            && !$this->isGranted('ROLE_MANAGER_GESTOR')
4170|            && !$this->isGranted('ROLE_SUPER_ADMIN')
4171|        ) {
4172|            return true;
4173|        }
4174|
4175|        $request = $this->requestStack->getCurrentRequest();
4176|        if (!$request) {
4177|            return false;
4178|        }
4179|
4180|        return (bool) $request->attributes->get('can_view', false)

{"search_text": "isCsrfTokenValid|csrf", "file_patterns": ["src/Controller/GovernanceController.php"]}

No matches found

{"search_text": "governance/authorizations", "file_patterns": ["config/routes_governance.yaml"]}

File: config/routes_governance.yaml
Match lines: 26
154|  path: /manager/governance/authorizations
159|  path: /manager/governance/authorizations/monitoring
164|  path: /manager/governance/authorizations/monitoring/panel
231|  path: /manager/governance/authorizations/save
236|  path: /manager/governance/authorizations/{id}
243|  path: /manager/governance/authorizations/{id}/usage
250|  path: /manager/governance/authorizations/{id}/detail
257|  path: /manager/governance/authorizations/{id}/deactivate
264|  path: /manager/governance/authorizations/{id}/activate
271|  path: /manager/governance/authorizations/{autId}/member/{memberId}/unlink
279|  path: /manager/governance/authorizations/{autId}/member/{memberId}/block
284|  path: /manager/governance/authorizations/apply-members
289|  path: /manager/governance/authorizations/{autId}/member/{memberId}/notify
297|  path: /manager/governance/authorizations/{autId}/extend-validity
304|  path: /manager/governance/authorizations/{autId}/member/{memberId}/documents
312|  path: /manager/governance/authorizations/{autId}/member/{memberId}/documents/upload
320|  path: /manager/governance/authorizations/{autId}/member/{memberId}/requirement-validity
328|  path: /manager/governance/authorizations/document/{docId}/validate
335|  path: /manager/governance/authorizations/document/{docId}/remove
342|  path: /manager/governance/authorizations/member/{memberId}/cnh
349|  path: /manager/governance/authorizations/member/{memberId}/cnh/save
356|  path: /manager/governance/authorizations/conditions
361|  path: /manager/governance/authorizations/conditions
366|  path: /manager/governance/authorizations/conditions/usage
371|  path: /manager/governance/authorizations/config
376|  path: /manager/governance/authorizations/config

{"file_path": "config/routes_governance.yaml", "start_line": 225, "end_line": 270}

File: config/routes_governance.yaml (Total lines: 408)
IS_TRUNCATED: false
LINE_RANGE: 225-270
225|  controller: App\Controller\GovernanceController::badgeSendToMember
226|  methods: [POST]
227|  requirements:
228|    id: '\d+'
229|
230|governance_authorization_save:
231|  path: /manager/governance/authorizations/save
232|  controller: App\Controller\GovernanceController::authorizationSave
233|  methods: [POST]
234|
235|governance_authorization_remove:
236|  path: /manager/governance/authorizations/{id}
237|  controller: App\Controller\GovernanceController::authorizationRemove
238|  methods: [DELETE]
239|  requirements:
240|    id: '\d+'
241|
242|governance_authorization_usage:
243|  path: /manager/governance/authorizations/{id}/usage
244|  controller: App\Controller\GovernanceController::authorizationUsage
245|  methods: [GET]
246|  requirements:
247|    id: '\d+'
248|
249|governance_authorization_detail:
250|  path: /manager/governance/authorizations/{id}/detail
251|  controller: App\Controller\GovernanceController::authorizationDetail
252|  methods: [GET]
253|  requirements:
254|    id: '\d+'
255|
256|governance_authorization_deactivate:
257|  path: /manager/governance/authorizations/{id}/deactivate
258|  controller: App\Controller\GovernanceController::authorizationDeactivate
259|  methods: [POST]
260|  requirements:
261|    id: '\d+'
262|
263|governance_authorization_activate:
264|  path: /manager/governance/authorizations/{id}/activate
265|  controller: App\Controller\GovernanceController::authorizationActivate
266|  methods: [POST]
267|  requirements:
268|    id: '\d+'
269|
270|governance_authorization_unlink_member:

{"search_text": "class User", "file_patterns": ["src/Entity/User.php"]}

File: src/Entity/User.php
Match lines: 1
35|class User implements UserInterface, PasswordAuthenticatedUserInterface, EquatableInterface, \JsonSerializable

{"search_text": "@ORM\\Table", "file_patterns": ["src/Entity/User.php"]}

No matches found

{"search_text": "@ORM\\Table", "file_patterns": ["src/Entity/Company.php"]}

File: src/Entity/Company.php
Match lines: 1
16| * @ORM\Table(name="company")

{"search_text": "@ORM\\Table\\(name=", "file_patterns": ["src/Entity/CompanyMembers.php"]}

No matches found

{"search_text": "function getOneOrNullResult", "file_patterns": ["vendor/doctrine/orm/lib/Doctrine/ORM/AbstractQuery.php"]}

No matches found

{"search_text": "getOneOrNullResult", "file_patterns": ["vendor/doctrine/orm/**/AbstractQuery.php", "vendor/doctrine/**/*.php"]}

No matches found

{"search_text": "buildAuthorizationHubContext", "file_patterns": ["src/Controller/GovernanceController.php"]}

File: src/Controller/GovernanceController.php
Match lines: 4
419|        return $this->render('governance/authorization/index.html.twig', $this->buildAuthorizationHubContext());
428|        return $this->render('governance/authorization/monitoring.html.twig', $this->buildAuthorizationHubContext());
437|        $context = $this->buildAuthorizationHubContext();
1290|    private function buildAuthorizationHubContext(): array

{"file_path": "src/Entity/GovernanceAuthorization.php", "start_line": 300, "end_line": 409}

File: src/Entity/GovernanceAuthorization.php (Total lines: 409)
IS_TRUNCATED: false
LINE_RANGE: 300-409
300|        return $this->updatedAt;
301|    }
302|
303|    /**
304|     * @return Collection<int, GovernanceAuthorizationCollaborator>
305|     */
306|    public function getColaboradoresVinculos(): Collection
307|    {
308|        return $this->colaboradoresVinculos;
309|    }
310|
311|    public function addColaboradorVinculo(GovernanceAuthorizationCollaborator $v): self
312|    {
313|        if (!$this->colaboradoresVinculos->contains($v)) {
314|            $this->colaboradoresVinculos->add($v);
315|            $v->setGovernanceAuthorization($this);
316|        }
317|
318|        return $this;
319|    }
320|
321|    public function removeColaboradorVinculo(GovernanceAuthorizationCollaborator $v): self
322|    {
323|        $this->colaboradoresVinculos->removeElement($v);
324|
325|        return $this;
326|    }
327|
328|    public function getResponsavelMember(): ?CompanyMembers
329|    {
330|        return $this->responsavelMember;
331|    }
332|
333|    public function setResponsavelMember(?CompanyMembers $responsavelMember): self
334|    {
335|        $this->responsavelMember = $responsavelMember;
336|
337|        return $this;
338|    }
339|
340|    public function getArea(): ?CompanyArea
341|    {
342|        return $this->area;
343|    }
344|
345|    public function setArea(?CompanyArea $area): self
346|    {
347|        $this->area = $area;
348|
349|        return $this;
350|    }
351|
352|    public function getAprovadorMember(): ?CompanyMembers
353|    {
354|        return $this->aprovadorMember;
355|    }
356|
357|    public function setAprovadorMember(?CompanyMembers $aprovadorMember): self
358|    {
359|        $this->aprovadorMember = $aprovadorMember;
360|
361|        return $this;
362|    }
363|
364|    public function getAprovadorRole(): ?Roles
365|    {
366|        return $this->aprovadorRole;
367|    }
368|
369|    public function setAprovadorRole(?Roles $aprovadorRole): self
370|    {
371|        $this->aprovadorRole = $aprovadorRole;
372|
373|        return $this;
374|    }
375|
376|    public function hasSpecificApprover(): bool
377|    {
378|        return $this->aprovadorMember instanceof CompanyMembers
379|            || $this->aprovadorRole instanceof Roles;
380|    }
381|
382|    public function getTipo(): ?string
383|    {
384|        return $this->tipo;
385|    }
386|
387|    public function setTipo(?string $tipo): self
388|    {
389|        $label = trim((string) $tipo);
390|        $this->tipo = $label !== '' ? $label : null;
391|
392|        return $this;
393|    }
394|
395|    /** @return CompanyMembers[] */
396|    public function getColaboradoresMembros(): array
397|    {
398|        $out = [];
399|        foreach ($this->colaboradoresVinculos as $v) {
400|            $m = $v->getCompanyMember();
401|            if ($m) {
402|                $out[] = $m;
403|            }
404|        }
405|
406|        return $out;
407|    }
408|}
409|

{"search_text": "can_create", "file_patterns": ["src/EventSubscriber/*.php", "src/EventListener/*.php", "src/Security/*.php", "src/*.php"]}

File: src/Controller/BankAccountsPlanningAccessTrait.php
Match lines: 5
38|     * @return array{is_admin:bool,can_view:bool,can_create:bool,can_edit:bool,can_delete:bool}
51|                'can_create' => false,
62|                'can_create' => true,
101|            'can_create' => $canCreate,
272|            'can_create' => $canCreate,

File: src/Controller/BanksController.php
Match lines: 3
452|        if (!$bankAccess['permissions']['can_create']) {
918|            'canCreate' => $permissions['can_create'],
1371|        if (!$permissions['can_create']) {

File: src/Controller/BudgetsController.php
Match lines: 8
99|     * @return array{is_admin:bool,can_view:bool,can_create:bool,can_edit:bool,can_delete:bool}
112|                'can_create' => false,
123|                'can_create' => true,
159|            'can_create' => $canCreate,
339|            'can_create' => $canCreate,
1698|        if (!$permissions['can_create']) {
2122|            'canCreate' => $permissions['can_create'],
2534|        if (!$permissions['can_create']) {

File: src/Controller/CommunicationCenterController.php
Match lines: 1
89|        // isOwnDemandsOnly: membro com can_create mas sem can_view — vê e edita só as próprias

File: src/Controller/CompanyAreaController.php
Match lines: 1
1333|                'create' => 'can_create',

File: src/Controller/GovernanceController.php
Match lines: 5
4160|        return (bool) $request->attributes->get('can_create', false)
4181|            && !(bool) $request->attributes->get('can_create', false)
4222|            && !(bool) $request->attributes->get('can_create', false)
4239|        return $this->hasBadgePermission('can_create');
4258|        if (!in_array($attribute, ['can_create', 'can_edit', 'can_delete'], true)) {

File: src/Controller/SsmaController.php
Match lines: 16
1088|     * Alterações na Árvore respeitam can_create / can_edit / can_delete do produto ssma-cause-tree
1133|                (bool) $request->attributes->get('can_create', false)
3006|        // (ex.: can_create de plataforma) tiver removido a linha do hub.
9681|        // Cobre tags como "Supervisor" ou qualquer tag com can_view=1 e can_create/edit/delete=0,
9709|            && !(bool) $request->attributes->get('can_create', false)
10795|            (bool) $request->attributes->get('can_create', false)
10887|     * Não usar {@see canAccessSsmaSupervisorSurface()} aqui: ele inclui Membro com can_create na tag
10905|        // Requer permissao de gestao: can_create/edit/delete no produto SSMA, ou role Symfony de gestao.
10917|     * Colaborador com can_create na tag (só inspeção/abordagem) fica de fora.
10929|        // Gestor Administrador: edita tabela Metas com can_view (não exige can_create em prevenção).
11353|     * Não usa canManageSsmaOccurrences()/ROLE_MANAGER — can_create de Membro não libera 2ª etapa.
11887|                // Não exige !$canManageEarly: can_create de Membro / ROLE_* de plataforma
12016|        // NÃO incluir isSsmaViewer() aqui. Usa produto ssma-cause-tree (não can_create de ssma-occurrences).
12073|        // mesmo com can_create na tag. Só roles de gestão na empresa ou tag Gestor de Equipe / G. Administrador com manage.
12171|        // Tabela de metas por pessoa (aba Metas): edição global só para gestão; membro com can_create não gere metas alheias.
12274|        // Importante: NÃO exigir !$ssmaCanManageOccurrences. can_create na tag Membro / ROLE de

File: src/Entity/PermissionTag.php
Match lines: 1
58|     * @ORM\Column(name="can_create", type="boolean", nullable=false)

File: src/EventListener/GlobalPermissionListener.php
Match lines: 16
545|        // tem permissão explícita para criar tipos de ocorrência, mas tag SSMA sem can_create.
546|        // Libera acesso às rotas de ocorrência e define can_create=true ao final.
635|            $request->attributes->set('can_create', true);
641|            $request->attributes->set('can_create', true);
646|            $request->attributes->set('can_create', true);
651|            $request->attributes->set('can_create', true);
727|        $request->attributes->set('can_create', false);
1156|        // Caminho 2: só tags de Supervisor. Membro/Inspetor com can_view e sem can_create
1245|        $request->attributes->set('can_create', $permissionTag->getCanCreate() ?? false);
1475|        $request->attributes->set('can_create', false);
1501|        $request->attributes->set('can_create', true);
1575|        $canCreate = $request->attributes->get('can_create', false);
1603|            $request->attributes->set('can_create', $globalPermissionTag->getCanCreate() ?? false);
1700|            $request->attributes->set('can_create', false);
1726|        $request->attributes->set('can_create', false);
1766|        $request->attributes->set('can_create', false);

File: src/Service/Adriana/Command/SsmaCommandService.php
Match lines: 2
1922|            'ssma_user_can_create_prevention' => $this->ssmaPermissionService->canCreatePreventionItem($user, $company),
1923|            'ssma_user_can_create_action_plan' => $this->ssmaPermissionService->canCreateActionPlan($user, $company),

File: src/Service/Chat/ChatDataSourceService.php
Match lines: 1
887|                    'can_create' => $tag->getCanCreate(),

File: src/Service/PeopleAnalytics/BehavioralIndicatorActionPlanApplicationService.php
Match lines: 2
79|     *     permissions: array{can_view: bool, can_create: bool}
126|                'can_create' => $canCreate,

File: src/Service/PeopleAnalytics/RiskIntelligenceSignalPermissionResolver.php
Match lines: 1
52|            'can_create_analysis' => $this->canCreateAnalysisWithContext($context, $signal),

File: src/Service/PeopleAnalytics/RiskSignalsPresenter.php
Match lines: 2
1666|                    'can_create_analysis' => false,
1679|            $signal['detail']['analysis']['can_create_manager_analysis'] = (bool) ($permissions['can_create_analysis'] ?? false);

File: src/Service/Ssma/SsmaOccurrenceCreatePermissionService.php
Match lines: 1
450|        // can_create legado / ROLE_MANAGER via canManageSsmaOccurrences: NÃO libera tudo

File: src/Twig/GlobalPermissionExtension.php
Match lines: 2
35|            new TwigFunction('can_create', [$this, 'canCreate']),
63|        return $this->getRequestAttribute('can_create', false);

File: src/Twig/MemberPermissionExtension.php
Match lines: 3
465|            new TwigFunction('member_permission_can_create_goal', [$this, 'canCreateGoal']),
467|            new TwigFunction('member_permission_can_create_pdi', [$this, 'canCreatePdi']),
482|            new TwigFunction('member_permission_can_create_crm', [$this, 'canCreateCrm']),

File: src/Twig/PermissionExtension.php
Match lines: 1
25|            new TwigFunction('can_create', [$this, 'canCreate']),

{"state": "DONE"}

{"path_array": ["src/Controller/GovernanceController.php", "src/Repository/GovernanceAuthorizationRepository.php"]}

==== FILE: src/Controller/GovernanceController.php ====
diff --git a/src/Controller/GovernanceController.php b/src/Controller/GovernanceController.php
--- a/src/Controller/GovernanceController.php
+++ b/src/Controller/GovernanceController.php
@@ -3,6 +3,7 @@
 namespace App\Controller;
 
 use App\Entity\Company;
+use App\Entity\CompanyArea;
 use App\Entity\CompanyMembers;
 use App\Entity\CompanyTeam;
 use App\Entity\CompanyTeamGroup;
@@ -17,6 +18,7 @@ use App\Entity\GovernanceCaseHistory;
 use App\Entity\GovernanceGrcCase;
 use App\Entity\OnboardingMember;
 use App\Entity\User;
+use App\Repository\CompanyAreaRepository;
 use App\Repository\GovernanceAuthorizationRepository;
 use App\Repository\GovernanceCaseHistoryRepository;
 use App\Service\AutorizacaoRequisitoCatalog;
@@ -34,6 +36,7 @@ use App\Service\Governance\GovernanceMemberProfileCnhService;
 use App\Service\Governance\GovernanceAuthorizationStatusService;
 use App\Service\Governance\GovernanceAuthorizationComplianceViewService;
 use App\Service\Governance\GovernanceAuthorizationConditionConfigService;
+use App\Service\Governance\GovernanceAuthorizationConfigService;
 use App\Service\Governance\GovernanceAuthorizationUsageService;
 use App\Service\Governance\GovernanceAuthorizationDocumentExtractorService;
 use App\Service\Governance\GovernanceAuthorizationDocumentUploadSupport;
@@ -62,6 +65,7 @@ class GovernanceController extends AbstractController
     private EntityManagerInterface $entityManager;
     private RequestStack $requestStack;
     private GovernanceAuthorizationConditionConfigService $authorizationConditionConfig;
+    private GovernanceAuthorizationConfigService $authorizationConfigService;
     private GovernanceAuthorizationUsageService $authorizationUsageService;
     private GovernanceAuthorizationDocumentExtractorService $documentExtractor;
     private GovernanceAuthorizationStatusService $authorizationStatusService;
@@ -89,6 +93,7 @@ class GovernanceController extends AbstractController
         EntityManagerInterface $entityManager,
         RequestStack $requestStack,
         GovernanceAuthorizationConditionConfigService $authorizationConditionConfig,
+        GovernanceAuthorizationConfigService $authorizationConfigService,
         GovernanceAuthorizationUsageService $authorizationUsageService,
         GovernanceAuthorizationDocumentExtractorService $documentExtractor,
         GovernanceAuthorizationStatusService $authorizationStatusService,
@@ -115,6 +120,7 @@ class GovernanceController extends AbstractController
         $this->entityManager = $entityManager;
         $this->requestStack = $requestStack;
         $this->authorizationConditionConfig = $authorizationConditionConfig;
+        $this->authorizationConfigService = $authorizationConfigService;
         $this->authorizationUsageService = $authorizationUsageService;
         $this->documentExtractor = $documentExtractor;
         $this->authorizationStatusService = $authorizationStatusService;
@@ -1323,10 +1329,33 @@ class GovernanceController extends AbstractController
             ))
             : [];
 
-        return array_merge($viewData, $autData, [
+        $companyAreas = [];
+        $authorizationConfigView = [
+            'aut_authorization_types' => [],
+            'aut_authorization_use_members' => true,
+            'aut_authorization_use_roles' => false,
+            'aut_authorization_approver_members' => [],
+            'aut_authorization_approver_roles' => [],
+            'aut_company_roles' => [],
+        ];
+        if ($company) {
+            /** @var CompanyAreaRepository $areaRepo */
+            $areaRepo = $this->entityManager->getRepository(CompanyArea::class);
+            foreach ($areaRepo->findForCompany($company, true) as $area) {
+                $companyAreas[] = [
+                    'id' => $area->getId(),
+                    'name' => (string) $area->getName(),
+                ];
+            }
+
+            $authorizationConfigView = $this->authorizationConfigService->getViewData($company);
+        }
+
+        return array_merge($viewData, $autData, $authorizationConfigView, [
             'aut_conditions' => $autConditions,
             'aut_classif_catalog' => GovernanceAuthorizationConditionConfigService::classificacoesPorTipo(),
             'aut_contractor_requirements' => $contractorRequirements,
+            'aut_company_areas' => $companyAreas,
         ]);
     }
 
@@ -2886,6 +2915,69 @@ class GovernanceController extends AbstractController
         return new JsonResponse(['success' => true, 'aut_conditions' => $conditions]);
     }
 
+    public function authorizationConfigGet(): JsonResponse
+    {
+        /** @var User|null $user */
+        $user = $this->getUser();
+        $company = $this->currentGovernanceCompany();
+        if (!$user || !$company) {
+            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
+        }
+        if (!$this->canManageAuthorizationConfig()) {
+            return new JsonResponse(['success' => false, 'message' => 'Sem permissão para consultar configurações de Autorizações.'], 403);
+        }
+
+        $view = $this->authorizationConfigService->getViewData($company);
+
+        return new JsonResponse([
+            'success' => true,
+            'authorization_types' => $view['aut_authorization_types'],
+            'use_members' => $view['aut_authorization_use_members'],
+            'use_roles' => $view['aut_authorization_use_roles'],
+            'approver_members' => $view['aut_authorization_approver_members'],
+            'approver_roles' => $view['aut_authorization_approver_roles'],
+            'company_roles' => $view['aut_company_roles'],
+        ]);
+    }
+
+    public function authorizationConfigSave(Request $request): JsonResponse
+    {
+        /** @var User|null $user */
+        $user = $this->getUser();
+        $company = $this->currentGovernanceCompany();
+        if (!$user || !$company) {
+            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
+        }
+        if (!$this->canManageAuthorizationConfig()) {
+            return new JsonResponse(['success' => false, 'message' => 'Sem permissão para alterar configurações de Autorizações.'], 403);
+        }
+
+        $payload = json_decode($request->getContent(), true);
+        if (!is_array($payload)) {
+            return new JsonResponse(['success' => false, 'message' => 'Payload inválido.'], 400);
+        }
+
+        try {
+            $data = $this->authorizationConfigService->savePayload($company, $payload, $user);
+        } catch (\InvalidArgumentException $e) {
+            return new JsonResponse(['success' => false, 'message' => $e->getMessage()], 422);
+        } catch (\Throwable $e) {
+            $this->logger->error('authorizationConfigSave: ' . $e->getMessage(), ['exception' => $e]);
+
+            return new JsonResponse(['success' => false, 'message' => 'Erro ao salvar configurações.'], 500);
+        }
+
+        return new JsonResponse([
+            'success' => true,
+            'message' => 'Configurações salvas.',
+            'authorization_types' => $data['authorization_types'],
+            'use_members' => $data['use_members'],
+            'use_roles' => $data['use_roles'],
+            'approver_members' => $data['approver_members'],
+            'approver_roles' => $data['approver_roles'],
+        ]);
+    }
+
     public function authorizationConditionUsage(Request $request): JsonResponse
     {
         /** @var User|null $user */
==== FILE: src/Repository/GovernanceAuthorizationRepository.php ====
diff --git a/src/Repository/GovernanceAuthorizationRepository.php b/src/Repository/GovernanceAuthorizationRepository.php
--- a/src/Repository/GovernanceAuthorizationRepository.php
+++ b/src/Repository/GovernanceAuthorizationRepository.php
@@ -230,6 +230,10 @@ class GovernanceAuthorizationRepository extends ServiceEntityRepository
             'requisitos'          => $aut->getRequisitosList(),
             'contractor_requirement_dependencies' => $aut->getContractorRequirementDependencies(),
             'responsavel_id'      => $aut->getResponsavelMember()?->getId(),
+            'area_id'             => $aut->getArea()?->getId(),
+            'aprovador_id'        => $aut->getAprovadorMember()?->getId(),
+            'aprovador_role_id'   => $aut->getAprovadorRole()?->getId(),
+            'tipo'                => $aut->getTipo(),
             'colaboradores'       => array_map(fn (CompanyMembers $cm) => $this->colaboradorRow($cm), $membros),
         ];
     }

{"file_path": "src/Repository/GovernanceAuthorizationConfigRepository.php"}

File: src/Repository/GovernanceAuthorizationConfigRepository.php (Total lines: 50)
IS_TRUNCATED: false
LINE_RANGE: 1-50
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Repository;
6|
7|use App\Entity\Company;
8|use App\Entity\GovernanceAuthorizationConfig;
9|use Doctrine\Bundle\DoctrineBundle\Repository\ServiceEntityRepository;
10|use Doctrine\Persistence\ManagerRegistry;
11|
12|/**
13| * @extends ServiceEntityRepository<GovernanceAuthorizationConfig>
14| *
15| * @method GovernanceAuthorizationConfig|null find($id, $lockMode = null, $lockVersion = null)
16| * @method GovernanceAuthorizationConfig|null findOneBy(array $criteria, array $orderBy = null)
17| * @method GovernanceAuthorizationConfig[]    findAll()
18| * @method GovernanceAuthorizationConfig[]    findBy(array $criteria, array $orderBy = null, $limit = null, $offset = null)
19| */
20|class GovernanceAuthorizationConfigRepository extends ServiceEntityRepository
21|{
22|    public function __construct(ManagerRegistry $registry)
23|    {
24|        parent::__construct($registry, GovernanceAuthorizationConfig::class);
25|    }
26|
27|    public function findOneByCompany(Company $company): ?GovernanceAuthorizationConfig
28|    {
29|        return $this->createQueryBuilder('config')
30|            ->leftJoin('config.types', 'authType')->addSelect('authType')
31|            ->leftJoin('config.approvers', 'approver')->addSelect('approver')
32|            ->leftJoin('approver.member', 'approverMember')->addSelect('approverMember')
33|            ->leftJoin('approver.role', 'approverRole')->addSelect('approverRole')
34|            ->leftJoin('approver.applicationTypes', 'approverType')->addSelect('approverType')
35|            ->andWhere('config.company = :company')
36|            ->setParameter('company', $company)
37|            ->getQuery()
38|            ->getOneOrNullResult();
39|    }
40|
41|    public function save(GovernanceAuthorizationConfig $config, bool $flush = true): void
42|    {
43|        $this->getEntityManager()->persist($config);
44|
45|        if ($flush) {
46|            $this->getEntityManager()->flush();
47|        }
48|    }
49|}
50|

{"search_text": "function resolveMemberDisplayName"}

File: src/Repository/GovernanceCaseHistoryRepository.php
Match lines: 1
255|    public static function resolveMemberDisplayName(CompanyMembers $member): string

File: src/Service/AutomationExecutionService.php
Match lines: 1
6804|    private function resolveMemberDisplayName(?FlowInstanceMember $member): string

File: src/Service/EmployeeAdvocacyNotificationService.php
Match lines: 1
210|    private function resolveMemberDisplayName(mixed $member): string

{"path_array": ["migrations/Version20260831143000_GovernanceAuthorizationConfig.php", "migrations/Version20260902160000_AuthorizationSpecificApproverRole.php"]}

==== FILE: migrations/Version20260831143000_GovernanceAuthorizationConfig.php ====
diff --git a/migrations/Version20260831143000_GovernanceAuthorizationConfig.php b/migrations/Version20260831143000_GovernanceAuthorizationConfig.php
new file mode 100644
--- /dev/null
+++ b/migrations/Version20260831143000_GovernanceAuthorizationConfig.php
@@ -0,0 +1,156 @@
+<?php
+
+declare(strict_types=1);
+
+namespace DoctrineMigrations;
+
+use Doctrine\DBAL\Schema\Schema;
+use Doctrine\Migrations\AbstractMigration;
+
+final class Version20260831143000_GovernanceAuthorizationConfig extends AbstractMigration
+{
+    public function getDescription(): string
+    {
+        return 'Cria a configuração normalizada de autorizações e adiciona área, aprovador e tipo em member_autorizacao.';
+    }
+
+    public function up(Schema $schema): void
+    {
+        $schemaManager = $this->connection->createSchemaManager();
+
+        if (!$schemaManager->tablesExist(['governance_authorization_config'])) {
+            $this->addSql("
+                CREATE TABLE governance_authorization_config (
+                    id INT AUTO_INCREMENT NOT NULL,
+                    company_id INT NOT NULL,
+                    created_by_id INT DEFAULT NULL,
+                    updated_by_id INT DEFAULT NULL,
+                    use_members TINYINT(1) NOT NULL DEFAULT 1,
+                    use_roles TINYINT(1) NOT NULL DEFAULT 0,
+                    created_at DATETIME NOT NULL,
+                    updated_at DATETIME DEFAULT NULL,
+                    UNIQUE INDEX uniq_governance_authorization_config_company (company_id),
+                    CONSTRAINT FK_GOV_AUTH_CONFIG_COMPANY FOREIGN KEY (company_id) REFERENCES company (id) ON DELETE CASCADE,
+                    CONSTRAINT FK_GOV_AUTH_CONFIG_CREATED_BY FOREIGN KEY (created_by_id) REFERENCES user (id) ON DELETE SET NULL,
+                    CONSTRAINT FK_GOV_AUTH_CONFIG_UPDATED_BY FOREIGN KEY (updated_by_id) REFERENCES user (id) ON DELETE SET NULL,
+                    PRIMARY KEY(id)
+                ) DEFAULT CHARACTER SET utf8mb4 COLLATE `utf8mb4_unicode_ci` ENGINE = InnoDB
+            ");
+        }
+
+        if (!$schemaManager->tablesExist(['governance_authorization_type'])) {
+            $this->addSql("
+                CREATE TABLE governance_authorization_type (
+                    id INT AUTO_INCREMENT NOT NULL,
+                    config_id INT NOT NULL,
+                    label VARCHAR(80) NOT NULL,
+                    position INT NOT NULL DEFAULT 0,
+                    UNIQUE INDEX uniq_gov_auth_type_config_label (config_id, label),
+                    CONSTRAINT FK_GOV_AUTH_TYPE_CONFIG FOREIGN KEY (config_id) REFERENCES governance_authorization_config (id) ON DELETE CASCADE,
+                    PRIMARY KEY(id)
+                ) DEFAULT CHARACTER SET utf8mb4 COLLATE `utf8mb4_unicode_ci` ENGINE = InnoDB
+            ");
+        }
+
+        if (!$schemaManager->tablesExist(['governance_authorization_approver'])) {
+            $constraints = [
+                'CONSTRAINT FK_GOV_AUTH_APPROVER_CONFIG FOREIGN KEY (config_id) REFERENCES governance_authorization_config (id) ON DELETE CASCADE',
+            ];
+            if ($schemaManager->tablesExist(['company_members'])) {
+                $constraints[] = 'CONSTRAINT FK_GOV_AUTH_APPROVER_MEMBER FOREIGN KEY (member_id) REFERENCES company_members (id) ON DELETE CASCADE';
+            }
+            if ($schemaManager->tablesExist(['roles'])) {
+                $constraints[] = 'CONSTRAINT FK_GOV_AUTH_APPROVER_ROLE FOREIGN KEY (role_id) REFERENCES roles (id) ON DELETE CASCADE';
+            }
+
+            $this->addSql("
+                CREATE TABLE governance_authorization_approver (
+                    id INT AUTO_INCREMENT NOT NULL,
+                    config_id INT NOT NULL,
+                    member_id INT DEFAULT NULL,
+                    role_id INT DEFAULT NULL,
+                    all_areas TINYINT(1) NOT NULL DEFAULT 1,
+                    position INT NOT NULL DEFAULT 0,
+                    " . implode(",\n                    ", $constraints) . ",
+                    PRIMARY KEY(id)
+                ) DEFAULT CHARACTER SET utf8mb4 COLLATE `utf8mb4_unicode_ci` ENGINE = InnoDB
+            ");
+        }
+
+        if (!$schemaManager->tablesExist(['governance_authorization_approver_type'])) {
+            $this->addSql("
+                CREATE TABLE governance_authorization_approver_type (
+                    approver_id INT NOT NULL,
+                    type_id INT NOT NULL,
+                    CONSTRAINT FK_GOV_AUTH_APPROVER_TYPE_APPROVER FOREIGN KEY (approver_id) REFERENCES governance_authorization_approver (id) ON DELETE CASCADE,
+                    CONSTRAINT FK_GOV_AUTH_APPROVER_TYPE_TYPE FOREIGN KEY (type_id) REFERENCES governance_authorization_type (id) ON DELETE CASCADE,
+                    PRIMARY KEY(approver_id, type_id)
+                ) DEFAULT CHARACTER SET utf8mb4 COLLATE `utf8mb4_unicode_ci` ENGINE = InnoDB
+            ");
+        }
+
+        if (!$schemaManager->tablesExist(['member_autorizacao'])) {
+            return;
+        }
+
+        $table = $schemaManager->introspectTable('member_autorizacao');
+
+        if (!$table->hasColumn('area_id')) {
+            $this->addSql('ALTER TABLE member_autorizacao ADD area_id INT DEFAULT NULL');
+        }
+        if ($schemaManager->tablesExist(['company_area']) && !$table->hasForeignKey('FK_MA_area')) {
+            $this->addSql('ALTER TABLE member_autorizacao ADD CONSTRAINT FK_MA_area FOREIGN KEY (area_id) REFERENCES company_area (id) ON DELETE SET NULL');
+        }
+
+        if (!$table->hasColumn('aprovador_member_id')) {
+            $this->addSql('ALTER TABLE member_autorizacao ADD aprovador_member_id INT DEFAULT NULL');
+        }
+        if ($schemaManager->tablesExist(['company_members']) && !$table->hasForeignKey('FK_MA_aprovador')) {
+            $this->addSql('ALTER TABLE member_autorizacao ADD CONSTRAINT FK_MA_aprovador FOREIGN KEY (aprovador_member_id) REFERENCES company_members (id) ON DELETE SET NULL');
+        }
+
+        if (!$table->hasColumn('tipo')) {
+            $this->addSql('ALTER TABLE member_autorizacao ADD tipo VARCHAR(255) DEFAULT NULL');
+        }
+    }
+
+    public function down(Schema $schema): void
+    {
+        $schemaManager = $this->connection->createSchemaManager();
+
+        if ($schemaManager->tablesExist(['member_autorizacao'])) {
+            $table = $schemaManager->introspectTable('member_autorizacao');
+
+            if ($table->hasForeignKey('FK_MA_aprovador')) {
+                $this->addSql('ALTER TABLE member_autorizacao DROP FOREIGN KEY FK_MA_aprovador');
+            }
+            if ($table->hasColumn('aprovador_member_id')) {
+                $this->addSql('ALTER TABLE member_autorizacao DROP COLUMN aprovador_member_id');
+            }
+
+            if ($table->hasForeignKey('FK_MA_area')) {
+                $this->addSql('ALTER TABLE member_autorizacao DROP FOREIGN KEY FK_MA_area');
+            }
+            if ($table->hasColumn('area_id')) {
+                $this->addSql('ALTER TABLE member_autorizacao DROP COLUMN area_id');
+            }
+
+            if ($table->hasColumn('tipo')) {
+                $this->addSql('ALTER TABLE member_autorizacao DROP COLUMN tipo');
+            }
+        }
+
+        if ($schemaManager->tablesExist(['governance_authorization_approver_type'])) {
+            $this->addSql('DROP TABLE governance_authorization_approver_type');
+        }
+        if ($schemaManager->tablesExist(['governance_authorization_approver'])) {
+            $this->addSql('DROP TABLE governance_authorization_approver');
+        }
+        if ($schemaManager->tablesExist(['governance_authorization_type'])) {
+            $this->addSql('DROP TABLE governance_authorization_type');
+        }
+        if ($schemaManager->tablesExist(['governance_authorization_config'])) {
+            $this->addSql('DROP TABLE governance_authorization_config');
+        }
+    }
+}
==== FILE: migrations/Version20260902160000_AuthorizationSpecificApproverRole.php ====
diff --git a/migrations/Version20260902160000_AuthorizationSpecificApproverRole.php b/migrations/Version20260902160000_AuthorizationSpecificApproverRole.php
new file mode 100644
--- /dev/null
+++ b/migrations/Version20260902160000_AuthorizationSpecificApproverRole.php
@@ -0,0 +1,50 @@
+<?php
+
+declare(strict_types=1);
+
+namespace DoctrineMigrations;
+
+use Doctrine\DBAL\Schema\Schema;
+use Doctrine\Migrations\AbstractMigration;
+
+final class Version20260902160000_AuthorizationSpecificApproverRole extends AbstractMigration
+{
+    public function getDescription(): string
+    {
+        return 'Adiciona cargo aprovador específico na autorização (membro e/ou cargo, com fallback da Configuração).';
+    }
+
+    public function up(Schema $schema): void
+    {
+        $schemaManager = $this->connection->createSchemaManager();
+        if (!$schemaManager->tablesExist(['member_autorizacao'])) {
+            return;
+        }
+
+        $table = $schemaManager->introspectTable('member_autorizacao');
+        if (!$table->hasColumn('aprovador_role_id')) {
+            $this->addSql('ALTER TABLE member_autorizacao ADD aprovador_role_id INT DEFAULT NULL');
+        }
+
+        $table = $schemaManager->introspectTable('member_autorizacao');
+        if ($schemaManager->tablesExist(['roles']) && !$table->hasForeignKey('FK_MA_aprovador_role')) {
+            $this->addSql('ALTER TABLE member_autorizacao ADD CONSTRAINT FK_MA_aprovador_role FOREIGN KEY (aprovador_role_id) REFERENCES roles (id) ON DELETE SET NULL');
+        }
+    }
+
+    public function down(Schema $schema): void
+    {
+        $schemaManager = $this->connection->createSchemaManager();
+        if (!$schemaManager->tablesExist(['member_autorizacao'])) {
+            return;
+        }
+
+        $table = $schemaManager->introspectTable('member_autorizacao');
+        if ($table->hasForeignKey('FK_MA_aprovador_role')) {
+            $this->addSql('ALTER TABLE member_autorizacao DROP FOREIGN KEY FK_MA_aprovador_role');
+        }
+        if ($table->hasColumn('aprovador_role_id')) {
+            $this->addSql('ALTER TABLE member_autorizacao DROP COLUMN aprovador_role_id');
+        }
+    }
+}

{"file_path": "src/Entity/GovernanceAuthorizationConfig.php"}

File: src/Entity/GovernanceAuthorizationConfig.php (Total lines: 281)
IS_TRUNCATED: false
LINE_RANGE: 1-281
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Entity;
6|
7|use App\Repository\GovernanceAuthorizationConfigRepository;
8|use Doctrine\Common\Collections\ArrayCollection;
9|use Doctrine\Common\Collections\Collection;
10|use Doctrine\ORM\Mapping as ORM;
11|
12|/**
13| * Configuração por empresa da aba Configurações de Autorizações.
14| *
15| * @ORM\Entity(repositoryClass=GovernanceAuthorizationConfigRepository::class)
16| * @ORM\Table(
17| *     name="governance_authorization_config",
18| *     uniqueConstraints={
19| *         @ORM\UniqueConstraint(name="uniq_governance_authorization_config_company", columns={"company_id"})
20| *     }
21| * )
22| * @ORM\HasLifecycleCallbacks
23| */
24|class GovernanceAuthorizationConfig
25|{
26|    /**
27|     * @ORM\Id
28|     * @ORM\GeneratedValue
29|     * @ORM\Column(type="integer")
30|     */
31|    private ?int $id = null;
32|
33|    /**
34|     * @ORM\ManyToOne(targetEntity=Company::class)
35|     * @ORM\JoinColumn(nullable=false, onDelete="CASCADE")
36|     */
37|    private ?Company $company = null;
38|
39|    /**
40|     * @ORM\Column(name="use_members", type="boolean", options={"default": true})
41|     */
42|    private bool $useMembers = true;
43|
44|    /**
45|     * @ORM\Column(name="use_roles", type="boolean", options={"default": false})
46|     */
47|    private bool $useRoles = false;
48|
49|    /**
50|     * @var Collection<int, GovernanceAuthorizationType>
51|     *
52|     * @ORM\OneToMany(targetEntity=GovernanceAuthorizationType::class, mappedBy="config", cascade={"persist", "remove"}, orphanRemoval=true)
53|     * @ORM\OrderBy({"position": "ASC", "id": "ASC"})
54|     */
55|    private Collection $types;
56|
57|    /**
58|     * @var Collection<int, GovernanceAuthorizationApprover>
59|     *
60|     * @ORM\OneToMany(targetEntity=GovernanceAuthorizationApprover::class, mappedBy="config", cascade={"persist", "remove"}, orphanRemoval=true)
61|     * @ORM\OrderBy({"position": "ASC", "id": "ASC"})
62|     */
63|    private Collection $approvers;
64|
65|    /**
66|     * @ORM\ManyToOne(targetEntity=User::class)
67|     * @ORM\JoinColumn(nullable=true, onDelete="SET NULL")
68|     */
69|    private ?User $createdBy = null;
70|
71|    /**
72|     * @ORM\ManyToOne(targetEntity=User::class)
73|     * @ORM\JoinColumn(nullable=true, onDelete="SET NULL")
74|     */
75|    private ?User $updatedBy = null;
76|
77|    /**
78|     * @ORM\Column(type="datetime")
79|     */
80|    private ?\DateTimeInterface $createdAt = null;
81|
82|    /**
83|     * @ORM\Column(type="datetime", nullable=true)
84|     */
85|    private ?\DateTimeInterface $updatedAt = null;
86|
87|    public function __construct()
88|    {
89|        $this->types = new ArrayCollection();
90|        $this->approvers = new ArrayCollection();
91|    }
92|
93|    /**
94|     * @ORM\PrePersist
95|     */
96|    public function onPrePersist(): void
97|    {
98|        if (!$this->createdAt instanceof \DateTimeInterface) {
99|            $this->createdAt = new \DateTime();
100|        }
101|    }
102|
103|    /**
104|     * @ORM\PreUpdate
105|     */
106|    public function onPreUpdate(): void
107|    {
108|        $this->updatedAt = new \DateTime();
109|    }
110|
111|    public function getId(): ?int
112|    {
113|        return $this->id;
114|    }
115|
116|    public function getCompany(): ?Company
117|    {
118|        return $this->company;
119|    }
120|
121|    public function setCompany(?Company $company): self
122|    {
123|        $this->company = $company;
124|
125|        return $this;
126|    }
127|
128|    public function usesMembers(): bool
129|    {
130|        return $this->useMembers;
131|    }
132|
133|    public function setUseMembers(bool $useMembers): self
134|    {
135|        $this->useMembers = $useMembers;
136|
137|        return $this;
138|    }
139|
140|    public function usesRoles(): bool
141|    {
142|        return $this->useRoles;
143|    }
144|
145|    public function setUseRoles(bool $useRoles): self
146|    {
147|        $this->useRoles = $useRoles;
148|
149|        return $this;
150|    }
151|
152|    /**
153|     * @return Collection<int, GovernanceAuthorizationType>
154|     */
155|    public function getTypes(): Collection
156|    {
157|        return $this->types;
158|    }
159|
160|    /** @return list<string> */
161|    public function getTypeLabels(): array
162|    {
163|        $labels = [];
164|        foreach ($this->types as $type) {
165|            $label = trim($type->getLabel());
166|            if ($label !== '') {
167|                $labels[] = $label;
168|            }
169|        }
170|
171|        return $labels;
172|    }
173|
174|    public function addType(GovernanceAuthorizationType $type): self
175|    {
176|        if (!$this->types->contains($type)) {
177|            $this->types->add($type);
178|            $type->setConfig($this);
179|        }
180|
181|        return $this;
182|    }
183|
184|    public function removeType(GovernanceAuthorizationType $type): self
185|    {
186|        if ($this->types->removeElement($type) && $type->getConfig() === $this) {
187|            $type->setConfig(null);
188|        }
189|
190|        return $this;
191|    }
192|
193|    /**
194|     * @return Collection<int, GovernanceAuthorizationApprover>
195|     */
196|    public function getApprovers(): Collection
197|    {
198|        return $this->approvers;
199|    }
200|
201|    /** @return list<GovernanceAuthorizationApprover> */
202|    public function getMemberApprovers(): array
203|    {
204|        return array_values(array_filter(
205|            $this->approvers->toArray(),
206|            static fn (GovernanceAuthorizationApprover $approver): bool => $approver->getMember() instanceof CompanyMembers
207|        ));
208|    }
209|
210|    /** @return list<GovernanceAuthorizationApprover> */
211|    public function getRoleApprovers(): array
212|    {
213|        return array_values(array_filter(
214|            $this->approvers->toArray(),
215|            static fn (GovernanceAuthorizationApprover $approver): bool => $approver->getRole() instanceof Roles
216|        ));
217|    }
218|
219|    public function addApprover(GovernanceAuthorizationApprover $approver): self
220|    {
221|        if (!$this->approvers->contains($approver)) {
222|            $this->approvers->add($approver);
223|            $approver->setConfig($this);
224|        }
225|
226|        return $this;
227|    }
228|
229|    public function removeApprover(GovernanceAuthorizationApprover $approver): self
230|    {
231|        if ($this->approvers->removeElement($approver) && $approver->getConfig() === $this) {
232|            $approver->setConfig(null);
233|        }
234|
235|        return $this;
236|    }
237|
238|    public function clearApprovers(): self
239|    {
240|        foreach ($this->approvers->toArray() as $approver) {
241|            $this->removeApprover($approver);
242|        }
243|
244|        return $this;
245|    }
246|
247|    public function getCreatedBy(): ?User
248|    {
249|        return $this->createdBy;
250|    }
251|
252|    public function setCreatedBy(?User $createdBy): self
253|    {
254|        $this->createdBy = $createdBy;
255|
256|        return $this;
257|    }
258|
259|    public function getUpdatedBy(): ?User
260|    {
261|        return $this->updatedBy;
262|    }
263|
264|    public function setUpdatedBy(?User $updatedBy): self
265|    {
266|        $this->updatedBy = $updatedBy;
267|
268|        return $this;
269|    }
270|
271|    public function getCreatedAt(): ?\DateTimeInterface
272|    {
273|        return $this->createdAt;
274|    }
275|
276|    public function getUpdatedAt(): ?\DateTimeInterface
277|    {
278|        return $this->updatedAt;
279|    }
280|}
281|

{"file_path": "src/Entity/GovernanceAuthorizationType.php"}

File: src/Entity/GovernanceAuthorizationType.php (Total lines: 86)
IS_TRUNCATED: false
LINE_RANGE: 1-86
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Entity;
6|
7|use Doctrine\ORM\Mapping as ORM;
8|
9|/**
10| * Tipo de autorização (área de aplicação) cadastrado na configuração da empresa.
11| *
12| * @ORM\Entity
13| * @ORM\Table(
14| *     name="governance_authorization_type",
15| *     uniqueConstraints={
16| *         @ORM\UniqueConstraint(name="uniq_gov_auth_type_config_label", columns={"config_id", "label"})
17| *     }
18| * )
19| */
20|class GovernanceAuthorizationType
21|{
22|    /**
23|     * @ORM\Id
24|     * @ORM\GeneratedValue
25|     * @ORM\Column(type="integer")
26|     */
27|    private ?int $id = null;
28|
29|    /**
30|     * @ORM\ManyToOne(targetEntity=GovernanceAuthorizationConfig::class, inversedBy="types")
31|     * @ORM\JoinColumn(nullable=false, onDelete="CASCADE")
32|     */
33|    private ?GovernanceAuthorizationConfig $config = null;
34|
35|    /**
36|     * @ORM\Column(type="string", length=80)
37|     */
38|    private string $label = '';
39|
40|    /**
41|     * @ORM\Column(type="integer", options={"default": 0})
42|     */
43|    private int $position = 0;
44|
45|    public function getId(): ?int
46|    {
47|        return $this->id;
48|    }
49|
50|    public function getConfig(): ?GovernanceAuthorizationConfig
51|    {
52|        return $this->config;
53|    }
54|
55|    public function setConfig(?GovernanceAuthorizationConfig $config): self
56|    {
57|        $this->config = $config;
58|
59|        return $this;
60|    }
61|
62|    public function getLabel(): string
63|    {
64|        return $this->label;
65|    }
66|
67|    public function setLabel(string $label): self
68|    {
69|        $this->label = trim($label);
70|
71|        return $this;
72|    }
73|
74|    public function getPosition(): int
75|    {
76|        return $this->position;
77|    }
78|
79|    public function setPosition(int $position): self
80|    {
81|        $this->position = $position;
82|
83|        return $this;
84|    }
85|}
86|

{"file_path": "src/Entity/GovernanceAuthorizationApprover.php"}

File: src/Entity/GovernanceAuthorizationApprover.php (Total lines: 215)
IS_TRUNCATED: false
LINE_RANGE: 1-215
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Entity;
6|
7|use Doctrine\Common\Collections\ArrayCollection;
8|use Doctrine\Common\Collections\Collection;
9|use Doctrine\ORM\Mapping as ORM;
10|
11|/**
12| * Aprovador padrão (membro ou cargo) da configuração de autorizações.
13| *
14| * @ORM\Entity
15| * @ORM\Table(name="governance_authorization_approver")
16| */
17|class GovernanceAuthorizationApprover
18|{
19|    /**
20|     * @ORM\Id
21|     * @ORM\GeneratedValue
22|     * @ORM\Column(type="integer")
23|     */
24|    private ?int $id = null;
25|
26|    /**
27|     * @ORM\ManyToOne(targetEntity=GovernanceAuthorizationConfig::class, inversedBy="approvers")
28|     * @ORM\JoinColumn(nullable=false, onDelete="CASCADE")
29|     */
30|    private ?GovernanceAuthorizationConfig $config = null;
31|
32|    /**
33|     * @ORM\ManyToOne(targetEntity=CompanyMembers::class)
34|     * @ORM\JoinColumn(nullable=true, onDelete="CASCADE")
35|     */
36|    private ?CompanyMembers $member = null;
37|
38|    /**
39|     * @ORM\ManyToOne(targetEntity=Roles::class)
40|     * @ORM\JoinColumn(nullable=true, onDelete="CASCADE")
41|     */
42|    private ?Roles $role = null;
43|
44|    /**
45|     * true = Todas as Áreas; false = apenas os tipos em $applicationTypes.
46|     *
47|     * @ORM\Column(name="all_areas", type="boolean", options={"default": true})
48|     */
49|    private bool $allAreas = true;
50|
51|    /**
52|     * @ORM\Column(type="integer", options={"default": 0})
53|     */
54|    private int $position = 0;
55|
56|    /**
57|     * Tipos de aplicação quando all_areas = false.
58|     *
59|     * @var Collection<int, GovernanceAuthorizationType>
60|     *
61|     * @ORM\ManyToMany(targetEntity=GovernanceAuthorizationType::class)
62|     * @ORM\JoinTable(
63|     *     name="governance_authorization_approver_type",
64|     *     joinColumns={
65|     *         @ORM\JoinColumn(name="approver_id", referencedColumnName="id", onDelete="CASCADE")
66|     *     },
67|     *     inverseJoinColumns={
68|     *         @ORM\JoinColumn(name="type_id", referencedColumnName="id", onDelete="CASCADE")
69|     *     }
70|     * )
71|     */
72|    private Collection $applicationTypes;
73|
74|    public function __construct()
75|    {
76|        $this->applicationTypes = new ArrayCollection();
77|    }
78|
79|    public function getId(): ?int
80|    {
81|        return $this->id;
82|    }
83|
84|    public function getConfig(): ?GovernanceAuthorizationConfig
85|    {
86|        return $this->config;
87|    }
88|
89|    public function setConfig(?GovernanceAuthorizationConfig $config): self
90|    {
91|        $this->config = $config;
92|
93|        return $this;
94|    }
95|
96|    public function getMember(): ?CompanyMembers
97|    {
98|        return $this->member;
99|    }
100|
101|    public function setMember(?CompanyMembers $member): self
102|    {
103|        $this->member = $member;
104|
105|        return $this;
106|    }
107|
108|    public function getRole(): ?Roles
109|    {
110|        return $this->role;
111|    }
112|
113|    public function setRole(?Roles $role): self
114|    {
115|        $this->role = $role;
116|
117|        return $this;
118|    }
119|
120|    public function usesAllAreas(): bool
121|    {
122|        return $this->allAreas || $this->applicationTypes->isEmpty();
123|    }
124|
125|    public function appliesToType(?string $tipo): bool
126|    {
127|        if ($this->usesAllAreas()) {
128|            return true;
129|        }
130|
131|        $tipoKey = mb_strtolower(trim((string) $tipo));
132|        if ($tipoKey === '') {
133|            return false;
134|        }
135|
136|        foreach ($this->getApplicationTypeLabels() as $label) {
137|            if (mb_strtolower(trim($label)) === $tipoKey) {
138|                return true;
139|            }
140|        }
141|
142|        return false;
143|    }
144|
145|    public function appliesToAuthorization(GovernanceAuthorization $authorization): bool
146|    {
147|        return $this->appliesToType($authorization->getTipo());
148|    }
149|
150|    public function setAllAreas(bool $allAreas): self
151|    {
152|        $this->allAreas = $allAreas;
153|        if ($allAreas) {
154|            $this->applicationTypes->clear();
155|        }
156|
157|        return $this;
158|    }
159|
160|    public function getPosition(): int
161|    {
162|        return $this->position;
163|    }
164|
165|    public function setPosition(int $position): self
166|    {
167|        $this->position = $position;
168|
169|        return $this;
170|    }
171|
172|    /**
173|     * @return Collection<int, GovernanceAuthorizationType>
174|     */
175|    public function getApplicationTypes(): Collection
176|    {
177|        return $this->applicationTypes;
178|    }
179|
180|    /** @return list<string> */
181|    public function getApplicationTypeLabels(): array
182|    {
183|        if ($this->usesAllAreas()) {
184|            return [];
185|        }
186|
187|        $labels = [];
188|        foreach ($this->applicationTypes as $type) {
189|            $label = trim($type->getLabel());
190|            if ($label !== '') {
191|                $labels[] = $label;
192|            }
193|        }
194|
195|        return $labels;
196|    }
197|
198|    public function addApplicationType(GovernanceAuthorizationType $type): self
199|    {
200|        if (!$this->applicationTypes->contains($type)) {
201|            $this->applicationTypes->add($type);
202|            $this->allAreas = false;
203|        }
204|
205|        return $this;
206|    }
207|
208|    public function clearApplicationTypes(): self
209|    {
210|        $this->applicationTypes->clear();
211|
212|        return $this;
213|    }
214|}
215|

{"search_text": "GovernanceAuthorizationConfigService"}

File: docs/database-changes/2026-08-31-governance-authorization-config.md
Match lines: 1
15|- Codigo que passa a depender: `GovernanceAuthorizationConfig`, `GovernanceAuthorizationType`, `GovernanceAuthorizationApprover`, `GovernanceAuthorizationConfigService`, rotas `governance_authorization_config_get` / `_save`.

File: src/Controller/GovernanceController.php
Match lines: 3
39|use App\Service\Governance\GovernanceAuthorizationConfigService;
68|    private GovernanceAuthorizationConfigService $authorizationConfigService;
96|        GovernanceAuthorizationConfigService $authorizationConfigService,

File: src/Service/Governance/GovernanceAuthorizationConfigService.php
Match lines: 1
18|final class GovernanceAuthorizationConfigService

{"search_text": "usesAllAreas|appliesToType|resolveTypeLabel|hasConfiguredTypes"}

No matches found

{"search_text": "aprovador_role_id|aprovador_member_id|getAprovadorRole|getAprovadorMember"}

No matches found

{"file_path": "src/Repository/GovernanceCaseHistoryRepository.php", "start_line": 245, "end_line": 270}

File: src/Repository/GovernanceCaseHistoryRepository.php (Total lines: 533)
IS_TRUNCATED: false
LINE_RANGE: 245-270
245|            if ($fromMember !== '' && $fromMember !== 'Usuário') {
246|                return $fromMember;
247|            }
248|
249|            $user = $member->getUser() ?? $user;
250|        }
251|
252|        return self::resolveUserDisplayName($user);
253|    }
254|
255|    public static function resolveMemberDisplayName(CompanyMembers $member): string
256|    {
257|        $user = $member->getUser();
258|        $profile = $user?->getProfile();
259|
260|        $fromProfileFull = trim((string) ($profile?->getFullName() ?: ''));
261|        if ($fromProfileFull !== '') {
262|            return Utf8MojibakeNormalizer::normalize($fromProfileFull);
263|        }
264|
265|        try {
266|            $fromMemberFull = trim((string) ($member->getFullName() ?: ''));
267|        } catch (\Throwable) {
268|            $fromMemberFull = '';
269|        }
270|        if ($fromMemberFull !== '') {

{"search_text": "findForCompany", "file_patterns": ["src/Repository/CompanyAreaRepository.php"]}

File: src/Repository/CompanyAreaRepository.php
Match lines: 1
124|    public function findForCompany(?Company $company, bool $activeOnly = true): array

{"comments": [{"path": "src/Service/Governance/GovernanceAuthorizationConfigService.php", "category": "bug", "severity": "medium", "content": "Quando o payload manda um aprovador com `all_areas=false` e `area_keys` que não batem com os tipos cadastrados (rótulo com erro de digitação, ou um tipo que está sendo removido no mesmo salvamento), as chaves são descartadas em silêncio no `filterAreaKeys`. Se a lista resultante ficar vazia, este bloco converte o aprovador para \"todas as áreas\". Na prática, um aprovador que deveria valer só para um tipo específico passa a valer para qualquer tipo — escopo de aprovação ampliado sem nenhum erro ou aviso para quem chamou a API. Como o dado sensível desta PR é justamente quem aprova o quê, um rótulo desconhecido deveria gerar 422 com mensagem clara (ou retornar aviso na resposta), em vez de virar escopo máximo silenciosamente.", "existing_code": "            if ($allAreas || $areaKeys === []) {\n                $allAreas = true;\n                $areaKeys = [];\n            }"}, {"path": "src/Service/Governance/GovernanceAuthorizationConfigService.php", "category": "bug", "severity": "medium", "content": "Identificadores inválidos são descartados em silêncio e o POST responde sucesso mesmo assim. Ids <= 0 ou repetidos caem neste `continue`, e o cast `(int) ($item['id'] ?? 0)` aceita tipos inesperados: `true` vira o membro/cargo 1 e `\"5abc\"` vira o 5, podendo gravar um aprovador que o usuário não escolheu; já `\"abc\"` vira 0 e some da lista. O resultado é uma configuração gravada diferente da enviada, sem erro 422. Vale validar `id` como inteiro positivo estrito e lançar exceção com mensagem quando o payload contiver item inválido, em vez de pular.", "existing_code": "            if ($id <= 0 || isset($seen[$id])) {\n                continue;\n            }"}, {"path": "src/Service/Governance/GovernanceAuthorizationConfigService.php", "category": "performance", "severity": "low", "content": "Cada POST consulta o banco até duas vezes por aprovador informado: uma na validação (`assertMembersBelongToCompany`/`assertRolesBelongToCompany` chamam `findUsableMember`/`findUsableRole` por id) e outra dentro de `syncApprovers`, que refaz a mesma busca para montar o aprovador. Com os limites permitidos de 200 membros + 200 cargos, um único salvamento pode disparar centenas de queries de uma linha. Como os ids são os mesmos nas duas fases, é mais simples carregar membros/cargos válidos da empresa em lote (filtro `IN`) uma única vez e reaproveitar o mapa na validação e na sincronização.", "existing_code": "        foreach ($memberIds as $memberId) {\n            if (!$this->findUsableMember($company, $memberId) instanceof CompanyMembers) {\n                throw new \\InvalidArgumentException('Membro aprovador inválido.');\n            }\n        }"}, {"path": "src/Service/Governance/GovernanceAuthorizationConfigService.php", "category": "bug", "severity": "low", "content": "Aqui só é atualizado o valor de `position`, mas a coleção `$config->getTypes()` mantém em memória a ordem do carregamento original (a ordenação por `position` do mapeamento vale apenas na consulta). Se o payload reordenar tipos já cadastrados ou inserir um tipo antes de outros existentes, a resposta imediata do POST (construída com `getTypeLabels()` sobre a coleção em memória) pode vir numa ordem diferente da que um GET posterior trará do banco. Recomendo ordenar a lista de tipos por `position` ao montar a resposta (ou reordenar a coleção após o `syncTypes`).", "existing_code": "            $type->setLabel($label)->setPosition($position);"}, {"path": "src/Service/Governance/GovernanceAuthorizationConfigService.php", "category": "test", "severity": "low", "content": "As regras novas deste serviço — limites 80/100/200, deduplicação case-insensitive, fallback de `use_members`, escopo de área vazio virando \"todas as áreas\" e vínculo de membro/cargo com a empresa — não têm teste automatizado na PR. São exatamente os pontos com comportamento silencioso e de fronteira descritos acima (rótulo desconhecido ampliando escopo, id inválido sendo descartado ou convertido). Recomendo adicionar testes de unidade/integração cobrindo payload inválido, duplicidade, reordenação e empresa cruzada antes de fechar.", "existing_code": "    private function normalizeTypes(mixed $raw): array\n    {"}]}

(async)

{"state": "DONE"}

{"file_path": "src/Entity/GovernanceAuthorizationConfig.php"}

File: src/Entity/GovernanceAuthorizationConfig.php (Total lines: 281)
IS_TRUNCATED: false
LINE_RANGE: 1-281
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Entity;
6|
7|use App\Repository\GovernanceAuthorizationConfigRepository;
8|use Doctrine\Common\Collections\ArrayCollection;
9|use Doctrine\Common\Collections\Collection;
10|use Doctrine\ORM\Mapping as ORM;
11|
12|/**
13| * Configuração por empresa da aba Configurações de Autorizações.
14| *
15| * @ORM\Entity(repositoryClass=GovernanceAuthorizationConfigRepository::class)
16| * @ORM\Table(
17| *     name="governance_authorization_config",
18| *     uniqueConstraints={
19| *         @ORM\UniqueConstraint(name="uniq_governance_authorization_config_company", columns={"company_id"})
20| *     }
21| * )
22| * @ORM\HasLifecycleCallbacks
23| */
24|class GovernanceAuthorizationConfig
25|{
26|    /**
27|     * @ORM\Id
28|     * @ORM\GeneratedValue
29|     * @ORM\Column(type="integer")
30|     */
31|    private ?int $id = null;
32|
33|    /**
34|     * @ORM\ManyToOne(targetEntity=Company::class)
35|     * @ORM\JoinColumn(nullable=false, onDelete="CASCADE")
36|     */
37|    private ?Company $company = null;
38|
39|    /**
40|     * @ORM\Column(name="use_members", type="boolean", options={"default": true})
41|     */
42|    private bool $useMembers = true;
43|
44|    /**
45|     * @ORM\Column(name="use_roles", type="boolean", options={"default": false})
46|     */
47|    private bool $useRoles = false;
48|
49|    /**
50|     * @var Collection<int, GovernanceAuthorizationType>
51|     *
52|     * @ORM\OneToMany(targetEntity=GovernanceAuthorizationType::class, mappedBy="config", cascade={"persist", "remove"}, orphanRemoval=true)
53|     * @ORM\OrderBy({"position": "ASC", "id": "ASC"})
54|     */
55|    private Collection $types;
56|
57|    /**
58|     * @var Collection<int, GovernanceAuthorizationApprover>
59|     *
60|     * @ORM\OneToMany(targetEntity=GovernanceAuthorizationApprover::class, mappedBy="config", cascade={"persist", "remove"}, orphanRemoval=true)
61|     * @ORM\OrderBy({"position": "ASC", "id": "ASC"})
62|     */
63|    private Collection $approvers;
64|
65|    /**
66|     * @ORM\ManyToOne(targetEntity=User::class)
67|     * @ORM\JoinColumn(nullable=true, onDelete="SET NULL")
68|     */
69|    private ?User $createdBy = null;
70|
71|    /**
72|     * @ORM\ManyToOne(targetEntity=User::class)
73|     * @ORM\JoinColumn(nullable=true, onDelete="SET NULL")
74|     */
75|    private ?User $updatedBy = null;
76|
77|    /**
78|     * @ORM\Column(type="datetime")
79|     */
80|    private ?\DateTimeInterface $createdAt = null;
81|
82|    /**
83|     * @ORM\Column(type="datetime", nullable=true)
84|     */
85|    private ?\DateTimeInterface $updatedAt = null;
86|
87|    public function __construct()
88|    {
89|        $this->types = new ArrayCollection();
90|        $this->approvers = new ArrayCollection();
91|    }
92|
93|    /**
94|     * @ORM\PrePersist
95|     */
96|    public function onPrePersist(): void
97|    {
98|        if (!$this->createdAt instanceof \DateTimeInterface) {
99|            $this->createdAt = new \DateTime();
100|        }
101|    }
102|
103|    /**
104|     * @ORM\PreUpdate
105|     */
106|    public function onPreUpdate(): void
107|    {
108|        $this->updatedAt = new \DateTime();
109|    }
110|
111|    public function getId(): ?int
112|    {
113|        return $this->id;
114|    }
115|
116|    public function getCompany(): ?Company
117|    {
118|        return $this->company;
119|    }
120|
121|    public function setCompany(?Company $company): self
122|    {
123|        $this->company = $company;
124|
125|        return $this;
126|    }
127|
128|    public function usesMembers(): bool
129|    {
130|        return $this->useMembers;
131|    }
132|
133|    public function setUseMembers(bool $useMembers): self
134|    {
135|        $this->useMembers = $useMembers;
136|
137|        return $this;
138|    }
139|
140|    public function usesRoles(): bool
141|    {
142|        return $this->useRoles;
143|    }
144|
145|    public function setUseRoles(bool $useRoles): self
146|    {
147|        $this->useRoles = $useRoles;
148|
149|        return $this;
150|    }
151|
152|    /**
153|     * @return Collection<int, GovernanceAuthorizationType>
154|     */
155|    public function getTypes(): Collection
156|    {
157|        return $this->types;
158|    }
159|
160|    /** @return list<string> */
161|    public function getTypeLabels(): array
162|    {
163|        $labels = [];
164|        foreach ($this->types as $type) {
165|            $label = trim($type->getLabel());
166|            if ($label !== '') {
167|                $labels[] = $label;
168|            }
169|        }
170|
171|        return $labels;
172|    }
173|
174|    public function addType(GovernanceAuthorizationType $type): self
175|    {
176|        if (!$this->types->contains($type)) {
177|            $this->types->add($type);
178|            $type->setConfig($this);
179|        }
180|
181|        return $this;
182|    }
183|
184|    public function removeType(GovernanceAuthorizationType $type): self
185|    {
186|        if ($this->types->removeElement($type) && $type->getConfig() === $this) {
187|            $type->setConfig(null);
188|        }
189|
190|        return $this;
191|    }
192|
193|    /**
194|     * @return Collection<int, GovernanceAuthorizationApprover>
195|     */
196|    public function getApprovers(): Collection
197|    {
198|        return $this->approvers;
199|    }
200|
201|    /** @return list<GovernanceAuthorizationApprover> */
202|    public function getMemberApprovers(): array
203|    {
204|        return array_values(array_filter(
205|            $this->approvers->toArray(),
206|            static fn (GovernanceAuthorizationApprover $approver): bool => $approver->getMember() instanceof CompanyMembers
207|        ));
208|    }
209|
210|    /** @return list<GovernanceAuthorizationApprover> */
211|    public function getRoleApprovers(): array
212|    {
213|        return array_values(array_filter(
214|            $this->approvers->toArray(),
215|            static fn (GovernanceAuthorizationApprover $approver): bool => $approver->getRole() instanceof Roles
216|        ));
217|    }
218|
219|    public function addApprover(GovernanceAuthorizationApprover $approver): self
220|    {
221|        if (!$this->approvers->contains($approver)) {
222|            $this->approvers->add($approver);
223|            $approver->setConfig($this);
224|        }
225|
226|        return $this;
227|    }
228|
229|    public function removeApprover(GovernanceAuthorizationApprover $approver): self
230|    {
231|        if ($this->approvers->removeElement($approver) && $approver->getConfig() === $this) {
232|            $approver->setConfig(null);
233|        }
234|
235|        return $this;
236|    }
237|
238|    public function clearApprovers(): self
239|    {
240|        foreach ($this->approvers->toArray() as $approver) {
241|            $this->removeApprover($approver);
242|        }
243|
244|        return $this;
245|    }
246|
247|    public function getCreatedBy(): ?User
248|    {
249|        return $this->createdBy;
250|    }
251|
252|    public function setCreatedBy(?User $createdBy): self
253|    {
254|        $this->createdBy = $createdBy;
255|
256|        return $this;
257|    }
258|
259|    public function getUpdatedBy(): ?User
260|    {
261|        return $this->updatedBy;
262|    }
263|
264|    public function setUpdatedBy(?User $updatedBy): self
265|    {
266|        $this->updatedBy = $updatedBy;
267|
268|        return $this;
269|    }
270|
271|    public function getCreatedAt(): ?\DateTimeInterface
272|    {
273|        return $this->createdAt;
274|    }
275|
276|    public function getUpdatedAt(): ?\DateTimeInterface
277|    {
278|        return $this->updatedAt;
279|    }
280|}
281|

{"file_path": "src/Entity/GovernanceAuthorizationApprover.php"}

File: src/Entity/GovernanceAuthorizationApprover.php (Total lines: 215)
IS_TRUNCATED: false
LINE_RANGE: 1-215
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Entity;
6|
7|use Doctrine\Common\Collections\ArrayCollection;
8|use Doctrine\Common\Collections\Collection;
9|use Doctrine\ORM\Mapping as ORM;
10|
11|/**
12| * Aprovador padrão (membro ou cargo) da configuração de autorizações.
13| *
14| * @ORM\Entity
15| * @ORM\Table(name="governance_authorization_approver")
16| */
17|class GovernanceAuthorizationApprover
18|{
19|    /**
20|     * @ORM\Id
21|     * @ORM\GeneratedValue
22|     * @ORM\Column(type="integer")
23|     */
24|    private ?int $id = null;
25|
26|    /**
27|     * @ORM\ManyToOne(targetEntity=GovernanceAuthorizationConfig::class, inversedBy="approvers")
28|     * @ORM\JoinColumn(nullable=false, onDelete="CASCADE")
29|     */
30|    private ?GovernanceAuthorizationConfig $config = null;
31|
32|    /**
33|     * @ORM\ManyToOne(targetEntity=CompanyMembers::class)
34|     * @ORM\JoinColumn(nullable=true, onDelete="CASCADE")
35|     */
36|    private ?CompanyMembers $member = null;
37|
38|    /**
39|     * @ORM\ManyToOne(targetEntity=Roles::class)
40|     * @ORM\JoinColumn(nullable=true, onDelete="CASCADE")
41|     */
42|    private ?Roles $role = null;
43|
44|    /**
45|     * true = Todas as Áreas; false = apenas os tipos em $applicationTypes.
46|     *
47|     * @ORM\Column(name="all_areas", type="boolean", options={"default": true})
48|     */
49|    private bool $allAreas = true;
50|
51|    /**
52|     * @ORM\Column(type="integer", options={"default": 0})
53|     */
54|    private int $position = 0;
55|
56|    /**
57|     * Tipos de aplicação quando all_areas = false.
58|     *
59|     * @var Collection<int, GovernanceAuthorizationType>
60|     *
61|     * @ORM\ManyToMany(targetEntity=GovernanceAuthorizationType::class)
62|     * @ORM\JoinTable(
63|     *     name="governance_authorization_approver_type",
64|     *     joinColumns={
65|     *         @ORM\JoinColumn(name="approver_id", referencedColumnName="id", onDelete="CASCADE")
66|     *     },
67|     *     inverseJoinColumns={
68|     *         @ORM\JoinColumn(name="type_id", referencedColumnName="id", onDelete="CASCADE")
69|     *     }
70|     * )
71|     */
72|    private Collection $applicationTypes;
73|
74|    public function __construct()
75|    {
76|        $this->applicationTypes = new ArrayCollection();
77|    }
78|
79|    public function getId(): ?int
80|    {
81|        return $this->id;
82|    }
83|
84|    public function getConfig(): ?GovernanceAuthorizationConfig
85|    {
86|        return $this->config;
87|    }
88|
89|    public function setConfig(?GovernanceAuthorizationConfig $config): self
90|    {
91|        $this->config = $config;
92|
93|        return $this;
94|    }
95|
96|    public function getMember(): ?CompanyMembers
97|    {
98|        return $this->member;
99|    }
100|
101|    public function setMember(?CompanyMembers $member): self
102|    {
103|        $this->member = $member;
104|
105|        return $this;
106|    }
107|
108|    public function getRole(): ?Roles
109|    {
110|        return $this->role;
111|    }
112|
113|    public function setRole(?Roles $role): self
114|    {
115|        $this->role = $role;
116|
117|        return $this;
118|    }
119|
120|    public function usesAllAreas(): bool
121|    {
122|        return $this->allAreas || $this->applicationTypes->isEmpty();
123|    }
124|
125|    public function appliesToType(?string $tipo): bool
126|    {
127|        if ($this->usesAllAreas()) {
128|            return true;
129|        }
130|
131|        $tipoKey = mb_strtolower(trim((string) $tipo));
132|        if ($tipoKey === '') {
133|            return false;
134|        }
135|
136|        foreach ($this->getApplicationTypeLabels() as $label) {
137|            if (mb_strtolower(trim($label)) === $tipoKey) {
138|                return true;
139|            }
140|        }
141|
142|        return false;
143|    }
144|
145|    public function appliesToAuthorization(GovernanceAuthorization $authorization): bool
146|    {
147|        return $this->appliesToType($authorization->getTipo());
148|    }
149|
150|    public function setAllAreas(bool $allAreas): self
151|    {
152|        $this->allAreas = $allAreas;
153|        if ($allAreas) {
154|            $this->applicationTypes->clear();
155|        }
156|
157|        return $this;
158|    }
159|
160|    public function getPosition(): int
161|    {
162|        return $this->position;
163|    }
164|
165|    public function setPosition(int $position): self
166|    {
167|        $this->position = $position;
168|
169|        return $this;
170|    }
171|
172|    /**
173|     * @return Collection<int, GovernanceAuthorizationType>
174|     */
175|    public function getApplicationTypes(): Collection
176|    {
177|        return $this->applicationTypes;
178|    }
179|
180|    /** @return list<string> */
181|    public function getApplicationTypeLabels(): array
182|    {
183|        if ($this->usesAllAreas()) {
184|            return [];
185|        }
186|
187|        $labels = [];
188|        foreach ($this->applicationTypes as $type) {
189|            $label = trim($type->getLabel());
190|            if ($label !== '') {
191|                $labels[] = $label;
192|            }
193|        }
194|
195|        return $labels;
196|    }
197|
198|    public function addApplicationType(GovernanceAuthorizationType $type): self
199|    {
200|        if (!$this->applicationTypes->contains($type)) {
201|            $this->applicationTypes->add($type);
202|            $this->allAreas = false;
203|        }
204|
205|        return $this;
206|    }
207|
208|    public function clearApplicationTypes(): self
209|    {
210|        $this->applicationTypes->clear();
211|
212|        return $this;
213|    }
214|}
215|

{"file_path": "src/Entity/GovernanceAuthorizationType.php"}

File: src/Entity/GovernanceAuthorizationType.php (Total lines: 86)
IS_TRUNCATED: false
LINE_RANGE: 1-86
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Entity;
6|
7|use Doctrine\ORM\Mapping as ORM;
8|
9|/**
10| * Tipo de autorização (área de aplicação) cadastrado na configuração da empresa.
11| *
12| * @ORM\Entity
13| * @ORM\Table(
14| *     name="governance_authorization_type",
15| *     uniqueConstraints={
16| *         @ORM\UniqueConstraint(name="uniq_gov_auth_type_config_label", columns={"config_id", "label"})
17| *     }
18| * )
19| */
20|class GovernanceAuthorizationType
21|{
22|    /**
23|     * @ORM\Id
24|     * @ORM\GeneratedValue
25|     * @ORM\Column(type="integer")
26|     */
27|    private ?int $id = null;
28|
29|    /**
30|     * @ORM\ManyToOne(targetEntity=GovernanceAuthorizationConfig::class, inversedBy="types")
31|     * @ORM\JoinColumn(nullable=false, onDelete="CASCADE")
32|     */
33|    private ?GovernanceAuthorizationConfig $config = null;
34|
35|    /**
36|     * @ORM\Column(type="string", length=80)
37|     */
38|    private string $label = '';
39|
40|    /**
41|     * @ORM\Column(type="integer", options={"default": 0})
42|     */
43|    private int $position = 0;
44|
45|    public function getId(): ?int
46|    {
47|        return $this->id;
48|    }
49|
50|    public function getConfig(): ?GovernanceAuthorizationConfig
51|    {
52|        return $this->config;
53|    }
54|
55|    public function setConfig(?GovernanceAuthorizationConfig $config): self
56|    {
57|        $this->config = $config;
58|
59|        return $this;
60|    }
61|
62|    public function getLabel(): string
63|    {
64|        return $this->label;
65|    }
66|
67|    public function setLabel(string $label): self
68|    {
69|        $this->label = trim($label);
70|
71|        return $this;
72|    }
73|
74|    public function getPosition(): int
75|    {
76|        return $this->position;
77|    }
78|
79|    public function setPosition(int $position): self
80|    {
81|        $this->position = $position;
82|
83|        return $this;
84|    }
85|}
86|

{"file_path": "src/Repository/GovernanceAuthorizationConfigRepository.php"}

File: src/Repository/GovernanceAuthorizationConfigRepository.php (Total lines: 50)
IS_TRUNCATED: false
LINE_RANGE: 1-50
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Repository;
6|
7|use App\Entity\Company;
8|use App\Entity\GovernanceAuthorizationConfig;
9|use Doctrine\Bundle\DoctrineBundle\Repository\ServiceEntityRepository;
10|use Doctrine\Persistence\ManagerRegistry;
11|
12|/**
13| * @extends ServiceEntityRepository<GovernanceAuthorizationConfig>
14| *
15| * @method GovernanceAuthorizationConfig|null find($id, $lockMode = null, $lockVersion = null)
16| * @method GovernanceAuthorizationConfig|null findOneBy(array $criteria, array $orderBy = null)
17| * @method GovernanceAuthorizationConfig[]    findAll()
18| * @method GovernanceAuthorizationConfig[]    findBy(array $criteria, array $orderBy = null, $limit = null, $offset = null)
19| */
20|class GovernanceAuthorizationConfigRepository extends ServiceEntityRepository
21|{
22|    public function __construct(ManagerRegistry $registry)
23|    {
24|        parent::__construct($registry, GovernanceAuthorizationConfig::class);
25|    }
26|
27|    public function findOneByCompany(Company $company): ?GovernanceAuthorizationConfig
28|    {
29|        return $this->createQueryBuilder('config')
30|            ->leftJoin('config.types', 'authType')->addSelect('authType')
31|            ->leftJoin('config.approvers', 'approver')->addSelect('approver')
32|            ->leftJoin('approver.member', 'approverMember')->addSelect('approverMember')
33|            ->leftJoin('approver.role', 'approverRole')->addSelect('approverRole')
34|            ->leftJoin('approver.applicationTypes', 'approverType')->addSelect('approverType')
35|            ->andWhere('config.company = :company')
36|            ->setParameter('company', $company)
37|            ->getQuery()
38|            ->getOneOrNullResult();
39|    }
40|
41|    public function save(GovernanceAuthorizationConfig $config, bool $flush = true): void
42|    {
43|        $this->getEntityManager()->persist($config);
44|
45|        if ($flush) {
46|            $this->getEntityManager()->flush();
47|        }
48|    }
49|}
50|

{"path_array": ["src/Controller/GovernanceController.php", "config/routes_governance.yaml"]}

==== FILE: src/Controller/GovernanceController.php ====
diff --git a/src/Controller/GovernanceController.php b/src/Controller/GovernanceController.php
--- a/src/Controller/GovernanceController.php
+++ b/src/Controller/GovernanceController.php
@@ -3,6 +3,7 @@
 namespace App\Controller;
 
 use App\Entity\Company;
+use App\Entity\CompanyArea;
 use App\Entity\CompanyMembers;
 use App\Entity\CompanyTeam;
 use App\Entity\CompanyTeamGroup;
@@ -17,6 +18,7 @@ use App\Entity\GovernanceCaseHistory;
 use App\Entity\GovernanceGrcCase;
 use App\Entity\OnboardingMember;
 use App\Entity\User;
+use App\Repository\CompanyAreaRepository;
 use App\Repository\GovernanceAuthorizationRepository;
 use App\Repository\GovernanceCaseHistoryRepository;
 use App\Service\AutorizacaoRequisitoCatalog;
@@ -34,6 +36,7 @@ use App\Service\Governance\GovernanceMemberProfileCnhService;
 use App\Service\Governance\GovernanceAuthorizationStatusService;
 use App\Service\Governance\GovernanceAuthorizationComplianceViewService;
 use App\Service\Governance\GovernanceAuthorizationConditionConfigService;
+use App\Service\Governance\GovernanceAuthorizationConfigService;
 use App\Service\Governance\GovernanceAuthorizationUsageService;
 use App\Service\Governance\GovernanceAuthorizationDocumentExtractorService;
 use App\Service\Governance\GovernanceAuthorizationDocumentUploadSupport;
@@ -62,6 +65,7 @@ class GovernanceController extends AbstractController
     private EntityManagerInterface $entityManager;
     private RequestStack $requestStack;
     private GovernanceAuthorizationConditionConfigService $authorizationConditionConfig;
+    private GovernanceAuthorizationConfigService $authorizationConfigService;
     private GovernanceAuthorizationUsageService $authorizationUsageService;
     private GovernanceAuthorizationDocumentExtractorService $documentExtractor;
     private GovernanceAuthorizationStatusService $authorizationStatusService;
@@ -89,6 +93,7 @@ class GovernanceController extends AbstractController
         EntityManagerInterface $entityManager,
         RequestStack $requestStack,
         GovernanceAuthorizationConditionConfigService $authorizationConditionConfig,
+        GovernanceAuthorizationConfigService $authorizationConfigService,
         GovernanceAuthorizationUsageService $authorizationUsageService,
         GovernanceAuthorizationDocumentExtractorService $documentExtractor,
         GovernanceAuthorizationStatusService $authorizationStatusService,
@@ -115,6 +120,7 @@ class GovernanceController extends AbstractController
         $this->entityManager = $entityManager;
         $this->requestStack = $requestStack;
         $this->authorizationConditionConfig = $authorizationConditionConfig;
+        $this->authorizationConfigService = $authorizationConfigService;
         $this->authorizationUsageService = $authorizationUsageService;
         $this->documentExtractor = $documentExtractor;
         $this->authorizationStatusService = $authorizationStatusService;
@@ -1323,10 +1329,33 @@ class GovernanceController extends AbstractController
             ))
             : [];
 
-        return array_merge($viewData, $autData, [
+        $companyAreas = [];
+        $authorizationConfigView = [
+            'aut_authorization_types' => [],
+            'aut_authorization_use_members' => true,
+            'aut_authorization_use_roles' => false,
+            'aut_authorization_approver_members' => [],
+            'aut_authorization_approver_roles' => [],
+            'aut_company_roles' => [],
+        ];
+        if ($company) {
+            /** @var CompanyAreaRepository $areaRepo */
+            $areaRepo = $this->entityManager->getRepository(CompanyArea::class);
+            foreach ($areaRepo->findForCompany($company, true) as $area) {
+                $companyAreas[] = [
+                    'id' => $area->getId(),
+                    'name' => (string) $area->getName(),
+                ];
+            }
+
+            $authorizationConfigView = $this->authorizationConfigService->getViewData($company);
+        }
+
+        return array_merge($viewData, $autData, $authorizationConfigView, [
             'aut_conditions' => $autConditions,
             'aut_classif_catalog' => GovernanceAuthorizationConditionConfigService::classificacoesPorTipo(),
             'aut_contractor_requirements' => $contractorRequirements,
+            'aut_company_areas' => $companyAreas,
         ]);
     }
 
@@ -2886,6 +2915,69 @@ class GovernanceController extends AbstractController
         return new JsonResponse(['success' => true, 'aut_conditions' => $conditions]);
     }
 
+    public function authorizationConfigGet(): JsonResponse
+    {
+        /** @var User|null $user */
+        $user = $this->getUser();
+        $company = $this->currentGovernanceCompany();
+        if (!$user || !$company) {
+            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
+        }
+        if (!$this->canManageAuthorizationConfig()) {
+            return new JsonResponse(['success' => false, 'message' => 'Sem permissão para consultar configurações de Autorizações.'], 403);
+        }
+
+        $view = $this->authorizationConfigService->getViewData($company);
+
+        return new JsonResponse([
+            'success' => true,
+            'authorization_types' => $view['aut_authorization_types'],
+            'use_members' => $view['aut_authorization_use_members'],
+            'use_roles' => $view['aut_authorization_use_roles'],
+            'approver_members' => $view['aut_authorization_approver_members'],
+            'approver_roles' => $view['aut_authorization_approver_roles'],
+            'company_roles' => $view['aut_company_roles'],
+        ]);
+    }
+
+    public function authorizationConfigSave(Request $request): JsonResponse
+    {
+        /** @var User|null $user */
+        $user = $this->getUser();
+        $company = $this->currentGovernanceCompany();
+        if (!$user || !$company) {
+            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
+        }
+        if (!$this->canManageAuthorizationConfig()) {
+            return new JsonResponse(['success' => false, 'message' => 'Sem permissão para alterar configurações de Autorizações.'], 403);
+        }
+
+        $payload = json_decode($request->getContent(), true);
+        if (!is_array($payload)) {
+            return new JsonResponse(['success' => false, 'message' => 'Payload inválido.'], 400);
+        }
+
+        try {
+            $data = $this->authorizationConfigService->savePayload($company, $payload, $user);
+        } catch (\InvalidArgumentException $e) {
+            return new JsonResponse(['success' => false, 'message' => $e->getMessage()], 422);
+        } catch (\Throwable $e) {
+            $this->logger->error('authorizationConfigSave: ' . $e->getMessage(), ['exception' => $e]);
+
+            return new JsonResponse(['success' => false, 'message' => 'Erro ao salvar configurações.'], 500);
+        }
+
+        return new JsonResponse([
+            'success' => true,
+            'message' => 'Configurações salvas.',
+            'authorization_types' => $data['authorization_types'],
+            'use_members' => $data['use_members'],
+            'use_roles' => $data['use_roles'],
+            'approver_members' => $data['approver_members'],
+            'approver_roles' => $data['approver_roles'],
+        ]);
+    }
+
     public function authorizationConditionUsage(Request $request): JsonResponse
     {
         /** @var User|null $user */
==== FILE: config/routes_governance.yaml ====
diff --git a/config/routes_governance.yaml b/config/routes_governance.yaml
--- a/config/routes_governance.yaml
+++ b/config/routes_governance.yaml
@@ -367,6 +367,16 @@ governance_authorization_condition_usage:
   controller: App\Controller\GovernanceController::authorizationConditionUsage
   methods: [GET]
 
+governance_authorization_config_get:
+  path: /manager/governance/authorizations/config
+  controller: App\Controller\GovernanceController::authorizationConfigGet
+  methods: [GET]
+
+governance_authorization_config_save:
+  path: /manager/governance/authorizations/config
+  controller: App\Controller\GovernanceController::authorizationConfigSave
+  methods: [POST]
+
 member_governance_pendencies_index:
   path: /user/pendencies
   controller: App\Controller\Governance\MemberGovernancePendenciesController::index

{"search_text": "GovernanceAuthorizationConfigService"}

File: docs/database-changes/2026-08-31-governance-authorization-config.md
Match lines: 1
15|- Codigo que passa a depender: `GovernanceAuthorizationConfig`, `GovernanceAuthorizationType`, `GovernanceAuthorizationApprover`, `GovernanceAuthorizationConfigService`, rotas `governance_authorization_config_get` / `_save`.

File: src/Controller/GovernanceController.php
Match lines: 3
39|use App\Service\Governance\GovernanceAuthorizationConfigService;
68|    private GovernanceAuthorizationConfigService $authorizationConfigService;
96|        GovernanceAuthorizationConfigService $authorizationConfigService,

File: src/Service/Governance/GovernanceAuthorizationConfigService.php
Match lines: 1
18|final class GovernanceAuthorizationConfigService

{"path_array": ["src/Entity/GovernanceAuthorization.php", "src/Repository/GovernanceAuthorizationRepository.php"]}

==== FILE: src/Entity/GovernanceAuthorization.php ====
diff --git a/src/Entity/GovernanceAuthorization.php b/src/Entity/GovernanceAuthorization.php
--- a/src/Entity/GovernanceAuthorization.php
+++ b/src/Entity/GovernanceAuthorization.php
@@ -88,6 +88,33 @@ class GovernanceAuthorization
      */
     private ?CompanyMembers $responsavelMember = null;
 
+    /**
+     * @ORM\ManyToOne(targetEntity=CompanyArea::class)
+     * @ORM\JoinColumn(name="area_id", referencedColumnName="id", nullable=true, onDelete="SET NULL")
+     */
+    private ?CompanyArea $area = null;
+
+    /**
+     * @ORM\ManyToOne(targetEntity=CompanyMembers::class)
+     * @ORM\JoinColumn(name="aprovador_member_id", referencedColumnName="id", nullable=true, onDelete="SET NULL")
+     */
+    private ?CompanyMembers $aprovadorMember = null;
+
+    /**
+     * Cargo aprovador específico desta autorização (fallback da Configuração quando ausente).
+     *
+     * @ORM\ManyToOne(targetEntity=Roles::class)
+     * @ORM\JoinColumn(name="aprovador_role_id", referencedColumnName="id", nullable=true, onDelete="SET NULL")
+     */
+    private ?Roles $aprovadorRole = null;
+
+    /**
+     * Tipo de autorização cadastrado em Configurações.
+     *
+     * @ORM\Column(type="string", length=255, nullable=true)
+     */
+    private ?string $tipo = null;
+
     /**
      * @var Collection<int, GovernanceAuthorizationCollaborator>
      * @ORM\OneToMany(targetEntity=GovernanceAuthorizationCollaborator::class, mappedBy="memberAutorizacao", cascade={"persist", "remove"}, orphanRemoval=true)
@@ -310,6 +337,61 @@ class GovernanceAuthorization
         return $this;
     }
 
+    public function getArea(): ?CompanyArea
+    {
+        return $this->area;
+    }
+
+    public function setArea(?CompanyArea $area): self
+    {
+        $this->area = $area;
+
+        return $this;
+    }
+
+    public function getAprovadorMember(): ?CompanyMembers
+    {
+        return $this->aprovadorMember;
+    }
+
+    public function setAprovadorMember(?CompanyMembers $aprovadorMember): self
+    {
+        $this->aprovadorMember = $aprovadorMember;
+
+        return $this;
+    }
+
+    public function getAprovadorRole(): ?Roles
+    {
+        return $this->aprovadorRole;
+    }
+
+    public function setAprovadorRole(?Roles $aprovadorRole): self
+    {
+        $this->aprovadorRole = $aprovadorRole;
+
+        return $this;
+    }
+
+    public function hasSpecificApprover(): bool
+    {
+        return $this->aprovadorMember instanceof CompanyMembers
+            || $this->aprovadorRole instanceof Roles;
+    }
+
+    public function getTipo(): ?string
+    {
+        return $this->tipo;
+    }
+
+    public function setTipo(?string $tipo): self
+    {
+        $label = trim((string) $tipo);
+        $this->tipo = $label !== '' ? $label : null;
+
+        return $this;
+    }
+
     /** @return CompanyMembers[] */
     public function getColaboradoresMembros(): array
     {
==== FILE: src/Repository/GovernanceAuthorizationRepository.php ====
diff --git a/src/Repository/GovernanceAuthorizationRepository.php b/src/Repository/GovernanceAuthorizationRepository.php
--- a/src/Repository/GovernanceAuthorizationRepository.php
+++ b/src/Repository/GovernanceAuthorizationRepository.php
@@ -230,6 +230,10 @@ class GovernanceAuthorizationRepository extends ServiceEntityRepository
             'requisitos'          => $aut->getRequisitosList(),
             'contractor_requirement_dependencies' => $aut->getContractorRequirementDependencies(),
             'responsavel_id'      => $aut->getResponsavelMember()?->getId(),
+            'area_id'             => $aut->getArea()?->getId(),
+            'aprovador_id'        => $aut->getAprovadorMember()?->getId(),
+            'aprovador_role_id'   => $aut->getAprovadorRole()?->getId(),
+            'tipo'                => $aut->getTipo(),
             'colaboradores'       => array_map(fn (CompanyMembers $cm) => $this->colaboradorRow($cm), $membros),
         ];
     }

{"search_text": "resolveTypeLabel|hasConfiguredTypes|authorizationConfigGet|currentGovernanceCompany|canManageAuthorizationConfig"}

No matches found

{"search_text": "resolveTypeLabel"}

File: src/Service/Governance/GovernanceAuthorizationConfigService.php
Match lines: 1
113|    public function resolveTypeLabel(Company $company, string $tipo): ?string

{"search_text": "hasConfiguredTypes"}

File: src/Service/Governance/GovernanceAuthorizationConfigService.php
Match lines: 1
134|    public function hasConfiguredTypes(Company $company): bool

{"search_text": "authorizationConfigGet"}

File: config/routes_governance.yaml
Match lines: 1
372|  controller: App\Controller\GovernanceController::authorizationConfigGet

File: src/Controller/GovernanceController.php
Match lines: 1
2918|    public function authorizationConfigGet(): JsonResponse

{"search_text": "function currentGovernanceCompany"}

File: src/Controller/GovernanceController.php
Match lines: 1
3933|    private function currentGovernanceCompany(): ?Company

{"search_text": "function canManageAuthorizationConfig"}

File: src/Controller/GovernanceController.php
Match lines: 1
4186|    private function canManageAuthorizationConfig(): bool

{"file_path": "src/Controller/GovernanceController.php", "start_line": 3925, "end_line": 3995}

File: src/Controller/GovernanceController.php (Total lines: 6154)
IS_TRUNCATED: false
LINE_RANGE: 3925-3995
3925|
3926|        if (!$member instanceof CompanyMembers) {
3927|            return $this->json(['success' => false, 'message' => 'Membro não encontrado.'], 404);
3928|        }
3929|
3930|        return $member;
3931|    }
3932|
3933|    private function currentGovernanceCompany(): ?Company
3934|    {
3935|        $request = $this->requestStack->getCurrentRequest();
3936|        $currentCompany = $request?->attributes->get('current_company');
3937|        if ($currentCompany instanceof Company) {
3938|            return $currentCompany;
3939|        }
3940|
3941|        if ($request !== null && $request->hasSession()) {
3942|            $selectedWorkspace = (string) $request->getSession()->get('selected_workspace', '');
3943|            if ($selectedWorkspace !== '' && str_starts_with($selectedWorkspace, 'company_')) {
3944|                $companyId = (int) str_replace('company_', '', $selectedWorkspace);
3945|                if ($companyId > 0) {
3946|                    $companyFromWorkspace = $this->entityManager->getRepository(Company::class)->find($companyId);
3947|                    if ($companyFromWorkspace instanceof Company) {
3948|                        return $companyFromWorkspace;
3949|                    }
3950|                }
3951|            }
3952|        }
3953|
3954|        /** @var User|null $user */
3955|        $user = $this->getUser();
3956|
3957|        return $user ? $user->getCompany() : null;
3958|    }
3959|
3960|    /**
3961|     * @return int[]|null null significa acesso à empresa inteira.
3962|     */
3963|    private function visibleCompanyMemberIdsForCurrentRequest(Company $company): ?array
3964|    {
3965|        $request = $this->requestStack->getCurrentRequest();
3966|        if (!$request || !(bool) $request->attributes->get('team_limitation', false)) {
3967|            return null;
3968|        }
3969|
3970|        $companyMember = $request->attributes->get('company_member');
3971|        if (!$companyMember instanceof CompanyMembers || (int) $companyMember->getCompany()?->getId() !== (int) $company->getId()) {
3972|            return [];
3973|        }
3974|
3975|        $teamIds = $this->parseCompanyMemberTeamIds($companyMember);
3976|
3977|        if ($teamIds === []) {
3978|            return $companyMember->getId() !== null ? [(int) $companyMember->getId()] : [];
3979|        }
3980|
3981|        $visibleIds = $this->visibleCompanyMemberIdsFromListenerUserScope($company);
3982|        $members = $this->entityManager->getRepository(CompanyMembers::class)->findBy([
3983|            'company' => $company,
3984|            'isRemoved' => 0,
3985|        ]);
3986|
3987|        foreach ($members as $member) {
3988|            if (!$member instanceof CompanyMembers || $member->getId() === null) {
3989|                continue;
3990|            }
3991|
3992|            $memberTeamIds = $this->parseCompanyMemberTeamIds($member);
3993|
3994|            if (array_intersect($teamIds, $memberTeamIds) !== []) {
3995|                $visibleIds[] = (int) $member->getId();

{"file_path": "src/Controller/GovernanceController.php", "start_line": 4175, "end_line": 4220}

File: src/Controller/GovernanceController.php (Total lines: 6154)
IS_TRUNCATED: false
LINE_RANGE: 4175-4220
4175|        $request = $this->requestStack->getCurrentRequest();
4176|        if (!$request) {
4177|            return false;
4178|        }
4179|
4180|        return (bool) $request->attributes->get('can_view', false)
4181|            && !(bool) $request->attributes->get('can_create', false)
4182|            && !(bool) $request->attributes->get('can_edit', false)
4183|            && !(bool) $request->attributes->get('can_delete', false);
4184|    }
4185|
4186|    private function canManageAuthorizationConfig(): bool
4187|    {
4188|        return $this->canManageAuthorizations();
4189|    }
4190|
4191|    private function canAccessBadgeHub(): bool
4192|    {
4193|        if ($this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER') || $this->isGranted('ROLE_MANAGER_GESTOR')) {
4194|            return true;
4195|        }
4196|
4197|        if ($this->canManageBadges() || $this->isBadgeViewer()) {
4198|            return true;
4199|        }
4200|
4201|        $request = $this->requestStack->getCurrentRequest();
4202|
4203|        return $request && (bool) $request->attributes->get('can_view', false);
4204|    }
4205|
4206|    private function isBadgeViewer(): bool
4207|    {
4208|        if ($this->isGranted('ROLE_MANAGER_VIEWER')
4209|            && !$this->isGranted('ROLE_MANAGER')
4210|            && !$this->isGranted('ROLE_MANAGER_GESTOR')
4211|            && !$this->isGranted('ROLE_SUPER_ADMIN')
4212|        ) {
4213|            return true;
4214|        }
4215|
4216|        $request = $this->requestStack->getCurrentRequest();
4217|        if (!$request) {
4218|            return false;
4219|        }
4220|

{"search_text": "function resolveMemberDisplayName"}

File: src/Repository/GovernanceCaseHistoryRepository.php
Match lines: 1
255|    public static function resolveMemberDisplayName(CompanyMembers $member): string

File: src/Service/AutomationExecutionService.php
Match lines: 1
6804|    private function resolveMemberDisplayName(?FlowInstanceMember $member): string

File: src/Service/EmployeeAdvocacyNotificationService.php
Match lines: 1
210|    private function resolveMemberDisplayName(mixed $member): string

{"search_text": "class Roles"}

File: docs/ENTIDADES_PRINCIPAIS_SISTEMA.md
Match lines: 1
247|class Roles

File: src/Entity/Roles.php
Match lines: 1
14|class Roles

File: src/Entity/RolesBenefits.php
Match lines: 1
11|class RolesBenefits

File: src/Repository/RolesBenefitsRepository.php
Match lines: 1
18|class RolesBenefitsRepository extends ServiceEntityRepository

File: src/Repository/RolesRepository.php
Match lines: 1
24|class RolesRepository extends ServiceEntityRepository

File: src/Service/RolesNotificationService.php
Match lines: 1
12|class RolesNotificationService

File: tests/Unit/Product/GestaoCarreiras/RolesEntityTest.php
Match lines: 1
9|final class RolesEntityTest extends GestaoCarreirasTestCase

File: tests/Unit/Product/GestaoCarreiras/RolesRepositorySaveRoleParentValidationTest.php
Match lines: 1
15|final class RolesRepositorySaveRoleParentValidationTest extends GestaoCarreirasTestCase

File: tests/Unit/Product/GestaoCarreiras/RolesRepositorySaveStructureTest.php
Match lines: 1
12|final class RolesRepositorySaveStructureTest extends GestaoCarreirasTestCase

{"search_text": "function getCompany", "file_patterns": ["src/Entity/Roles.php"]}

File: src/Entity/Roles.php
Match lines: 3
256|    public function getCompanyBranch(): ?string
405|    public function getCompany(): ?company
417|    public function getCompanyArea(): ?CompanyArea

{"search_text": "function getIsRemoved", "file_patterns": ["src/Entity/Roles.php", "src/Entity/CompanyMembers.php"]}

File: src/Entity/CompanyMembers.php
Match lines: 1
378|    public function getIsRemoved(): ?bool

File: src/Entity/Roles.php
Match lines: 1
453|    public function getIsRemoved(): ?bool

{"search_text": "GovernanceAuthorizationApprover"}

File: docs/database-changes/2026-08-31-governance-authorization-config.md
Match lines: 1
15|- Codigo que passa a depender: `GovernanceAuthorizationConfig`, `GovernanceAuthorizationType`, `GovernanceAuthorizationApprover`, `GovernanceAuthorizationConfigService`, rotas `governance_authorization_config_get` / `_save`.

File: docs/database-changes/2026-09-02-authorization-specific-approver-role.md
Match lines: 1
11|- Codigo que passa a depender: `GovernanceAuthorization::getAprovadorRole()`, `GovernanceAuthorizationApproverResolver` e o save da criacao de autorizacao.

File: src/Entity/GovernanceAuthorizationApprover.php
Match lines: 1
17|class GovernanceAuthorizationApprover

File: src/Entity/GovernanceAuthorizationConfig.php
Match lines: 9
58|     * @var Collection<int, GovernanceAuthorizationApprover>
60|     * @ORM\OneToMany(targetEntity=GovernanceAuthorizationApprover::class, mappedBy="config", cascade={"persist", "remove"}, orphanRemoval=true)
194|     * @return Collection<int, GovernanceAuthorizationApprover>
201|    /** @return list<GovernanceAuthorizationApprover> */
206|            static fn (GovernanceAuthorizationApprover $approver): bool => $approver->getMember() instanceof CompanyMembers
210|    /** @return list<GovernanceAuthorizationApprover> */
215|            static fn (GovernanceAuthorizationApprover $approver): bool => $approver->getRole() instanceof Roles
219|    public function addApprover(GovernanceAuthorizationApprover $approver): self
229|    public function removeApprover(GovernanceAuthorizationApprover $approver): self

File: src/Service/Governance/GovernanceAuthorizationConfigService.php
Match lines: 4
9|use App\Entity\GovernanceAuthorizationApprover;
241|    ): GovernanceAuthorizationApprover {
242|        $approver = new GovernanceAuthorizationApprover();
271|     * @param list<GovernanceAuthorizationApprover> $approvers

{"query_name": "Version20260831143000_GovernanceAuthorizationConfig.php"}

migrations/Version20260831143000_GovernanceAuthorizationConfig.php

{"query_name": "Version20260902160000_AuthorizationSpecificApproverRole.php"}

migrations/Version20260902160000_AuthorizationSpecificApproverRole.php

{"file_path": "migrations/Version20260831143000_GovernanceAuthorizationConfig.php"}

File: migrations/Version20260831143000_GovernanceAuthorizationConfig.php (Total lines: 157)
IS_TRUNCATED: false
LINE_RANGE: 1-157
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace DoctrineMigrations;
6|
7|use Doctrine\DBAL\Schema\Schema;
8|use Doctrine\Migrations\AbstractMigration;
9|
10|final class Version20260831143000_GovernanceAuthorizationConfig extends AbstractMigration
11|{
12|    public function getDescription(): string
13|    {
14|        return 'Cria a configuração normalizada de autorizações e adiciona área, aprovador e tipo em member_autorizacao.';
15|    }
16|
17|    public function up(Schema $schema): void
18|    {
19|        $schemaManager = $this->connection->createSchemaManager();
20|
21|        if (!$schemaManager->tablesExist(['governance_authorization_config'])) {
22|            $this->addSql("
23|                CREATE TABLE governance_authorization_config (
24|                    id INT AUTO_INCREMENT NOT NULL,
25|                    company_id INT NOT NULL,
26|                    created_by_id INT DEFAULT NULL,
27|                    updated_by_id INT DEFAULT NULL,
28|                    use_members TINYINT(1) NOT NULL DEFAULT 1,
29|                    use_roles TINYINT(1) NOT NULL DEFAULT 0,
30|                    created_at DATETIME NOT NULL,
31|                    updated_at DATETIME DEFAULT NULL,
32|                    UNIQUE INDEX uniq_governance_authorization_config_company (company_id),
33|                    CONSTRAINT FK_GOV_AUTH_CONFIG_COMPANY FOREIGN KEY (company_id) REFERENCES company (id) ON DELETE CASCADE,
34|                    CONSTRAINT FK_GOV_AUTH_CONFIG_CREATED_BY FOREIGN KEY (created_by_id) REFERENCES user (id) ON DELETE SET NULL,
35|                    CONSTRAINT FK_GOV_AUTH_CONFIG_UPDATED_BY FOREIGN KEY (updated_by_id) REFERENCES user (id) ON DELETE SET NULL,
36|                    PRIMARY KEY(id)
37|                ) DEFAULT CHARACTER SET utf8mb4 COLLATE `utf8mb4_unicode_ci` ENGINE = InnoDB
38|            ");
39|        }
40|
41|        if (!$schemaManager->tablesExist(['governance_authorization_type'])) {
42|            $this->addSql("
43|                CREATE TABLE governance_authorization_type (
44|                    id INT AUTO_INCREMENT NOT NULL,
45|                    config_id INT NOT NULL,
46|                    label VARCHAR(80) NOT NULL,
47|                    position INT NOT NULL DEFAULT 0,
48|                    UNIQUE INDEX uniq_gov_auth_type_config_label (config_id, label),
49|                    CONSTRAINT FK_GOV_AUTH_TYPE_CONFIG FOREIGN KEY (config_id) REFERENCES governance_authorization_config (id) ON DELETE CASCADE,
50|                    PRIMARY KEY(id)
51|                ) DEFAULT CHARACTER SET utf8mb4 COLLATE `utf8mb4_unicode_ci` ENGINE = InnoDB
52|            ");
53|        }
54|
55|        if (!$schemaManager->tablesExist(['governance_authorization_approver'])) {
56|            $constraints = [
57|                'CONSTRAINT FK_GOV_AUTH_APPROVER_CONFIG FOREIGN KEY (config_id) REFERENCES governance_authorization_config (id) ON DELETE CASCADE',
58|            ];
59|            if ($schemaManager->tablesExist(['company_members'])) {
60|                $constraints[] = 'CONSTRAINT FK_GOV_AUTH_APPROVER_MEMBER FOREIGN KEY (member_id) REFERENCES company_members (id) ON DELETE CASCADE';
61|            }
62|            if ($schemaManager->tablesExist(['roles'])) {
63|                $constraints[] = 'CONSTRAINT FK_GOV_AUTH_APPROVER_ROLE FOREIGN KEY (role_id) REFERENCES roles (id) ON DELETE CASCADE';
64|            }
65|
66|            $this->addSql("
67|                CREATE TABLE governance_authorization_approver (
68|                    id INT AUTO_INCREMENT NOT NULL,
69|                    config_id INT NOT NULL,
70|                    member_id INT DEFAULT NULL,
71|                    role_id INT DEFAULT NULL,
72|                    all_areas TINYINT(1) NOT NULL DEFAULT 1,
73|                    position INT NOT NULL DEFAULT 0,
74|                    " . implode(",\n                    ", $constraints) . ",
75|                    PRIMARY KEY(id)
76|                ) DEFAULT CHARACTER SET utf8mb4 COLLATE `utf8mb4_unicode_ci` ENGINE = InnoDB
77|            ");
78|        }
79|
80|        if (!$schemaManager->tablesExist(['governance_authorization_approver_type'])) {
81|            $this->addSql("
82|                CREATE TABLE governance_authorization_approver_type (
83|                    approver_id INT NOT NULL,
84|                    type_id INT NOT NULL,
85|                    CONSTRAINT FK_GOV_AUTH_APPROVER_TYPE_APPROVER FOREIGN KEY (approver_id) REFERENCES governance_authorization_approver (id) ON DELETE CASCADE,
86|                    CONSTRAINT FK_GOV_AUTH_APPROVER_TYPE_TYPE FOREIGN KEY (type_id) REFERENCES governance_authorization_type (id) ON DELETE CASCADE,
87|                    PRIMARY KEY(approver_id, type_id)
88|                ) DEFAULT CHARACTER SET utf8mb4 COLLATE `utf8mb4_unicode_ci` ENGINE = InnoDB
89|            ");
90|        }
91|
92|        if (!$schemaManager->tablesExist(['member_autorizacao'])) {
93|            return;
94|        }
95|
96|        $table = $schemaManager->introspectTable('member_autorizacao');
97|
98|        if (!$table->hasColumn('area_id')) {
99|            $this->addSql('ALTER TABLE member_autorizacao ADD area_id INT DEFAULT NULL');
100|        }
101|        if ($schemaManager->tablesExist(['company_area']) && !$table->hasForeignKey('FK_MA_area')) {
102|            $this->addSql('ALTER TABLE member_autorizacao ADD CONSTRAINT FK_MA_area FOREIGN KEY (area_id) REFERENCES company_area (id) ON DELETE SET NULL');
103|        }
104|
105|        if (!$table->hasColumn('aprovador_member_id')) {
106|            $this->addSql('ALTER TABLE member_autorizacao ADD aprovador_member_id INT DEFAULT NULL');
107|        }
108|        if ($schemaManager->tablesExist(['company_members']) && !$table->hasForeignKey('FK_MA_aprovador')) {
109|            $this->addSql('ALTER TABLE member_autorizacao ADD CONSTRAINT FK_MA_aprovador FOREIGN KEY (aprovador_member_id) REFERENCES company_members (id) ON DELETE SET NULL');
110|        }
111|
112|        if (!$table->hasColumn('tipo')) {
113|            $this->addSql('ALTER TABLE member_autorizacao ADD tipo VARCHAR(255) DEFAULT NULL');
114|        }
115|    }
116|
117|    public function down(Schema $schema): void
118|    {
119|        $schemaManager = $this->connection->createSchemaManager();
120|
121|        if ($schemaManager->tablesExist(['member_autorizacao'])) {
122|            $table = $schemaManager->introspectTable('member_autorizacao');
123|
124|            if ($table->hasForeignKey('FK_MA_aprovador')) {
125|                $this->addSql('ALTER TABLE member_autorizacao DROP FOREIGN KEY FK_MA_aprovador');
126|            }
127|            if ($table->hasColumn('aprovador_member_id')) {
128|                $this->addSql('ALTER TABLE member_autorizacao DROP COLUMN aprovador_member_id');
129|            }
130|
131|            if ($table->hasForeignKey('FK_MA_area')) {
132|                $this->addSql('ALTER TABLE member_autorizacao DROP FOREIGN KEY FK_MA_area');
133|            }
134|            if ($table->hasColumn('area_id')) {
135|                $this->addSql('ALTER TABLE member_autorizacao DROP COLUMN area_id');
136|            }
137|
138|            if ($table->hasColumn('tipo')) {
139|                $this->addSql('ALTER TABLE member_autorizacao DROP COLUMN tipo');
140|            }
141|        }
142|
143|        if ($schemaManager->tablesExist(['governance_authorization_approver_type'])) {
144|            $this->addSql('DROP TABLE governance_authorization_approver_type');
145|        }
146|        if ($schemaManager->tablesExist(['governance_authorization_approver'])) {
147|            $this->addSql('DROP TABLE governance_authorization_approver');
148|        }
149|        if ($schemaManager->tablesExist(['governance_authorization_type'])) {
150|            $this->addSql('DROP TABLE governance_authorization_type');
151|        }
152|        if ($schemaManager->tablesExist(['governance_authorization_config'])) {
153|            $this->addSql('DROP TABLE governance_authorization_config');
154|        }
155|    }
156|}
157|

{"state": "DONE"}