{"file_path": "src/Controller/Contractor/EmpresasParceirasController.php"}

File: src/Controller/Contractor/EmpresasParceirasController.php (Total lines: 663)
IS_TRUNCATED: true
LINE_RANGE: 1-500
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Controller\Contractor;
6|
7|use App\Entity\Company;
8|use App\Entity\CompanyMembers;
9|use App\Entity\PermissionTag;
10|use App\Entity\Product;
11|use App\Entity\User;
12|use App\Service\Contractor\ContractorDocumentRequirementService;
13|use App\Service\Contractor\ContractorProviderCompanyService;
14|use App\Service\PermissionTagByMemberService;
15|use Doctrine\ORM\EntityManagerInterface;
16|use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
17|use Symfony\Component\HttpFoundation\BinaryFileResponse;
18|use Symfony\Component\HttpFoundation\File\UploadedFile;
19|use Symfony\Component\HttpFoundation\JsonResponse;
20|use Symfony\Component\HttpFoundation\Request;
21|use Symfony\Component\HttpFoundation\Response;
22|use Symfony\Component\HttpFoundation\ResponseHeaderBag;
23|
24|final class EmpresasParceirasController extends AbstractController
25|{
26|    private const CONTRACTOR_PRODUCT_SLUG = 'ssma-contractor';
27|
28|    public function __construct(
29|        private ContractorDocumentRequirementService $requirementService,
30|        private ContractorProviderCompanyService $companyService,
31|        private PermissionTagByMemberService $permissionTagByMemberService,
32|        private EntityManagerInterface $entityManager,
33|    ) {
34|    }
35|
36|    public function index(): Response
37|    {
38|        $company = $this->resolveCompany();
39|        $contractorCompanies = $this->companyService->listForFrontend($company);
40|
41|        return $this->render('contractor/index.html.twig', [
42|            'contractorRequirements' => $this->requirementService->listForFrontend($company),
43|            'contractorCompanies' => $contractorCompanies,
44|            'contractorCompanyStats' => $this->companyService->computeStats($contractorCompanies),
45|            'contractorDocumentoStatus' => ContractorProviderCompanyService::DOCUMENTO_STATUS,
46|            'contractorCategorias' => ContractorDocumentRequirementService::CATEGORIAS,
47|            'contractorAreas' => ContractorDocumentRequirementService::AREAS,
48|            'contractorCompanyTypes' => ContractorDocumentRequirementService::COMPANY_TYPES,
49|            'contractorValidadeTipos' => ContractorDocumentRequirementService::VALIDADE_TIPOS,
50|            'contractorValidadeUnidades' => ContractorDocumentRequirementService::VALIDADE_UNIDADES,
51|            'contractorRegrasBloqueio' => ContractorDocumentRequirementService::REGRAS_BLOQUEIO,
52|            'contractorBloqueioParcialTipos' => ContractorDocumentRequirementService::BLOQUEIO_PARCIAL_TIPOS,
53|            'contractorBloqueioParcialOptions' => $this->requirementService->listPartialBlockingOptions($company),
54|            'contractorInternalResponsibleOptions' => $this->companyService->listInternalResponsibleOptions($company),
55|            'contractorCanManage' => $this->canManage(),
56|            'contractorCanManagePermissions' => $this->canManagePermissions(),
57|        ]);
58|    }
59|
60|    public function requirementsList(): JsonResponse
61|    {
62|        $company = $this->resolveCompany();
63|
64|        return $this->json([
65|            'success' => true,
66|            'requirements' => $this->requirementService->listForFrontend($company),
67|        ]);
68|    }
69|
70|    public function requirementDetail(int $id): JsonResponse
71|    {
72|        $company = $this->resolveCompany();
73|
74|        try {
75|            $detail = $this->requirementService->getDetail($company, $id);
76|        } catch (\RuntimeException $exception) {
77|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
78|        }
79|
80|        return $this->json(['success' => true] + $detail);
81|    }
82|
83|    public function requirementSave(Request $request): JsonResponse
84|    {
85|        if (!$this->canManage()) {
86|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
87|        }
88|
89|        $company = $this->resolveCompany();
90|        $user = $this->resolveUser();
91|        $payload = json_decode($request->getContent(), true);
92|
93|        if (!is_array($payload)) {
94|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
95|        }
96|
97|        try {
98|            $requirement = $this->requirementService->save($company, $user, $payload);
99|        } catch (\InvalidArgumentException $exception) {
100|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 422);
101|        }
102|
103|        return $this->json([
104|            'success' => true,
105|            'requirement' => $requirement,
106|        ]);
107|    }
108|
109|    public function requirementDelete(int $id, Request $request): JsonResponse
110|    {
111|        if (!$this->canManage()) {
112|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
113|        }
114|
115|        $company = $this->resolveCompany();
116|        $user = $this->resolveUser();
117|        $payload = json_decode($request->getContent(), true);
118|        $motivo = is_array($payload) ? ($payload['motivo'] ?? null) : null;
119|
120|        try {
121|            $linkedCount = $this->requirementService->countLinkedCompanies($company, $id);
122|            if ($linkedCount > 0) {
123|                return $this->json([
124|                    'success' => false,
125|                    'message' => 'Requisito em uso por empresas parceiras.',
126|                    'linked_count' => $linkedCount,
127|                ], 409);
128|            }
129|
130|            $this->requirementService->delete($company, $user, $id, is_string($motivo) ? $motivo : null);
131|        } catch (\RuntimeException $exception) {
132|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
133|        }
134|
135|        return $this->json(['success' => true]);
136|    }
137|
138|    public function requirementSetActive(int $id, Request $request): JsonResponse
139|    {
140|        if (!$this->canManage()) {
141|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
142|        }
143|
144|        $company = $this->resolveCompany();
145|        $user = $this->resolveUser();
146|        $payload = json_decode($request->getContent(), true);
147|
148|        if (!is_array($payload)) {
149|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
150|        }
151|
152|        $active = filter_var($payload['active'] ?? null, FILTER_VALIDATE_BOOLEAN, FILTER_NULL_ON_FAILURE);
153|        if ($active === null) {
154|            return $this->json(['success' => false, 'message' => 'Campo active é obrigatório.'], 422);
155|        }
156|
157|        $motivo = isset($payload['motivo']) ? (string) $payload['motivo'] : null;
158|
159|        try {
160|            $requirement = $this->requirementService->setActive($company, $user, $id, $active, $motivo);
161|        } catch (\RuntimeException $exception) {
162|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
163|        }
164|
165|        return $this->json([
166|            'success' => true,
167|            'requirement' => $requirement,
168|        ]);
169|    }
170|
171|    public function requirementUsage(int $id): JsonResponse
172|    {
173|        $company = $this->resolveCompany();
174|
175|        try {
176|            $linkedCount = $this->requirementService->countLinkedCompanies($company, $id);
177|        } catch (\RuntimeException $exception) {
178|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
179|        }
180|
181|        return $this->json([
182|            'success' => true,
183|            'linked_count' => $linkedCount,
184|            'in_use' => $linkedCount > 0,
185|        ]);
186|    }
187|
188|    public function companiesList(): JsonResponse
189|    {
190|        $company = $this->resolveCompany();
191|        $companies = $this->companyService->listForFrontend($company);
192|
193|        return $this->json([
194|            'success' => true,
195|            'companies' => $companies,
196|            'stats' => $this->companyService->computeStats($companies),
197|        ]);
198|    }
199|
200|    public function companyDetail(int $id): JsonResponse
201|    {
202|        $company = $this->resolveCompany();
203|
204|        try {
205|            $detail = $this->companyService->getDetail($company, $id);
206|        } catch (\RuntimeException $exception) {
207|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
208|        }
209|
210|        return $this->json(['success' => true] + $detail);
211|    }
212|
213|    public function companyDelete(int $id, Request $request): JsonResponse
214|    {
215|        if (!$this->canManage()) {
216|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
217|        }
218|
219|        $company = $this->resolveCompany();
220|        $user = $this->resolveUser();
221|        $payload = json_decode($request->getContent(), true);
222|        $motivo = is_array($payload) ? ($payload['motivo'] ?? null) : null;
223|
224|        try {
225|            $linkedCount = $this->companyService->countLinkedRecords($company, $id);
226|            if ($linkedCount > 0) {
227|                return $this->json([
228|                    'success' => false,
229|                    'message' => 'Empresa em uso.',
230|                    'linked_count' => $linkedCount,
231|                ], 409);
232|            }
233|
234|            $this->companyService->delete($company, $user, $id, is_string($motivo) ? $motivo : null);
235|        } catch (\RuntimeException $exception) {
236|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
237|        }
238|
239|        return $this->json(['success' => true]);
240|    }
241|
242|    public function companySetActive(int $id, Request $request): JsonResponse
243|    {
244|        if (!$this->canManage()) {
245|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
246|        }
247|
248|        $company = $this->resolveCompany();
249|        $user = $this->resolveUser();
250|        $payload = json_decode($request->getContent(), true);
251|
252|        if (!is_array($payload)) {
253|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
254|        }
255|
256|        $active = filter_var($payload['active'] ?? null, FILTER_VALIDATE_BOOLEAN, FILTER_NULL_ON_FAILURE);
257|        if ($active === null) {
258|            return $this->json(['success' => false, 'message' => 'Campo active é obrigatório.'], 422);
259|        }
260|
261|        $motivo = isset($payload['motivo']) ? (string) $payload['motivo'] : null;
262|
263|        try {
264|            $providerCompany = $this->companyService->setActive($company, $user, $id, $active, $motivo);
265|        } catch (\RuntimeException $exception) {
266|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
267|        }
268|
269|        return $this->json([
270|            'success' => true,
271|            'company' => $providerCompany,
272|        ]);
273|    }
274|
275|    public function companyUsage(int $id): JsonResponse
276|    {
277|        $company = $this->resolveCompany();
278|
279|        try {
280|            $linkedCount = $this->companyService->countLinkedRecords($company, $id);
281|        } catch (\RuntimeException $exception) {
282|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
283|        }
284|
285|        return $this->json([
286|            'success' => true,
287|            'linked_count' => $linkedCount,
288|            'in_use' => $linkedCount > 0,
289|        ]);
290|    }
291|
292|    public function companySave(Request $request): JsonResponse
293|    {
294|        if (!$this->canManage()) {
295|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
296|        }
297|
298|        $company = $this->resolveCompany();
299|        $user = $this->resolveUser();
300|        $payload = json_decode($request->getContent(), true);
301|
302|        if (!is_array($payload)) {
303|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
304|        }
305|
306|        try {
307|            $providerCompany = $this->companyService->save($company, $user, $payload);
308|        } catch (\InvalidArgumentException $exception) {
309|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 422);
310|        } catch (\RuntimeException $exception) {
311|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
312|        }
313|
314|        return $this->json([
315|            'success' => true,
316|            'company' => $providerCompany,
317|        ]);
318|    }
319|
320|    public function companyProviders(int $id): JsonResponse
321|    {
322|        $company = $this->resolveCompany();
323|
324|        try {
325|            $data = $this->companyService->getProviders($company, $id);
326|        } catch (\RuntimeException $exception) {
327|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
328|        }
329|
330|        return $this->json(['success' => true] + $data);
331|    }
332|
333|    public function companyProvidersLink(int $id, Request $request): JsonResponse
334|    {
335|        if (!$this->canManage()) {
336|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
337|        }
338|
339|        $company = $this->resolveCompany();
340|        $user = $this->resolveUser();
341|        $payload = json_decode($request->getContent(), true);
342|        $providerIds = is_array($payload) ? ($payload['provider_ids'] ?? []) : [];
343|
344|        if (!is_array($providerIds)) {
345|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
346|        }
347|
348|        try {
349|            $providerCompany = $this->companyService->linkProviders($company, $user, $id, $providerIds);
350|        } catch (\RuntimeException $exception) {
351|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
352|        }
353|
354|        return $this->json([
355|            'success' => true,
356|            'company' => $providerCompany,
357|        ]);
358|    }
359|
360|    public function companyRequirements(int $id): JsonResponse
361|    {
362|        $company = $this->resolveCompany();
363|
364|        try {
365|            $data = $this->companyService->getCompanyRequirements($company, $id, $this->requirementService);
366|        } catch (\RuntimeException $exception) {
367|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
368|        }
369|
370|        return $this->json(['success' => true] + $data);
371|    }
372|
373|    public function companyRequirementsSave(int $id, Request $request): JsonResponse
374|    {
375|        if (!$this->canManage()) {
376|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
377|        }
378|
379|        $company = $this->resolveCompany();
380|        $user = $this->resolveUser();
381|        $payload = json_decode($request->getContent(), true);
382|        $requirementIds = is_array($payload) ? ($payload['requirement_ids'] ?? []) : [];
383|        $requirementNames = is_array($payload) ? ($payload['requirement_names'] ?? []) : [];
384|        $requirementResponsibleIds = is_array($payload) ? ($payload['requirement_responsible_ids'] ?? []) : [];
385|        $requirementOptionalResponsibleIds = is_array($payload) ? ($payload['requirement_optional_responsible_ids'] ?? []) : [];
386|
387|        if (!is_array($requirementIds)) {
388|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
389|        }
390|
391|        if (!is_array($requirementNames)) {
392|            $requirementNames = [];
393|        }
394|
395|        if (!is_array($requirementResponsibleIds)) {
396|            $requirementResponsibleIds = [];
397|        }
398|
399|        if (!is_array($requirementOptionalResponsibleIds)) {
400|            $requirementOptionalResponsibleIds = [];
401|        }
402|
403|        try {
404|            $providerCompany = $this->companyService->saveCompanyRequirements(
405|                $company,
406|                $user,
407|                $id,
408|                $requirementIds,
409|                $requirementNames,
410|                $requirementResponsibleIds,
411|                $requirementOptionalResponsibleIds,
412|            );
413|        } catch (\RuntimeException $exception) {
414|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
415|        }
416|
417|        return $this->json([
418|            'success' => true,
419|            'company' => $providerCompany,
420|        ]);
421|    }
422|
423|    public function companyRequirementDelete(int $id, int $linkId): JsonResponse
424|    {
425|        if (!$this->canManage()) {
426|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
427|        }
428|
429|        $company = $this->resolveCompany();
430|        $user = $this->resolveUser();
431|
432|        try {
433|            $providerCompany = $this->companyService->deleteCompanyRequirement($company, $user, $id, $linkId);
434|        } catch (\RuntimeException $exception) {
435|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
436|        }
437|
438|        return $this->json([
439|            'success' => true,
440|            'company' => $providerCompany,
441|        ]);
442|    }
443|
444|    public function companyRequirementDocumentSave(int $id, Request $request): JsonResponse
445|    {
446|        if (!$this->canManage()) {
447|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
448|        }
449|
450|        $company = $this->resolveCompany();
451|        $user = $this->resolveUser();
452|        $payload = json_decode($request->getContent(), true);
453|
454|        if (!is_array($payload)) {
455|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
456|        }
457|
458|        try {
459|            $providerCompany = $this->companyService->saveRequirementDocument($company, $user, $id, $payload);
460|        } catch (\InvalidArgumentException $exception) {
461|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 422);
462|        } catch (\RuntimeException $exception) {
463|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
464|        }
465|
466|        return $this->json([
467|            'success' => true,
468|            'company' => $providerCompany,
469|        ]);
470|    }
471|
472|    public function companyRequirementEvidenceUpload(int $id, int $requirementId, Request $request): JsonResponse
473|    {
474|        if (!$this->canManage()) {
475|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
476|        }
477|
478|        $company = $this->resolveCompany();
479|        $user = $this->resolveUser();
480|        /** @var UploadedFile|null $file */
481|        $file = $request->files->get('file');
482|
483|        if (!$file instanceof UploadedFile) {
484|            return $this->json(['success' => false, 'message' => 'Arquivo inválido.'], 400);
485|        }
486|
487|        try {
488|            $payload = $this->companyService->uploadRequirementEvidence(
489|                $company,
490|                $user,
491|                $id,
492|                $requirementId,
493|                $file,
494|                $this->requirementService,
495|                $request->request->all(),
496|            );
497|        } catch (\InvalidArgumentException $exception) {
498|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 422);
499|        } catch (\RuntimeException $exception) {
500|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);

Note: Results truncated to 500 lines. Please narrow your line range.

{"file_path": "config/packages/security.yaml"}

File: config/packages/security.yaml (Total lines: 185)
IS_TRUNCATED: false
LINE_RANGE: 1-185
1|security:
2|    # Guard authenticators only — avoid GuardBridgeAuthenticator deprecation (Symfony 5.3+)
3|    enable_authenticator_manager: true
4|    password_hashers:
5|        App\Entity\User:
6|            algorithm: auto
7|
8|    # https://symfony.com/doc/current/security.html#where-do-users-come-from-user-providers
9|    providers:
10|        # used to reload user from session & other features (e.g. switch_user)
11|        app_user_provider:
12|            id: App\Repository\UserRepository
13|    role_hierarchy:
14|        ROLE_SUPER_ADMIN: [ROLE_MANAGER]
15|        ROLE_MANAGER: [ROLE_ALLOWED_TO_SWITCH, ROLE_MANAGER_COMPANY, ROLE_MANAGER_TEAM, ROLE_MANAGER_PDI]
16|        ROLE_GERENTE_CONTA: [ROLE_USER]
17|        ROLE_DIRETOR_COMERCIAL: [ROLE_USER]
18|        ROLE_CS_ALERTAS: [ROLE_USER]
19|        ROLE_FINANCIAL_ALERT: [ROLE_USER]
20|    #role_hierarchy:
21|    #    ROLE_SUPER_ADMIN:       ROLE_ADMIN
22|    #    ROLE_ADMIN:            ROLE_MANAGER
23|    #    ROLE_COMPANY_ADMIN:    ROLE_COMPANY_MANAGER
24|    #    ROLE_COMPANY_MANAGER:  ROLE_USER
25|    #    ROLE_USER:             ~
26|    firewalls:
27|        dev:
28|            pattern: ^/(_(profiler|wdt)|css|images|js)/
29|            security: false
30|        main:
31|            switch_user: { role: ROLE_MANAGER }
32|            # Necessário com enable_authenticator_manager: false (Guard)
33|            provider: app_user_provider
34|            guard:
35|                authenticators:
36|                    - App\Security\LoginFormAuthenticator
37|            logout:
38|                path: app_logout
39|            # Lembrar-me: o formulário envia _remember_me; sem isto o cookie não era gravado.
40|            remember_me:
41|                secret: '%kernel.secret%'
42|                lifetime: 604800
43|                path: /
44|                name: REMEMBERME
45|                secure: auto
46|                httponly: true
47|                samesite: lax
48|            # activate different ways to authenticate
49|            # https://symfony.com/doc/current/security.html#firewalls-authentication
50|
51|            # https://symfony.com/doc/current/security/impersonating_user.html
52|            # switch_user: true
53|
54|    # Easy way to control access for large sections of your site
55|    # Note: Only the *first* access control that matches will be used
56|    access_control:
57|        - { path: ^/user/show, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER] }
58|        - { path: ^/connect/microsoft/callback, roles: PUBLIC_ACCESS }
59|        - { path: ^/ws, roles: PUBLIC_ACCESS }
60|        - { path: ^/training, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
61|        - { path: ^/notifications-center, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
62|        - { path: ^/manager/communication-center, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
63|        - { path: ^/manager/ssma, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_SUPER_ADMIN, ROLE_MANAGER_VIEWER, ROLE_USER], methods: [POST, PUT, PATCH, DELETE] }
64|        - { path: ^/manager/ssma, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_SUPER_ADMIN, ROLE_MANAGER_VIEWER, ROLE_USER] }
65|        - { path: ^/templates-whatsapp, roles: [ROLE_SUPER_ADMIN] }
66|        - { path: ^/token, roles: PUBLIC_ACCESS }
67|        - { path: ^/manager/ai-training-module/gerenciamento/, roles: [ROLE_MANAGER, ROLE_USER, ROLE_SUPER_ADMIN] }
68|        - { path: ^/manager/ai-training-module/list/, roles: [ROLE_MANAGER, ROLE_USER, ROLE_SUPER_ADMIN] }
69|        - { path: ^/login, roles: PUBLIC_ACCESS }
70|        - { path: ^/user/change-temporary-password, roles: PUBLIC_ACCESS }
71|        - { path: ^/access, roles: PUBLIC_ACCESS }
72|        - { path: ^/manager/ai-training-module/dashboard/, roles: [ROLE_MANAGER, ROLE_USER, ROLE_SUPER_ADMIN] }
73|        - { path: ^/evaluator-registration, roles: PUBLIC_ACCESS }
74|        - { path: ^/user/hub, roles: [ROLE_USER] }
75|        - { path: ^/evaluator-register, roles: PUBLIC_ACCESS }
76|        - { path: ^/evaluator-activation, roles: PUBLIC_ACCESS }
77|        - { path: ^/site-config/smtp, roles: [ROLE_SUPER_ADMIN] }
78|        - { path: ^/manager/process$, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER, ROLE_USER] }
79|        - { path: ^/spaces-control, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
80|        - { path: ^/manager/hub-in-progress, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER, ROLE_SUPER_ADMIN] }
81|        - { path: ^/user/specialist/management_data, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
82|        - { path: ^/management/update-receipt, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
83|        - { path: ^/management/update-recipts, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
84|        - { path: ^/user/specialist/disable, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
85|        - { path: ^/user/specialist/reactivate, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
86|        - { path: ^/user/specialist/(pause|resume), roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
87|        - { path: ^/user/specialist/(block|unblock), roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
88|
89|        - { path: ^/employee-advocacy, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
90|        - { path: ^/manager/chavesdeacesso, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_SUPER_ADMIN] }
91|        - { path: ^/onboarding/\d+/onboarding-\d+, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
92|
93|        - { path: ^/dei_assessment, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER, ROLE_SUPER_ADMIN] }
94|        - { path: ^/manager/professional-assessment, roles: [ROLE_MANAGER, ROLE_SUPER_ADMIN, ROLE_USER] }
95|        - { path: ^/manager/structural-research, roles: [ROLE_MANAGER, ROLE_USER, ROLE_SUPER_ADMIN] }
96|        - { path: ^/manager/free-trial, roles: [ROLE_SUPER_ADMIN] }
97|        - { path: ^/manager/governance, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER, ROLE_SUPER_ADMIN] }
98|
99|        - { path: ^/manager/home, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
100|        - { path: ^/manager/training/dashboard/, roles: [ROLE_MANAGER, ROLE_USER, ROLE_SUPER_ADMIN] }
101|        - { path: ^/manager/participantes, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
102|        - { path: ^/manager/company/invoice, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
103|        - { path: ^/manager/processos, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
104|        - { path: ^/manager/user/data, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_REVIEWER] }
105|        - { path: ^/manager/user/show, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
106|        - { path: ^/manager/process/dashboard/old, roles: [ROLE_SUPER_ADMIN, ROLE_ADMIN, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
107|        - { path: ^/manager/process/dashboard, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
108|        - { path: ^/manager/professional-assessment/dashboard, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER] }
109|        - { path: ^/manager/company, roles: [ROLE_SUPER_ADMIN] }
110|
111|        - { path: ^/manager/department, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER] }
112|        - { path: ^/manager/organizational-structure, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER] }
113|        - { path: ^/manager/position, roles: [ROLE_SUPER_ADMIN] }
114|        - { path: ^/manager/users, roles: [ROLE_SUPER_ADMIN, ROLE_MANAGER, ROLE_MANAGER_GESTOR] }
115|        - { path: ^/manager/license, roles: [ROLE_USER, ROLE_SURVEY, ROLE_MANAGER] }
116|        - { path: ^/company/relink, roles: [ROLE_MANAGER, ROLE_SUPER_ADMIN] }
117|        - { path: ^/manager/benefit, roles: [ROLE_SUPER_ADMIN, ROLE_MANAGER, ROLE_MANAGER_GESTOR] }
118|        - { path: ^/manager/skill, roles: [ROLE_SUPER_ADMIN, ROLE_MANAGER, ROLE_MANAGER_GESTOR] }
119|        - { path: ^/manager/evaluations/create, roles: [ROLE_SUPER_ADMIN, ROLE_MANAGER] }
120|        - { path: ^/manager/service-request-list, roles: [ROLE_SUPER_ADMIN] }
121|        - { path: ^/manager/evaluator/request, roles: [ROLE_SUPER_ADMIN] }
122|        - { path: ^/manager/evaluators-pending-evaluations, roles: [ROLE_SUPER_ADMIN] }
123|        - { path: ^/manager/evaluator/validate/evaluations, roles: [ROLE_SUPER_ADMIN] }
124|        - { path: ^/manager/parentcategorias, roles: [ROLE_SUPER_ADMIN] }
125|        - { path: ^/manager/category, roles: [ROLE_SUPER_ADMIN] }
126|        - { path: ^/manager/level, roles: [ROLE_SUPER_ADMIN] }
127|        - { path: ^/manager/evaluations/recommendations-network/task/options, roles: [ROLE_SUPER_ADMIN] }
128|        - { path: ^/site-config/siteconfig, roles: [ROLE_SUPER_ADMIN] }
129|        - { path: ^/manager/candidate-question/list, roles: [ROLE_SUPER_ADMIN] }
130|        - { path: ^/manager/interview_guide, roles: [ROLE_SUPER_ADMIN, ROLE_MANAGER] }
131|        - { path: ^/manager/permissionstags, roles: [ROLE_SUPER_ADMIN] }
132|        - { path: ^/manager/service-packs, roles: [ROLE_SUPER_ADMIN] }
133|        - { path: ^/manager/tokens, roles: [ROLE_SUPER_ADMIN] }
134|        - { path: ^/manager/logs, roles: [ROLE_SUPER_ADMIN] }
135|        - { path: ^/manager/market-job, roles: [ROLE_SUPER_ADMIN] }
136|        - { path: ^/manager/training-module/get-data, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
137|        - { path: ^/manager/empresas-parceiras, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER, ROLE_SUPER_ADMIN] }
138|        - { path: ^/manager, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER] }
139|        - { path: ^/finance/refunds, roles: [ROLE_MANAGER, ROLE_USER, ROLE_SUPER_ADMIN] }
140|        - { path: ^/evaluator, roles: [ROLE_REVIEWER] }
141|        - { path: ^/my-company/home, roles: [ROLE_USER] }
142|        - { path: ^/my-company, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER, ROLE_USER, ROLE_SUPER_ADMIN] }
143|        - { path: ^/crm, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER] }
144|
145|        # - { path: ^/my-company/list-members-by-teams/, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER, ROLE_USER] }
146|        - { path: ^/subsidiary-companies, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER, ROLE_USER] }
147|        - { path: ^/profile, roles: ROLE_USER }
148|        - { path: ^/user/structural-research, roles: [ROLE_SURVEY, ROLE_USER] }
149|        - { path: ^/calendar-member, roles: [ROLE_SURVEY, ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
150|        - { path: ^/user/registration, roles: PUBLIC_ACCESS }
151|        - { path: ^/user/registration-employee, roles: PUBLIC_ACCESS }
152|        - { path: ^/employee-user, roles: PUBLIC_ACCESS }
153|        - { path: ^/user, roles: ROLE_USER }
154|        - { path: ^/refunds, roles: [ROLE_USER,ROLE_MANAGER] }
155|        - { path: ^/assessment_pf, roles: PUBLIC_ACCESS }
156|        - { path: ^/assessment_pf_dashboard, roles: PUBLIC_ACCESS }
157|        - { path: ^/muralQuestionario, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
158|        - { path: ^/teste/chat, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
159|        - { path: ^/account, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
160|        - { path: ^/offboarding, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
161|        - { path: ^/onboarding, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
162|        - { path: ^/cultural-hub, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
163|        - { path: ^/time-management/presence/signature, roles: PUBLIC_ACCESS }
164|        - { path: ^/v2/file-management/attendance-lists/sign, roles: PUBLIC_ACCESS }
165|        - { path: ^/time-management, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
166|        - { path: ^/welfare-hub, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
167|        - { path: ^/specialists, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
168|        - { path: ^/cognitive_assessment, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
169|        - { path: ^/templates, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
170|        - { path: ^/gestao-documentos, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
171|        - { path: ^/job, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
172|        - { path: ^/process, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
173|        - { path: ^/organograma_index, roles: [ROLE_MANAGER, ROLE_USER, ROLE_SUPER_ADMIN] }
174|        - { path: ^/organograma, roles: [ROLE_MANAGER, ROLE_USER, ROLE_SUPER_ADMIN] }
175|        - { path: ^/sst, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
176|        - { path: ^/api/sst, roles: PUBLIC_ACCESS }
177|        - { path: ^/api/adriana/tools, roles: PUBLIC_ACCESS }
178|        - { path: ^/api/signature-emails, roles: PUBLIC_ACCESS }
179|
180|        - { path: '^/manager/process/\d+(/stage/\d+)?/candidates', roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER, ROLE_USER] }
181|        - { path: ^/manager/live-interview, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER, ROLE_USER] }
182|        - { path: ^/interview/management, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
183|
184|        - { path: ^/test/, roles: PUBLIC_ACCESS }
185|

{"file_path": "src/Controller/Contractor/EmpresasParceirasController.php", "start_line": 500, "end_line": 663}

File: src/Controller/Contractor/EmpresasParceirasController.php (Total lines: 663)
IS_TRUNCATED: false
LINE_RANGE: 500-663
500|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
501|        }
502|
503|        return $this->json(['success' => true] + $payload);
504|    }
505|
506|    public function companyRequirementEvidenceDownload(int $id, int $requirementId, string $evidenceId): Response
507|    {
508|        $company = $this->resolveCompany();
509|
510|        try {
511|            $download = $this->companyService->resolveRequirementEvidenceDownload(
512|                $company,
513|                $id,
514|                $requirementId,
515|                $evidenceId,
516|            );
517|        } catch (\RuntimeException $exception) {
518|            return new Response($exception->getMessage(), Response::HTTP_NOT_FOUND);
519|        }
520|
521|        $response = new BinaryFileResponse($download['absolute_path']);
522|        $response->setContentDisposition(
523|            ResponseHeaderBag::DISPOSITION_ATTACHMENT,
524|            $download['download_name'],
525|        );
526|
527|        return $response;
528|    }
529|
530|    public function companyRequirementEvidenceDelete(int $id, int $requirementId, Request $request): JsonResponse
531|    {
532|        if (!$this->canManage()) {
533|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
534|        }
535|
536|        $company = $this->resolveCompany();
537|        $payload = json_decode($request->getContent(), true);
538|        $evidenceId = is_array($payload) ? trim((string) ($payload['evidence_id'] ?? '')) : '';
539|        $index = is_array($payload) && array_key_exists('index', $payload) ? (int) $payload['index'] : null;
540|
541|        try {
542|            $data = $this->companyService->deleteRequirementEvidence(
543|                $company,
544|                $id,
545|                $requirementId,
546|                $evidenceId !== '' ? $evidenceId : null,
547|                $index,
548|                $this->requirementService,
549|            );
550|        } catch (\InvalidArgumentException $exception) {
551|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 422);
552|        } catch (\RuntimeException $exception) {
553|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
554|        }
555|
556|        return $this->json(['success' => true] + $data);
557|    }
558|
559|    private function canManage(): bool
560|    {
561|        if ($this->isContractorPlatformAdmin()) {
562|            return true;
563|        }
564|
565|        $tag = $this->resolveContractorPermissionTag();
566|        if (!$tag instanceof PermissionTag) {
567|            return false;
568|        }
569|
570|        $tagName = trim((string) $tag->getName());
571|        if ($tagName === '' || strcasecmp($tagName, 'Membro') === 0) {
572|            return false;
573|        }
574|
575|        if (in_array($tagName, [
576|            'Gestor Administrador',
577|            'Gestor de Equipe',
578|            'Supervisor de Equipe',
579|            'Supervisor',
580|        ], true)) {
581|            return true;
582|        }
583|
584|        return (bool) ($tag->getCanCreate() || $tag->getCanEdit());
585|    }
586|
587|    private function canManagePermissions(): bool
588|    {
589|        if ($this->isContractorPlatformAdmin()) {
590|            return true;
591|        }
592|
593|        $tag = $this->resolveContractorPermissionTag();
594|
595|        return $tag instanceof PermissionTag
596|            && $tag->getName() === 'Gestor Administrador';
597|    }
598|
599|    private function isContractorPlatformAdmin(): bool
600|    {
601|        $user = $this->getUser();
602|
603|        return $user instanceof User
604|            && ($user->isSuperAdmin() || in_array('ROLE_MANAGER', $user->getRoles(), true));
605|    }
606|
607|    private function resolveContractorPermissionTag(): ?PermissionTag
608|    {
609|        $user = $this->getUser();
610|        if (!$user instanceof User) {
611|            return null;
612|        }
613|
614|        $company = $user->getCompany();
615|        if (!$company instanceof Company) {
616|            return null;
617|        }
618|
619|        $member = $this->entityManager->getRepository(CompanyMembers::class)->findOneBy([
620|            'user' => $user,
621|            'company' => $company,
622|            'isRemoved' => false,
623|            'enabled' => true,
624|        ]);
625|        if (!$member instanceof CompanyMembers) {
626|            return null;
627|        }
628|
629|        $product = $this->entityManager->getRepository(Product::class)
630|            ->findOneBy(['slug' => self::CONTRACTOR_PRODUCT_SLUG]);
631|        if (!$product instanceof Product) {
632|            return null;
633|        }
634|
635|        return $this->permissionTagByMemberService->getPermissionTag($member, $product);
636|    }
637|
638|    private function resolveCompany(): Company
639|    {
640|        $user = $this->getUser();
641|        if (!$user instanceof User) {
642|            throw $this->createAccessDeniedException();
643|        }
644|
645|        $company = $user->getCompany();
646|        if (!$company instanceof Company) {
647|            throw $this->createAccessDeniedException('Empresa não encontrada.');
648|        }
649|
650|        return $company;
651|    }
652|
653|    private function resolveUser(): User
654|    {
655|        $user = $this->getUser();
656|        if (!$user instanceof User) {
657|            throw $this->createAccessDeniedException();
658|        }
659|
660|        return $user;
661|    }
662|}
663|

{"file_path": "src/Entity/CompanyMembers.php"}

File: src/Entity/CompanyMembers.php (Total lines: 1258)
IS_TRUNCATED: true
LINE_RANGE: 1-500
1|<?php
2|
3|namespace App\Entity;
4|
5|use App\Repository\CompanyMembersRepository;
6|use DateTime;
7|use DateTimeInterface;
8|use Doctrine\Common\Collections\ArrayCollection;
9|use Doctrine\Common\Collections\Collection;
10|use Doctrine\ORM\Mapping as ORM;
11|
12|/**
13| * @ORM\Entity(repositoryClass=CompanyMembersRepository::class)
14| * @ORM\HasLifecycleCallbacks
15| */
16|class CompanyMembers
17|{
18|    public const BOND_CLT = 'clt';
19|    public const BOND_THIRD_PARTY = 'terceiro';
20|
21|    /**
22|     * @ORM\Id
23|     * @ORM\GeneratedValue
24|     * @ORM\Column(type="integer")
25|     */
26|    private $id;
27|
28|    /**
29|     * @ORM\ManyToOne(targetEntity=Company::class, inversedBy="companyMembers")
30|     * @ORM\JoinColumn(nullable=false)
31|     */
32|    private $company;
33|
34|    /**
35|     * @ORM\ManyToOne(targetEntity=User::class)
36|     * @ORM\JoinColumn(nullable=true)
37|     */
38|    private $user;
39|
40|    /**
41|     * @ORM\ManyToOne(targetEntity=UserInvitation::class)
42|     * @ORM\JoinColumn(nullable=true)
43|     */
44|    private $invitation;
45|
46|    /**
47|     * @ORM\Column(type="boolean")
48|     */
49|    private $isRegistered;
50|
51|    /**
52|     * @ORM\Column(type="string", length=255, nullable=true)
53|     */
54|    private $role;
55|
56|    /**
57|     * @ORM\Column(type="string", length=255, nullable=true)
58|     */
59|    private $teams;
60|
61|    /**
62|     * @ORM\Column(type="string", length=255, nullable=true, name="`groups`")
63|     */
64|    private $groups;
65|
66|    /**
67|     * @ORM\Column(type="boolean")
68|     */
69|    private $enabled;
70|
71|    /**
72|     * @ORM\Column(type="boolean", options={"default" : 0})
73|     */
74|    private $isRemoved;
75|
76|    /**
77|     * @ORM\Column(type="datetime")
78|     */
79|    private $created_at;
80|
81|    /**
82|     * @ORM\Column(type="datetime", nullable=true)
83|     */
84|    private $updated_at;
85|
86|    /**
87|     * @ORM\OneToMany(targetEntity=TimesheetDays::class, mappedBy="member")
88|     */
89|    private $timesheetDays;
90|
91|    /**
92|     * @ORM\OneToMany(targetEntity=Activities::class, mappedBy="workingMember")
93|     */
94|    private $activities;
95|
96|    /**
97|     * @ORM\ManyToMany(targetEntity=ActivityCollective::class, )
98|     */
99|    /**
100|     * @ORM\OneToMany(targetEntity=ActivityCollective::class, mappedBy="creator")
101|     */
102|    private $activityCollectives;
103|
104|    /**
105|     * @ORM\ManyToMany(targetEntity=ActivityCollective::class, )
106|     */
107|    /**
108|     * @ORM\ManyToMany(targetEntity=ActivityCollective::class, mappedBy="relatedMembers")
109|     */
110|    private $relatedMemberActivityCollective;
111|
112|    private $activityIndividuals;
113|
114|    private $creatorActivityIndividual;
115|
116|    /**
117|     * @ORM\ManyToOne(targetEntity=Roles::class, inversedBy="members")
118|     */
119|    private $roleMember;
120|
121|    /**
122|     * @ORM\OneToMany(targetEntity=CompanyMemberSettings::class, mappedBy="member", orphanRemoval=true, fetch="EAGER")
123|     */
124|    private $memberSettings;
125|
126|    /**
127|     * @ORM\Column(type="json", nullable=true)
128|     */
129|    private ?array $managerRoles = [];
130|
131|    /**
132|     * @ORM\ManyToOne(targetEntity=CompanyTeamGroup::class, inversedBy="members")
133|     * @ORM\JoinColumn(nullable=true)
134|     */
135|    private ?CompanyTeamGroup $teamGroup = null;
136|
137|    /**
138|     * @ORM\ManyToOne(targetEntity=PermissionTag::class)
139|     * @ORM\JoinColumn(name="global_permission_tag_id", referencedColumnName="id", nullable=true)
140|     */
141|    private $globalPermissionTag;
142|
143|    /**
144|     * @ORM\Column(type="string", length=255)
145|    */
146|    private $permissions;
147|
148|    /**
149|     * @ORM\Column(type="boolean", options={"default": false})
150|     */
151|    private bool $partner = false;
152|
153|    /**
154|     * @ORM\Column(type="boolean", options={"default": false})
155|     */
156|    private bool $assistant = false;
157|
158|    /**
159|     * @ORM\Column(type="string", length=20, options={"default": "main"})
160|     */
161|    private string $treeType = 'main';
162|
163|    /**
164|     * @ORM\Column(type="string", length=20, options={"default": "clt"})
165|     */
166|    private string $employmentBond = self::BOND_CLT;
167|
168|    /**
169|     * @ORM\ManyToOne(targetEntity=CompanyMembers::class)
170|     * @ORM\JoinColumn(name="superior_id", referencedColumnName="id", onDelete="SET NULL")
171|     */
172|    private ?self $superior = null;
173|
174|    /**
175|     * @ORM\Column(type="integer", nullable=true)
176|     */
177|    private ?int $jobLevel = null;
178|    
179|    /**
180|     * @ORM\ManyToOne(targetEntity=CompanyArea::class)
181|     * @ORM\JoinColumn(nullable=true)
182|     */
183|    private $department;
184|
185|    /**
186|     * @var Collection<int, CompanyMemberArea>
187|     *
188|     * @ORM\OneToMany(targetEntity=CompanyMemberArea::class, mappedBy="companyMember", orphanRemoval=true, cascade={"persist"})
189|     */
190|    private $memberAreas;
191|
192|    /**
193|     * 
194|     * @ORM\Column(type="boolean", options={"default": true})
195|     */
196|    private bool $peopleAnalyticsAccessMemberEnabled = true; 
197|    /**
198|     * @ORM\ManyToOne(targetEntity=CostCenter::class)
199|     * @ORM\JoinColumn(nullable=true, onDelete="SET NULL")
200|     */
201|    private ?CostCenter $costCenter = null;
202|
203|    /**
204|     * Salário atual do membro
205|     * Atualizado automaticamente quando ciclo de compensação é aprovado
206|     * ou quando há alteração manual via serviço
207|     * 
208|     * @ORM\Column(type="decimal", precision=15, scale=2, nullable=true)
209|     */
210|    private $currentSalary;
211|
212|    /**
213|     * Data da última alteração de salário
214|     * 
215|     * @ORM\Column(type="datetime", nullable=true)
216|     */
217|    private ?\DateTimeInterface $salaryUpdatedAt = null;
218|
219|    /**
220|     * @ORM\Column(type="boolean", options={"default": false})
221|     */
222|    private bool $hasCrown = false;
223|
224|    /**
225|     * @ORM\Column(type="datetime", nullable=true)
226|     */
227|    private ?\DateTimeInterface $crownExpiresAt = null;
228|
229|    /**
230|     * Data do primeiro acesso ao Employee Advocacy
231|     * Usado para mostrar mensagem de boas-vindas por 24h
232|     * 
233|     * @ORM\Column(type="datetime", nullable=true)
234|     */
235|    private ?\DateTimeInterface $firstEaAccessAt = null;
236|
237|    /**
238|     * Nome da clínica vinculada por grupo de aprofundamento SSMA (chave = id da CompanyTeam).
239|     *
240|     * @var array<string, string>|null
241|     *
242|     * @ORM\Column(name="ssma_aprofundamento_clinicas", type="json", nullable=true)
243|     */
244|    private ?array $ssmaAprofundamentoClinicas = null;
245|
246|    public function __construct()
247|    {
248|        $this->timesheetDays = new ArrayCollection();
249|        $this->activities = new ArrayCollection();
250|        $this->activityCollectives = new ArrayCollection();
251|        $this->relatedMemberActivityCollective = new ArrayCollection();
252|        $this->activityIndividuals = new ArrayCollection();
253|        $this->creatorActivityIndividual = new ArrayCollection();
254|        $this->memberSettings = new ArrayCollection();
255|        $this->memberAreas = new ArrayCollection();
256|    }
257|
258|    public function getId(): ?int
259|    {
260|        return $this->id;
261|    }
262|
263|    public function getFirstName(): string
264|    {
265|        return $this->getUser()?->getProfile()?->getFirstName()
266|            ?? $this->getInvitation()?->getName()
267|            ?? '';
268|    }
269|    
270|    public function getLastName(): string
271|    {
272|        return $this->getUser()?->getProfile()?->getLastname()
273|            ?? $this->getInvitation()?->getSobrenome()
274|            ?? '';
275|    }
276|    
277|
278|    public function getFullName(): ?string
279|    {
280|        if ($this->getUser() && $this->getUser()->getProfile()) {
281|            return $this->user->getProfile()->getFullName();
282|        }
283|        
284|        if ($this->getInvitation()) {
285|            $firstName = $this->getInvitation()->getName() ?: '';
286|            $lastName = $this->getInvitation()->getSobrenome() ?: '';
287|            return trim($firstName . ' ' . $lastName) ?: null;
288|        }
289|        
290|        return null;
291|    }
292|
293|    public function getEmail(): ?string
294|    {
295|        if ($this->getUser()) {
296|            return $this->user->getEmail();
297|        }
298|        
299|        if ($this->getInvitation()) {
300|            return $this->getInvitation()->getEmail();
301|        }
302|        
303|        return null;
304|    }
305|
306|    public function getCompany(): ?Company
307|    {
308|        return $this->company;
309|    }
310|
311|    public function setCompany(?Company $company): self
312|    {
313|        $this->company = $company;
314|
315|        return $this;
316|    }
317|
318|    public function getUser(): ?User
319|    {
320|        return $this->user;
321|    }
322|
323|    public function setUser(?User $user): self
324|    {
325|        $this->user = $user;
326|
327|        return $this;
328|    }
329|
330|    public function getRole(): ?string
331|    {
332|        return $this->role;
333|    }
334|
335|    public function setRole(?string $role): self
336|    {
337|        $this->role = $role;
338|
339|        return $this;
340|    }
341|
342|    public function getTeams(): ?string
343|    {
344|        return $this->teams;
345|    }
346|
347|    public function setTeams(?string $teams): self
348|    {
349|        $this->teams = $teams;
350|
351|        return $this;
352|    }
353|
354|    public function getGroups(): ?string
355|    {
356|        return $this->groups;
357|    }
358|
359|    public function setGroups(?string $groups): self
360|    {
361|        $this->groups = $groups;
362|
363|        return $this;
364|    }
365|
366|    public function getEnabled(): ?bool
367|    {
368|        return $this->enabled;
369|    }
370|
371|    public function setEnabled(bool $enabled): self
372|    {
373|        $this->enabled = $enabled;
374|
375|        return $this;
376|    }
377|
378|    public function getIsRemoved(): ?bool
379|    {
380|        return $this->isRemoved;
381|    }
382|
383|    public function setIsRemoved(bool $isRemoved): self
384|    {
385|        $this->isRemoved = $isRemoved;
386|
387|        return $this;
388|    }
389|
390|    public function getInvitation(): ?UserInvitation
391|    {
392|        return $this->invitation;
393|    }
394|
395|    public function setInvitation(?UserInvitation $invitation)
396|    {
397|        $this->invitation = $invitation;
398|        return $this;
399|    }
400|
401|    public function getIsRegistered(): ?bool
402|    {
403|        return $this->isRegistered;
404|    }
405|
406|    public function setIsRegistered(?bool $isRegistered): self
407|    {
408|        $this->isRegistered = $isRegistered;
409|
410|        return $this;
411|    }
412|
413|    /**
414|     * Gets triggered only on insert
415|
416|     * @ORM\PrePersist
417|     */
418|    public function onPrePersist()
419|    {
420|        $this->created_at = new DateTime("now");
421|    }
422|
423|    /**
424|     * Gets triggered every time on update
425|
426|     * @ORM\PreUpdate
427|     */
428|    public function onPreUpdate()
429|    {
430|        $this->updated_at = new DateTime("now");
431|    }
432|
433|    public function getCreatedAt(): ?DateTimeInterface
434|    {
435|        return $this->created_at;
436|    }
437|
438|    public function setUpdatedAt(?DateTimeInterface $updated_at): self
439|    {
440|        $this->updated_at = $updated_at;
441|        return $this;
442|    }
443|
444|    public function getUpdatedAt(): ?DateTimeInterface
445|    {
446|        return $this->updated_at;
447|    }
448|
449|    /**
450|     * @return Collection<int, Activities>
451|     */
452|    public function getActivities(): Collection
453|    {
454|        return $this->activities;
455|    }
456|
457|    public function addActivity(Activities $activity): self
458|    {
459|        if (!$this->activities->contains($activity)) {
460|            $this->activities[] = $activity;
461|            $activity->setWorkingMember($this);
462|        }
463|
464|        return $this;
465|    }
466|
467|    public function removeActivity(Activities $activity): self
468|    {
469|        if ($this->activities->removeElement($activity)) {
470|            // set the owning side to null (unless already changed)
471|            if ($activity->getWorkingMember() === $this) {
472|                $activity->setWorkingMember(null);
473|            }
474|        }
475|
476|        return $this;
477|    }
478|
479|    /**
480|     * @return Collection<int, ActivityCollective>
481|     */
482|    public function getActivityCollectives(): Collection
483|    {
484|        return $this->activityCollectives;
485|    }
486|
487|    public function addActivityCollective(ActivityCollective $activityCollective): self
488|    {
489|        if (!$this->activityCollectives->contains($activityCollective)) {
490|            $this->activityCollectives[] = $activityCollective;
491|            $activityCollective->setCreator($this);
492|        }
493|
494|        return $this;
495|    }
496|
497|    public function removeActivityCollective(ActivityCollective $activityCollective): self
498|    {
499|        if ($this->activityCollectives->removeElement($activityCollective)) {
500|            if ($activityCollective->getCreator() === $this) {

Note: Results truncated to 500 lines. Please narrow your line range.

{"search_text": "empresas-parceiras"}

File: config/packages/security.yaml
Match lines: 1
137|        - { path: ^/manager/empresas-parceiras, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER, ROLE_SUPER_ADMIN] }

File: config/routes_contractor.yaml
Match lines: 22
2|  path: /manager/empresas-parceiras
7|  path: /manager/empresas-parceiras/requirements
12|  path: /manager/empresas-parceiras/requirements/{id}
19|  path: /manager/empresas-parceiras/requirements/save
24|  path: /manager/empresas-parceiras/requirements/{id}/delete
31|  path: /manager/empresas-parceiras/requirements/{id}/active
38|  path: /manager/empresas-parceiras/requirements/{id}/usage
45|  path: /manager/empresas-parceiras/companies
50|  path: /manager/empresas-parceiras/companies/{id}
57|  path: /manager/empresas-parceiras/companies/{id}/delete
64|  path: /manager/empresas-parceiras/companies/{id}/active
71|  path: /manager/empresas-parceiras/companies/{id}/usage
78|  path: /manager/empresas-parceiras/companies/save
83|  path: /manager/empresas-parceiras/companies/{id}/providers
90|  path: /manager/empresas-parceiras/companies/{id}/providers/link
97|  path: /manager/empresas-parceiras/companies/{id}/requirements
104|  path: /manager/empresas-parceiras/companies/{id}/requirements/save
111|  path: /manager/empresas-parceiras/companies/{id}/requirements/{linkId}/delete
119|  path: /manager/empresas-parceiras/companies/{id}/requirements/document
126|  path: /manager/empresas-parceiras/companies/{id}/requirements/{requirementId}/evidence/upload
134|  path: /manager/empresas-parceiras/companies/{id}/requirements/{requirementId}/evidence/{evidenceId}/download
143|  path: /manager/empresas-parceiras/companies/{id}/requirements/{requirementId}/evidence/delete

File: docs/README.md
Match lines: 1
17|- Empresas Parceiras: `docs/empresas-parceiras/README.md`.

File: docs/database-changes/2026-06-13-empresas-parceiras-contractor.md
Match lines: 5
7|**Documentacao completa do dominio:** [`../empresas-parceiras/`](../empresas-parceiras/README.md)
21|| Tabelas, indices, fonte de verdade | [`empresas-parceiras/engineering/data-model.md`](../empresas-parceiras/engineering/data-model.md) |
22|| Ordem, validacao SQL, rollback | [`empresas-parceiras/engineering/migrations.md`](../empresas-parceiras/engineering/migrations.md) |
23|| Decisoes de schema | [`empresas-parceiras/decisions/`](../empresas-parceiras/decisions/) |
65|Baixo a medio. Tabelas novas; `employment_bond` com default seguro. Ver matriz em `empresas-parceiras/engineering/migrations.md`.

File: docs/database-changes/2026-08-14-contractor-requirement-instances.md
Match lines: 5
3|Documentacao de dominio: `docs/empresas-parceiras/`.
113|Time de produto / feature empresas-parceiras.
117|- `docs/empresas-parceiras/README.md`
118|- `docs/empresas-parceiras/engineering/data-model.md`
119|- `docs/empresas-parceiras/engineering/migrations.md`

File: docs/database-changes/2026-08-14-contractor-requirement-optional-responsible.md
Match lines: 4
3|Documentacao de dominio: `docs/empresas-parceiras/`.
83|Time de produto / feature empresas-parceiras.
87|- `docs/empresas-parceiras/engineering/data-model.md`
88|- `docs/empresas-parceiras/engineering/migrations.md`

File: docs/database-changes/README.md
Match lines: 1
82|- `2026-06-13-empresas-parceiras-contractor.md`: modulo Empresas Parceiras — indice de migrations; detalhes em `docs/empresas-parceiras/`.

File: docs/empresas-parceiras/README.md
Match lines: 2
10|docs/empresas-parceiras/
57|| Mudanca de banco (indice global) | `../database-changes/2026-06-13-empresas-parceiras-contractor.md` |

File: docs/empresas-parceiras/engineering/migrations.md
Match lines: 2
31|3. Smoke test em `/manager/empresas-parceiras`
62|Dev only — drop manual documentado em `../database-changes/2026-06-13-empresas-parceiras-contractor.md`.

File: docs/empresas-parceiras/engineering/routes-and-services.md
Match lines: 2
5|`config/routes_contractor.yaml` — prefixo `/manager/empresas-parceiras`.
15|| GET | `/manager/empresas-parceiras` | `index` |

File: docs/empresas-parceiras/features/empresas-prestadoras.md
Match lines: 7
42|| GET | `/manager/empresas-parceiras/companies` | Lista com stats |
43|| GET | `/manager/empresas-parceiras/companies/{id}` | Detalhe |
44|| POST | `/manager/empresas-parceiras/companies/save` | Criar/editar |
45|| POST | `/manager/empresas-parceiras/companies/{id}/delete` | Excluir |
46|| GET | `/manager/empresas-parceiras/companies/{id}/providers` | Prestadores |
47|| POST | `/manager/empresas-parceiras/companies/{id}/providers/link` | Vincular prestadores |
48|| GET/POST | `/manager/empresas-parceiras/companies/{id}/requirements` | Requisitos da empresa |

File: docs/empresas-parceiras/features/overview.md
Match lines: 1
9|Modulo com duas abas principais em `/manager/empresas-parceiras`:

File: docs/empresas-parceiras/features/requisitos-documentais.md
Match lines: 6
39|| GET | `/manager/empresas-parceiras/requirements` | Lista |
40|| GET | `/manager/empresas-parceiras/requirements/{id}` | Detalhe |
41|| POST | `/manager/empresas-parceiras/requirements/save` | Criar/editar |
42|| POST | `/manager/empresas-parceiras/requirements/{id}/delete` | Excluir |
43|| POST | `/manager/empresas-parceiras/requirements/{id}/active` | Ativar/inativar |
44|| GET | `/manager/empresas-parceiras/requirements/{id}/usage` | Uso em empresas |

File: docs/empresas-parceiras/system/module-scope.md
Match lines: 1
38|- Rota: `/manager/empresas-parceiras`

File: docs/empresas-parceiras/templates/DOCUMENT_TEMPLATE.md
Match lines: 1
29|- Links para outros docs do dominio `docs/empresas-parceiras/`.

File: docs/engineering/pr/homolog/PR_commits_homolog.txt
Match lines: 5
2|20a022d9e7 Merged in hotfix/empresas-parceiras-mauricio (pull request #195)
3|46fb4a1c36 Merged new_staging2 into hotfix/empresas-parceiras-mauricio
13|3e025ceacd Merge remote-tracking branch 'origin/new_staging2' into hotfix/empresas-parceiras-mauricio
26|62f157cdad Merged in hotfix/ajustes-empresas-parceiras (pull request #193)
27|f140aef9b9 Merged new_staging2 into hotfix/ajustes-empresas-parceiras

File: docs/engineering/pr/homolog/PR_merges_homolog.txt
Match lines: 5
2|20a022d9e7 Merged in hotfix/empresas-parceiras-mauricio (pull request #195)
3|46fb4a1c36 Merged new_staging2 into hotfix/empresas-parceiras-mauricio
9|3e025ceacd Merge remote-tracking branch 'origin/new_staging2' into hotfix/empresas-parceiras-mauricio
13|62f157cdad Merged in hotfix/ajustes-empresas-parceiras (pull request #193)
14|f140aef9b9 Merged new_staging2 into hotfix/ajustes-empresas-parceiras

File: docs/features/README.md
Match lines: 2
14|| Empresas Parceiras | [../empresas-parceiras/README.md](../empresas-parceiras/README.md) |
19|- [../database-changes/2026-06-13-empresas-parceiras-contractor.md](../database-changes/2026-06-13-empresas-parceiras-contractor.md)

File: migrations/Version20260624160000.php
Match lines: 1
15| * - Alimenta a aba "Requisitos documentais" em /manager/empresas-parceiras.

File: src/Service/Contractor/ContractorProviderCompanyService.php
Match lines: 1
1116|                    '/manager/empresas-parceiras/companies/%d/requirements/%d/evidence/%s/download',

File: src/Service/Governance/Grc/GovernanceCaseGrcEnrichmentService.php
Match lines: 2
1798|                $origin['open_url'] = sprintf('/manager/empresas-parceiras?company_id=%d', (int) $providerCompany->getId());
2036|                return sprintf('/manager/empresas-parceiras?company_id=%d', (int) $providerCompany->getId());

{"search_text": "class PermissionTag"}

File: java/src/main/java/com/metahuman/dto/company/PermissionTagDTO.java
Match lines: 1
9|public class PermissionTagDTO {

File: java/src/main/java/com/metahuman/dto/organograma/PermissionTagDTO.java
Match lines: 1
9|public class PermissionTagDTO {

File: src/Entity/PermissionTag.php
Match lines: 1
13|class PermissionTag

File: src/Entity/PermissionTagByMember.php
Match lines: 1
12|class PermissionTagByMember

File: src/Entity/PermissionTagSuggestion.php
Match lines: 1
16|class PermissionTagSuggestion

File: src/Repository/PermissionTagByMemberRepository.php
Match lines: 1
17|class PermissionTagByMemberRepository extends ServiceEntityRepository

File: src/Repository/PermissionTagRepository.php
Match lines: 1
19|class PermissionTagRepository extends ServiceEntityRepository

File: src/Repository/PermissionTagSuggestionRepository.php
Match lines: 1
12|class PermissionTagSuggestionRepository extends ServiceEntityRepository

File: src/Service/PermissionTagByMemberService.php
Match lines: 1
19|class PermissionTagByMemberService extends AbstractController

{"search_text": "ssma-contractor"}

File: src/Controller/Contractor/EmpresasParceirasController.php
Match lines: 1
26|    private const CONTRACTOR_PRODUCT_SLUG = 'ssma-contractor';

File: src/Service/HubsDataService.php
Match lines: 1
327|                                ['id' => 'empresas_parceiras', 'label' => 'Empresas Parceiras', 'icon' => 'fa-regular fa-building', 'pngIcon' => 'equipes.png', 'route' => 'contractor_index', 'params' => [], 'product' => 'ssma-contractor', 'isMainProduct' => true, 'defaultActive' => true],

File: src/Service/PermissionTabService.php
Match lines: 1
25|        'ssma-contractor' => 'SSMA - Empresas Parceiras',

File: templates/contractor/partials/_tab_permissions_embed.html.twig
Match lines: 1
2|    ssmaPermissionProduct: 'ssma-contractor',

File: templates/layoutAdmin.html.twig
Match lines: 2
1565|                canAccessProduct('ssma-contractor') or
1610|                    {% if canAccessProduct('ssma-contractor') or is_granted('ROLE_MANAGER') or canView('professional_areas') or canAccessProduct('salary-planning') or canAccessProduct('membros-e-equipes') %}

File: templates/layoutUser.html.twig
Match lines: 1
1177|                                {% set canViewContractorProduct = member_has_product_view_permission('ssma-contractor') or is_granted('ROLE_MANAGER') or canViewSalaryPlanningProduct or canViewProfessionalAreasProduct or canShowMembersTeamsHub or canViewOrganizationalChartProduct %}

{"file_path": "config/routes_contractor.yaml"}

File: config/routes_contractor.yaml (Total lines: 149)
IS_TRUNCATED: false
LINE_RANGE: 1-149
1|contractor_index:
2|  path: /manager/empresas-parceiras
3|  controller: App\Controller\Contractor\EmpresasParceirasController::index
4|  methods: [GET]
5|
6|contractor_requirements_list:
7|  path: /manager/empresas-parceiras/requirements
8|  controller: App\Controller\Contractor\EmpresasParceirasController::requirementsList
9|  methods: [GET]
10|
11|contractor_requirement_detail:
12|  path: /manager/empresas-parceiras/requirements/{id}
13|  controller: App\Controller\Contractor\EmpresasParceirasController::requirementDetail
14|  methods: [GET]
15|  requirements:
16|    id: '\d+'
17|
18|contractor_requirement_save:
19|  path: /manager/empresas-parceiras/requirements/save
20|  controller: App\Controller\Contractor\EmpresasParceirasController::requirementSave
21|  methods: [POST]
22|
23|contractor_requirement_delete:
24|  path: /manager/empresas-parceiras/requirements/{id}/delete
25|  controller: App\Controller\Contractor\EmpresasParceirasController::requirementDelete
26|  methods: [POST]
27|  requirements:
28|    id: '\d+'
29|
30|contractor_requirement_set_active:
31|  path: /manager/empresas-parceiras/requirements/{id}/active
32|  controller: App\Controller\Contractor\EmpresasParceirasController::requirementSetActive
33|  methods: [POST]
34|  requirements:
35|    id: '\d+'
36|
37|contractor_requirement_usage:
38|  path: /manager/empresas-parceiras/requirements/{id}/usage
39|  controller: App\Controller\Contractor\EmpresasParceirasController::requirementUsage
40|  methods: [GET]
41|  requirements:
42|    id: '\d+'
43|
44|contractor_companies_list:
45|  path: /manager/empresas-parceiras/companies
46|  controller: App\Controller\Contractor\EmpresasParceirasController::companiesList
47|  methods: [GET]
48|
49|contractor_company_detail:
50|  path: /manager/empresas-parceiras/companies/{id}
51|  controller: App\Controller\Contractor\EmpresasParceirasController::companyDetail
52|  methods: [GET]
53|  requirements:
54|    id: '\d+'
55|
56|contractor_company_delete:
57|  path: /manager/empresas-parceiras/companies/{id}/delete
58|  controller: App\Controller\Contractor\EmpresasParceirasController::companyDelete
59|  methods: [POST]
60|  requirements:
61|    id: '\d+'
62|
63|contractor_company_set_active:
64|  path: /manager/empresas-parceiras/companies/{id}/active
65|  controller: App\Controller\Contractor\EmpresasParceirasController::companySetActive
66|  methods: [POST]
67|  requirements:
68|    id: '\d+'
69|
70|contractor_company_usage:
71|  path: /manager/empresas-parceiras/companies/{id}/usage
72|  controller: App\Controller\Contractor\EmpresasParceirasController::companyUsage
73|  methods: [GET]
74|  requirements:
75|    id: '\d+'
76|
77|contractor_company_save:
78|  path: /manager/empresas-parceiras/companies/save
79|  controller: App\Controller\Contractor\EmpresasParceirasController::companySave
80|  methods: [POST]
81|
82|contractor_company_providers:
83|  path: /manager/empresas-parceiras/companies/{id}/providers
84|  controller: App\Controller\Contractor\EmpresasParceirasController::companyProviders
85|  methods: [GET]
86|  requirements:
87|    id: '\d+'
88|
89|contractor_company_providers_link:
90|  path: /manager/empresas-parceiras/companies/{id}/providers/link
91|  controller: App\Controller\Contractor\EmpresasParceirasController::companyProvidersLink
92|  methods: [POST]
93|  requirements:
94|    id: '\d+'
95|
96|contractor_company_requirements:
97|  path: /manager/empresas-parceiras/companies/{id}/requirements
98|  controller: App\Controller\Contractor\EmpresasParceirasController::companyRequirements
99|  methods: [GET]
100|  requirements:
101|    id: '\d+'
102|
103|contractor_company_requirements_save:
104|  path: /manager/empresas-parceiras/companies/{id}/requirements/save
105|  controller: App\Controller\Contractor\EmpresasParceirasController::companyRequirementsSave
106|  methods: [POST]
107|  requirements:
108|    id: '\d+'
109|
110|contractor_company_requirement_delete:
111|  path: /manager/empresas-parceiras/companies/{id}/requirements/{linkId}/delete
112|  controller: App\Controller\Contractor\EmpresasParceirasController::companyRequirementDelete
113|  methods: [POST]
114|  requirements:
115|    id: '\d+'
116|    linkId: '\d+'
117|
118|contractor_company_requirement_document_save:
119|  path: /manager/empresas-parceiras/companies/{id}/requirements/document
120|  controller: App\Controller\Contractor\EmpresasParceirasController::companyRequirementDocumentSave
121|  methods: [POST]
122|  requirements:
123|    id: '\d+'
124|
125|contractor_company_requirement_evidence_upload:
126|  path: /manager/empresas-parceiras/companies/{id}/requirements/{requirementId}/evidence/upload
127|  controller: App\Controller\Contractor\EmpresasParceirasController::companyRequirementEvidenceUpload
128|  methods: [POST]
129|  requirements:
130|    id: '\d+'
131|    requirementId: '\d+'
132|
133|contractor_company_requirement_evidence_download:
134|  path: /manager/empresas-parceiras/companies/{id}/requirements/{requirementId}/evidence/{evidenceId}/download
135|  controller: App\Controller\Contractor\EmpresasParceirasController::companyRequirementEvidenceDownload
136|  methods: [GET]
137|  requirements:
138|    id: '\d+'
139|    requirementId: '\d+'
140|    evidenceId: '[a-f0-9]+'
141|
142|contractor_company_requirement_evidence_delete:
143|  path: /manager/empresas-parceiras/companies/{id}/requirements/{requirementId}/evidence/delete
144|  controller: App\Controller\Contractor\EmpresasParceirasController::companyRequirementEvidenceDelete
145|  methods: [POST]
146|  requirements:
147|    id: '\d+'
148|    requirementId: '\d+'
149|

{"file_path": "src/Entity/PermissionTag.php"}

File: src/Entity/PermissionTag.php (Total lines: 193)
IS_TRUNCATED: false
LINE_RANGE: 1-193
1|<?php
2|
3|namespace App\Entity;
4|
5|use App\Repository\PermissionTagRepository;
6|use Doctrine\Common\Collections\ArrayCollection;
7|use Doctrine\Common\Collections\Collection;
8|use Doctrine\ORM\Mapping as ORM;
9|
10|/**
11| * @ORM\Entity(repositoryClass=PermissionTagRepository::class)
12| */
13|class PermissionTag
14|{
15|    /**
16|     * @ORM\Id
17|     * @ORM\GeneratedValue
18|     * @ORM\Column(type="integer")
19|     */
20|    private $id;
21|
22|    /**
23|     * @ORM\Column(type="string", length=255)
24|     */
25|    private $name;
26|
27|    /**
28|     * @ORM\Column(type="string", length=255, nullable=true)
29|     */
30|    private $description;
31|
32|    /**
33|     * @ORM\Column(name="team_limitation", type="boolean", nullable=false)
34|     */
35|    private $teamLimitation;
36|
37|    /**
38|     * @ORM\Column(name="color_id", type="integer", nullable=false)
39|     */
40|    private $colorID;
41|
42|    /**
43|     * @ORM\Column(type="string", length=7, nullable=true)
44|     */
45|    private $color;
46|
47|    /**
48|     * @ORM\Column(name="letter_color", type="string", length=7, nullable=true)
49|     */
50|    private $letterColor;
51|
52|    /**
53|     * @ORM\Column(name="can_view", type="boolean", nullable=false)
54|     */
55|    private $canView;
56|
57|    /**
58|     * @ORM\Column(name="can_create", type="boolean", nullable=false)
59|     */
60|    private $canCreate;
61|
62|    /**
63|     * @ORM\Column(name="can_edit", type="boolean", nullable=false)
64|     */
65|    private $canEdit;
66|
67|    /**
68|     * @ORM\Column(name="can_delete", type="boolean", nullable=false)
69|     */
70|    private $canDelete;
71|
72|    public function getId(): ?int
73|    {
74|        return $this->id;
75|    }
76|
77|    public function getName(): ?string
78|    {
79|        return $this->name;
80|    }
81|
82|    public function setName(string $name): self
83|    {
84|        $this->name = $name;
85|
86|        return $this;
87|    }
88|
89|    public function getDescription(): ?string
90|    {
91|        return $this->description;
92|    }
93|
94|    public function setDescription(?string $description): self
95|    {
96|        $this->description = $description;
97|
98|        return $this;
99|    }
100|
101|    public function getColorID(): ?int
102|    {
103|        return $this->colorID;
104|    }
105|
106|    public function setColorID(int $colorID): self
107|    {
108|        $this->colorID = $colorID;
109|
110|        return $this;
111|    }
112|
113|    public function getTeamLimitation(): ?bool
114|    {
115|        return $this->teamLimitation;
116|    }
117|
118|    public function setTeamLimitation(bool $teamLimitation): self
119|    {
120|        $this->teamLimitation = $teamLimitation;
121|
122|        return $this;
123|    }
124|
125|    public function setColor(string $color): void
126|    {
127|        $this->color = $color;
128|    }
129|
130|    public function getColor(): string
131|    {
132|        return $this->color ?? '';
133|    }
134|
135|    public function setLetterColor(string $letterColor): void
136|    {
137|        $this->letterColor = $letterColor;
138|    }
139|
140|    public function getLetterColor(): string
141|    {
142|        return $this->letterColor ?? '';
143|    }
144|
145|    public function getCanView(): ?bool
146|    {
147|        return $this->canView;
148|    }
149|
150|    public function setCanView(bool $canView): self
151|    {
152|        $this->canView = $canView;
153|
154|        return $this;
155|    }
156|
157|    public function getCanCreate(): ?bool
158|    {
159|        return $this->canCreate;
160|    }
161|
162|    public function setCanCreate(bool $canCreate): self
163|    {
164|        $this->canCreate = $canCreate;
165|
166|        return $this;
167|    }
168|
169|    public function getCanEdit(): ?bool
170|    {
171|        return $this->canEdit;
172|    }
173|
174|    public function setCanEdit(bool $canEdit): self
175|    {
176|        $this->canEdit = $canEdit;
177|
178|        return $this;
179|    }
180|
181|    public function getCanDelete(): ?bool
182|    {
183|        return $this->canDelete;
184|    }
185|
186|    public function setCanDelete(bool $canDelete): self
187|    {
188|        $this->canDelete = $canDelete;
189|
190|        return $this;
191|    }
192|}
193|

{"file_path": "src/Service/PermissionTagByMemberService.php"}

File: src/Service/PermissionTagByMemberService.php (Total lines: 548)
IS_TRUNCATED: true
LINE_RANGE: 1-500
1|<?php
2|
3|namespace App\Service;
4|
5|use Doctrine\ORM\EntityManagerInterface;
6|use Doctrine\ORM\EntityNotFoundException;
7|
8|use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
9|
10|use App\Entity\PermissionTagByMember;
11|use App\Entity\Company;
12|use App\Entity\CompanyMembers;
13|use App\Entity\Product;
14|use App\Entity\PermissionTag;
15|use App\Entity\User;
16|use App\Entity\CompanyTeam;
17|use App\Repository\CompanyMembersRepository;
18|
19|class PermissionTagByMemberService extends AbstractController
20|{
21|    private $entityManager;
22|    private string $ssmaParentProductSlug;
23|
24|    public function __construct(EntityManagerInterface $entityManager, string $ssmaParentProductSlug = 'saude-e-seguranca')
25|    {
26|        $this->entityManager = $entityManager;
27|        $this->ssmaParentProductSlug = $ssmaParentProductSlug;
28|    }
29|
30|    /**
31|     * Cria um novo PermissionTagByMember e persiste no banco de dados.
32|     *
33|     * @param int $companyMemberID
34|     * @param int $productID
35|     * @param int $tagID
36|     * @return PermissionTagByMember Retorna o objeto recém-criado.
37|     */
38|    public function createPermissionTagByMember(int $companyMemberID, int $productID, int $tagID): PermissionTagByMember
39|    {
40|        // Criação do novo objeto PermissionTagByMember
41|        $permissionTagByMember = new PermissionTagByMember();
42|
43|        // Preenchendo as propriedades do objeto
44|        $permissionTagByMember->setCompanyMemberID($companyMemberID);
45|        $permissionTagByMember->setProductID($productID);
46|        $permissionTagByMember->setTagID($tagID);
47|
48|        // Persistir o objeto no banco de dados
49|        $this->entityManager->persist($permissionTagByMember);
50|        $this->entityManager->flush(); // Salva a entidade no banco
51|
52|        // Retornando o objeto recém-criado
53|        return $permissionTagByMember;
54|    }
55|
56|    /**
57|     * Exclui um PermissionTagByMember pelo ID.
58|     *
59|     * @param int $permissionTagID ID do PermissionTagByMember a ser excluído.
60|     * @return bool Retorna true se a exclusão for bem-sucedida, false caso contrário.
61|     */
62|    public function deletePermissionTagByMember(int $permissionTagID): bool
63|    {
64|        // Procurar pelo PermissionTagByMember usando o ID
65|        $permissionTag = $this->entityManager->getRepository(PermissionTagByMember::class)->find($permissionTagID);
66|
67|        // Verifica se o objeto foi encontrado
68|        if (!$permissionTag) {
69|            // Lança exceção caso o PermissionTag não seja encontrado
70|            throw new EntityNotFoundException('Permission tag with ID ' . $permissionTagID . ' not found.');
71|        }
72|
73|        // Iniciar uma transação para garantir que a exclusão seja atômica
74|        $this->entityManager->beginTransaction();
75|
76|        try {
77|            // Remove o PermissionTagByMember
78|            $this->entityManager->remove($permissionTag);
79|            $this->entityManager->flush(); // Aplica a remoção no banco de dados
80|
81|            // Commit da transação
82|            $this->entityManager->commit();
83|
84|            return true;
85|        } catch (\Exception $e) {
86|            // Em caso de erro, desfaz as alterações e lança o erro
87|            $this->entityManager->rollback();
88|            throw $e;  // Re-lança a exceção para ser tratada em outro lugar
89|        }
90|    }
91|
92|    /**
93|     * Retorna o tagID associado a um membro da empresa para um produto específico.
94|     *
95|     * @param int $companyMemberID ID do membro da empresa.
96|     * @param int $productID ID do produto.
97|     * @return int|null Retorna o tagID associado ao membro e ao produto, ou null se não houver relação.
98|     */
99|    public function getTagIDByMemberAndProduct(int $companyMemberID, int $productID): ?int
100|    {
101|        // Consultar a tabela PermissionTagByMember para encontrar a relação
102|        $permissionTag = $this->entityManager->getRepository(PermissionTagByMember::class)
103|            ->findOneBy([
104|                'companyMemberID' => $companyMemberID,
105|                'productID' => $productID
106|            ]);
107|
108|        // Se não encontrar nenhuma relação, retorna null
109|        if (!$permissionTag) {
110|            return null;
111|        }
112|
113|        return $permissionTag->getTagID();
114|    }
115|
116|    public function getProductPermission(User $user, string $productSlug): ?PermissionTag
117|    {
118|        // Primeiro, buscar o produto pela slug
119|        $product = $this->entityManager->getRepository(Product::class)
120|            ->findOneBy(['slug' => $productSlug]);
121|
122|        if (!$product) {
123|            if (!str_starts_with($productSlug, 'ssma-')) {
124|                return null;
125|            }
126|
127|            $product = $this->entityManager->getRepository(Product::class)
128|                ->findOneBy(['slug' => $this->ssmaParentProductSlug]);
129|
130|            if (!$product) {
131|                return null;
132|            }
133|        }
134|
135|        // Buscar o CompanyMember do usuário
136|        $companyMember = $this->entityManager->getRepository(CompanyMembers::class)
137|            ->findOneBy(['user' => $user, 'company' => $user->getCompany()]);
138|
139|        if (!$companyMember) {
140|            return null;
141|        }
142|
143|        // Buscar a permissão através da tabela PermissionTagByMember
144|        $permissionTagByMember = $this->entityManager->getRepository(PermissionTagByMember::class)
145|            ->findOneBy([
146|                'companyMemberID' => $companyMember->getId(),
147|                'productID' => $product->getId()
148|            ]);
149|
150|        if (!$permissionTagByMember) {
151|            if (str_starts_with($productSlug, 'ssma-')) {
152|                $parentPermission = $this->getProductPermission($user, $this->ssmaParentProductSlug);
153|                if ($parentPermission instanceof PermissionTag) {
154|                    return $parentPermission;
155|                }
156|            }
157|
158|            // Se não tem permissão customizada, usar a permissão global
159|            $globalPermissionTagId = $companyMember->getGlobalPermissionTag();
160|            if ($globalPermissionTagId) {
161|                return $this->entityManager->getRepository(PermissionTag::class)->find($globalPermissionTagId);
162|            }
163|            
164|            return null;
165|        }
166|
167|        // Buscar a tag de permissão
168|        return $this->entityManager->getRepository(PermissionTag::class)
169|            ->find($permissionTagByMember->getTagID());
170|    }
171|
172|
173|    public function getPermissionTag(CompanyMembers $companyMember, Product $product): ?PermissionTag
174|    {
175|        $ptbmRepo = $this->entityManager->getRepository(PermissionTagByMember::class);
176|        $tagRepo  = $this->entityManager->getRepository(PermissionTag::class);
177|
178|        // getGlobalPermissionTag() devolve ?PermissionTag (objecto Doctrine), extraímos o ID aqui
179|        $globalTag   = $companyMember->getGlobalPermissionTag();
180|        $globalTagId = $globalTag instanceof PermissionTag ? (int) $globalTag->getId() : null;
181|
182|        // 1. Registo explícito no produto específico (atribuído via "Editar Tags" pelo gestor)
183|        $ptbm = $ptbmRepo->findOneBy([
184|            'companyMemberID' => $companyMember->getId(),
185|            'productID'       => $product->getId(),
186|        ]);
187|
188|        if ($ptbm) {
189|            $storedTag = $tagRepo->find($ptbm->getTagID());
190|
191|            if ($storedTag instanceof PermissionTag) {
192|                if (!str_starts_with((string) $product->getSlug(), 'ssma-')) {
193|                    return $storedTag;
194|                }
195|
196|                // Tag de gestão no PTBM do produto prevalece sobre global Membro/Inspetor.
197|                // Regressão Aura: Gestor Administrador na matriz SSMA + global Membro + stored==parent
198|                // era tratado como auto-propagação e descartava a tag de gestão.
199|                if (in_array((string) $storedTag->getName(), [
200|                    'Gestor Administrador',
201|                    'Gestor de Equipe',
202|                    'Supervisor de Equipe',
203|                    'Supervisor',
204|                ], true)) {
205|                    return $storedTag;
206|                }
207|
208|                // Produtos SSMA: detectar se o registo foi auto-criado (cópia da tag do produto-pai)
209|                // ou se foi explicitamente atribuído pelo gestor.
210|                // Se a tag do produto e a tag do produto-pai (saude-e-seguranca) são iguais
211|                // e ambas diferem da tag global actual, foi auto-propagação → usa tag global.
212|                $parentTagId = $this->getTagIDByMemberAndProduct(
213|                    $companyMember->getId(),
214|                    $this->getSsmaParentProductId()
215|                );
216|
217|                $storedId           = (int) $storedTag->getId();
218|                $storedMatchesParent = $parentTagId !== null && $storedId === (int) $parentTagId;
219|                $parentMatchesGlobal = $parentTagId !== null && $globalTagId !== null && (int) $parentTagId === $globalTagId;
220|
221|                if ($globalTagId !== null && $storedId !== $globalTagId) {
222|                    // Stored difere da global — verificar se é assignment explícito ou propagação automática.
223|                    //
224|                    // É explícito (respeitar) quando:
225|                    //   stored != parent  →  admin atribuiu este produto de forma diferente do pai
226|                    // É automático (preferir global) quando:
227|                    //   stored == parent  →  propagação do pai, que por sua vez diverge da global
228|                    //   OU não há parent PTBM (stored foi auto-criado a partir de global antigo)
229|                    $isExplicitAssignment = $parentTagId !== null && $storedId !== (int) $parentTagId;
230|
231|                    if (!$isExplicitAssignment) {
232|                        // Auto-propagado ou sem pai → usa tag global actual
233|                        $resolvedGlobal = $tagRepo->find($globalTagId);
234|                        if ($resolvedGlobal instanceof PermissionTag) {
235|                            return $resolvedGlobal;
236|                        }
237|                    }
238|                    // Se é explícito: respeita o stored ($isExplicitAssignment = true)
239|                }
240|
241|                return $storedTag;
242|            }
243|        }
244|
245|        // 2. Sem registo explícito: herdar dinamicamente do produto-pai (ssma-* → saude-e-seguranca)
246|        if (str_starts_with((string) $product->getSlug(), 'ssma-')) {
247|            $parentTag = $this->getSsmaParentPermissionTag($companyMember, $product);
248|            if ($parentTag instanceof PermissionTag) {
249|                return $parentTag;
250|            }
251|        }
252|
253|        // 3. Fallback: tag global do membro
254|        if ($globalTagId !== null) {
255|            $resolvedGlobal = $tagRepo->find($globalTagId);
256|            if ($resolvedGlobal instanceof PermissionTag) {
257|                return $resolvedGlobal;
258|            }
259|        }
260|
261|        // 4. Último recurso: tag "Membro"
262|        return $tagRepo->findOneBy(['name' => 'Membro']);
263|    }
264|
265|    /**
266|     * ID do produto-pai SSMA (saude-e-seguranca) em cache local por request.
267|     */
268|    private ?int $ssmaParentProductId = null;
269|
270|    private function getSsmaParentProductId(): int
271|    {
272|        if ($this->ssmaParentProductId === null) {
273|            $p = $this->entityManager->getRepository(Product::class)->findOneBy(['slug' => 'saude-e-seguranca']);
274|            $this->ssmaParentProductId = $p ? (int) $p->getId() : 0;
275|        }
276|
277|        return $this->ssmaParentProductId;
278|    }
279|
280|    private function getSsmaParentPermissionTag(CompanyMembers $companyMember, Product $product): ?PermissionTag
281|    {
282|        $slug = (string) $product->getSlug();
283|        if (!str_starts_with($slug, 'ssma-')) {
284|            return null;
285|        }
286|
287|        $parentProduct = $this->entityManager->getRepository(Product::class)
288|            ->findOneBy(['slug' => $this->ssmaParentProductSlug]);
289|        if (!$parentProduct instanceof Product || $parentProduct->getId() === $product->getId()) {
290|            return null;
291|        }
292|
293|        $parentPermissionTagId = $this->getTagIDByMemberAndProduct($companyMember->getId(), $parentProduct->getId());
294|        if (!$parentPermissionTagId) {
295|            return null;
296|        }
297|
298|        return $this->entityManager->getRepository(PermissionTag::class)->find($parentPermissionTagId);
299|    }
300|
301|    public function getGlobalPermissionTag(CompanyMembers $companyMember): ?PermissionTag
302|    {
303|        $repo  = $this->entityManager->getRepository(PermissionTag::class);
304|        $tagId = $companyMember->getGlobalPermissionTag();
305|
306|        $tag = $tagId
307|            ? $repo->find($tagId)
308|            : null;
309|
310|        if (! $tag) {
311|            $tag = $repo->findOneBy(['name' => 'Membro']);
312|
313|            if ($tag) {
314|                $companyMember->setGlobalPermissionTag($tag);
315|                $this->entityManager->flush();
316|            }
317|        }
318|
319|        return $tag;
320|    }
321|    
322|    public function getPermissionsByMember(CompanyMembers $companyMember): array
323|    {
324|        $customPermissionTags = $this->entityManager->getRepository(PermissionTagByMember::class)->findBy(['companyMemberID' => $companyMember->getId()]);
325|
326|        return $customPermissionTags;
327|    }
328|
329|    public function getCompanyMember(User $user, Company $company): ?CompanyMembers
330|    {
331|        return $this->entityManager->getRepository(CompanyMembers::class)->findOneBy([
332|            'company' => $company,
333|            'user' => $user,
334|            'isRemoved' => 0,
335|        ]);
336|    }
337|
338|    public function getPermissionTagGestor(): ?PermissionTag
339|    {
340|        $permissionTag = $this->entityManager->getRepository(PermissionTag::class)->findOneBy(['name' => 'Gestor Administrador']);
341|        return $permissionTag;
342|    }
343|
344|    public function getUserTeamMemberIds(CompanyMembers $companyMember, Company $company): array
345|    {
346|        // Obtém os times do usuário como string (Exemplo: "82,86")
347|        $teamsString = trim((string) ($companyMember->getTeams() ?? ''));
348|
349|        // Sem times definidos: apenas o próprio utilizador compõe o escopo.
350|        if ($teamsString === '') {
351|            $uid = $companyMember->getUser()?->getId();
352|
353|            return $uid !== null ? [(int) $uid] : [];
354|        }
355|
356|        // Converte a string em IDs de equipa e ignora segmentos vazios (evita LIKE inválido ",%").
357|        $teamsArray = array_values(array_filter(array_map('trim', explode(',', $teamsString)), static fn (string $t): bool => $t !== ''));
358|        if ($teamsArray === []) {
359|            $uid = $companyMember->getUser()?->getId();
360|
361|            return $uid !== null ? [(int) $uid] : [];
362|        }
363|
364|        // Remove o dd() e melhorar a query
365|        $query = $this->entityManager->createQueryBuilder()
366|            ->select('cm')
367|            ->from(CompanyMembers::class, 'cm')
368|            ->where('cm.company = :company')
369|            ->andWhere('cm.isRemoved = 0') // Apenas membros ativos
370|            ->setParameter('company', $company);
371|
372|        // 🔧 MELHOR LÓGICA: Para cada time, busca quem tem esse time
373|        $orConditions = [];
374|        foreach ($teamsArray as $index => $teamId) {
375|            $paramName = ':team_' . $index;
376|            
377|            // Busca exata por ID do time (no início, meio ou fim da string)
378|            $orConditions[] = $query->expr()->orX(
379|                $query->expr()->like('cm.teams', $paramName . '_start'), // Começa com o team
380|                $query->expr()->like('cm.teams', $paramName . '_middle'), // Tem o team no meio
381|                $query->expr()->eq('cm.teams', $paramName . '_exact') // É exatamente o team
382|            );
383|            
384|            // Define os parâmetros para as diferentes posições
385|            $query->setParameter($paramName . '_start', $teamId . ',%');     // "82,%"
386|            $query->setParameter($paramName . '_middle', '%,' . $teamId . ',%'); // "%,82,%"
387|            $query->setParameter($paramName . '_exact', $teamId);           // "82"
388|            
389|            // Também para o final da string
390|            $orConditions[] = $query->expr()->like('cm.teams', $paramName . '_end');
391|            $query->setParameter($paramName . '_end', '%,' . $teamId);      // "%,82"
392|        }
393|
394|        if (!empty($orConditions)) {
395|            $query->andWhere($query->expr()->orX(...$orConditions));
396|        }
397|
398|        // Executa a consulta
399|        $companyTeamMembers = $query->getQuery()->getResult();
400|        
401|        // Obtém os usuários associados aos membros encontrados
402|        $userTeamIds = [];
403|        foreach ($companyTeamMembers as $member) {
404|            if ($member->getUser()) {
405|                $userTeamIds[] = (int) $member->getUser()->getId();
406|            }
407|        }
408|
409|        return array_values(array_unique(array_filter($userTeamIds, static fn (int $id): bool => $id > 0)));
410|    }
411|
412|    public function getTeamInvitationIds(CompanyMembers $companyMember, Company $company): array
413|    {
414|        // Obtém os times do usuário como string (Exemplo: "4,6")
415|        $teamsString = $companyMember->getTeams();
416|
417|        // Retorna um array vazio se não houver times
418|        if (empty($teamsString)) {
419|            return [];
420|        }
421|
422|        // Converte a string em um array de times
423|        $teamsArray = array_map('trim', explode(',', $teamsString));
424|
425|        // Cria a consulta para buscar membros da empresa que pertencem aos mesmos times
426|        $query = $this->entityManager->createQueryBuilder()
427|            ->select('cm')
428|            ->from(CompanyMembers::class, 'cm')
429|            ->where('cm.company = :company')
430|            ->setParameter('company', $company);
431|
432|        // Adiciona condições para buscar os times
433|        if (!empty($teamsArray)) {
434|            $orConditions = [];
435|
436|            foreach ($teamsArray as $index => $team) {
437|                $paramName = ':team_' . $index;
438|                $orConditions[] = $query->expr()->like('cm.teams', $paramName);
439|                $query->setParameter($paramName, '%' . $team . '%');
440|            }
441|
442|            $query->andWhere($query->expr()->orX(...$orConditions));
443|        }
444|
445|        // Executa a consulta e obtém os membros da empresa que pertencem aos mesmos times
446|        $companyTeamMembers = $query->getQuery()->getResult();
447|
448|        // Obtém os IDs dos convites associados aos membros encontrados
449|        $invitationIds = array_map(
450|            fn($member) => $member->getInvitation() ? $member->getInvitation()->getId() : null, 
451|            $companyTeamMembers
452|        );
453|
454|        // Remove valores nulos do array final
455|        return array_filter($invitationIds);
456|    }
457|
458|    public function getCompanyMemberTemsIds(CompanyMembers $companyMember): array
459|    {
460|        // Obtém os times do usuário como string (Exemplo: "4,6")
461|        $teamsString = $companyMember->getTeams();
462|    
463|        // Retorna um array vazio se não houver times
464|        if (empty($teamsString)) {
465|            return [];
466|        }
467|    
468|        // Converte a string em um array de times
469|        $teamsArray = array_map('trim', explode(',', $teamsString));
470|
471|        return $teamsArray;
472|    }
473|
474|    public function getCompanyMemberTemsNames(CompanyMembers $companyMember, Company $company): array
475|    {
476|        try {
477|            // Pega os IDs dos times do membro
478|            $teamIds = $this->getCompanyMemberTemsIds($companyMember);
479|            
480|            if (empty($teamIds)) {
481|                return ["Não informado"];
482|            }
483|
484|            // Busca os times usando o repositório
485|            $teamRepository = $this->entityManager->getRepository(CompanyTeam::class);
486|            $teams = $teamRepository->findBy(['id' => $teamIds, 'company' => $company]);
487|            
488|            // Cria array com os nomes dos times
489|            $teamNames = [];
490|            foreach ($teams as $team) {
491|                $teamNames[] = $team->getName();
492|            }
493|            
494|            return $teamNames;
495|            
496|        } catch (\Exception $e) {
497|            // Log do erro se necessário
498|            return ["Erro ao carregar equipes"];
499|        }
500|    }

Note: Results truncated to 500 lines. Please narrow your line range.

{"file_path": "docs/empresas-parceiras/system/module-scope.md"}

File: docs/empresas-parceiras/system/module-scope.md (Total lines: 40)
IS_TRUNCATED: false
LINE_RANGE: 1-40
1|# Escopo do modulo Empresas Parceiras
2|
3|## O que o modulo faz
4|
5|Permite que uma empresa contratante (tenant):
6|
7|1. Configure um **catalogo de requisitos documentais** aplicaveis a prestadoras.
8|2. Cadastre **empresas parceiras/prestadoras** e acompanhe conformidade documental.
9|3. Vincule **colaboradores terceiros** a uma empresa prestadora.
10|4. Integre conformidade com **autorizacoes** e **casos GRC** de governanca.
11|
12|## O que esta fora do escopo desta entrega
13|
14|- Portal externo para a prestadora enviar documentos sem login interno.
15|- Assinatura digital de contratos com prestadoras.
16|- Folha de pagamento ou eSocial especifico de terceiros (alem do perfil membro existente).
17|- Modulo SSMA (mesmo que haja telas de autorizacao compartilhadas).
18|
19|## Limites de dominio
20|
21|| Dentro | Fora (outro dominio) |
22||--------|----------------------|
23|| `contractor_*` tables | Hub GRC generico (`governance_grc_case`, automacoes) |
24|| Perfil terceiro em `company_members` | Cadastro completo de membro (`CompanyController`) |
25|| Dependencias em `member_autorizacao` | CRUD completo de autorizacoes (`GovernanceController`) |
26|| Deteccao de casos contractor | Lifecycle completo de casos GRC |
27|
28|## Comportamento transversal
29|
30|- **CRUD via XHR:** endpoints retornam `JsonResponse` com `success` / `message`; sem exceptions no controller.
31|- **Multi-tenant:** todo dado filtrado por `company_id` da sessao.
32|- **Auditoria:** historico em tabelas `*_history` com snapshot JSON.
33|- **Idempotencia de schema:** migrations checam existencia de tabela/coluna antes de alterar.
34|
35|## Menu e rota principal
36|
37|- Menu admin: **Empresas Parceiras**
38|- Rota: `/manager/empresas-parceiras`
39|- Import de rotas: `config/routes.yaml` → `routes_contractor.yaml`
40|

{"search_text": "contractorCanManage"}

File: src/Controller/Contractor/EmpresasParceirasController.php
Match lines: 2
55|            'contractorCanManage' => $this->canManage(),
56|            'contractorCanManagePermissions' => $this->canManagePermissions(),

File: templates/contractor/index.html.twig
Match lines: 2
22|    {% if contractorCanManagePermissions|default(false) %}
57|    {% if contractorCanManagePermissions|default(false) %}

File: templates/contractor/partials/_company_form_fields.html.twig
Match lines: 1
257|            {% if contractorCanManage|default(false) %}

File: templates/contractor/partials/_offcanvas_company_detail.html.twig
Match lines: 1
31|            {% if contractorCanManage|default(false) %}

File: templates/contractor/partials/_offcanvas_company_documents.html.twig
Match lines: 2
17|                {% if contractorCanManage|default(false) %}
36|        {% if contractorCanManage|default(false) %}

File: templates/contractor/partials/_offcanvas_company_form.html.twig
Match lines: 1
57|            {% if contractorCanManage|default(false) %}

File: templates/contractor/partials/_offcanvas_requirement_detail.html.twig
Match lines: 1
16|        {% if contractorCanManage|default(false) %}

File: templates/contractor/tabs/_tab_empresas.html.twig
Match lines: 6
108|        {% if contractorCanManage|default(false) %}
178|        {% if contractorCanManage|default(false) %}
218|    {% if contractorCanManage|default(false) %}
303|{% if contractorCanManage|default(false) %}
326|    {% if contractor_co_rows|length == 0 and not (contractorCanManage|default(false)) %}
444|    var CAN_MANAGE = {{ contractorCanManage|default(false) ? 'true' : 'false' }};

File: templates/contractor/tabs/_tab_requisitos_documentais.html.twig
Match lines: 6
115|        {% if contractorCanManage|default(false) %}
166|        {% if contractorCanManage|default(false) %}
206|    {% if contractorCanManage|default(false) %}
306|{% if contractorCanManage|default(false) %}
329|    {% if contractor_req_rows|length == 0 and not (contractorCanManage|default(false)) %}
411|    var CAN_MANAGE = {{ contractorCanManage|default(false) ? 'true' : 'false' }};

{"search_text": "ROLE_REVIEWER", "file_patterns": ["docs/empresas-parceiras/", "templates/contractor/"]}

No matches found

{"file_patterns": ["src/Entity/User.php"], "search_text": "function getRoles|function isSuperAdmin|ROLE_USER", "use_perl_regexp": true}

File: src/Entity/User.php
Match lines: 7
38|     * User Generico  >> ROLE_USER
56|    const ROLE_USER = 'ROLE_USER';
312|    public function getRoles(): array
316|        // access_control em ^/user exige ROLE_USER; candidatos às vezes só têm ROLE_CANDIDATE na BD → 403.
317|        if (\in_array(self::ROLE_CANDIDATE, $roles, true) && !\in_array(self::ROLE_USER, $roles, true)) {
318|            $roles[] = self::ROLE_USER;
412|    public function isSuperAdmin(): bool

{"file_path": "src/Entity/Product.php", "start_line": 1, "end_line": 80}

File: src/Entity/Product.php (Total lines: 77)
IS_TRUNCATED: false
LINE_RANGE: 1-77
1|<?php
2|
3|namespace App\Entity;
4|
5|use App\Repository\ProductRepository;
6|use Doctrine\ORM\Mapping as ORM;
7|
8|/**
9| * @ORM\Entity(repositoryClass=ProductRepository::class)
10| * @ORM\Table(name="products")
11| */
12|class Product
13|{
14|    /**
15|     * @ORM\Id
16|     * @ORM\GeneratedValue
17|     * @ORM\Column(type="integer")
18|     */
19|    private $id;
20|
21|    /**
22|     * @ORM\Column(type="string", length=255)
23|     */
24|    private $name;
25|
26|    /**
27|     * @ORM\Column(type="boolean")
28|     */
29|    private $active;
30|
31|    /**
32|     * @ORM\Column(type="string", length=255, unique=true, nullable=true)
33|     */
34|    private ?string $slug = null;
35|
36|    public function getId(): ?int
37|    {
38|        return $this->id;
39|    }
40|
41|    public function getName(): ?string
42|    {
43|        return $this->name;
44|    }
45|
46|    public function setName(string $name): self
47|    {
48|        $this->name = $name;
49|
50|        return $this;
51|    }
52|
53|    public function isActive(): ?bool
54|    {
55|        return $this->active;
56|    }
57|
58|    public function setActive(bool $active): self
59|    {
60|        $this->active = $active;
61|
62|        return $this;
63|    }
64|
65|    public function getSlug(): ?string
66|    {
67|        return $this->slug;
68|    }
69|
70|    public function setSlug(?string $slug): self
71|    {
72|        $this->slug = $slug;
73|
74|        return $this;
75|    }
76|}
77|

{"end_line": 425, "file_path": "src/Entity/User.php", "start_line": 300}

File: src/Entity/User.php (Total lines: 1529)
IS_TRUNCATED: false
LINE_RANGE: 300-425
300|    public function getEmail(): ?string
301|    {
302|        return $this->email;
303|    }
304|
305|    public function setEmail(?string $email): self
306|    {
307|        $email = $email !== null ? strtolower(trim($email)) : null;
308|        $this->email = $email !== '' ? $email : null;
309|        return $this;
310|    }
311|
312|    public function getRoles(): array
313|    {
314|        $roles = array_unique($this->roles ?? []);
315|
316|        // access_control em ^/user exige ROLE_USER; candidatos às vezes só têm ROLE_CANDIDATE na BD → 403.
317|        if (\in_array(self::ROLE_CANDIDATE, $roles, true) && !\in_array(self::ROLE_USER, $roles, true)) {
318|            $roles[] = self::ROLE_USER;
319|        }
320|
321|        return $roles;
322|    }
323|
324|    public function setRoles(array $roles): self
325|    {
326|        $this->roles = $roles;
327|        return $this;
328|    }
329|
330|    public function getPassword(): string
331|    {
332|        return $this->password;
333|    }
334|
335|    public function setPassword(string $password): self
336|    {
337|        $this->password = $password;
338|        return $this;
339|    }
340|
341|    public function getSalt(): ?string
342|    {
343|        return null;
344|    }
345|
346|    public function eraseCredentials()
347|    {
348|        // If you store any temporary, sensitive data on the user, clear it here
349|    }
350|
351|    public function getUsername(): string
352|    {
353|        return $this->getUserIdentifier();
354|    }
355|
356|    public function getUserIdentifier(): string
357|    {
358|        $email = trim((string) $this->email);
359|        if ($email !== '') {
360|            return strtolower($email);
361|        }
362|
363|        $cpf = preg_replace('/\D+/', '', (string) ($this->profile?->getCpf() ?? ''));
364|        if ($cpf !== '') {
365|            return $cpf;
366|        }
367|
368|        return $this->id ? 'user:' . $this->id : 'user:new';
369|    }
370|
371|    public function getAuditIdentifier(): string
372|    {
373|        return $this->id ? 'user:' . $this->id : 'user:new';
374|    }
375|
376|    /**
377|     * A sessão contém uma versão serializada sem Profile. Sem esta comparação
378|     * por ID, senha e papéis, o Symfony compara getUserIdentifier(): a cópia da
379|     * sessão retorna user:<id>, enquanto a entidade recarregada retorna o CPF,
380|     * e encerra uma autenticação válida com "user has changed".
381|     */
382|    public function isEqualTo(UserInterface $user): bool
383|    {
384|        if (!$user instanceof self || $this->id === null || $this->id !== $user->getId()) {
385|            return false;
386|        }
387|
388|        if (!hash_equals((string) $this->password, (string) $user->getPassword())) {
389|            return false;
390|        }
391|
392|        $currentRoles = $this->getRoles();
393|        $refreshedRoles = $user->getRoles();
394|        sort($currentRoles);
395|        sort($refreshedRoles);
396|
397|        return $currentRoles === $refreshedRoles;
398|    }
399|
400|    public function getDisplayName(): string
401|    {
402|        $name = trim((string) $this->getFullName());
403|
404|        return $name !== '' ? $name : ($this->id ? 'Usuário #' . $this->id : 'Usuário');
405|    }
406|
407|    public function hasRole(string $role): bool
408|    {
409|        return in_array($role, $this->getRoles());
410|    }
411|
412|    public function isSuperAdmin(): bool
413|    {
414|        return $this->hasRole('ROLE_SUPER_ADMIN');
415|    }
416|
417|    public function getCompany(): ?Company
418|    {
419|        return $this->company;
420|    }
421|
422|    public function setCompany(?Company $company): self
423|    {
424|        $this->company = $company;
425|        return $this;

{"file_patterns": ["src/Service/Contractor/ContractorProviderCompanyService.php"], "search_text": "resolveRequirementEvidenceDownload"}

File: src/Service/Contractor/ContractorProviderCompanyService.php
Match lines: 1
631|    public function resolveRequirementEvidenceDownload(

{"file_patterns": ["migrations/"], "search_text": "ssma-contractor"}

No matches found

{"end_line": 700, "file_path": "src/Service/Contractor/ContractorProviderCompanyService.php", "start_line": 620}

File: src/Service/Contractor/ContractorProviderCompanyService.php (Total lines: 1651)
IS_TRUNCATED: false
LINE_RANGE: 620-700
620|            ->setArquivoNome($arquivoNome)
621|            ->setStatus($this->resolveRequirementDocumentStatus($link));
622|
623|        $this->entityManager->flush();
624|
625|        return ['requirement_id' => $requirementId] + $this->getCompanyRequirements($company, $companyId, $requirementService);
626|    }
627|
628|    /**
629|     * @return array{absolute_path: string, download_name: string}
630|     */
631|    public function resolveRequirementEvidenceDownload(
632|        Company $company,
633|        int $companyId,
634|        int $requirementId,
635|        string $evidenceId,
636|    ): array {
637|        $providerCompany = $this->requireOneByCompany($company, $companyId);
638|        $link = $this->requireRequirementLink($providerCompany, $requirementId);
639|
640|        foreach ($link->getEvidencias() as $item) {
641|            if (($item['id'] ?? '') !== $evidenceId) {
642|                continue;
643|            }
644|
645|            $path = isset($item['path']) ? (string) $item['path'] : '';
646|            $absolutePath = $this->documentStorage->resolveAbsolutePath($path);
647|            if ($absolutePath === null) {
648|                break;
649|            }
650|
651|            return [
652|                'absolute_path' => $absolutePath,
653|                'download_name' => (string) ($item['nome'] ?? basename($absolutePath)),
654|            ];
655|        }
656|
657|        throw new \RuntimeException('Arquivo não encontrado.');
658|    }
659|
660|    /**
661|     * @param array<string, mixed> $payload
662|     *
663|     * @return array<string, mixed>
664|     */
665|    public function saveRequirementDocument(Company $company, User $user, int $companyId, array $payload): array
666|    {
667|        $providerCompany = $this->requireOneByCompany($company, $companyId);
668|        $linkId = (int) ($payload['link_id'] ?? 0);
669|        $reqId = (int) ($payload['requirement_id'] ?? 0);
670|
671|        $link = $linkId > 0
672|            ? $this->companyRequirementRepository->findOneByProviderCompanyAndId($providerCompany, $linkId)
673|            : null;
674|        if (!$link instanceof ContractorProviderCompanyRequirement && $reqId > 0) {
675|            $link = $this->companyRequirementRepository->findOneByProviderCompanyAndRequirementId($providerCompany, $reqId);
676|        }
677|        if (!$link instanceof ContractorProviderCompanyRequirement) {
678|            throw new \InvalidArgumentException('Requisito não vinculado à empresa.');
679|        }
680|
681|        $evidencias = $this->mergeEvidenciasPayload($link->getEvidencias(), $payload['evidencias'] ?? null, $user);
682|
683|        $arquivoNome = trim((string) ($payload['arquivo_nome'] ?? ''));
684|        $requirement = $link->getRequirement();
685|        $requirementCategoria = $requirement instanceof ContractorDocumentRequirement
686|            ? trim((string) ($requirement->getCategoria() ?? ''))
687|            : '';
688|        $categoria = $requirementCategoria !== ''
689|            ? $requirementCategoria
690|            : trim((string) ($payload['categoria'] ?? ''));
691|        $dataEmissao = $this->normalizeDateValue($payload['data_emissao'] ?? null);
692|        $dataValidade = $this->resolveDocumentValidityDate($requirement, $dataEmissao, $payload['data_validade'] ?? null);
693|        $nome = trim((string) ($payload['nome'] ?? ''));
694|        if ($nome === '') {
695|            $nome = $requirement instanceof ContractorDocumentRequirement
696|                ? $requirement->getTitulo()
697|                : '';
698|        }
699|
700|        $link

{"search_text": "saude-e-seguranca"}

Note: The results have been truncated. Only showing first 100 results.
File: config/services.yaml
Match lines: 1
146|  env(SSMA_PARENT_PRODUCT_SLUG): 'saude-e-seguranca'

File: docs/RESUMO-SESSAO.md
Match lines: 3
5|## 1. Slug `saude-e-seguranca` hardcoded → Dinâmico via `.env`
8|O slug `'saude-e-seguranca'` estava hardcoded em queries de permissão em vários serviços. Se o ambiente local tiver um slug diferente ou o projeto for reaproveitado, quebraria silenciosamente.
12|- Criado parâmetro `ssma.parent_product_slug` em `config/services.yaml`, lido da variável `SSMA_PARENT_PRODUCT_SLUG` no `.env` (default: `saude-e-seguranca`)

File: docs/SSMA-REGRAS-POS-MERGE.md
Match lines: 2
40|| Produto pai | `saude-e-seguranca` (slug configurável via `SSMA_PARENT_PRODUCT_SLUG`) |
94|| Listener | `ssma-cause-tree` e `ssma-authorization` em `ssmaNoFallback` — sem herdar só `saude-e-seguranca` |

File: docs/engineering/pr/homolog/PR_commits_homolog.txt
Match lines: 1
2352|3f73c4d5b1 refactor(ssma): tornar slug do produto-pai configuravel via .env. Introduz ssma.parent_product_slug em services.yaml lido de SSMA_PARENT_PRODUCT_SLUG no .env. Injeta via DI em SsmaController, PermissionTagByMemberService, GlobalPermissionListener, PermissionTabService e MemberPermissionExtension. Remove hardcoded 'saude-e-seguranca' em queries de permissao. Adiciona debug-7aad93.log ao .gitignore.

File: docs/engineering/pr/hotfix-ssma-ambiental-material-brenda-new-production/PR_descricao_hotfix-ssma-ambiental-material-brenda-new-production.md
Match lines: 5
14|**Problema de negócio:** o formulário de Ocorrências SSMA estava desalinhado com o que produto definiu com a Brenda (04/08/2026). Listas de identificação ambiental, barreiras, consequências e regras de pessoas envolvidas/testemunhas não refletiam o fluxo esperado. Havia também regressões de UX (delay no Acidente Ambiental, crash de GMR, edição de local no Controle de Espaço), ambiguidade de permissões entre admin de empresa e membro com tag Membro, Módulo de Segurança sumindo da sidebar/Hub para empresas com slug legado `saude-e-seguranca`, e inconsistências em Prevenção Ativa (GMR na etapa errada, labels de inspeção, abono de meta sem justificativa obrigatória, admin Aura sem Painel/Metas com tag Membro).
37|- Restaurar Módulo de Segurança para empresas com produto legado `saude-e-seguranca`.
106|| `HubController.php` | Card Segurança aceita `saude-e-seguranca`, `health-safety-work` |
175|12. **Hub/Sidebar** — empresa com `saude-e-seguranca`: Módulo de Segurança visível.
207|- Módulo de Segurança com slug legado `saude-e-seguranca`.

File: docs/engineering/pr/hotfix-ssma-menu-gestor-admin-aura-new-production/PR_descricao_hotfix-ssma-menu-gestor-admin-aura-new-production.md
Match lines: 2
37|- `docs/ssma/SMOKE_BUGS_SSMA_001_006.md` (fallback `saude-e-seguranca`)
62|2. **Gestor de Equipe / Supervisor / Gestor Administrador / ROLE_MANAGER:** menu ampliado ON quando o **plano da empresa** inclui SSMA (`saude-e-seguranca`, `health-safety-work`, `modulo-seguranca` ou `ssma-occurrences`), mesmo sem Meus Apps marcado e mesmo com `can_view=false` na tag.

File: docs/menu_lateral_membro_hubs.md
Match lines: 1
59|- Hub de Maturidade nao deve aparecer apenas porque o usuario tem alguma permissao operacional de SSMA sem produto no plano. Ele deve aparecer se houver produto de maturidade permitido (`structural-research`, `assessment-360`, `innovation-profile`, `pesquisas-com-ia`, `welfare-assessment`, `saude-e-seguranca`, `health-safety-work`, `modulo-saude`, `modulo-seguranca` ou `ssma-occurrences`) e o modulo correspondente estiver no plano ou em Meus Apps.

File: docs/ssma/PRODUTO_SSMA_MAPA_COMPLETO.md
Match lines: 1
36|Slug configurável: `saude-e-seguranca` (env `SSMA_PARENT_PRODUCT_SLUG`)

File: docs/ssma/SMOKE_BUGS_SSMA_001_006.md
Match lines: 2
69|## SSMA-005 — Fallback PTBM `saude-e-seguranca`
73|| Só tag pai `saude-e-seguranca` (sem `ssma-occurrences`) | Pode herdar acesso a hubs SSMA (exceto authorization/badge/cause-tree sem tag) |

File: migration_archive_20260508/Version20260505162228_SsmaUnified.php
Match lines: 1
327|            $this->addSql('INSERT INTO products (slug, name, active) SELECT \'saude-e-seguranca\', \'Saúde e Segurança\', 1 WHERE NOT EXISTS (SELECT 1 FROM products WHERE slug = \'saude-e-seguranca\')');

File: migration_archive_20260508/_archive_ssma/Version20260427200000.php
Match lines: 1
19|        $this->addSql("INSERT INTO products (slug, name, active) SELECT 'saude-e-seguranca', 'Saúde e Segurança', 1 WHERE NOT EXISTS (SELECT 1 FROM products WHERE slug = 'saude-e-seguranca')");

File: migrations/Version20260519124600.php
Match lines: 5
48|                    WHERE p.slug IN ('modulo-seguranca', 'seguranca', 'saude-e-seguranca')
53|                        WHEN p.slug = 'saude-e-seguranca' THEN 3
83|                            WHERE p.slug IN ('modulo-seguranca', 'seguranca', 'saude-e-seguranca')
88|                                WHEN p.slug = 'saude-e-seguranca' THEN 3
125|                WHERE slug IN ('modulo-seguranca', 'seguranca', 'saude-e-seguranca')

File: src/Command/TestSsmaCauseTreeNavigationCommand.php
Match lines: 1
33|    private const SSMA_PRODUCT_SLUGS = ['ssma-occurrences', 'ssma-cause-tree', 'saude-e-seguranca'];

File: src/Controller/HubController.php
Match lines: 9
1136|                    'products' => ['modulo-saude', 'saude-e-seguranca', 'health-safety-work'],
1143|                    'products' => ['modulo-seguranca', 'seguranca', 'saude-e-seguranca', 'health-safety-work', 'ssma-occurrences'],
1667|            'Módulo de Saúde' => ['saude-e-seguranca', 'health-safety-work', 'modulo-saude'],
1668|            'Módulo de Segurança' => ['modulo-seguranca', 'seguranca', 'saude-e-seguranca', 'health-safety-work', 'ssma-occurrences'],
1789|                'saude-e-seguranca',
1881|            'saude-e-seguranca',
2019|            'saude-e-seguranca' => ['health-safety-work', 'modulo-saude'],
2020|            'health-safety-work' => ['saude-e-seguranca', 'modulo-saude'],
2021|            'modulo-saude' => ['saude-e-seguranca', 'health-safety-work'],

File: src/EventListener/GlobalPermissionListener.php
Match lines: 2
104|        string $ssmaParentProductSlug = 'saude-e-seguranca'
377|        // Para sub-módulos SSMA, se o membro não tem tag específica, usa o produto-pai "saude-e-seguranca" como fallback.

File: src/Service/CompanyAppVisibilityService.php
Match lines: 3
80|        'saude-e-seguranca' => 'moduloSaude',
201|        'moduloSaude' => 'saude-e-seguranca',
260|        ['saude-e-seguranca', 'health-safety-work', 'modulo-saude'],

File: src/Service/FeatureCatalogService.php
Match lines: 1
181|        'saude-e-seguranca' => 'icon-i-modulo-saude',

File: src/Service/Governance/Grc/GovernanceIntelligentControlModuleResolver.php
Match lines: 3
28|            'productSlugs' => ['ssma-authorization', 'modulo-seguranca', 'saude-e-seguranca'],
40|            'productSlugs' => ['saude-e-seguranca', 'modulo-saude'],
52|            'productSlugs' => ['gestao-de-espaco-fisico', 'manutencao', 'saude-e-seguranca'],

File: src/Service/HubsDataService.php
Match lines: 2
807|                            'product' => 'saude-e-seguranca',
817|                            'pngIcon' => 'saude-e-seguranca.png',

File: src/Service/PermissionTabService.php
Match lines: 3
28|    public function __construct(EntityManagerInterface $entityManager, string $ssmaParentProductSlug = 'saude-e-seguranca')
95|        // Definir permissionTag com prioridade (alinhado ao MemberPermissionExtension: SSMA herda saude-e-seguranca)
209|            // Prioridade 1b: subprodutos ssma-* herdam tag explícita em "saude-e-seguranca" (igual MemberPermissionExtension)

File: src/Service/PermissionTagByMemberService.php
Match lines: 5
24|    public function __construct(EntityManagerInterface $entityManager, string $ssmaParentProductSlug = 'saude-e-seguranca')
210|                // Se a tag do produto e a tag do produto-pai (saude-e-seguranca) são iguais
245|        // 2. Sem registo explícito: herdar dinamicamente do produto-pai (ssma-* → saude-e-seguranca)
266|     * ID do produto-pai SSMA (saude-e-seguranca) em cache local por request.
273|            $p = $this->entityManager->getRepository(Product::class)->findOneBy(['slug' => 'saude-e-seguranca']);

File: src/Service/SidebarProductSlugAliasService.php
Match lines: 1
32|        ['saude-e-seguranca', 'health-safety-work', 'modulo-saude'],

File: src/Service/Ssma/SsmaOccurrenceCreatePermissionService.php
Match lines: 1
40|    private const SSMA_PARENT_PRODUCT_SLUG    = 'saude-e-seguranca';

File: src/Service/Ssma/SsmaPermissionService.php
Match lines: 1
27|    private const PRODUCT_SLUG = 'saude-e-seguranca';

File: src/Service/Ssma/SsmaPreventionMutatePermissionService.php
Match lines: 1
24|    private const SSMA_PARENT_PRODUCT_SLUG     = 'saude-e-seguranca';

File: src/Service/Ssma/SsmaRefusalRightMutatePermissionService.php
Match lines: 1
24|    private const SSMA_PARENT_PRODUCT_SLUG = 'saude-e-seguranca';

File: src/Twig/MemberPermissionExtension.php
Match lines: 7
48|        string $ssmaParentProductSlug = 'saude-e-seguranca'
754|     * slug do pai legado `saude-e-seguranca`.
910|     * ssma-occurrences nem saude-e-seguranca). Membro/Inspetor com só ocorrências não veem o item.
1567|        // PermissionTagByMember explícita — nunca herdam permissão de saude-e-seguranca nem
1581|            // Não fazer fallback para saude-e-seguranca pois o PermissionTagByMember desse
1615|            // do produto-pai, pois qualquer membro com tag 'saude-e-seguranca' acabaria vendo esses módulos.
1618|                // Pai explícito primeiro (saude-e-seguranca OU modulo-seguranca).

File: templates/hubs/visao_metahuman.html.twig
Match lines: 1
840|    'saude-e-seguranca': ['saude_seguranca'],

File: templates/layoutAdmin.html.twig
Match lines: 5
2371|            {% if (isCompanyAppVisible('health-safety-work') or isCompanyAppVisible('saude-e-seguranca') or isCompanyAppVisible('modulo-saude')) and canAccessModuloSaudePackage %}
2413|            {# Legado: empresas com só saude-e-seguranca na sidebar (antes do split Saúde/Segurança) ainda veem o módulo. #}
2415|               Aceita moduloSaude OU moduloSeguranca no pacote (empresas com só saude-e-seguranca no plano). #}
2416|            {% set ssmaInCompanyPlanAdmin = isAppIncludedInCompanyPlan('saude-e-seguranca')
2422|                or isCompanyAppVisible('saude-e-seguranca')

File: templates/layoutUser.html.twig
Match lines: 9
1082|                                {% set sidebarShowHealthSafety = isCompanyAppVisible('saude-e-seguranca') or isCompanyAppVisible('health-safety-work') or isCompanyAppVisible('modulo-saude') %}
1108|                                {% set canViewSsmaModule = canView('saude-e-seguranca') %}
1148|                                    member_has_product_view_permission('saude-e-seguranca')
1153|                                    isCompanyAppVisible('saude-e-seguranca')
1184|                                {% set ssmaInCompanyPlan = isAppIncludedInCompanyPlan('saude-e-seguranca')
1188|                                {% set ssmaCompanySurface = isCompanyAppVisible('saude-e-seguranca')
2177|                                {% set canViewSsmaModule = canView('saude-e-seguranca') %}
2178|                                {% set canManageSsmaModule = canCreate('saude-e-seguranca') or canEdit('saude-e-seguranca') or canDelete('saude-e-seguranca') %}
2210|                                    isAppIncludedInCompanyPlan('saude-e-seguranca')

File: templates/new_home/partials/_recent_apps.html.twig
Match lines: 1
68|    'saude-e-seguranca': 'icon-i-modulo-seguranca',

File: templates/partials/apps_dropdown_user.html.twig
Match lines: 4
55|{% set canViewHealthSafetyProduct = member_has_product_view_permission('saude-e-seguranca') or member_has_product_view_permission('health-safety-work') or member_has_product_view_permission('modulo-seguranca') or member_has_product_view_permission('seguranca') %}
62|{% set ssmaInCompanyPlan = isAppIncludedInCompanyPlan('saude-e-seguranca')
136|    'saude-e-seguranca': canViewHealthSafetyProduct,
164|    'perfil-inovacao', 'saude-e-seguranca', 'health-safety-work', 'modulo-seguranca', 'seguranca'

File: tests/Service/HubsDataServiceTest.php
Match lines: 1
24|        $this->assertSame('maturity', $productsBySlug['saude-e-seguranca']);

File: tests/Ssma/diag_member_ssma_sidebar.php
Match lines: 2
86|$ssmaInPlan = $visibility->isAppIncludedInPlan('saude-e-seguranca', $company)
90|$sidebarShowHealthSafety = $visibility->isAppVisible('saude-e-seguranca', $company)

File: tests/Unit/Product/Ssma/assert_branch_ui_fixes.php
Match lines: 2
151|    && fileContains($layoutAdmin, "isCompanyAppVisible('saude-e-seguranca')")
152|    ? ok('layoutAdmin: Segurança aceita slug legado saude-e-seguranca')

File: tests/Unit/Product/Ssma/ssma_permissions_policy_standalone.php
Match lines: 10
9| * - Produtos de permissão: saude-e-seguranca, ssma-occurrences, ssma-cause-tree, ssma-prevention,
97|    'saude-e-seguranca',
136|    return $slug !== 'saude-e-seguranca' && str_starts_with($slug, 'ssma-');
145|        'saude-e-seguranca' => $p['view_saude'],
170|        $v = effectiveProductCanView($p, 'saude-e-seguranca');
566|        'saude-e-seguranca' => ['view_saude' => true],
575|            'saude-e-seguranca' => 'ssma_ocorrencia_index',
596|        'saude-e-seguranca' => 'ssma_prevencao_index',
916|echo "\n=== Fallback saude-e-seguranca em subproduto sem tag ===\n";
921|ok('Só canView saude-e-seguranca → item Autorizações oculto sem produto', !menuCanNavigateGovernanceAuthorization(perm(['view_saude' => true])));

{"search_text": "ssma-contractor", "file_patterns": ["migrations/", "src/Command/", "src/DataFixtures/"]}

No matches found

{"search_text": "company_id=", "file_patterns": ["src/Controller/Contractor/EmpresasParceirasController.php"]}

No matches found

{"file_patterns": ["src/Service/Contractor/ContractorProviderCompanyService.php"], "search_text": "public function listForFrontend|public function getDetail|public function getProviders|public function getCompanyRequirements|public function computeStats", "use_perl_regexp": true}

File: src/Service/Contractor/ContractorProviderCompanyService.php
Match lines: 5
44|    public function listForFrontend(Company $company): array
57|    public function computeStats(array $companies): array
117|    public function getDetail(Company $company, int $id): array
306|    public function getProviders(Company $company, int $companyId): array
395|    public function getCompanyRequirements(

{"file_patterns": ["src/Service/Contractor/ContractorDocumentRequirementService.php"], "search_text": "public function listForFrontend|public function getDetail", "use_perl_regexp": true}

File: src/Service/Contractor/ContractorDocumentRequirementService.php
Match lines: 2
125|    public function listForFrontend(Company $company): array
138|    public function getDetail(Company $company, int $id): array

{"end_line": 160, "file_path": "src/Service/Contractor/ContractorProviderCompanyService.php", "start_line": 44}

File: src/Service/Contractor/ContractorProviderCompanyService.php (Total lines: 1651)
IS_TRUNCATED: false
LINE_RANGE: 44-160
44|    public function listForFrontend(Company $company): array
45|    {
46|        $companies = $this->companyRepository->findByCompany($company);
47|
48|        return array_map(
49|            fn (ContractorProviderCompany $providerCompany) => $this->serializeCompanySummary($providerCompany),
50|            $companies
51|        );
52|    }
53|
54|    /**
55|     * @return array<string, int>
56|     */
57|    public function computeStats(array $companies): array
58|    {
59|        $total = count($companies);
60|        $active = 0;
61|        $pending = 0;
62|        $providers = 0;
63|
64|        foreach ($companies as $company) {
65|            if (($company['active'] ?? true) !== false) {
66|                ++$active;
67|            }
68|            if (($company['documento_status'] ?? 'em_conformidade') !== 'em_conformidade') {
69|                ++$pending;
70|            }
71|            $providers += (int) ($company['prestadores_count'] ?? 0);
72|        }
73|
74|        return [
75|            'total' => $total,
76|            'active' => $active,
77|            'pending' => $pending,
78|            'providers' => $providers,
79|        ];
80|    }
81|
82|    /**
83|     * @return list<array{value: int, text: string}>
84|     */
85|    public function listInternalResponsibleOptions(Company $company): array
86|    {
87|        $members = $this->companyMembersRepository->findBy(
88|            ['company' => $company, 'isRemoved' => 0],
89|            ['id' => 'ASC']
90|        );
91|
92|        $options = [];
93|        foreach ($members as $member) {
94|            if (!$member instanceof CompanyMembers) {
95|                continue;
96|            }
97|
98|            $name = trim((string) ($member->getFullName() ?? ''));
99|            $email = trim((string) ($member->getEmail() ?? ''));
100|            $label = $name !== '' ? $name : $email;
101|            if ($label === '') {
102|                $label = 'Colaborador #' . $member->getId();
103|            }
104|
105|            $options[] = [
106|                'value' => (int) $member->getId(),
107|                'text' => $label,
108|            ];
109|        }
110|
111|        return $options;
112|    }
113|
114|    /**
115|     * @return array<string, mixed>
116|     */
117|    public function getDetail(Company $company, int $id): array
118|    {
119|        $providerCompany = $this->requireOneByCompany($company, $id);
120|        $history = $this->historyRepository->findByProviderCompany($providerCompany);
121|
122|        return [
123|            'company' => $this->serializeCompanyDetail($providerCompany) + [
124|                'history' => array_map(
125|                    fn (ContractorProviderCompanyHistory $entry) => $this->serializeHistory($entry),
126|                    $history
127|                ),
128|            ],
129|        ];
130|    }
131|
132|    /**
133|     * @param array<string, mixed> $payload
134|     *
135|     * @return array<string, mixed>
136|     */
137|    public function save(Company $company, User $user, array $payload): array
138|    {
139|        $id = isset($payload['id']) ? (int) $payload['id'] : 0;
140|        $isNew = $id <= 0;
141|
142|        $razaoSocial = trim((string) ($payload['razao_social'] ?? ''));
143|        $cnpj = trim((string) ($payload['cnpj'] ?? ''));
144|        $tipo = trim((string) ($payload['tipo'] ?? ''));
145|
146|        if ($razaoSocial === '') {
147|            throw new \InvalidArgumentException('Razão social é obrigatória.');
148|        }
149|        if ($cnpj === '') {
150|            throw new \InvalidArgumentException('CNPJ é obrigatório.');
151|        }
152|        if ($tipo === '' || !isset(ContractorDocumentRequirementService::COMPANY_TYPES[$tipo])) {
153|            throw new \InvalidArgumentException('Tipo de empresa inválido.');
154|        }
155|        if ((int) ($payload['responsavel_interno_member_id'] ?? 0) <= 0) {
156|            throw new \InvalidArgumentException('Responsável pela empresa é obrigatório.');
157|        }
158|
159|        $contato = $this->normalizeContact($payload);
160|        if ($contato['nome'] === '') {

{"file_patterns": ["src/Entity/CompanyMembers.php"], "search_text": "UniqueConstraint|unique="}

No matches found

{"comments": [{"content": "A nova regra libera ROLE_USER — na prática qualquer usuário autenticado — para toda a superfície de rotas do módulo. O controle por PermissionTag adicionado no controller só protege as ações de escrita (canManage()); as ações de leitura (requirementsList, requirementDetail, companiesList, companyDetail, companyProviders, companyRequirements e principalmente companyRequirementEvidenceDownload) não possuem nenhuma checagem de tag/permissão no servidor — apenas resolveCompany(), e os serviços chamados (listForFrontend/getDetail/getProviders/getCompanyRequirements) só filtram por company_id. Assim, qualquer usuário comum do tenant consegue ler dados de empresas parceiras e baixar evidências documentais (arquivos de conformidade) mesmo sem permissão de visualização do produto 'ssma-contractor'. Recomenda-se adicionar checagem de visualização nas ações de leitura (ex.: validar tag do produto/canView) ou restringir a regra de acesso.", "existing_code": "        - { path: ^/manager/empresas-parceiras, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER, ROLE_SUPER_ADMIN] }", "category": "security", "severity": "high", "path": "config/packages/security.yaml"}, {"content": "Como o access_control aplica a primeira regra que casa o padrão, esta regra específica passa a sombrear o catch-all `^/manager` (que permite ROLE_REVIEWER). Qualquer usuário com ROLE_REVIEWER que acessava /manager/empresas-parceiras passará a receber 403 — possível regressão funcional, já que o módulo fica sob o prefixo /manager. Confirmar se revisores devem acessar o módulo; se sim, incluir ROLE_REVIEWER na lista de papéis.", "existing_code": "        - { path: ^/manager/empresas-parceiras, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER, ROLE_SUPER_ADMIN] }", "category": "bug", "severity": "medium", "path": "config/packages/security.yaml"}, {"content": "O slug do produto está hardcoded ('ssma-contractor') e, se o registro não existir no banco do ambiente (nenhuma migration/fixture no repositório cria esse produto), resolveContractorPermissionTag() retorna null silenciosamente — removendo a gestão de todos os usuários não-admin sem erro nem log. Isso diverge do padrão usado em PermissionTagByMemberService::getProductPermission() e no MemberPermissionExtension, que fazem fallback para o produto-pai via ssma.parent_product_slug. Considere reutilizar o serviço com fallback já existente ou ao menos logar quando o produto não for encontrado.", "existing_code": "        $product = $this->entityManager->getRepository(Product::class)\n            ->findOneBy(['slug' => self::CONTRACTOR_PRODUCT_SLUG]);\n        if (!$product instanceof Product) {\n            return null;\n        }", "category": "bug", "severity": "medium", "path": "src/Controller/Contractor/EmpresasParceirasController.php"}, {"content": "canManage() e canManagePermissions() são chamados na index e cada um executa resolveContractorPermissionTag() (2+ queries: CompanyMembers + Product), além das consultas internas do getPermissionTag. São 4+ queries extras por request em rota potencialmente frequente. Pode-se memorizar a tag resolvida no ciclo da requisição (ex.: propriedade privada cacheada) para evitar o trabalho duplicado.", "existing_code": "            'contractorCanManagePermissions' => $this->canManagePermissions(),", "category": "performance", "severity": "low", "path": "src/Controller/Contractor/EmpresasParceirasController.php"}, {"content": "findOneBy sem critério de ordenação em CompanyMembers: como não há unique constraint em (user, company), um usuário com mais de um registro ativo (ex.: re-cadastrado após remoção) torna o membro retornado indeterminado, podendo alternar a tag/permissão entre requisições. Considere ordenar (ex.: id DESC) ou usar o repositório com regra de unicidade para tornar a resolução determinística.", "existing_code": "        $member = $this->entityManager->getRepository(CompanyMembers::class)->findOneBy([\n            'user' => $user,\n            'company' => $company,\n            'isRemoved' => false,\n            'enabled' => true,\n        ]);", "category": "bug", "severity": "low", "path": "src/Controller/Contractor/EmpresasParceirasController.php"}]}

(async)

{"state": "DONE"}

{"file_path": "src/Controller/Contractor/EmpresasParceirasController.php"}

File: src/Controller/Contractor/EmpresasParceirasController.php (Total lines: 663)
IS_TRUNCATED: true
LINE_RANGE: 1-500
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Controller\Contractor;
6|
7|use App\Entity\Company;
8|use App\Entity\CompanyMembers;
9|use App\Entity\PermissionTag;
10|use App\Entity\Product;
11|use App\Entity\User;
12|use App\Service\Contractor\ContractorDocumentRequirementService;
13|use App\Service\Contractor\ContractorProviderCompanyService;
14|use App\Service\PermissionTagByMemberService;
15|use Doctrine\ORM\EntityManagerInterface;
16|use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
17|use Symfony\Component\HttpFoundation\BinaryFileResponse;
18|use Symfony\Component\HttpFoundation\File\UploadedFile;
19|use Symfony\Component\HttpFoundation\JsonResponse;
20|use Symfony\Component\HttpFoundation\Request;
21|use Symfony\Component\HttpFoundation\Response;
22|use Symfony\Component\HttpFoundation\ResponseHeaderBag;
23|
24|final class EmpresasParceirasController extends AbstractController
25|{
26|    private const CONTRACTOR_PRODUCT_SLUG = 'ssma-contractor';
27|
28|    public function __construct(
29|        private ContractorDocumentRequirementService $requirementService,
30|        private ContractorProviderCompanyService $companyService,
31|        private PermissionTagByMemberService $permissionTagByMemberService,
32|        private EntityManagerInterface $entityManager,
33|    ) {
34|    }
35|
36|    public function index(): Response
37|    {
38|        $company = $this->resolveCompany();
39|        $contractorCompanies = $this->companyService->listForFrontend($company);
40|
41|        return $this->render('contractor/index.html.twig', [
42|            'contractorRequirements' => $this->requirementService->listForFrontend($company),
43|            'contractorCompanies' => $contractorCompanies,
44|            'contractorCompanyStats' => $this->companyService->computeStats($contractorCompanies),
45|            'contractorDocumentoStatus' => ContractorProviderCompanyService::DOCUMENTO_STATUS,
46|            'contractorCategorias' => ContractorDocumentRequirementService::CATEGORIAS,
47|            'contractorAreas' => ContractorDocumentRequirementService::AREAS,
48|            'contractorCompanyTypes' => ContractorDocumentRequirementService::COMPANY_TYPES,
49|            'contractorValidadeTipos' => ContractorDocumentRequirementService::VALIDADE_TIPOS,
50|            'contractorValidadeUnidades' => ContractorDocumentRequirementService::VALIDADE_UNIDADES,
51|            'contractorRegrasBloqueio' => ContractorDocumentRequirementService::REGRAS_BLOQUEIO,
52|            'contractorBloqueioParcialTipos' => ContractorDocumentRequirementService::BLOQUEIO_PARCIAL_TIPOS,
53|            'contractorBloqueioParcialOptions' => $this->requirementService->listPartialBlockingOptions($company),
54|            'contractorInternalResponsibleOptions' => $this->companyService->listInternalResponsibleOptions($company),
55|            'contractorCanManage' => $this->canManage(),
56|            'contractorCanManagePermissions' => $this->canManagePermissions(),
57|        ]);
58|    }
59|
60|    public function requirementsList(): JsonResponse
61|    {
62|        $company = $this->resolveCompany();
63|
64|        return $this->json([
65|            'success' => true,
66|            'requirements' => $this->requirementService->listForFrontend($company),
67|        ]);
68|    }
69|
70|    public function requirementDetail(int $id): JsonResponse
71|    {
72|        $company = $this->resolveCompany();
73|
74|        try {
75|            $detail = $this->requirementService->getDetail($company, $id);
76|        } catch (\RuntimeException $exception) {
77|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
78|        }
79|
80|        return $this->json(['success' => true] + $detail);
81|    }
82|
83|    public function requirementSave(Request $request): JsonResponse
84|    {
85|        if (!$this->canManage()) {
86|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
87|        }
88|
89|        $company = $this->resolveCompany();
90|        $user = $this->resolveUser();
91|        $payload = json_decode($request->getContent(), true);
92|
93|        if (!is_array($payload)) {
94|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
95|        }
96|
97|        try {
98|            $requirement = $this->requirementService->save($company, $user, $payload);
99|        } catch (\InvalidArgumentException $exception) {
100|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 422);
101|        }
102|
103|        return $this->json([
104|            'success' => true,
105|            'requirement' => $requirement,
106|        ]);
107|    }
108|
109|    public function requirementDelete(int $id, Request $request): JsonResponse
110|    {
111|        if (!$this->canManage()) {
112|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
113|        }
114|
115|        $company = $this->resolveCompany();
116|        $user = $this->resolveUser();
117|        $payload = json_decode($request->getContent(), true);
118|        $motivo = is_array($payload) ? ($payload['motivo'] ?? null) : null;
119|
120|        try {
121|            $linkedCount = $this->requirementService->countLinkedCompanies($company, $id);
122|            if ($linkedCount > 0) {
123|                return $this->json([
124|                    'success' => false,
125|                    'message' => 'Requisito em uso por empresas parceiras.',
126|                    'linked_count' => $linkedCount,
127|                ], 409);
128|            }
129|
130|            $this->requirementService->delete($company, $user, $id, is_string($motivo) ? $motivo : null);
131|        } catch (\RuntimeException $exception) {
132|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
133|        }
134|
135|        return $this->json(['success' => true]);
136|    }
137|
138|    public function requirementSetActive(int $id, Request $request): JsonResponse
139|    {
140|        if (!$this->canManage()) {
141|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
142|        }
143|
144|        $company = $this->resolveCompany();
145|        $user = $this->resolveUser();
146|        $payload = json_decode($request->getContent(), true);
147|
148|        if (!is_array($payload)) {
149|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
150|        }
151|
152|        $active = filter_var($payload['active'] ?? null, FILTER_VALIDATE_BOOLEAN, FILTER_NULL_ON_FAILURE);
153|        if ($active === null) {
154|            return $this->json(['success' => false, 'message' => 'Campo active é obrigatório.'], 422);
155|        }
156|
157|        $motivo = isset($payload['motivo']) ? (string) $payload['motivo'] : null;
158|
159|        try {
160|            $requirement = $this->requirementService->setActive($company, $user, $id, $active, $motivo);
161|        } catch (\RuntimeException $exception) {
162|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
163|        }
164|
165|        return $this->json([
166|            'success' => true,
167|            'requirement' => $requirement,
168|        ]);
169|    }
170|
171|    public function requirementUsage(int $id): JsonResponse
172|    {
173|        $company = $this->resolveCompany();
174|
175|        try {
176|            $linkedCount = $this->requirementService->countLinkedCompanies($company, $id);
177|        } catch (\RuntimeException $exception) {
178|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
179|        }
180|
181|        return $this->json([
182|            'success' => true,
183|            'linked_count' => $linkedCount,
184|            'in_use' => $linkedCount > 0,
185|        ]);
186|    }
187|
188|    public function companiesList(): JsonResponse
189|    {
190|        $company = $this->resolveCompany();
191|        $companies = $this->companyService->listForFrontend($company);
192|
193|        return $this->json([
194|            'success' => true,
195|            'companies' => $companies,
196|            'stats' => $this->companyService->computeStats($companies),
197|        ]);
198|    }
199|
200|    public function companyDetail(int $id): JsonResponse
201|    {
202|        $company = $this->resolveCompany();
203|
204|        try {
205|            $detail = $this->companyService->getDetail($company, $id);
206|        } catch (\RuntimeException $exception) {
207|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
208|        }
209|
210|        return $this->json(['success' => true] + $detail);
211|    }
212|
213|    public function companyDelete(int $id, Request $request): JsonResponse
214|    {
215|        if (!$this->canManage()) {
216|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
217|        }
218|
219|        $company = $this->resolveCompany();
220|        $user = $this->resolveUser();
221|        $payload = json_decode($request->getContent(), true);
222|        $motivo = is_array($payload) ? ($payload['motivo'] ?? null) : null;
223|
224|        try {
225|            $linkedCount = $this->companyService->countLinkedRecords($company, $id);
226|            if ($linkedCount > 0) {
227|                return $this->json([
228|                    'success' => false,
229|                    'message' => 'Empresa em uso.',
230|                    'linked_count' => $linkedCount,
231|                ], 409);
232|            }
233|
234|            $this->companyService->delete($company, $user, $id, is_string($motivo) ? $motivo : null);
235|        } catch (\RuntimeException $exception) {
236|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
237|        }
238|
239|        return $this->json(['success' => true]);
240|    }
241|
242|    public function companySetActive(int $id, Request $request): JsonResponse
243|    {
244|        if (!$this->canManage()) {
245|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
246|        }
247|
248|        $company = $this->resolveCompany();
249|        $user = $this->resolveUser();
250|        $payload = json_decode($request->getContent(), true);
251|
252|        if (!is_array($payload)) {
253|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
254|        }
255|
256|        $active = filter_var($payload['active'] ?? null, FILTER_VALIDATE_BOOLEAN, FILTER_NULL_ON_FAILURE);
257|        if ($active === null) {
258|            return $this->json(['success' => false, 'message' => 'Campo active é obrigatório.'], 422);
259|        }
260|
261|        $motivo = isset($payload['motivo']) ? (string) $payload['motivo'] : null;
262|
263|        try {
264|            $providerCompany = $this->companyService->setActive($company, $user, $id, $active, $motivo);
265|        } catch (\RuntimeException $exception) {
266|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
267|        }
268|
269|        return $this->json([
270|            'success' => true,
271|            'company' => $providerCompany,
272|        ]);
273|    }
274|
275|    public function companyUsage(int $id): JsonResponse
276|    {
277|        $company = $this->resolveCompany();
278|
279|        try {
280|            $linkedCount = $this->companyService->countLinkedRecords($company, $id);
281|        } catch (\RuntimeException $exception) {
282|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
283|        }
284|
285|        return $this->json([
286|            'success' => true,
287|            'linked_count' => $linkedCount,
288|            'in_use' => $linkedCount > 0,
289|        ]);
290|    }
291|
292|    public function companySave(Request $request): JsonResponse
293|    {
294|        if (!$this->canManage()) {
295|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
296|        }
297|
298|        $company = $this->resolveCompany();
299|        $user = $this->resolveUser();
300|        $payload = json_decode($request->getContent(), true);
301|
302|        if (!is_array($payload)) {
303|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
304|        }
305|
306|        try {
307|            $providerCompany = $this->companyService->save($company, $user, $payload);
308|        } catch (\InvalidArgumentException $exception) {
309|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 422);
310|        } catch (\RuntimeException $exception) {
311|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
312|        }
313|
314|        return $this->json([
315|            'success' => true,
316|            'company' => $providerCompany,
317|        ]);
318|    }
319|
320|    public function companyProviders(int $id): JsonResponse
321|    {
322|        $company = $this->resolveCompany();
323|
324|        try {
325|            $data = $this->companyService->getProviders($company, $id);
326|        } catch (\RuntimeException $exception) {
327|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
328|        }
329|
330|        return $this->json(['success' => true] + $data);
331|    }
332|
333|    public function companyProvidersLink(int $id, Request $request): JsonResponse
334|    {
335|        if (!$this->canManage()) {
336|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
337|        }
338|
339|        $company = $this->resolveCompany();
340|        $user = $this->resolveUser();
341|        $payload = json_decode($request->getContent(), true);
342|        $providerIds = is_array($payload) ? ($payload['provider_ids'] ?? []) : [];
343|
344|        if (!is_array($providerIds)) {
345|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
346|        }
347|
348|        try {
349|            $providerCompany = $this->companyService->linkProviders($company, $user, $id, $providerIds);
350|        } catch (\RuntimeException $exception) {
351|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
352|        }
353|
354|        return $this->json([
355|            'success' => true,
356|            'company' => $providerCompany,
357|        ]);
358|    }
359|
360|    public function companyRequirements(int $id): JsonResponse
361|    {
362|        $company = $this->resolveCompany();
363|
364|        try {
365|            $data = $this->companyService->getCompanyRequirements($company, $id, $this->requirementService);
366|        } catch (\RuntimeException $exception) {
367|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
368|        }
369|
370|        return $this->json(['success' => true] + $data);
371|    }
372|
373|    public function companyRequirementsSave(int $id, Request $request): JsonResponse
374|    {
375|        if (!$this->canManage()) {
376|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
377|        }
378|
379|        $company = $this->resolveCompany();
380|        $user = $this->resolveUser();
381|        $payload = json_decode($request->getContent(), true);
382|        $requirementIds = is_array($payload) ? ($payload['requirement_ids'] ?? []) : [];
383|        $requirementNames = is_array($payload) ? ($payload['requirement_names'] ?? []) : [];
384|        $requirementResponsibleIds = is_array($payload) ? ($payload['requirement_responsible_ids'] ?? []) : [];
385|        $requirementOptionalResponsibleIds = is_array($payload) ? ($payload['requirement_optional_responsible_ids'] ?? []) : [];
386|
387|        if (!is_array($requirementIds)) {
388|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
389|        }
390|
391|        if (!is_array($requirementNames)) {
392|            $requirementNames = [];
393|        }
394|
395|        if (!is_array($requirementResponsibleIds)) {
396|            $requirementResponsibleIds = [];
397|        }
398|
399|        if (!is_array($requirementOptionalResponsibleIds)) {
400|            $requirementOptionalResponsibleIds = [];
401|        }
402|
403|        try {
404|            $providerCompany = $this->companyService->saveCompanyRequirements(
405|                $company,
406|                $user,
407|                $id,
408|                $requirementIds,
409|                $requirementNames,
410|                $requirementResponsibleIds,
411|                $requirementOptionalResponsibleIds,
412|            );
413|        } catch (\RuntimeException $exception) {
414|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
415|        }
416|
417|        return $this->json([
418|            'success' => true,
419|            'company' => $providerCompany,
420|        ]);
421|    }
422|
423|    public function companyRequirementDelete(int $id, int $linkId): JsonResponse
424|    {
425|        if (!$this->canManage()) {
426|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
427|        }
428|
429|        $company = $this->resolveCompany();
430|        $user = $this->resolveUser();
431|
432|        try {
433|            $providerCompany = $this->companyService->deleteCompanyRequirement($company, $user, $id, $linkId);
434|        } catch (\RuntimeException $exception) {
435|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
436|        }
437|
438|        return $this->json([
439|            'success' => true,
440|            'company' => $providerCompany,
441|        ]);
442|    }
443|
444|    public function companyRequirementDocumentSave(int $id, Request $request): JsonResponse
445|    {
446|        if (!$this->canManage()) {
447|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
448|        }
449|
450|        $company = $this->resolveCompany();
451|        $user = $this->resolveUser();
452|        $payload = json_decode($request->getContent(), true);
453|
454|        if (!is_array($payload)) {
455|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
456|        }
457|
458|        try {
459|            $providerCompany = $this->companyService->saveRequirementDocument($company, $user, $id, $payload);
460|        } catch (\InvalidArgumentException $exception) {
461|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 422);
462|        } catch (\RuntimeException $exception) {
463|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
464|        }
465|
466|        return $this->json([
467|            'success' => true,
468|            'company' => $providerCompany,
469|        ]);
470|    }
471|
472|    public function companyRequirementEvidenceUpload(int $id, int $requirementId, Request $request): JsonResponse
473|    {
474|        if (!$this->canManage()) {
475|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
476|        }
477|
478|        $company = $this->resolveCompany();
479|        $user = $this->resolveUser();
480|        /** @var UploadedFile|null $file */
481|        $file = $request->files->get('file');
482|
483|        if (!$file instanceof UploadedFile) {
484|            return $this->json(['success' => false, 'message' => 'Arquivo inválido.'], 400);
485|        }
486|
487|        try {
488|            $payload = $this->companyService->uploadRequirementEvidence(
489|                $company,
490|                $user,
491|                $id,
492|                $requirementId,
493|                $file,
494|                $this->requirementService,
495|                $request->request->all(),
496|            );
497|        } catch (\InvalidArgumentException $exception) {
498|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 422);
499|        } catch (\RuntimeException $exception) {
500|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);

Note: Results truncated to 500 lines. Please narrow your line range.

{"search_text": "canManage", "file_patterns": ["src/Controller/Contractor/EmpresasParceirasController.php"]}

File: src/Controller/Contractor/EmpresasParceirasController.php
Match lines: 16
55|            'contractorCanManage' => $this->canManage(),
56|            'contractorCanManagePermissions' => $this->canManagePermissions(),
85|        if (!$this->canManage()) {
111|        if (!$this->canManage()) {
140|        if (!$this->canManage()) {
215|        if (!$this->canManage()) {
244|        if (!$this->canManage()) {
294|        if (!$this->canManage()) {
335|        if (!$this->canManage()) {
375|        if (!$this->canManage()) {
425|        if (!$this->canManage()) {
446|        if (!$this->canManage()) {
474|        if (!$this->canManage()) {
532|        if (!$this->canManage()) {
559|    private function canManage(): bool
587|    private function canManagePermissions(): bool

{"file_path": "src/Controller/Contractor/EmpresasParceirasController.php", "start_line": 500, "end_line": 663}

File: src/Controller/Contractor/EmpresasParceirasController.php (Total lines: 663)
IS_TRUNCATED: false
LINE_RANGE: 500-663
500|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
501|        }
502|
503|        return $this->json(['success' => true] + $payload);
504|    }
505|
506|    public function companyRequirementEvidenceDownload(int $id, int $requirementId, string $evidenceId): Response
507|    {
508|        $company = $this->resolveCompany();
509|
510|        try {
511|            $download = $this->companyService->resolveRequirementEvidenceDownload(
512|                $company,
513|                $id,
514|                $requirementId,
515|                $evidenceId,
516|            );
517|        } catch (\RuntimeException $exception) {
518|            return new Response($exception->getMessage(), Response::HTTP_NOT_FOUND);
519|        }
520|
521|        $response = new BinaryFileResponse($download['absolute_path']);
522|        $response->setContentDisposition(
523|            ResponseHeaderBag::DISPOSITION_ATTACHMENT,
524|            $download['download_name'],
525|        );
526|
527|        return $response;
528|    }
529|
530|    public function companyRequirementEvidenceDelete(int $id, int $requirementId, Request $request): JsonResponse
531|    {
532|        if (!$this->canManage()) {
533|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
534|        }
535|
536|        $company = $this->resolveCompany();
537|        $payload = json_decode($request->getContent(), true);
538|        $evidenceId = is_array($payload) ? trim((string) ($payload['evidence_id'] ?? '')) : '';
539|        $index = is_array($payload) && array_key_exists('index', $payload) ? (int) $payload['index'] : null;
540|
541|        try {
542|            $data = $this->companyService->deleteRequirementEvidence(
543|                $company,
544|                $id,
545|                $requirementId,
546|                $evidenceId !== '' ? $evidenceId : null,
547|                $index,
548|                $this->requirementService,
549|            );
550|        } catch (\InvalidArgumentException $exception) {
551|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 422);
552|        } catch (\RuntimeException $exception) {
553|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
554|        }
555|
556|        return $this->json(['success' => true] + $data);
557|    }
558|
559|    private function canManage(): bool
560|    {
561|        if ($this->isContractorPlatformAdmin()) {
562|            return true;
563|        }
564|
565|        $tag = $this->resolveContractorPermissionTag();
566|        if (!$tag instanceof PermissionTag) {
567|            return false;
568|        }
569|
570|        $tagName = trim((string) $tag->getName());
571|        if ($tagName === '' || strcasecmp($tagName, 'Membro') === 0) {
572|            return false;
573|        }
574|
575|        if (in_array($tagName, [
576|            'Gestor Administrador',
577|            'Gestor de Equipe',
578|            'Supervisor de Equipe',
579|            'Supervisor',
580|        ], true)) {
581|            return true;
582|        }
583|
584|        return (bool) ($tag->getCanCreate() || $tag->getCanEdit());
585|    }
586|
587|    private function canManagePermissions(): bool
588|    {
589|        if ($this->isContractorPlatformAdmin()) {
590|            return true;
591|        }
592|
593|        $tag = $this->resolveContractorPermissionTag();
594|
595|        return $tag instanceof PermissionTag
596|            && $tag->getName() === 'Gestor Administrador';
597|    }
598|
599|    private function isContractorPlatformAdmin(): bool
600|    {
601|        $user = $this->getUser();
602|
603|        return $user instanceof User
604|            && ($user->isSuperAdmin() || in_array('ROLE_MANAGER', $user->getRoles(), true));
605|    }
606|
607|    private function resolveContractorPermissionTag(): ?PermissionTag
608|    {
609|        $user = $this->getUser();
610|        if (!$user instanceof User) {
611|            return null;
612|        }
613|
614|        $company = $user->getCompany();
615|        if (!$company instanceof Company) {
616|            return null;
617|        }
618|
619|        $member = $this->entityManager->getRepository(CompanyMembers::class)->findOneBy([
620|            'user' => $user,
621|            'company' => $company,
622|            'isRemoved' => false,
623|            'enabled' => true,
624|        ]);
625|        if (!$member instanceof CompanyMembers) {
626|            return null;
627|        }
628|
629|        $product = $this->entityManager->getRepository(Product::class)
630|            ->findOneBy(['slug' => self::CONTRACTOR_PRODUCT_SLUG]);
631|        if (!$product instanceof Product) {
632|            return null;
633|        }
634|
635|        return $this->permissionTagByMemberService->getPermissionTag($member, $product);
636|    }
637|
638|    private function resolveCompany(): Company
639|    {
640|        $user = $this->getUser();
641|        if (!$user instanceof User) {
642|            throw $this->createAccessDeniedException();
643|        }
644|
645|        $company = $user->getCompany();
646|        if (!$company instanceof Company) {
647|            throw $this->createAccessDeniedException('Empresa não encontrada.');
648|        }
649|
650|        return $company;
651|    }
652|
653|    private function resolveUser(): User
654|    {
655|        $user = $this->getUser();
656|        if (!$user instanceof User) {
657|            throw $this->createAccessDeniedException();
658|        }
659|
660|        return $user;
661|    }
662|}
663|

{"search_text": "function getPermissionTag"}

File: src/Command/TestMembrosEsocialPermissaoCommand.php
Match lines: 1
149|    private function getPermissionTag(CompanyMembers $companyMember, Product $product): ?PermissionTag

File: src/Command/TestPesquisaEstruturalPermissaoCommand.php
Match lines: 1
214|    private function getPermissionTagName(CompanyMembers $companyMember, Product $product): string

File: src/Controller/Api/CompanyApiController.php
Match lines: 1
1289|    public function getPermissionTags(): JsonResponse

File: src/Entity/PermissionTagSuggestion.php
Match lines: 1
52|    public function getPermissionTag(): PermissionTag

File: src/Entity/TagProductPermissions.php
Match lines: 1
54|    public function getPermissionTag(): ?PermissionTag

File: src/Service/FieldExtractorService.php
Match lines: 2
195|    public function getPermissionTagUserFields(PermissionTag $permissionTagUser) {
217|    public function getPermissionTagsFields(array $permissionTags) {

File: src/Service/PermissionTabService.php
Match lines: 1
308|    public function getPermissionTags(): array

File: src/Service/PermissionTagByMemberService.php
Match lines: 2
173|    public function getPermissionTag(CompanyMembers $companyMember, Product $product): ?PermissionTag
338|    public function getPermissionTagGestor(): ?PermissionTag

File: src/Twig/GlobalPermissionExtension.php
Match lines: 1
96|    public function getPermissionTag()

File: src/Twig/MemberPermissionExtension.php
Match lines: 1
1548|    public function getPermissionTagName(string $productSlug): string

File: templates/permissions_tags/member_tab_permissions.html.twig
Match lines: 2
1019|    function getPermissionTagEditWrapper() {
1451|        function getPermissionTagVisual(name, fallbackBackgroundColor, fallbackLetterColor) {

{"file_path": "src/Service/PermissionTagByMemberService.php", "start_line": 150, "end_line": 260}

File: src/Service/PermissionTagByMemberService.php (Total lines: 548)
IS_TRUNCATED: false
LINE_RANGE: 150-260
150|        if (!$permissionTagByMember) {
151|            if (str_starts_with($productSlug, 'ssma-')) {
152|                $parentPermission = $this->getProductPermission($user, $this->ssmaParentProductSlug);
153|                if ($parentPermission instanceof PermissionTag) {
154|                    return $parentPermission;
155|                }
156|            }
157|
158|            // Se não tem permissão customizada, usar a permissão global
159|            $globalPermissionTagId = $companyMember->getGlobalPermissionTag();
160|            if ($globalPermissionTagId) {
161|                return $this->entityManager->getRepository(PermissionTag::class)->find($globalPermissionTagId);
162|            }
163|            
164|            return null;
165|        }
166|
167|        // Buscar a tag de permissão
168|        return $this->entityManager->getRepository(PermissionTag::class)
169|            ->find($permissionTagByMember->getTagID());
170|    }
171|
172|
173|    public function getPermissionTag(CompanyMembers $companyMember, Product $product): ?PermissionTag
174|    {
175|        $ptbmRepo = $this->entityManager->getRepository(PermissionTagByMember::class);
176|        $tagRepo  = $this->entityManager->getRepository(PermissionTag::class);
177|
178|        // getGlobalPermissionTag() devolve ?PermissionTag (objecto Doctrine), extraímos o ID aqui
179|        $globalTag   = $companyMember->getGlobalPermissionTag();
180|        $globalTagId = $globalTag instanceof PermissionTag ? (int) $globalTag->getId() : null;
181|
182|        // 1. Registo explícito no produto específico (atribuído via "Editar Tags" pelo gestor)
183|        $ptbm = $ptbmRepo->findOneBy([
184|            'companyMemberID' => $companyMember->getId(),
185|            'productID'       => $product->getId(),
186|        ]);
187|
188|        if ($ptbm) {
189|            $storedTag = $tagRepo->find($ptbm->getTagID());
190|
191|            if ($storedTag instanceof PermissionTag) {
192|                if (!str_starts_with((string) $product->getSlug(), 'ssma-')) {
193|                    return $storedTag;
194|                }
195|
196|                // Tag de gestão no PTBM do produto prevalece sobre global Membro/Inspetor.
197|                // Regressão Aura: Gestor Administrador na matriz SSMA + global Membro + stored==parent
198|                // era tratado como auto-propagação e descartava a tag de gestão.
199|                if (in_array((string) $storedTag->getName(), [
200|                    'Gestor Administrador',
201|                    'Gestor de Equipe',
202|                    'Supervisor de Equipe',
203|                    'Supervisor',
204|                ], true)) {
205|                    return $storedTag;
206|                }
207|
208|                // Produtos SSMA: detectar se o registo foi auto-criado (cópia da tag do produto-pai)
209|                // ou se foi explicitamente atribuído pelo gestor.
210|                // Se a tag do produto e a tag do produto-pai (saude-e-seguranca) são iguais
211|                // e ambas diferem da tag global actual, foi auto-propagação → usa tag global.
212|                $parentTagId = $this->getTagIDByMemberAndProduct(
213|                    $companyMember->getId(),
214|                    $this->getSsmaParentProductId()
215|                );
216|
217|                $storedId           = (int) $storedTag->getId();
218|                $storedMatchesParent = $parentTagId !== null && $storedId === (int) $parentTagId;
219|                $parentMatchesGlobal = $parentTagId !== null && $globalTagId !== null && (int) $parentTagId === $globalTagId;
220|
221|                if ($globalTagId !== null && $storedId !== $globalTagId) {
222|                    // Stored difere da global — verificar se é assignment explícito ou propagação automática.
223|                    //
224|                    // É explícito (respeitar) quando:
225|                    //   stored != parent  →  admin atribuiu este produto de forma diferente do pai
226|                    // É automático (preferir global) quando:
227|                    //   stored == parent  →  propagação do pai, que por sua vez diverge da global
228|                    //   OU não há parent PTBM (stored foi auto-criado a partir de global antigo)
229|                    $isExplicitAssignment = $parentTagId !== null && $storedId !== (int) $parentTagId;
230|
231|                    if (!$isExplicitAssignment) {
232|                        // Auto-propagado ou sem pai → usa tag global actual
233|                        $resolvedGlobal = $tagRepo->find($globalTagId);
234|                        if ($resolvedGlobal instanceof PermissionTag) {
235|                            return $resolvedGlobal;
236|                        }
237|                    }
238|                    // Se é explícito: respeita o stored ($isExplicitAssignment = true)
239|                }
240|
241|                return $storedTag;
242|            }
243|        }
244|
245|        // 2. Sem registo explícito: herdar dinamicamente do produto-pai (ssma-* → saude-e-seguranca)
246|        if (str_starts_with((string) $product->getSlug(), 'ssma-')) {
247|            $parentTag = $this->getSsmaParentPermissionTag($companyMember, $product);
248|            if ($parentTag instanceof PermissionTag) {
249|                return $parentTag;
250|            }
251|        }
252|
253|        // 3. Fallback: tag global do membro
254|        if ($globalTagId !== null) {
255|            $resolvedGlobal = $tagRepo->find($globalTagId);
256|            if ($resolvedGlobal instanceof PermissionTag) {
257|                return $resolvedGlobal;
258|            }
259|        }
260|

{"query_name": "User.php"}

src/Entity/GoalDevelopmentActionUser.php
src/Entity/GoalUser.php
src/Entity/StructuralResearchUser.php
src/Entity/TrainingPageUser.php
src/Entity/User.php

{"query_name": "PermissionTag.php"}

src/Entity/PermissionTag.php
src/Entity/SsmaPermissionTag.php

{"file_patterns": ["src/Entity/User.php"], "search_text": "function (isSuperAdmin|getCompany|getRoles)", "use_perl_regexp": true}

File: src/Entity/User.php
Match lines: 3
312|    public function getRoles(): array
412|    public function isSuperAdmin(): bool
417|    public function getCompany(): ?Company

{"file_patterns": ["src/Entity/PermissionTag.php"], "search_text": "function (getName|getCanCreate|getCanEdit|getRole)", "use_perl_regexp": true}

File: src/Entity/PermissionTag.php
Match lines: 3
77|    public function getName(): ?string
157|    public function getCanCreate(): ?bool
169|    public function getCanEdit(): ?bool

{"file_patterns": ["src/Entity/CompanyMembers.php"], "search_text": "(isRemoved|enabled|uniqueConstraints|unique)", "use_perl_regexp": true}

File: src/Entity/CompanyMembers.php
Match lines: 22
69|    private $enabled;
74|    private $isRemoved;
196|    private bool $peopleAnalyticsAccessMemberEnabled = true; 
366|    public function getEnabled(): ?bool
368|        return $this->enabled;
371|    public function setEnabled(bool $enabled): self
373|        $this->enabled = $enabled;
378|    public function getIsRemoved(): ?bool
380|        return $this->isRemoved;
383|    public function setIsRemoved(bool $isRemoved): self
385|        $this->isRemoved = $isRemoved;
557|            "enabled" => $this->getEnabled(),
558|            "isRemoved" => $this->getIsRemoved(),
672|        return array_unique($this->managerRoles ?? []);
686|        $this->managerRoles = array_unique($this->managerRoles);
744|     * @return array{avatar: string|null, company: int|null, created_at: \DateTimeInterface|null, email: string|null, enabled: bool|null, globalPermissionTag: int|null, group: string|null, groups: string|null, id: int|null, invitation: int|null, isRegistered: bool|null, isRemoved: bool|null, is_admin: bool, local: string, managerRoles: array, name: string, role: string|null, team: string|null, teams: string|null, updated_at: \DateTimeInterface|null, user: int|null}
793|            'enabled' => $this->getEnabled(),
794|            'isRemoved' => $this->getIsRemoved(),
944|    public function getPeopleAnalyticsAccessMemberEnabled(): bool
946|        return $this->peopleAnalyticsAccessMemberEnabled;
948|    public function setPeopleAnalyticsAccessMemberEnabled(bool $peopleAnalyticsAccessMemberEnabled): self
950|        $this->peopleAnalyticsAccessMemberEnabled = $peopleAnalyticsAccessMemberEnabled;

{"end_line": 430, "file_path": "src/Entity/User.php", "start_line": 300}

File: src/Entity/User.php (Total lines: 1529)
IS_TRUNCATED: false
LINE_RANGE: 300-430
300|    public function getEmail(): ?string
301|    {
302|        return $this->email;
303|    }
304|
305|    public function setEmail(?string $email): self
306|    {
307|        $email = $email !== null ? strtolower(trim($email)) : null;
308|        $this->email = $email !== '' ? $email : null;
309|        return $this;
310|    }
311|
312|    public function getRoles(): array
313|    {
314|        $roles = array_unique($this->roles ?? []);
315|
316|        // access_control em ^/user exige ROLE_USER; candidatos às vezes só têm ROLE_CANDIDATE na BD → 403.
317|        if (\in_array(self::ROLE_CANDIDATE, $roles, true) && !\in_array(self::ROLE_USER, $roles, true)) {
318|            $roles[] = self::ROLE_USER;
319|        }
320|
321|        return $roles;
322|    }
323|
324|    public function setRoles(array $roles): self
325|    {
326|        $this->roles = $roles;
327|        return $this;
328|    }
329|
330|    public function getPassword(): string
331|    {
332|        return $this->password;
333|    }
334|
335|    public function setPassword(string $password): self
336|    {
337|        $this->password = $password;
338|        return $this;
339|    }
340|
341|    public function getSalt(): ?string
342|    {
343|        return null;
344|    }
345|
346|    public function eraseCredentials()
347|    {
348|        // If you store any temporary, sensitive data on the user, clear it here
349|    }
350|
351|    public function getUsername(): string
352|    {
353|        return $this->getUserIdentifier();
354|    }
355|
356|    public function getUserIdentifier(): string
357|    {
358|        $email = trim((string) $this->email);
359|        if ($email !== '') {
360|            return strtolower($email);
361|        }
362|
363|        $cpf = preg_replace('/\D+/', '', (string) ($this->profile?->getCpf() ?? ''));
364|        if ($cpf !== '') {
365|            return $cpf;
366|        }
367|
368|        return $this->id ? 'user:' . $this->id : 'user:new';
369|    }
370|
371|    public function getAuditIdentifier(): string
372|    {
373|        return $this->id ? 'user:' . $this->id : 'user:new';
374|    }
375|
376|    /**
377|     * A sessão contém uma versão serializada sem Profile. Sem esta comparação
378|     * por ID, senha e papéis, o Symfony compara getUserIdentifier(): a cópia da
379|     * sessão retorna user:<id>, enquanto a entidade recarregada retorna o CPF,
380|     * e encerra uma autenticação válida com "user has changed".
381|     */
382|    public function isEqualTo(UserInterface $user): bool
383|    {
384|        if (!$user instanceof self || $this->id === null || $this->id !== $user->getId()) {
385|            return false;
386|        }
387|
388|        if (!hash_equals((string) $this->password, (string) $user->getPassword())) {
389|            return false;
390|        }
391|
392|        $currentRoles = $this->getRoles();
393|        $refreshedRoles = $user->getRoles();
394|        sort($currentRoles);
395|        sort($refreshedRoles);
396|
397|        return $currentRoles === $refreshedRoles;
398|    }
399|
400|    public function getDisplayName(): string
401|    {
402|        $name = trim((string) $this->getFullName());
403|
404|        return $name !== '' ? $name : ($this->id ? 'Usuário #' . $this->id : 'Usuário');
405|    }
406|
407|    public function hasRole(string $role): bool
408|    {
409|        return in_array($role, $this->getRoles());
410|    }
411|
412|    public function isSuperAdmin(): bool
413|    {
414|        return $this->hasRole('ROLE_SUPER_ADMIN');
415|    }
416|
417|    public function getCompany(): ?Company
418|    {
419|        return $this->company;
420|    }
421|
422|    public function setCompany(?Company $company): self
423|    {
424|        $this->company = $company;
425|        return $this;
426|    }
427|
428|    public function getProfile(): ?Profile
429|    {
430|        return $this->profile;

{"end_line": 180, "file_path": "src/Entity/PermissionTag.php", "start_line": 70}

File: src/Entity/PermissionTag.php (Total lines: 193)
IS_TRUNCATED: false
LINE_RANGE: 70-180
70|    private $canDelete;
71|
72|    public function getId(): ?int
73|    {
74|        return $this->id;
75|    }
76|
77|    public function getName(): ?string
78|    {
79|        return $this->name;
80|    }
81|
82|    public function setName(string $name): self
83|    {
84|        $this->name = $name;
85|
86|        return $this;
87|    }
88|
89|    public function getDescription(): ?string
90|    {
91|        return $this->description;
92|    }
93|
94|    public function setDescription(?string $description): self
95|    {
96|        $this->description = $description;
97|
98|        return $this;
99|    }
100|
101|    public function getColorID(): ?int
102|    {
103|        return $this->colorID;
104|    }
105|
106|    public function setColorID(int $colorID): self
107|    {
108|        $this->colorID = $colorID;
109|
110|        return $this;
111|    }
112|
113|    public function getTeamLimitation(): ?bool
114|    {
115|        return $this->teamLimitation;
116|    }
117|
118|    public function setTeamLimitation(bool $teamLimitation): self
119|    {
120|        $this->teamLimitation = $teamLimitation;
121|
122|        return $this;
123|    }
124|
125|    public function setColor(string $color): void
126|    {
127|        $this->color = $color;
128|    }
129|
130|    public function getColor(): string
131|    {
132|        return $this->color ?? '';
133|    }
134|
135|    public function setLetterColor(string $letterColor): void
136|    {
137|        $this->letterColor = $letterColor;
138|    }
139|
140|    public function getLetterColor(): string
141|    {
142|        return $this->letterColor ?? '';
143|    }
144|
145|    public function getCanView(): ?bool
146|    {
147|        return $this->canView;
148|    }
149|
150|    public function setCanView(bool $canView): self
151|    {
152|        $this->canView = $canView;
153|
154|        return $this;
155|    }
156|
157|    public function getCanCreate(): ?bool
158|    {
159|        return $this->canCreate;
160|    }
161|
162|    public function setCanCreate(bool $canCreate): self
163|    {
164|        $this->canCreate = $canCreate;
165|
166|        return $this;
167|    }
168|
169|    public function getCanEdit(): ?bool
170|    {
171|        return $this->canEdit;
172|    }
173|
174|    public function setCanEdit(bool $canEdit): self
175|    {
176|        $this->canEdit = $canEdit;
177|
178|        return $this;
179|    }
180|

{"search_text": "empresas-parceiras", "file_patterns": ["config/"]}

File: config/packages/security.yaml
Match lines: 1
137|        - { path: ^/manager/empresas-parceiras, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER, ROLE_SUPER_ADMIN] }

File: config/routes_contractor.yaml
Match lines: 22
2|  path: /manager/empresas-parceiras
7|  path: /manager/empresas-parceiras/requirements
12|  path: /manager/empresas-parceiras/requirements/{id}
19|  path: /manager/empresas-parceiras/requirements/save
24|  path: /manager/empresas-parceiras/requirements/{id}/delete
31|  path: /manager/empresas-parceiras/requirements/{id}/active
38|  path: /manager/empresas-parceiras/requirements/{id}/usage
45|  path: /manager/empresas-parceiras/companies
50|  path: /manager/empresas-parceiras/companies/{id}
57|  path: /manager/empresas-parceiras/companies/{id}/delete
64|  path: /manager/empresas-parceiras/companies/{id}/active
71|  path: /manager/empresas-parceiras/companies/{id}/usage
78|  path: /manager/empresas-parceiras/companies/save
83|  path: /manager/empresas-parceiras/companies/{id}/providers
90|  path: /manager/empresas-parceiras/companies/{id}/providers/link
97|  path: /manager/empresas-parceiras/companies/{id}/requirements
104|  path: /manager/empresas-parceiras/companies/{id}/requirements/save
111|  path: /manager/empresas-parceiras/companies/{id}/requirements/{linkId}/delete
119|  path: /manager/empresas-parceiras/companies/{id}/requirements/document
126|  path: /manager/empresas-parceiras/companies/{id}/requirements/{requirementId}/evidence/upload
134|  path: /manager/empresas-parceiras/companies/{id}/requirements/{requirementId}/evidence/{evidenceId}/download
143|  path: /manager/empresas-parceiras/companies/{id}/requirements/{requirementId}/evidence/delete

{"search_text": "EmpresasParceirasController"}

File: config/routes_contractor.yaml
Match lines: 22
3|  controller: App\Controller\Contractor\EmpresasParceirasController::index
8|  controller: App\Controller\Contractor\EmpresasParceirasController::requirementsList
13|  controller: App\Controller\Contractor\EmpresasParceirasController::requirementDetail
20|  controller: App\Controller\Contractor\EmpresasParceirasController::requirementSave
25|  controller: App\Controller\Contractor\EmpresasParceirasController::requirementDelete
32|  controller: App\Controller\Contractor\EmpresasParceirasController::requirementSetActive
39|  controller: App\Controller\Contractor\EmpresasParceirasController::requirementUsage
46|  controller: App\Controller\Contractor\EmpresasParceirasController::companiesList
51|  controller: App\Controller\Contractor\EmpresasParceirasController::companyDetail
58|  controller: App\Controller\Contractor\EmpresasParceirasController::companyDelete
65|  controller: App\Controller\Contractor\EmpresasParceirasController::companySetActive
72|  controller: App\Controller\Contractor\EmpresasParceirasController::companyUsage
79|  controller: App\Controller\Contractor\EmpresasParceirasController::companySave
84|  controller: App\Controller\Contractor\EmpresasParceirasController::companyProviders
91|  controller: App\Controller\Contractor\EmpresasParceirasController::companyProvidersLink
98|  controller: App\Controller\Contractor\EmpresasParceirasController::companyRequirements
105|  controller: App\Controller\Contractor\EmpresasParceirasController::companyRequirementsSave
112|  controller: App\Controller\Contractor\EmpresasParceirasController::companyRequirementDelete
120|  controller: App\Controller\Contractor\EmpresasParceirasController::companyRequirementDocumentSave
127|  controller: App\Controller\Contractor\EmpresasParceirasController::companyRequirementEvidenceUpload
135|  controller: App\Controller\Contractor\EmpresasParceirasController::companyRequirementEvidenceDownload
144|  controller: App\Controller\Contractor\EmpresasParceirasController::companyRequirementEvidenceDelete

File: docs/empresas-parceiras/README.md
Match lines: 1
63|| Controller | `src/Controller/Contractor/EmpresasParceirasController.php` |

File: docs/empresas-parceiras/engineering/architecture.md
Match lines: 2
8|EmpresasParceirasController
33|  Controller/Contractor/EmpresasParceirasController.php

File: docs/empresas-parceiras/engineering/routes-and-services.md
Match lines: 1
79|`EmpresasParceirasController::canManage()` — verifica role de gestor da empresa na sessao.

File: docs/empresas-parceiras/engineering/storage-evidencias.md
Match lines: 1
53|`EmpresasParceirasControllerTest::testCompanyRequirementEvidenceUploadRejectsMissingFile`

File: migrations/Version20260625170000.php
Match lines: 1
17| * - Suporta CRUD, conformidade documental e gestão de prestadores no EmpresasParceirasController.

File: src/Controller/Contractor/EmpresasParceirasController.php
Match lines: 1
24|final class EmpresasParceirasController extends AbstractController

File: tests/Unit/Product/EmpresasParceiras/EmpresasParceirasControllerTest.php
Match lines: 5
7|use App\Controller\Contractor\EmpresasParceirasController;
16| * Testes de efeito colateral do EmpresasParceirasController com services reais
19|final class EmpresasParceirasControllerTest extends EmpresasParceirasTestCase
274|    ): EmpresasParceirasController {
275|        $controller = new EmpresasParceirasController($requirementService, $companyService);

{"end_line": 300, "file_path": "tests/Unit/Product/EmpresasParceiras/EmpresasParceirasControllerTest.php", "start_line": 250}

File: tests/Unit/Product/EmpresasParceiras/EmpresasParceirasControllerTest.php (Total lines: 287)
IS_TRUNCATED: false
LINE_RANGE: 250-287
250|        self::assertTrue($data['success']);
251|        self::assertCount(1, $data['companies']);
252|        self::assertSame(1, $data['stats']['total']);
253|    }
254|
255|    public function testCompanyRequirementEvidenceUploadRejectsMissingFile(): void
256|    {
257|        $entityManager = $this->createMock(EntityManagerInterface::class);
258|        $entityManager->expects(self::never())->method('flush');
259|
260|        $response = $this->controller(
261|            $this->makeRequirementService(),
262|            $this->makeProviderCompanyService(['entityManager' => $entityManager]),
263|            $this->user(10, $this->company(1)),
264|        )->companyRequirementEvidenceUpload(1, 2, Request::create('/', 'POST'));
265|
266|        self::assertSame(400, $response->getStatusCode());
267|        self::assertSame('Arquivo inválido.', $this->decode($response)['message']);
268|    }
269|
270|    private function controller(
271|        \App\Service\Contractor\ContractorDocumentRequirementService $requirementService,
272|        \App\Service\Contractor\ContractorProviderCompanyService $companyService,
273|        ?\App\Entity\User $user,
274|    ): EmpresasParceirasController {
275|        $controller = new EmpresasParceirasController($requirementService, $companyService);
276|        $controller->setContainer($this->containerWithUser($user));
277|
278|        return $controller;
279|    }
280|
281|    /** @param array<string, mixed> $payload */
282|    private function jsonRequest(array $payload): Request
283|    {
284|        return Request::create('/', 'POST', [], [], [], [], json_encode($payload, JSON_THROW_ON_ERROR));
285|    }
286|}
287|

{"end_line": 30, "file_path": "config/routes_contractor.yaml", "start_line": 1}

File: config/routes_contractor.yaml (Total lines: 149)
IS_TRUNCATED: false
LINE_RANGE: 1-30
1|contractor_index:
2|  path: /manager/empresas-parceiras
3|  controller: App\Controller\Contractor\EmpresasParceirasController::index
4|  methods: [GET]
5|
6|contractor_requirements_list:
7|  path: /manager/empresas-parceiras/requirements
8|  controller: App\Controller\Contractor\EmpresasParceirasController::requirementsList
9|  methods: [GET]
10|
11|contractor_requirement_detail:
12|  path: /manager/empresas-parceiras/requirements/{id}
13|  controller: App\Controller\Contractor\EmpresasParceirasController::requirementDetail
14|  methods: [GET]
15|  requirements:
16|    id: '\d+'
17|
18|contractor_requirement_save:
19|  path: /manager/empresas-parceiras/requirements/save
20|  controller: App\Controller\Contractor\EmpresasParceirasController::requirementSave
21|  methods: [POST]
22|
23|contractor_requirement_delete:
24|  path: /manager/empresas-parceiras/requirements/{id}/delete
25|  controller: App\Controller\Contractor\EmpresasParceirasController::requirementDelete
26|  methods: [POST]
27|  requirements:
28|    id: '\d+'
29|
30|contractor_requirement_set_active:

{"search_text": "ROLE_MANAGER_GESTOR|ROLE_MANAGER_VIEWER", "file_patterns": ["src/Controller/"], "use_perl_regexp": true}

File: src/Controller/AdminController.php
Match lines: 3
1529|            'manager' => $this->security->getUser()->hasRole('ROLE_MANAGER') || $this->security->getUser()->hasRole('ROLE_MANAGER_GESTOR'),
1827|        } else if ($this->security->getUser()->hasRole('ROLE_MANAGER') || $this->security->getUser()->hasRole('ROLE_MANAGER_GESTOR')) {
2033|        if ($this->security->getUser()->hasRole('ROLE_ADMIN') || $this->security->getUser()->hasRole('ROLE_MANAGER') || $this->security->getUser()->hasRole('ROLE_MANAGER_GESTOR')) {

File: src/Controller/Api/FileManagementV2Controller.php
Match lines: 1
2630|        foreach (['ROLE_SUPER_ADMIN', 'ROLE_ADMIN', 'ROLE_MANAGER', 'ROLE_MANAGER_GESTOR', 'ROLE_MANAGER_VIEWER'] as $role) {

File: src/Controller/DefaultController.php
Match lines: 2
38|            || in_array('ROLE_MANAGER_VIEWER', $roles, true)
39|            || in_array('ROLE_MANAGER_GESTOR', $roles, true)

File: src/Controller/DeiAssessmentDashboardController.php
Match lines: 1
861|                || $this->isGranted('ROLE_MANAGER_GESTOR')

File: src/Controller/GovernanceController.php
Match lines: 8
4059|        if ($this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER') || $this->isGranted('ROLE_MANAGER_GESTOR')) {
4075|        if ($this->isGranted('ROLE_MANAGER_VIEWER')
4077|            && !$this->isGranted('ROLE_MANAGER_GESTOR')
4101|        if ($this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER') || $this->isGranted('ROLE_MANAGER_GESTOR')) {
4116|        if ($this->isGranted('ROLE_MANAGER_VIEWER')
4118|            && !$this->isGranted('ROLE_MANAGER_GESTOR')
4162|        if ($this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER') || $this->isGranted('ROLE_MANAGER_GESTOR')) {
4689|        if (!$this->isGranted('ROLE_MANAGER') && !$this->isGranted('ROLE_MANAGER_GESTOR')) {

File: src/Controller/ProfessionalAssessmentController.php
Match lines: 5
2087|        if ($isAdmin || $user->hasRole('ROLE_MANAGER') || $user->hasRole('ROLE_MANAGER_VIEWER') || $user->hasRole('ROLE_MANAGER_GESTOR')) {
2337|        if ($accountUser->hasRole('ROLE_MANAGER') || $accountUser->hasRole('ROLE_MANAGER_VIEWER') || $accountUser->hasRole('ROLE_MANAGER_GESTOR') || $report->getCompany())
2450|        if ($accUser->hasRole('ROLE_MANAGER') || $accUser->hasRole('ROLE_MANAGER_VIEWER') || $accUser->hasRole('ROLE_MANAGER_GESTOR'))
5447|        if (!$user->hasRole('ROLE_MANAGER') && !$user->hasRole('ROLE_MANAGER_GESTOR') && !$this->security->getUser()->isSuperAdmin()) {
5515|            $isManager = $user->hasRole('ROLE_MANAGER') || $user->hasRole('ROLE_MANAGER_VIEWER') || $user->hasRole('ROLE_MANAGER_GESTOR');

File: src/Controller/SpacesControlController.php
Match lines: 1
88|            || $this->isGranted('ROLE_MANAGER_GESTOR')

File: src/Controller/SsmaController.php
Match lines: 36
1043|            || $this->isGranted('ROLE_MANAGER_GESTOR')
1044|            || $this->isGranted('ROLE_MANAGER_VIEWER')
1086|     * (rotas ssma_cause_tree_*), sem o bypass global de ROLE_MANAGER_GESTOR de {@see canManageSsmaOccurrences()}.
2066|        // User::getCompany() definido) e membros ROLE_MANAGER_GESTOR (cujo User::getCompany()
9468|        $viewIsAdmin       = $this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER') || $this->isGranted('ROLE_MANAGER_GESTOR');
9593|        if ($this->isGranted('ROLE_MANAGER_VIEWER')
9595|            && !$this->isGranted('ROLE_MANAGER_GESTOR')
10156|     * ROLE_MANAGER_GESTOR (colaborador gestor de equipe) NÃO é excluído aqui.
10295|        // ROLE_MANAGER, sem casar ROLE_MANAGER_GESTOR / ROLE_MANAGER_VIEWER.
10461|        // Apenas SUPER_ADMIN tem bypass total. ROLE_MANAGER / ROLE_MANAGER_GESTOR são roles
10547|            || $this->isGranted('ROLE_MANAGER_GESTOR')
10693|            || $this->isGranted('ROLE_MANAGER_GESTOR')
10814|            || $this->isGranted('ROLE_MANAGER_GESTOR')
10820|        // Viewers (Supervisor global via ROLE_MANAGER_VIEWER, Membro com apenas can_view na tag SSMA)
10830|        // nao para ROLE_MANAGER_VIEWER generico ? ex.: Gestor Administrador no produto SSMA.
10843|            || $this->isGranted('ROLE_MANAGER_GESTOR')) {
11217|        if ($this->isGranted('ROLE_MANAGER_GESTOR')) {
11418|            || $this->isGranted('ROLE_MANAGER_GESTOR')
11513|                    if (!$memberUser || !in_array('ROLE_MANAGER_GESTOR', $memberUser->getRoles(), true)) {
11620|                if (in_array('ROLE_MANAGER_GESTOR', $memberRoles, true)) {
11954|            || $this->isGranted('ROLE_MANAGER_GESTOR')
11979|        // Usuários com ROLE_USER + tag SSMA (sem ROLE_MANAGER_VIEWER global) não são detectados pelas
12021|            || $this->isGranted('ROLE_MANAGER_GESTOR')
12245|            && !$this->isGranted('ROLE_MANAGER_GESTOR')) {
12286|            && !$this->isGranted('ROLE_MANAGER_GESTOR')
12491|                    || $this->isGranted('ROLE_MANAGER_GESTOR')
12513|                    || $this->isGranted('ROLE_MANAGER_GESTOR'),
18648|     * Opções de "Gestor responsável" no modal de ocorrência: ROLE_MANAGER_GESTOR + tags Gestor/Supervisor de Equipe no produto SSMA.
18943|                    in_array('ROLE_MANAGER_GESTOR', $user->getRoles(), true)
18944|                    || in_array('ROLE_MANAGER_VIEWER', $user->getRoles(), true)
19116|            || $this->isGranted('ROLE_MANAGER_GESTOR')
19139|            $this->isGranted('ROLE_MANAGER_VIEWER')
19141|            && !$this->isGranted('ROLE_MANAGER_GESTOR')
23531|        $isAdmin       = $this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER') || $this->isGranted('ROLE_MANAGER_GESTOR');
23779|        $isAdmin       = $this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER') || $this->isGranted('ROLE_MANAGER_GESTOR');
24356|                || in_array('ROLE_MANAGER_GESTOR', $roles, true);

File: src/Controller/UserAdminController.php
Match lines: 2
786|                    $user->setRoles(array('ROLE_MANAGER_GESTOR'));
788|                    $user->setRoles(array('ROLE_MANAGER_VIEWER'));

{"search_text": "PermissionTagByMemberService"}

Note: The results have been truncated. Only showing first 100 results.
File: docs/ChatPrincipal/permission/colaborado_time_equipe.txt
Match lines: 1
121|### **PermissionTagByMemberService**

File: docs/RESUMO-SESSAO.md
Match lines: 2
18|| `src/Service/PermissionTagByMemberService.php` | Property + construtor + 3 queries |
55|- `src/Service/PermissionTagByMemberService.php`

File: docs/engineering/pr/feature-ssma-automation-team-dropdown-new-production/PR_descricao_feature-ssma-automation-team-dropdown-new-production.md
Match lines: 1
54|| `src/Service/PermissionTagByMemberService.php` | Tag PTBM de gestão prevalece sobre global Membro |

File: docs/engineering/pr/homolog/PR_commits_homolog.txt
Match lines: 5
2352|3f73c4d5b1 refactor(ssma): tornar slug do produto-pai configuravel via .env. Introduz ssma.parent_product_slug em services.yaml lido de SSMA_PARENT_PRODUCT_SLUG no .env. Injeta via DI em SsmaController, PermissionTagByMemberService, GlobalPermissionListener, PermissionTabService e MemberPermissionExtension. Remove hardcoded 'saude-e-seguranca' em queries de permissao. Adiciona debug-7aad93.log ao .gitignore.
2360|7e2be60477 fix: restore PermissionTagByMemberService in SsmaController constructor to match server DI cache
2365|f6f16cfbe7 fix: delegate SSMA permission tag resolution to PermissionTagByMemberService - SsmaController::resolveSsmaProductPermissionTagForMember was querying PermissionTagByMember directly, bypassing service logic for stale/auto-propagated tags. Now injects PermissionTagByMemberService to ensure consistent resolution and fix ssmaCanRegisterNewOccurrence for Yann-like cases.
3554|d69d72ce14 Enhance SuppliersController delete method to include permission checks using PermissionTagByMemberService. Update SQL queries in FinancialDeleteGuardService to filter based on status for better integrity during deletions. Add unit tests for delete permission handling in SuppliersController and ensure proper dependency checks in FinancialDeleteGuardService.
10245|47c4d8f43b Refactor TimesheetDashController to inject PermissionTagByMemberService and simplify permission tag retrieval (Micael Fix) Added google cleanup again (lost in past merges)

File: docs/engineering/pr/hotfix-ssma-ap-validacao-etapa1-new-production/PR_commits_hotfix-ssma-ap-validacao-etapa1-new-production.txt
Match lines: 1
36|1d4e02e5d5 fix(manager): restaura import de PermissionTagByMemberService no build

File: docs/finance/02-payables-module.md
Match lines: 1
453|#### **PermissionTagByMemberService**

File: docs/finance/03-receivables-module.md
Match lines: 1
382|#### **PermissionTagByMemberService**

File: docs/finance/07-services.md
Match lines: 6
5|- [PermissionTagByMemberService](#permissiontagbymemberservice)
16|1. **PermissionTagByMemberService** - Controle de permissões
21|## 🔐 PermissionTagByMemberService
23|**Arquivo**: `src/Service/PermissionTagByMemberService.php`
165|    private PermissionTagByMemberService $permissionService;
170|        PermissionTagByMemberService $permissionService

File: docs/financeiro/PADRAO_PERMISSOES_HUB_FINANCEIRO_REFERENCIA_FORNECEDORES.md
Match lines: 2
26|| V7 | **Supervisor de equipe**: escopo time via `PermissionTagByMemberService::getUserTeamMemberIds`, mas **exclui** usuários com tag global **Gestor de Equipe**, **Gestor Administrador** ou **Supervisor** (empresa) do conjunto de IDs visíveis? | `excludeGestorEquipeAndAdministradorUserIdsFromScope()` / idem Centros de custo |
152|5. Se ainda sem tag: `PermissionTagByMemberService::getPermissionTag($companyMember, $product)`.  

File: docs/logs/engineering/backend_php_inventory.md
Match lines: 1
366|| src/Service/PermissionTagByMemberService.php | src/services | 0 | 0 | 0 | 0 | 0 | 1 | 0 | 0 | 0 |

File: docs/qa/modulo_financeiro/v2/QA_commits_modulo_financeiro.txt
Match lines: 1
2|7206bb863 Enhance SuppliersController delete method to include permission checks using PermissionTagByMemberService. Update SQL queries in FinancialDeleteGuardService to filter based on status for better integrity during deletions. Add unit tests for delete permission handling in SuppliersController and ensure proper dependency checks in FinancialDeleteGuardService.

File: src/Command/TestSsmaEventModalListsCommand.php
Match lines: 3
9|use App\Service\PermissionTagByMemberService;
37|        private PermissionTagByMemberService $permissionTagByMemberService,
97|            $resolvedTag = $this->permissionTagByMemberService->getPermissionTag($member, $product);

File: src/Controller/BankAccountsPlanningAccessTrait.php
Match lines: 4
14|use App\Service\PermissionTagByMemberService;
42|        PermissionTagByMemberService $permissionTagService,
121|        PermissionTagByMemberService $permissionTagService,
406|        PermissionTagByMemberService $permissionTagService

File: src/Controller/BankReturnsCnabFilePermissionsTrait.php
Match lines: 1
288|                $this->permissionTagByMemberService,

File: src/Controller/BankReturnsController.php
Match lines: 11
44|use App\Service\PermissionTagByMemberService;
56|    private PermissionTagByMemberService $permissionTagByMemberService;
63|        PermissionTagByMemberService $permissionTagByMemberService,
69|        $this->permissionTagByMemberService = $permissionTagByMemberService;
744|        $ctx = $this->resolvePayablesFinancePermissionContext($em, $this->permissionTagByMemberService);
819|            $ctx = $this->resolvePayablesFinancePermissionContext($em, $this->permissionTagByMemberService);
906|            $ctx = $this->resolvePayablesFinancePermissionContext($em, $this->permissionTagByMemberService);
1585|            $ctx = $this->resolvePayablesFinancePermissionContext($em, $this->permissionTagByMemberService);
1753|            $ctx = $this->resolvePayablesFinancePermissionContext($em, $this->permissionTagByMemberService);
3098|            $ctx = $this->resolvePayablesFinancePermissionContext($em, $this->permissionTagByMemberService);
3385|                $this->permissionTagByMemberService,

File: src/Controller/BanksController.php
Match lines: 22
14|use App\Service\PermissionTagByMemberService;
197|        PermissionTagByMemberService $permissionTagService
291|    public function downloadBankAccountsTemplate(EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): BinaryFileResponse
448|    public function importBankAccounts(Request $request, EntityManagerInterface $em, FinancialSpreadsheetService $spreadsheet, PermissionTagByMemberService $permissionTagService): JsonResponse
661|    public function exportBankAccounts(Request $request, EntityManagerInterface $em, FinancialSpreadsheetService $spreadsheet, PermissionTagByMemberService $permissionTagService): StreamedResponse
855|        PermissionTagByMemberService $permissionTagService,
894|        PermissionTagByMemberService $permissionTagByMemberService,
899|        $bankAccess = $this->resolveBankAccountsPlanningAccess($em, $permissionTagByMemberService);
922|            'canManagePermissions' => $permissions['is_admin'] || $this->canManageFinancialMemberTabPermissions($em, $permissionTagByMemberService),
929|    private function canEditBankModule(EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): bool
943|        PermissionTagByMemberService $permissionTagService
996|        PermissionTagByMemberService $permissionTagService
1081|    public function getOptions(EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
1177|    public function listManagerOptions(EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
1364|    public function create(Request $request, EntityManagerInterface $em, ValidatorInterface $validator, PermissionTagByMemberService $permissionTagService): JsonResponse
1562|    public function update(string $id, Request $request, EntityManagerInterface $em, ValidatorInterface $validator, PermissionTagByMemberService $permissionTagService): JsonResponse
1823|    public function delete(string $id, Request $request, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
1931|    public function listCnabAgreements(string $bankAccountId, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
1995|    public function createCnabAgreement(string $bankAccountId, Request $request, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
2140|    public function updateCnabAgreement(string $bankAccountId, string $agreementId, Request $request, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
2248|    public function toggleCnabAgreement(string $bankAccountId, string $agreementId, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
2324|    public function deleteCnabAgreement(string $bankAccountId, string $agreementId, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse

File: src/Controller/BudgetsController.php
Match lines: 20
37|use App\Service\PermissionTagByMemberService;
103|        PermissionTagByMemberService $permissionTagService,
182|        PermissionTagByMemberService $permissionTagService,
362|        PermissionTagByMemberService $permissionTagService,
460|        PermissionTagByMemberService $permissionTagService,
1420|        PermissionTagByMemberService $permissionTagService
1692|        PermissionTagByMemberService $permissionTagService
1978|        PermissionTagByMemberService $permissionTagService
2083|        PermissionTagByMemberService $permissionTagService
2138|        PermissionTagByMemberService $permissionTagService
2189|        PermissionTagByMemberService $permissionTagService
2259|    public function getOptions(EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
2310|        PermissionTagByMemberService $permissionTagService
2372|    public function getUsers(EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
2471|        PermissionTagByMemberService $permissionTagService
2527|        PermissionTagByMemberService $permissionTagService
2799|        PermissionTagByMemberService $permissionTagService
2850|        PermissionTagByMemberService $permissionTagService
3160|        PermissionTagByMemberService $permissionTagService
3323|        PermissionTagByMemberService $permissionTagService

File: src/Controller/CalendarMemberController.php
Match lines: 18
39|use App\Service\PermissionTagByMemberService;
101|    private PermissionTagByMemberService $permissionTagByMemberService;
127|        PermissionTagByMemberService $permissionTagByMemberService,
151|        $this->permissionTagByMemberService = $permissionTagByMemberService;
290|                $permissionTag = $this->permissionTagByMemberService->getPermissionTag($companyMemberT, $product);
296|            $permissionTag = $this->permissionTagByMemberService->getPermissionTagGestor();
660|            $permissionTagByMemberService = new PermissionTagByMemberService($em);
662|            $permissionTag = $permissionTagByMemberService->getPermissionTag($member, $productForMemberTab);
663|            $globalPermissionTag = $permissionTagByMemberService->getGlobalPermissionTag($member);
666|            $linkCustomPermissionsTags = $permissionTagByMemberService->getPermissionsByMember($member);
671|                $tempPermissionTag = $permissionTagByMemberService->getPermissionTag($member, $productPermissionTag);
2893|        if ($this->permissionTagByMemberService) {
2894|            $tag = $this->permissionTagByMemberService->getPermissionTag($companyMember, $product);
2941|        $permissionTag = $this->permissionTagByMemberService->getPermissionTag($companyMember, $product);
3056|        $permissionTag = $this->permissionTagByMemberService->getPermissionTag($companyMember, $product);
3266|                $permissionTag = $this->permissionTagByMemberService->getPermissionTag($companyMember, $product);
4255|                $permissionTag = $this->permissionTagByMemberService->getPermissionTag($companyMember, $product);
5628|            $permissionTag = $this->permissionTagByMemberService->getPermissionTag($companyMember, $product);

File: src/Controller/CnabController.php
Match lines: 5
16|use App\Service\PermissionTagByMemberService;
42|    private PermissionTagByMemberService $permissionTagByMemberService;
48|        PermissionTagByMemberService $permissionTagByMemberService,
53|        $this->permissionTagByMemberService = $permissionTagByMemberService;
62|            $ctx = $this->resolvePayablesFinancePermissionContext($em, $this->permissionTagByMemberService);

File: src/Controller/CompanyController.php
Match lines: 12
100|use App\Service\PermissionTagByMemberService;
2819|        $permissionTagByMemberService = new PermissionTagByMemberService($em);
2822|        $members = $this->getCompanyMembersWithPermissionsAndDetails($company, $product, $permissionTagByMemberService);
3633|        PermissionTagByMemberService $permissionTagByMemberService,
3997|        $permissionTagByMemberService = new PermissionTagByMemberService($em);
3998|        $membersWithPermissions = $this->getCompanyMembersWithPermissionsAndDetails($company, $product, $permissionTagByMemberService);
5963|    public function getCompanyMembersWithPermissionsAndDetails(Company $company, Product $product, PermissionTagByMemberService $permissionTagByMemberService ): array
6088|                    $permissionTag = $permissionTagByMemberService->getPermissionTag($member, $product);
6114|                    $globalPermissionTag = $permissionTagByMemberService->getGlobalPermissionTag($member);
6144|                    // $permissionTagByMemberService->syncAllCustomPermissions($company);
6146|                    $linkCustomPermissionsTags = $permissionTagByMemberService->getPermissionsByMember($member);
6158|                        $tempPermissionTag = $permissionTagByMemberService->getPermissionTag($member, $productPermissionTag);

File: src/Controller/Contractor/EmpresasParceirasController.php
Match lines: 3
14|use App\Service\PermissionTagByMemberService;
31|        private PermissionTagByMemberService $permissionTagByMemberService,
635|        return $this->permissionTagByMemberService->getPermissionTag($member, $product);

File: src/Controller/CostCentersController.php
Match lines: 18
30|use App\Service\PermissionTagByMemberService;
139|        PermissionTagByMemberService $permissionTagService
444|        PermissionTagByMemberService $permissionTagService
1145|    public function downloadCostCentersTemplate(EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): BinaryFileResponse
1544|    public function importCostCenters(Request $request, EntityManagerInterface $em, FinancialSpreadsheetService $spreadsheet, PermissionTagByMemberService $permissionTagService): JsonResponse
1919|    public function exportCostCenters(Request $request, EntityManagerInterface $em, FinancialSpreadsheetService $spreadsheet, PermissionTagByMemberService $permissionTagService): StreamedResponse
2078|        PermissionTagByMemberService $permissionTagService
2133|        PermissionTagByMemberService $permissionTagService
2193|    public function getUsers(EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
2350|        PermissionTagByMemberService $permissionTagService
2386|        PermissionTagByMemberService $permissionTagService
2468|        PermissionTagByMemberService $permissionTagService
2544|        PermissionTagByMemberService $permissionTagService
2559|        PermissionTagByMemberService $permissionTagService
2745|        PermissionTagByMemberService $permissionTagService
3070|         PermissionTagByMemberService $permissionTagService
3161|         PermissionTagByMemberService $permissionTagService
3482|        PermissionTagByMemberService $permissionTagService

File: src/Controller/CrmOpportunityController.php
Match lines: 2
51|use App\Service\PermissionTagByMemberService;
398|        PermissionTagByMemberService $permissionTagService,

File: src/Controller/FinancialPlanningCanManagePermissionsTrait.php
Match lines: 2
11|use App\Service\PermissionTagByMemberService;
22|        PermissionTagByMemberService $permissionTagService,

File: src/Controller/LicenseController.php
Match lines: 9
24|use App\Service\PermissionTagByMemberService;
853|            $permissionTagByMemberService = new PermissionTagByMemberService($entityManager);
857|            $companyMemberUser = $permissionTagByMemberService->getCompanyMember($v_user, $company);
859|            $userTeamsNamesArray = $permissionTagByMemberService->getCompanyMemberTemsNames($companyMemberUser, $company);
861|            $userTeamsIdArray = $permissionTagByMemberService->getUserTeamMemberIds($companyMemberUser, $company);
863|            $invitationTeamsIdArray = $permissionTagByMemberService->getTeamInvitationIds($companyMemberUser, $company);
865|            $permissionTagUser = $permissionTagByMemberService->getPermissionTag($companyMemberUser, $product);
891|                    $licenseCompanyMember = $permissionTagByMemberService->getCompanyMember($user, $company);
904|                    $companyMemberTeamsIds = $permissionTagByMemberService->getCompanyMemberTemsIds($licenseCompanyMember); // Me retorna uma array com os IDs de equipes

File: src/Controller/ManagerController.php
Match lines: 6
45|use App\Service\PermissionTagByMemberService;
83|    private $permissionTagByMemberService;
104|        PermissionTagByMemberService $permissionTagByMemberService,
127|        $this->permissionTagByMemberService = $permissionTagByMemberService;
1555|        if ($this->permissionTagByMemberService) {
1557|            $permissionTagAssociations = $this->permissionTagByMemberService->findByMember($companyMember);

File: src/Controller/OnboardingActivityController.php
Match lines: 1
16|use App\Service\PermissionTagByMemberService;

File: src/Controller/OnboardingController.php
Match lines: 5
37|use App\Service\PermissionTagByMemberService;
195|        $permissionTagByMemberService = new PermissionTagByMemberService($entityManager);
200|            $permissionTagByMemberService
361|        $permissionTagByMemberService = new PermissionTagByMemberService($entityManager);
366|            $permissionTagByMemberService

File: src/Controller/OrganizationalRoleDetailsController.php
Match lines: 6
10|use App\Service\PermissionTagByMemberService;
20|    private PermissionTagByMemberService $permissionTagByMemberService;
24|        PermissionTagByMemberService $permissionTagByMemberService
27|        $this->permissionTagByMemberService = $permissionTagByMemberService;
44|        $customPermissionsTags = $this->permissionTagByMemberService->getPermissionsByMember($companyMember);
316|            // são gerenciadas pelo PermissionTagByMemberService

File: src/Controller/OrganogramaController.php
Match lines: 33
29|use App\Service\PermissionTagByMemberService;
174|            $permissionTagByMemberService = new PermissionTagByMemberService($entityManager);
175|            $companyMemberUser = $permissionTagByMemberService->getCompanyMember($user, $company);
181|                $permissionTagUser = $permissionTagByMemberService->getPermissionTagGestor();
183|                $permissionTagUser = $permissionTagByMemberService->getPermissionTag($companyMemberUser, $product);
185|                $permissionTagUser = $permissionTagByMemberService->getPermissionTagGestor();
254|                $hierarchicalResult = $this->buildHierarchyFromSnapshots($snapshots, $invitationRepository, $permissionTagByMemberService);
263|                $hierarchicalResult = $this->buildHierarchy($companyMembers, $invitationRepository, $permissionTagByMemberService);
374|                    $permissionTag = $permissionTagByMemberService->getPermissionTag($member, $product);
389|                        $globalPermissionTag = $permissionTagByMemberService->getGlobalPermissionTag($member);
411|                        // $permissionTagByMemberService->syncAllCustomPermissions($company);
413|                        $linkCustomPermissionsTags = $permissionTagByMemberService->getPermissionsByMember($member);
425|                            $tempPermissionTag = $permissionTagByMemberService->getPermissionTag($member, $productPermissionTag);
888|            $permissionTagByMemberService = new PermissionTagByMemberService($this->entityManager);
890|            $hierarchicalResult = $this->buildHierarchyFromSnapshots($snapshots, $invitationRepository, $permissionTagByMemberService);
1935|    public function buildHierarchy(array $members, $invitationRepository, $permissionTagByMemberService, $parentId = null, &$updatedRoleIds = null)
1976|            $childrenResult = $this->buildHierarchy($members, $invitationRepository, $permissionTagByMemberService, $member->getId(), $updatedRoleIds);
2395|        $permissionTagByMemberService = new PermissionTagByMemberService($entityManager);
2396|        $companyMemberUser = $permissionTagByMemberService->getCompanyMember($user, $company);
2400|            $permissionTagUser = $permissionTagByMemberService->getPermissionTagGestor();
2402|            $permissionTagUser = $permissionTagByMemberService->getPermissionTag($companyMemberUser, $product);
2404|            $permissionTagUser = $permissionTagByMemberService->getPermissionTagGestor();
2454|        $hierarchicalResult = $this->buildSimulationHierarchy($organogram, $companyMembers, $invitationRepository, $permissionTagByMemberService);
2546|            $permissionTag = $permissionTagByMemberService->getPermissionTag($member, $product);
2557|            $globalPermissionTag = $permissionTagByMemberService->getGlobalPermissionTag($member);
2574|            // $permissionTagByMemberService->syncAllCustomPermissions($company);
2575|            $linkCustomPermissionsTags = $permissionTagByMemberService->getPermissionsByMember($member);
2585|                $tempPermissionTag = $permissionTagByMemberService->getPermissionTag($member, $productPermissionTag);
5323|    public function buildSimulationHierarchy(Organogram $simulation, array $members, $invitationRepository, $permissionTagByMemberService, $parentId = null, &$updatedRoleIds = null, $includePartners = false)
5524|                $childrenResult = $this->buildSimulationHierarchy($simulation, $members, $invitationRepository, $permissionTagByMemberService, $parentIdForRecursion, $updatedRoleIds);
5750|                    $partnerChildrenResult = $this->buildSimulationHierarchy($simulation, $members, $invitationRepository, $permissionTagByMemberService, $partnerSimRole->getId(), $updatedRoleIds);
8731|    public function buildHierarchyFromSnapshots(array $snapshots, $invitationRepository, $permissionTagByMemberService, $parentId = null, &$updatedRoleIds = null)
8770|            $childrenResult = $this->buildHierarchyFromSnapshots($snapshots, $invitationRepository, $permissionTagByMemberService, $snapshot->getId(), $updatedRoleIds);

File: src/Controller/PPSController.php
Match lines: 2
323|        $permissionTagByMemberService = new \App\Service\PermissionTagByMemberService($this->em);
325|            $organogram, $visibleCompanyMembers, $invitationRepository, $permissionTagByMemberService

File: src/Controller/PayablesController.php
Match lines: 25
15|use App\Service\PermissionTagByMemberService;
415|    private function assertPayablesImportAllowed(User $user, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): void
427|    private function assertPayablesExportAllowed(User $user, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): void
572|    public function index(EntityManagerInterface $em, PermissionTagByMemberService $permissionTagByMemberService, AccountPayableRepository $repository): Response
576|        $ctx = $this->resolvePayablesFinancePermissionContext($em, $permissionTagByMemberService);
630|    public function stats(AccountPayableRepository $repository, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
769|    public function listJson(AccountPayableRepository $repository, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
943|    public function getOptions(EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
1088|    public function getMembersOptions(Request $request, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
1186|    public function listPayablesResponsibleOptions(EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
1222|    public function show(string $id, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
1499|    public function searchSuppliers(Request $request, EntityManagerInterface $em, CnpjApiService $cnpjService, PermissionTagByMemberService $permissionTagService): JsonResponse
1659|    public function create(Request $request, EntityManagerInterface $em, ValidatorInterface $validator, PermissionTagByMemberService $permissionTagService, BrazilianHolidayService $holidayService): JsonResponse
2142|    public function update(string $id, Request $request, EntityManagerInterface $em, ValidatorInterface $validator, PermissionTagByMemberService $permissionTagService): JsonResponse
3100|    public function delete(string $id, Request $request, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
3282|    public function updateStatus(string $id, Request $request, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
3797|    public function duplicate(string $id, Request $request, EntityManagerInterface $em, ValidatorInterface $validator, PermissionTagByMemberService $permissionTagService): JsonResponse
3992|        PermissionTagByMemberService $permissionTagService
6221|    public function bankSendList(Request $request, EntityManagerInterface $em, AccountPayableRepository $repository, PermissionTagByMemberService $permissionTagService): JsonResponse
6461|        PermissionTagByMemberService $permissionTagService
6873|    public function cnabRemittanceItemsJson(string $id, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
6979|    public function downloadCnabRemittance(string $id, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): Response
7166|    public function exportPayables(Request $request, EntityManagerInterface $em, FinancialSpreadsheetService $spreadsheet, PermissionTagByMemberService $permissionTagService): StreamedResponse
7311|    public function downloadPayablesTemplate(EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): Response
7596|    public function importPayables(Request $request, EntityManagerInterface $em, FinancialSpreadsheetService $spreadsheet, PermissionTagByMemberService $permissionTagService): JsonResponse

File: src/Controller/PayablesFinancePermissionContextTrait.php
Match lines: 6
15|use App\Service\PermissionTagByMemberService;
100|        PermissionTagByMemberService $permissionTagService
678|        PermissionTagByMemberService $permissionTagService
725|        PermissionTagByMemberService $permissionTagService,
750|        PermissionTagByMemberService $permissionTagService,
831|        PermissionTagByMemberService $permissionTagService,

File: src/Controller/ReceivablesController.php
Match lines: 29
15|use App\Service\PermissionTagByMemberService;
114|    private function getReceivablesModulePermissionFlags(User $user, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): array
157|    private function canPerformReceivablesAction(?User $user, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService, string $ability): bool
541|        PermissionTagByMemberService $permissionTagService
749|    private function assertReceivablesExportAllowed(User $user, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): void
761|    private function assertReceivablesImportAllowed(User $user, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): void
1035|    public function listReceivablesResponsibleOptions(EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
1108|    public function index(EntityManagerInterface $em, PermissionTagByMemberService $permissionTagByMemberService, AccountReceivableRepository $repository): Response
1113|            $ctx = $this->resolveReceivablesFinancePermissionContext($em, $permissionTagByMemberService);
1140|            || $this->canManageFinancialMemberTabPermissions($em, $permissionTagByMemberService, $companyForPermissionTab);
1161|    public function stats(AccountReceivableRepository $repository, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
1307|    public function listJson(AccountReceivableRepository $repository, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
1683|    public function detailJson(string $id, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
1877|    public function cnabRemittancePublicIdForReceivableJson(string $id, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
1937|    public function getOptions(EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
2050|    public function searchCustomers(Request $request, EntityManagerInterface $em, CnpjApiService $cnpjService, PermissionTagByMemberService $permissionTagService): JsonResponse
2228|    public function quickCreateCustomer(Request $request, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
2362|    public function create(Request $request, EntityManagerInterface $em, BrazilianHolidayService $holidayService, PermissionTagByMemberService $permissionTagService): JsonResponse
2813|    public function update(Request $request, EntityManagerInterface $em, string $id, PermissionTagByMemberService $permissionTagService, BrazilianHolidayService $holidayService): JsonResponse
3619|    public function delete(EntityManagerInterface $em, string $id, Request $request, PermissionTagByMemberService $permissionTagService): JsonResponse
3769|    public function updateStatus(Request $request, EntityManagerInterface $em, string $id, PermissionTagByMemberService $permissionTagService): JsonResponse
4157|    public function duplicate(EntityManagerInterface $em, string $id, PermissionTagByMemberService $permissionTagService): JsonResponse
4263|    public function receiveInstallments(Request $request, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
4415|    public function exportReceivables(Request $request, EntityManagerInterface $em, FinancialSpreadsheetService $spreadsheet, PermissionTagByMemberService $permissionTagService): StreamedResponse
4461|    public function downloadReceivablesTemplate(EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): BinaryFileResponse
4762|    public function importReceivables(Request $request, EntityManagerInterface $em, FinancialSpreadsheetService $spreadsheet, PermissionTagByMemberService $permissionTagService): JsonResponse
5146|    public function bankSendList(Request $request, EntityManagerInterface $em, AccountReceivableRepository $repository, PermissionTagByMemberService $permissionTagService): JsonResponse
5303|        PermissionTagByMemberService $permissionTagService
5650|    public function cnabRemittanceItemsJson(string $id, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse

File: src/Controller/RefundsController.php
Match lines: 10
38|use App\Service\PermissionTagByMemberService;
289|        $permissionTagByMemberService = new PermissionTagByMemberService($em);
290|        $companyMember = $permissionTagByMemberService->getCompanyMember($user, $company);
306|                $roleTag = $permissionTagByMemberService->getGlobalPermissionTag($companyMember);
786|        $permissionTagByMemberService = new PermissionTagByMemberService($entityManager);
788|        $companyMemberUser = $permissionTagByMemberService->getCompanyMember($user, $company);
792|            $permissionTagUser = $permissionTagByMemberService->getPermissionTag($companyMemberUser, $product);
794|            $permissionTagUser = $permissionTagByMemberService->getPermissionTagGestor();
2871|        $permissionTagByMemberService = new PermissionTagByMemberService($em);
2872|        $permissionTag = $permissionTagByMemberService->getProductPermission($currentUser, 'members-teams');

File: src/Controller/SsmaController.php
Match lines: 8
36|use App\Service\PermissionTagByMemberService;
159|    private PermissionTagByMemberService $permissionTagByMemberService;
199|        PermissionTagByMemberService $permissionTagByMemberService,
238|        $this->permissionTagByMemberService     = $permissionTagByMemberService;
1177|        $tag = $this->permissionTagByMemberService->getPermissionTag($member, $occurrencesProduct);
10050|                    $occTag = $this->permissionTagByMemberService->getPermissionTag($member, $occProduct);
10105|            $resolved = $this->permissionTagByMemberService->getPermissionTag($member, $product);
18956|                    $tag = $this->permissionTagByMemberService->getPermissionTag($cm, $checkProduct);

File: src/Controller/SuppliersController.php
Match lines: 23
23|use App\Service\PermissionTagByMemberService;
148|    public function downloadSuppliersTemplate(PermissionTagByMemberService $permissionTagService): BinaryFileResponse
464|    public function importSuppliers(Request $request, EntityManagerInterface $em, FinancialSpreadsheetService $spreadsheet, PermissionTagByMemberService $permissionTagService): JsonResponse
773|    public function exportSuppliers(Request $request, EntityManagerInterface $em, FinancialSpreadsheetService $spreadsheet, PermissionTagByMemberService $permissionTagService): StreamedResponse
1036|        PermissionTagByMemberService $permissionTagService,
1324|        PermissionTagByMemberService $permissionTagService,
1606|    private function buildScopeUserIds(string $scope, User $user, ?CompanyMembers $companyMember, array $companyUserIds, PermissionTagByMemberService $permissionTagService): array
2020|    public function index(EntityManagerInterface $em, PermissionTagByMemberService $permissionTagByMemberService, SupplierRepository $supplierRepository): Response
2024|        $ctx = $this->resolveSupplierPermissionContext($em, $permissionTagByMemberService);
2050|    public function stats(SupplierRepository $supplierRepository, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagByMemberService): JsonResponse
2055|            $ctx = $this->resolveSupplierPermissionContext($em, $permissionTagByMemberService);
2094|    public function listJson(Request $request, SupplierRepository $supplierRepository, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagByMemberService): JsonResponse
2099|            $ctx = $this->resolveSupplierPermissionContext($em, $permissionTagByMemberService);
2186|    public function getOptions(EntityManagerInterface $em, PermissionTagByMemberService $permissionTagByMemberService): JsonResponse
2191|            $ctx = $this->resolveSupplierPermissionContext($em, $permissionTagByMemberService);
2258|    public function create(Request $request, EntityManagerInterface $em, ValidatorInterface $validator, PermissionTagByMemberService $permissionTagService): JsonResponse
2605|    public function show(string $id, SupplierRepository $supplierRepository, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
2699|    public function list(SupplierRepository $supplierRepository, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
2765|    public function update(string $id, Request $request, EntityManagerInterface $em, ValidatorInterface $validator, PermissionTagByMemberService $permissionTagService): JsonResponse
3177|    public function delete(string $id, Request $request, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse
3280|    public function toggleStatus(Request $request, string $id, EntityManagerInterface $entityManager, PermissionTagByMemberService $permissionTagService): JsonResponse
3328|    public function consultaCnpj(Request $request, EntityManagerInterface $em, \App\Service\CnpjApiService $cnpjService, PermissionTagByMemberService $permissionTagService): JsonResponse
3421|    public function consultaCpf(Request $request, EntityManagerInterface $em, PermissionTagByMemberService $permissionTagService): JsonResponse

File: src/Controller/TemplatesController.php
Match lines: 5
72|use App\Service\PermissionTagByMemberService;
98|    private PermissionTagByMemberService $permissionTagByMemberService;
100|    public function __construct(SessionInterface $session, Security $security, MemberService $memberService, EntityManagerInterface $entityManager,FeatureLimitSubscriber $featureLimitSubscriber, PermissionTagByMemberService $permissionTagByMemberService)
110|        $this->permissionTagByMemberService = $permissionTagByMemberService;
2993|            $permissionTag = $this->permissionTagByMemberService->getPermissionTag($myCompanyMember, $product);

File: src/Controller/TimesheetController.php
Match lines: 1
36|use App\Service\PermissionTagByMemberService;

File: src/Controller/TimesheetDashController.php
Match lines: 5
18|use App\Service\PermissionTagByMemberService;
28|    private PermissionTagByMemberService $permissionTagByMemberService;
30|    public function __construct(Security $security, PermissionTagByMemberService $permissionTagByMemberService)
33|        $this->permissionTagByMemberService = $permissionTagByMemberService;
104|            $permissionTag = $this->permissionTagByMemberService->getPermissionTag($myCompanyMember, $product);

File: src/EventListener/GlobalPermissionListener.php
Match lines: 3
5|use App\Service\PermissionTagByMemberService;
33|    private PermissionTagByMemberService $permissionService;
93|        PermissionTagByMemberService $permissionService,

File: src/Service/MemberService.php
Match lines: 6
306|    public function getCompanyMembersWithPermissionsAndDetails(CompanyEntity $company, Product $product, PermissionTagByMemberService $permissionTagByMemberService ): array
395|                    $permissionTag = $permissionTagByMemberService->getPermissionTag($member, $product);
421|                    $globalPermissionTag = $permissionTagByMemberService->getGlobalPermissionTag($member);
451|                    // $permissionTagByMemberService->syncAllCustomPermissions($company);
453|                    $linkCustomPermissionsTags = $permissionTagByMemberService->getPermissionsByMember($member);
465|                        $tempPermissionTag = $permissionTagByMemberService->getPermissionTag($member, $productPermissionTag);

File: src/Service/PermissionTagByMemberService.php
Match lines: 1
19|class PermissionTagByMemberService extends AbstractController

File: src/Service/QuestionnaireProcessorService.php
Match lines: 2
76|use App\Service\PermissionTagByMemberService;
2378|        $permissionService = new PermissionTagByMemberService($this->entityManager);

File: src/Service/RefundsTeamSupervisorCollaboratorScope.php
Match lines: 3
23|        private PermissionTagByMemberService $permissionTagByMemberService,
32|        $companyMember = $this->permissionTagByMemberService->getCompanyMember($user, $company);
40|            $teamUserIds = $this->permissionTagByMemberService->getUserTeamMemberIds($companyMember, $company);

File: src/Service/Ssma/Export/SsmaAbordagemExportAccessResolver.php
Match lines: 3
12|use App\Service\PermissionTagByMemberService;
34|        private PermissionTagByMemberService $permissionTagByMemberService,
69|        $tag = $this->permissionTagByMemberService->getPermissionTag($member, $product);

File: src/Service/Ssma/Export/SsmaInspectionExportAccessResolver.php
Match lines: 3
12|use App\Service\PermissionTagByMemberService;
39|        private PermissionTagByMemberService $permissionTagByMemberService,
74|        $tag = $this->permissionTagByMemberService->getPermissionTag($member, $product);

File: src/Service/Ssma/Export/SsmaOccurrenceExportAccessResolver.php
Match lines: 3
12|use App\Service\PermissionTagByMemberService;
34|        private PermissionTagByMemberService $permissionTagByMemberService,
69|        $tag = $this->permissionTagByMemberService->getPermissionTag($member, $product);

File: src/Service/Ssma/SsmaOccurrenceCreatePermissionService.php
Match lines: 3
15|use App\Service\PermissionTagByMemberService;
50|        private PermissionTagByMemberService $permissionTagByMemberService,
650|            return $this->permissionTagByMemberService->getPermissionTag($member, $product);

File: src/Service/Ssma/SsmaPermissionService.php
Match lines: 3
10|use App\Service\PermissionTagByMemberService;
32|        private PermissionTagByMemberService $permissionTagByMemberService,
217|            return $this->permissionTagByMemberService->getPermissionTag($member, $product);

File: src/Service/Ssma/SsmaPreventionHubAccessService.php
Match lines: 3
14|use App\Service\PermissionTagByMemberService;
41|        private PermissionTagByMemberService $permissionTagByMemberService,
67|            $tag = $this->permissionTagByMemberService->getPermissionTag($member, $product);

File: src/Service/Ssma/SsmaPreventionMutatePermissionService.php
Match lines: 4
13|use App\Service\PermissionTagByMemberService;
55|        private PermissionTagByMemberService $permissionTagByMemberService,
133|        $occurrencesTag = $this->permissionTagByMemberService->getPermissionTag($member, $occurrencesProduct);
224|        return $this->permissionTagByMemberService->getPermissionTag($member, $product);

File: src/Service/Ssma/SsmaRefusalRightMutatePermissionService.php
Match lines: 3
12|use App\Service\PermissionTagByMemberService;
35|        private PermissionTagByMemberService $permissionTagByMemberService,
129|        return $this->permissionTagByMemberService->getPermissionTag($member, $product);

File: src/Service/Ssma/SsmaStakeholderActionPermissionService.php
Match lines: 2
11|use App\Service\PermissionTagByMemberService;
22|        private PermissionTagByMemberService $permissionService,

File: src/Twig/MemberPermissionExtension.php
Match lines: 1
57|            ?? new SsmaPreventionHubAccessService($em, new \App\Service\PermissionTagByMemberService($em));

File: src/Twig/ProductPermissionsTwigExtension.php
Match lines: 16
20|use App\Service\PermissionTagByMemberService;
42|    private PermissionTagByMemberService $permissionTagByMemberService;
62|        PermissionTagByMemberService $permissionTagByMemberService,
81|        $this->permissionTagByMemberService = $permissionTagByMemberService;
270|                $tag = $this->permissionTagByMemberService->getGlobalPermissionTag($companyMember);
305|                $tag = $this->permissionTagByMemberService->getGlobalPermissionTag($companyMember);
311|                    $teamIds = $this->permissionTagByMemberService->getUserTeamMemberIds($companyMember, $company);
348|                    $planningTag = $this->permissionTagByMemberService->getGlobalPermissionTag($companyMember);
355|                    $teamIds = $this->permissionTagByMemberService->getUserTeamMemberIds($companyMember, $company);
397|                    $planningTag = $this->permissionTagByMemberService->getGlobalPermissionTag($companyMember);
404|                    $teamIds = $this->permissionTagByMemberService->getUserTeamMemberIds($companyMember, $company);
444|                $tag = $this->permissionTagByMemberService->getGlobalPermissionTag($companyMember);
450|                    $teamIds = $this->permissionTagByMemberService->getUserTeamMemberIds($companyMember, $company);
502|            $permissionTag = $this->permissionTagByMemberService->getPermissionTag($companyMember, $product);
505|            $permissionTag = $this->permissionTagByMemberService->getGlobalPermissionTag($companyMember);
565|        $tag = $this->permissionTagByMemberService->getGlobalPermissionTag($companyMember);

File: tests/Controller/BankReturnsCnabFilePermissionsTest.php
Match lines: 2
15|use App\Service\PermissionTagByMemberService;
343|        $perm = $this->createMock(PermissionTagByMemberService::class);

File: tests/Controller/CostCentersControllerPermissionTest.php
Match lines: 6
14|use App\Service\PermissionTagByMemberService;
45|        PermissionTagByMemberService $permissionTagService
222|        $permissionService = $this->createMock(PermissionTagByMemberService::class);
308|        $permissionService = $this->createMock(PermissionTagByMemberService::class);
990|     * @return array{0: FixedCtxCostCentersController, 1: EntityManagerInterface, 2: PermissionTagByMemberService}
996|        $permissionService = $this->createMock(PermissionTagByMemberService::class);

File: tests/Controller/PayablesControllerPaymentReversalTest.php
Match lines: 2
19|use App\Service\PermissionTagByMemberService;
224|        $permissionTag = $this->createMock(PermissionTagByMemberService::class);

File: tests/Controller/SuppliersControllerDeletePermissionTest.php
Match lines: 3
16|use App\Service\PermissionTagByMemberService;
29|        $permissionTagService = $this->createMock(PermissionTagByMemberService::class);
83|        $permissionTagService = $this->createMock(PermissionTagByMemberService::class);

File: tests/Controller/SuppliersControllerPermissionMatrixTest.php
Match lines: 3
19|use App\Service\PermissionTagByMemberService;
426|     * @return array{0:SuppliersController,1:EntityManagerInterface,2:PermissionTagByMemberService,3:FinancialSpreadsheetService}
432|        $permissionService = $this->createMock(PermissionTagByMemberService::class);

File: tests/Ssma/SsmaPermissionsRegressionTest.php
Match lines: 2
15|use App\Service\PermissionTagByMemberService;
700|        $ptbm = $this->createMock(PermissionTagByMemberService::class);

File: tests/Unit/Controller/CompanyControllerDeleteMemberTest.php
Match lines: 2
15|use App\Service\PermissionTagByMemberService;
255|            $this->createMock(PermissionTagByMemberService::class),

File: tests/Unit/Product/Ssma/GlobalPermissionListenerOccurrenceCreateWriteTest.php
Match lines: 2
15|use App\Service\PermissionTagByMemberService;
110|        $permissionService = $this->createMock(PermissionTagByMemberService::class);

File: tests/Unit/Product/Ssma/GlobalPermissionListenerPreventionWriteTest.php
Match lines: 2
15|use App\Service\PermissionTagByMemberService;
127|        $permissionService = $this->createMock(PermissionTagByMemberService::class);

File: tests/Unit/Product/Ssma/SsmaOccurrenceCreatePermissionServiceTest.php
Match lines: 6
16|use App\Service\PermissionTagByMemberService;
531|        $ptbm = $this->createMock(PermissionTagByMemberService::class);
588|        $ptbm = $this->createMock(PermissionTagByMemberService::class);
616|        $ptbm = $this->createMock(PermissionTagByMemberService::class);
629|        ?PermissionTagByMemberService $ptbm = null,
637|        $ptbm ??= $this->createMock(PermissionTagByMemberService::class);

File: tests/Unit/Product/Ssma/SsmaPermissionServiceTest.php
Match lines: 3
15|use App\Service\PermissionTagByMemberService;
288|        $ptbm = $this->createMock(PermissionTagByMemberService::class);
347|        $ptbm = $this->createMock(PermissionTagByMemberService::class);

File: tests/Unit/Product/Ssma/SsmaPreventionMutatePermissionServiceTest.php
Match lines: 3
13|use App\Service\PermissionTagByMemberService;
59|        $permissionTagByMember = $this->createMock(PermissionTagByMemberService::class);
79|            $this->createMock(PermissionTagByMemberService::class),

File: tests/Unit/Product/Ssma/SsmaRefusalRightMutatePermissionServiceTest.php
Match lines: 3
12|use App\Service\PermissionTagByMemberService;
82|            $this->createMock(PermissionTagByMemberService::class),
130|            $this->createMock(PermissionTagByMemberService::class),

File: tests/Unit/Product/Ssma/assert_branch_ui_fixes.php
Match lines: 1
506|$ptbmSvc = $root . '/src/Service/PermissionTagByMemberService.php';

{"search_text": "getCanDelete"}

File: docs/ChatPrincipal/permission/EXEMPLO_ASSESSMENT_360.md
Match lines: 1
234|if ($action === 'deletar' && !$permissionTag->getCanDelete()) {

File: docs/ChatPrincipal/permission/FLUXO_TECNICO_ENDPOINTS.md
Match lines: 2
86|    if ($action === 'delete' && !$permissionTag->getCanDelete()) {
291|        if (!$permissionTag->getCanDelete()) {

File: docs/ChatPrincipal/permission/GUIA_IMPLEMENTACAO_PERMISSOES.md
Match lines: 1
158|if ($action === 'deletar' && !$tag->getCanDelete()) {

File: docs/ChatPrincipal/permission/TEMPLATE_FERRAMENTA.md
Match lines: 1
205|if ($action === 'deletar' && !$permissionTag->getCanDelete()) {

File: docs/ChatPrincipal/permission/colaborado_time_equipe.txt
Match lines: 1
232|$canDelete = $permissionTag->getCanDelete();

File: java/src/main/java/com/metahuman/dto/company/PermissionTagDTO.java
Match lines: 1
69|    public Boolean getCanDelete() {

File: java/src/main/java/com/metahuman/dto/organograma/PermissionTagDTO.java
Match lines: 1
64|    public Boolean getCanDelete() { return canDelete; }

File: src/Command/TestMetasSuggestionsPermissaoCommand.php
Match lines: 1
193|        $io->writeln("   canDelete: " . ($permissionTag->getCanDelete() ? '✅ SIM' : '❌ NÃO'));

File: src/Controller/Api/CompanyApiController.php
Match lines: 1
1302|                    'canDelete' => $tag->getCanDelete(),

File: src/Controller/BankAccountsPlanningAccessTrait.php
Match lines: 1
93|                    $canDelete = (bool) $permissionTag->getCanDelete();

File: src/Controller/BudgetsController.php
Match lines: 4
151|                    $canDelete = (bool) $permissionTag->getCanDelete();
653|    private function budgetCanDelete(Budget $budget, User $user, array $budgetAccess): bool
1042|            $row['can_delete'] = $this->budgetCanDelete($budget, $viewer, $budgetAccess);
3367|            if ($user instanceof User && !$this->budgetCanDelete($budget, $user, $budgetAccess)) {

File: src/Controller/CalendarMemberController.php
Match lines: 1
1341|                        if ($permissionTag && !$permissionTag->getCanDelete()) {

File: src/Controller/CompanyAreaController.php
Match lines: 1
1363|            'delete' => (bool) $permissionTag->getCanDelete(),

File: src/Controller/CompanyController.php
Match lines: 3
3535|        $canDelete = $permissionTag ? (bool) $permissionTag->getCanDelete() : false;
6109|                        'canDelete' => $permissionTag->getCanDelete(),
6135|                        'canDelete' => $globalPermissionTag->getCanDelete(),

File: src/Controller/CostCentersController.php
Match lines: 1
205|        $canDeleteFlag = (bool) ($permissionTag?->getCanDelete() ?? false);

File: src/Controller/Finance/PayrollFinanceController.php
Match lines: 1
239|            'delete' => (bool) $tag->getCanDelete(),

File: src/Controller/HubController.php
Match lines: 1
1970|                    || (bool) $permission->getCanDelete()

File: src/Controller/OrganogramaController.php
Match lines: 2
518|            'canDelete' => $permissionTagUser->getCanDelete(),
2685|            'canDelete' => $permissionTagUser->getCanDelete(),

File: src/Controller/PayablesFinancePermissionContextTrait.php
Match lines: 1
183|        $canDeleteFlag = (bool) ($permissionTag?->getCanDelete() ?? false);

File: src/Controller/ReceivablesController.php
Match lines: 2
153|            'canDelete' => (bool) $tag->getCanDelete(),
582|        $canDeleteFlag = (bool) ($permissionTag?->getCanDelete() ?? false);

File: src/Controller/SsmaController.php
Match lines: 2
9616|                && !($tag->getCanDelete() ?? false);
10728|            || (bool) ($tag->getCanDelete() ?? false);

File: src/Controller/SuppliersController.php
Match lines: 1
1126|        $canDeleteFlag = (bool) ($permissionTag?->getCanDelete() ?? false);

File: src/Controller/TrainingModuleController.php
Match lines: 1
132|            $canDelete = (bool) $effectiveTag->getCanDelete();

File: src/Domains/FileManagement/v2/Service/GoogleDriveService.php
Match lines: 1
146|                error_log("  - Pode deletar: " . ($capabilities->getCanDelete() ? 'SIM' : 'NÃO'));

File: src/Entity/PermissionTag.php
Match lines: 1
181|    public function getCanDelete(): ?bool

File: src/EventListener/GlobalPermissionListener.php
Match lines: 5
581|                || ($permissionTag->getCanDelete() ?? false)
1109|            return $permissionTag->getCanDelete() ?? false;
1171|            && !($permTag->getCanDelete() ?? false)
1245|        $request->attributes->set('can_delete', $permissionTag->getCanDelete() ?? false);
1603|            $request->attributes->set('can_delete', $globalPermissionTag->getCanDelete() ?? false);

File: src/EventSubscriber/ProcessSubscriber.php
Match lines: 1
252|            'canDelete' => $permissionTag->getCanDelete() ?? false,

File: src/Service/Chat/ChatDataSourceService.php
Match lines: 1
889|                    'can_delete' => $tag->getCanDelete(),

File: src/Service/FieldExtractorService.php
Match lines: 2
211|            'canDelete' => $permissionTagUser->getCanDelete()
234|                'canDelete' => $permissionTag->getCanDelete()

File: src/Service/Goals/GoalPermissionService.php
Match lines: 1
63|        $canDelete = $isAdmin ? true : ($permissionTag ? $permissionTag->getCanDelete() : false);

File: src/Service/MemberPermissionService.php
Match lines: 1
347|        return $permission->getCanDelete() ?? false;

File: src/Service/MemberService.php
Match lines: 2
416|                        'canDelete' => $permissionTag->getCanDelete(),
442|                        'canDelete' => $globalPermissionTag->getCanDelete(),

File: src/Service/PeopleAnalytics/RiskIntelligenceSignalPermissionResolver.php
Match lines: 2
364|        $canDelete = $isCompanyActionRole || (bool) ($permissionTag?->getCanDelete() ?? false);
399|                $canDelete = (bool) ($permissionTag?->getCanDelete() ?? true);

File: src/Service/PermissionChecker.php
Match lines: 1
74|        return $permission ? $permission->getCanDelete() : false;

File: src/Service/PermissionTabService.php
Match lines: 1
325|                'canDelete' => $tag->getCanDelete()

File: src/Service/Ssma/SsmaPermissionService.php
Match lines: 1
204|            && !($tag->getCanDelete() ?? false);

File: src/Service/Ssma/SsmaPreventionMutatePermissionService.php
Match lines: 1
196|            || (bool) ($tag->getCanDelete() ?? false);

File: src/Service/Ssma/SsmaRefusalRightMutatePermissionService.php
Match lines: 1
110|            || (bool) ($tag->getCanDelete() ?? false);

File: src/Twig/MemberPermissionExtension.php
Match lines: 2
718|                || (bool) $permission->getCanDelete()
2041|        return $permission ? ($permission->getCanDelete() ?? false) : false;

File: tests/Controller/PayablesControllerPaymentReversalTest.php
Match lines: 1
138|        $membroTag->method('getCanDelete')->willReturn(false);

File: tests/Controller/SuppliersControllerDeletePermissionTest.php
Match lines: 1
95|        $permissionTag->method('getCanDelete')->willReturn(false);

File: tests/Unit/Product/ProfessionalAreas/CompanyAreaControllerTest.php
Match lines: 1
487|        $tag->method('getCanDelete')->willReturn(false);

{"end_line": 2080, "file_path": "src/Controller/SsmaController.php", "start_line": 2050}

File: src/Controller/SsmaController.php (Total lines: 27460)
IS_TRUNCATED: false
LINE_RANGE: 2050-2080
2050|
2051|        $result = $this->ssmaCauseTreeService->deleteTree((int) $company->getId(), $id);
2052|        if (!$result['success']) {
2053|            return new JsonResponse($result, 404);
2054|        }
2055|
2056|        return new JsonResponse([
2057|            'success' => true,
2058|            'message' => 'árvore removida com sucesso.',
2059|        ]);
2060|    }
2061|
2062|    private function getSsmaCompany(): ?Company
2063|    {
2064|        // Prioridade: current_company resolvido pelo GlobalPermissionListener a partir
2065|        // do selected_workspace da sessão. Isso garante que membros ROLE_USER (sem
2066|        // User::getCompany() definido) e membros ROLE_MANAGER_GESTOR (cujo User::getCompany()
2067|        // pode apontar para outra empresa) usem sempre a empresa correta do workspace ativo.
2068|        $req = $this->requestStack->getCurrentRequest();
2069|        if ($req) {
2070|            $fromAttr = $req->attributes->get('current_company');
2071|            if ($fromAttr instanceof Company) {
2072|                return $fromAttr;
2073|            }
2074|        }
2075|
2076|        /** @var User|null $user */
2077|        $user = $this->getUser();
2078|        return $user ? $user->getCompany() : null;
2079|    }
2080|

{"search_text": "contractorCanManagePermissions|contractorCanManage", "file_patterns": ["templates/"]}

No matches found

{"path_array": ["tests/Unit/Product/EmpresasParceiras/EmpresasParceirasControllerTest.php"]}

Error: diff not found for the requested paths

{"search_text": "canManage", "file_patterns": ["templates/contractor/*.twig"]}

File: templates/contractor/index.html.twig
Match lines: 2
22|    {% if contractorCanManagePermissions|default(false) %}
57|    {% if contractorCanManagePermissions|default(false) %}

File: templates/contractor/partials/_company_form_fields.html.twig
Match lines: 1
257|            {% if contractorCanManage|default(false) %}

File: templates/contractor/partials/_offcanvas_company_detail.html.twig
Match lines: 1
31|            {% if contractorCanManage|default(false) %}

File: templates/contractor/partials/_offcanvas_company_documents.html.twig
Match lines: 2
17|                {% if contractorCanManage|default(false) %}
36|        {% if contractorCanManage|default(false) %}

File: templates/contractor/partials/_offcanvas_company_form.html.twig
Match lines: 1
57|            {% if contractorCanManage|default(false) %}

File: templates/contractor/partials/_offcanvas_requirement_detail.html.twig
Match lines: 1
16|        {% if contractorCanManage|default(false) %}

File: templates/contractor/tabs/_tab_empresas.html.twig
Match lines: 6
108|        {% if contractorCanManage|default(false) %}
178|        {% if contractorCanManage|default(false) %}
218|    {% if contractorCanManage|default(false) %}
303|{% if contractorCanManage|default(false) %}
326|    {% if contractor_co_rows|length == 0 and not (contractorCanManage|default(false)) %}
444|    var CAN_MANAGE = {{ contractorCanManage|default(false) ? 'true' : 'false' }};

File: templates/contractor/tabs/_tab_requisitos_documentais.html.twig
Match lines: 6
115|        {% if contractorCanManage|default(false) %}
166|        {% if contractorCanManage|default(false) %}
206|    {% if contractorCanManage|default(false) %}
306|{% if contractorCanManage|default(false) %}
329|    {% if contractor_req_rows|length == 0 and not (contractorCanManage|default(false)) %}
411|    var CAN_MANAGE = {{ contractorCanManage|default(false) ? 'true' : 'false' }};

{"query_name": "contractor/index"}

templates/contractor/index.html.twig

{"query_name": "EmpresasParceirasTestCase"}

tests/Unit/Product/EmpresasParceiras/EmpresasParceirasTestCase.php

{"search_text": "new EmpresasParceirasController"}

File: tests/Unit/Product/EmpresasParceiras/EmpresasParceirasControllerTest.php
Match lines: 1
275|        $controller = new EmpresasParceirasController($requirementService, $companyService);

{"file_path": "config/packages/security.yaml"}

File: config/packages/security.yaml (Total lines: 185)
IS_TRUNCATED: false
LINE_RANGE: 1-185
1|security:
2|    # Guard authenticators only — avoid GuardBridgeAuthenticator deprecation (Symfony 5.3+)
3|    enable_authenticator_manager: true
4|    password_hashers:
5|        App\Entity\User:
6|            algorithm: auto
7|
8|    # https://symfony.com/doc/current/security.html#where-do-users-come-from-user-providers
9|    providers:
10|        # used to reload user from session & other features (e.g. switch_user)
11|        app_user_provider:
12|            id: App\Repository\UserRepository
13|    role_hierarchy:
14|        ROLE_SUPER_ADMIN: [ROLE_MANAGER]
15|        ROLE_MANAGER: [ROLE_ALLOWED_TO_SWITCH, ROLE_MANAGER_COMPANY, ROLE_MANAGER_TEAM, ROLE_MANAGER_PDI]
16|        ROLE_GERENTE_CONTA: [ROLE_USER]
17|        ROLE_DIRETOR_COMERCIAL: [ROLE_USER]
18|        ROLE_CS_ALERTAS: [ROLE_USER]
19|        ROLE_FINANCIAL_ALERT: [ROLE_USER]
20|    #role_hierarchy:
21|    #    ROLE_SUPER_ADMIN:       ROLE_ADMIN
22|    #    ROLE_ADMIN:            ROLE_MANAGER
23|    #    ROLE_COMPANY_ADMIN:    ROLE_COMPANY_MANAGER
24|    #    ROLE_COMPANY_MANAGER:  ROLE_USER
25|    #    ROLE_USER:             ~
26|    firewalls:
27|        dev:
28|            pattern: ^/(_(profiler|wdt)|css|images|js)/
29|            security: false
30|        main:
31|            switch_user: { role: ROLE_MANAGER }
32|            # Necessário com enable_authenticator_manager: false (Guard)
33|            provider: app_user_provider
34|            guard:
35|                authenticators:
36|                    - App\Security\LoginFormAuthenticator
37|            logout:
38|                path: app_logout
39|            # Lembrar-me: o formulário envia _remember_me; sem isto o cookie não era gravado.
40|            remember_me:
41|                secret: '%kernel.secret%'
42|                lifetime: 604800
43|                path: /
44|                name: REMEMBERME
45|                secure: auto
46|                httponly: true
47|                samesite: lax
48|            # activate different ways to authenticate
49|            # https://symfony.com/doc/current/security.html#firewalls-authentication
50|
51|            # https://symfony.com/doc/current/security/impersonating_user.html
52|            # switch_user: true
53|
54|    # Easy way to control access for large sections of your site
55|    # Note: Only the *first* access control that matches will be used
56|    access_control:
57|        - { path: ^/user/show, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER] }
58|        - { path: ^/connect/microsoft/callback, roles: PUBLIC_ACCESS }
59|        - { path: ^/ws, roles: PUBLIC_ACCESS }
60|        - { path: ^/training, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
61|        - { path: ^/notifications-center, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
62|        - { path: ^/manager/communication-center, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
63|        - { path: ^/manager/ssma, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_SUPER_ADMIN, ROLE_MANAGER_VIEWER, ROLE_USER], methods: [POST, PUT, PATCH, DELETE] }
64|        - { path: ^/manager/ssma, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_SUPER_ADMIN, ROLE_MANAGER_VIEWER, ROLE_USER] }
65|        - { path: ^/templates-whatsapp, roles: [ROLE_SUPER_ADMIN] }
66|        - { path: ^/token, roles: PUBLIC_ACCESS }
67|        - { path: ^/manager/ai-training-module/gerenciamento/, roles: [ROLE_MANAGER, ROLE_USER, ROLE_SUPER_ADMIN] }
68|        - { path: ^/manager/ai-training-module/list/, roles: [ROLE_MANAGER, ROLE_USER, ROLE_SUPER_ADMIN] }
69|        - { path: ^/login, roles: PUBLIC_ACCESS }
70|        - { path: ^/user/change-temporary-password, roles: PUBLIC_ACCESS }
71|        - { path: ^/access, roles: PUBLIC_ACCESS }
72|        - { path: ^/manager/ai-training-module/dashboard/, roles: [ROLE_MANAGER, ROLE_USER, ROLE_SUPER_ADMIN] }
73|        - { path: ^/evaluator-registration, roles: PUBLIC_ACCESS }
74|        - { path: ^/user/hub, roles: [ROLE_USER] }
75|        - { path: ^/evaluator-register, roles: PUBLIC_ACCESS }
76|        - { path: ^/evaluator-activation, roles: PUBLIC_ACCESS }
77|        - { path: ^/site-config/smtp, roles: [ROLE_SUPER_ADMIN] }
78|        - { path: ^/manager/process$, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER, ROLE_USER] }
79|        - { path: ^/spaces-control, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
80|        - { path: ^/manager/hub-in-progress, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER, ROLE_SUPER_ADMIN] }
81|        - { path: ^/user/specialist/management_data, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
82|        - { path: ^/management/update-receipt, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
83|        - { path: ^/management/update-recipts, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
84|        - { path: ^/user/specialist/disable, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
85|        - { path: ^/user/specialist/reactivate, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
86|        - { path: ^/user/specialist/(pause|resume), roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
87|        - { path: ^/user/specialist/(block|unblock), roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
88|
89|        - { path: ^/employee-advocacy, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
90|        - { path: ^/manager/chavesdeacesso, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_SUPER_ADMIN] }
91|        - { path: ^/onboarding/\d+/onboarding-\d+, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
92|
93|        - { path: ^/dei_assessment, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER, ROLE_SUPER_ADMIN] }
94|        - { path: ^/manager/professional-assessment, roles: [ROLE_MANAGER, ROLE_SUPER_ADMIN, ROLE_USER] }
95|        - { path: ^/manager/structural-research, roles: [ROLE_MANAGER, ROLE_USER, ROLE_SUPER_ADMIN] }
96|        - { path: ^/manager/free-trial, roles: [ROLE_SUPER_ADMIN] }
97|        - { path: ^/manager/governance, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER, ROLE_SUPER_ADMIN] }
98|
99|        - { path: ^/manager/home, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
100|        - { path: ^/manager/training/dashboard/, roles: [ROLE_MANAGER, ROLE_USER, ROLE_SUPER_ADMIN] }
101|        - { path: ^/manager/participantes, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
102|        - { path: ^/manager/company/invoice, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
103|        - { path: ^/manager/processos, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
104|        - { path: ^/manager/user/data, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_REVIEWER] }
105|        - { path: ^/manager/user/show, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
106|        - { path: ^/manager/process/dashboard/old, roles: [ROLE_SUPER_ADMIN, ROLE_ADMIN, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
107|        - { path: ^/manager/process/dashboard, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
108|        - { path: ^/manager/professional-assessment/dashboard, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER] }
109|        - { path: ^/manager/company, roles: [ROLE_SUPER_ADMIN] }
110|
111|        - { path: ^/manager/department, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER] }
112|        - { path: ^/manager/organizational-structure, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER] }
113|        - { path: ^/manager/position, roles: [ROLE_SUPER_ADMIN] }
114|        - { path: ^/manager/users, roles: [ROLE_SUPER_ADMIN, ROLE_MANAGER, ROLE_MANAGER_GESTOR] }
115|        - { path: ^/manager/license, roles: [ROLE_USER, ROLE_SURVEY, ROLE_MANAGER] }
116|        - { path: ^/company/relink, roles: [ROLE_MANAGER, ROLE_SUPER_ADMIN] }
117|        - { path: ^/manager/benefit, roles: [ROLE_SUPER_ADMIN, ROLE_MANAGER, ROLE_MANAGER_GESTOR] }
118|        - { path: ^/manager/skill, roles: [ROLE_SUPER_ADMIN, ROLE_MANAGER, ROLE_MANAGER_GESTOR] }
119|        - { path: ^/manager/evaluations/create, roles: [ROLE_SUPER_ADMIN, ROLE_MANAGER] }
120|        - { path: ^/manager/service-request-list, roles: [ROLE_SUPER_ADMIN] }
121|        - { path: ^/manager/evaluator/request, roles: [ROLE_SUPER_ADMIN] }
122|        - { path: ^/manager/evaluators-pending-evaluations, roles: [ROLE_SUPER_ADMIN] }
123|        - { path: ^/manager/evaluator/validate/evaluations, roles: [ROLE_SUPER_ADMIN] }
124|        - { path: ^/manager/parentcategorias, roles: [ROLE_SUPER_ADMIN] }
125|        - { path: ^/manager/category, roles: [ROLE_SUPER_ADMIN] }
126|        - { path: ^/manager/level, roles: [ROLE_SUPER_ADMIN] }
127|        - { path: ^/manager/evaluations/recommendations-network/task/options, roles: [ROLE_SUPER_ADMIN] }
128|        - { path: ^/site-config/siteconfig, roles: [ROLE_SUPER_ADMIN] }
129|        - { path: ^/manager/candidate-question/list, roles: [ROLE_SUPER_ADMIN] }
130|        - { path: ^/manager/interview_guide, roles: [ROLE_SUPER_ADMIN, ROLE_MANAGER] }
131|        - { path: ^/manager/permissionstags, roles: [ROLE_SUPER_ADMIN] }
132|        - { path: ^/manager/service-packs, roles: [ROLE_SUPER_ADMIN] }
133|        - { path: ^/manager/tokens, roles: [ROLE_SUPER_ADMIN] }
134|        - { path: ^/manager/logs, roles: [ROLE_SUPER_ADMIN] }
135|        - { path: ^/manager/market-job, roles: [ROLE_SUPER_ADMIN] }
136|        - { path: ^/manager/training-module/get-data, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
137|        - { path: ^/manager/empresas-parceiras, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER, ROLE_SUPER_ADMIN] }
138|        - { path: ^/manager, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER] }
139|        - { path: ^/finance/refunds, roles: [ROLE_MANAGER, ROLE_USER, ROLE_SUPER_ADMIN] }
140|        - { path: ^/evaluator, roles: [ROLE_REVIEWER] }
141|        - { path: ^/my-company/home, roles: [ROLE_USER] }
142|        - { path: ^/my-company, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER, ROLE_USER, ROLE_SUPER_ADMIN] }
143|        - { path: ^/crm, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER] }
144|
145|        # - { path: ^/my-company/list-members-by-teams/, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER, ROLE_USER] }
146|        - { path: ^/subsidiary-companies, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER, ROLE_USER] }
147|        - { path: ^/profile, roles: ROLE_USER }
148|        - { path: ^/user/structural-research, roles: [ROLE_SURVEY, ROLE_USER] }
149|        - { path: ^/calendar-member, roles: [ROLE_SURVEY, ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
150|        - { path: ^/user/registration, roles: PUBLIC_ACCESS }
151|        - { path: ^/user/registration-employee, roles: PUBLIC_ACCESS }
152|        - { path: ^/employee-user, roles: PUBLIC_ACCESS }
153|        - { path: ^/user, roles: ROLE_USER }
154|        - { path: ^/refunds, roles: [ROLE_USER,ROLE_MANAGER] }
155|        - { path: ^/assessment_pf, roles: PUBLIC_ACCESS }
156|        - { path: ^/assessment_pf_dashboard, roles: PUBLIC_ACCESS }
157|        - { path: ^/muralQuestionario, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
158|        - { path: ^/teste/chat, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
159|        - { path: ^/account, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
160|        - { path: ^/offboarding, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
161|        - { path: ^/onboarding, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
162|        - { path: ^/cultural-hub, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
163|        - { path: ^/time-management/presence/signature, roles: PUBLIC_ACCESS }
164|        - { path: ^/v2/file-management/attendance-lists/sign, roles: PUBLIC_ACCESS }
165|        - { path: ^/time-management, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
166|        - { path: ^/welfare-hub, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
167|        - { path: ^/specialists, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
168|        - { path: ^/cognitive_assessment, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
169|        - { path: ^/templates, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
170|        - { path: ^/gestao-documentos, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
171|        - { path: ^/job, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
172|        - { path: ^/process, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
173|        - { path: ^/organograma_index, roles: [ROLE_MANAGER, ROLE_USER, ROLE_SUPER_ADMIN] }
174|        - { path: ^/organograma, roles: [ROLE_MANAGER, ROLE_USER, ROLE_SUPER_ADMIN] }
175|        - { path: ^/sst, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
176|        - { path: ^/api/sst, roles: PUBLIC_ACCESS }
177|        - { path: ^/api/adriana/tools, roles: PUBLIC_ACCESS }
178|        - { path: ^/api/signature-emails, roles: PUBLIC_ACCESS }
179|
180|        - { path: '^/manager/process/\d+(/stage/\d+)?/candidates', roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER, ROLE_USER] }
181|        - { path: ^/manager/live-interview, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER, ROLE_USER] }
182|        - { path: ^/interview/management, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
183|
184|        - { path: ^/test/, roles: PUBLIC_ACCESS }
185|

{"comments": [{"content": "A assinatura do construtor passou a exigir 4 parâmetros, mas o teste existente `tests/Unit/Product/EmpresasParceiras/EmpresasParceirasControllerTest.php` (linha 275) ainda instancia o controller com apenas `new EmpresasParceirasController($requirementService, $companyService)`. Isso lançará `ArgumentCountError` e quebrará a suíte de testes. Atualize o factory do teste (injetando mocks de `PermissionTagByMemberService` e `EntityManagerInterface`).", "existing_code": "        private PermissionTagByMemberService $permissionTagByMemberService,\n        private EntityManagerInterface $entityManager,", "category": "test", "severity": "medium", "path": "src/Controller/Contractor/EmpresasParceirasController.php"}, {"content": "`canManage()` também protege os endpoints destrutivos (`requirementDelete`, `companyDelete`, `companyRequirementDelete`, `companyRequirementEvidenceDelete`). Para tags fora da lista fixa, qualquer `canCreate`/`canEdit` libera a exclusão — o flag `getCanDelete()` do `PermissionTag`, usado pelos demais controllers do projeto para gate de delete, é ignorado. Se existir tag com `canEdit` sem `canDelete`, o usuário conseguirá apagar registros sem ter essa permissão. Considere exigir `canDelete` (ou um método dedicado) nos endpoints de deleção.", "existing_code": "        return (bool) ($tag->getCanCreate() || $tag->getCanEdit());", "category": "security", "severity": "medium", "path": "src/Controller/Contractor/EmpresasParceirasController.php"}, {"content": "Comparação com `===` sobre `getName()` sem `trim`/normalização de caixa, enquanto `canManage()` normaliza com `trim((string) ...)` e trata 'Membro' de forma case-insensitive. Se o nome gravado tiver espaços ou caixa diferente, `canManagePermissions()` divergirá de `canManage()` (ex.: usuário consegue gerenciar mas a aba de permissões fica oculta). Alinhe a normalização entre os dois métodos.", "existing_code": "        return $tag instanceof PermissionTag\n            && $tag->getName() === 'Gestor Administrador';", "category": "maintainability", "severity": "low", "path": "src/Controller/Contractor/EmpresasParceirasController.php"}, {"content": "A regra do `security.yaml` libera `ROLE_MANAGER_GESTOR` e `ROLE_MANAGER_VIEWER` no módulo, mas `isContractorPlatformAdmin()` só trata `ROLE_MANAGER`/`ROLE_SUPER_ADMIN` como admin da plataforma. Usuários dessas roles que não forem membros ativos (`isRemoved=false`, `enabled=true`) em `CompanyMembers` da própria empresa terão tag resolvida como `null` e receberão 403 em todas as ações de escrita — regressão em relação ao `return true` anterior de `canManage()`. Se essas roles devem operar o módulo (o que a regra de acesso sugere), inclua-as aqui ou garanta que o fluxo de tag cubra esses usuários.", "existing_code": "        return $user instanceof User\n            && ($user->isSuperAdmin() || in_array('ROLE_MANAGER', $user->getRoles(), true));", "category": "bug", "severity": "medium", "path": "src/Controller/Contractor/EmpresasParceirasController.php"}]}

(async)

{"state": "DONE"}