fix ldap portal user creation

Bumps [async](https://github.com/caolan/async) from 2.6.2 to 2.6.4.
- [Release notes](https://github.com/caolan/async/releases)
- [Changelog](https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md)
- [Commits](https://github.com/caolan/async/compare/v2.6.2...v2.6.4)

---
updated-dependencies:
- dependency-name: async
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,30 @@
+---
+name: Bug report
+about: Create a bug report
+title: ''
+labels: ''
+assignees: ''
+
+---
+
+**Describe the bug**
+A clear and concise description of what the bug is.
+
+**To Reproduce**
+Steps to reproduce the behavior:
+1. ...
+2. ...
+3. ...
+...
+
+**Expected behavior**
+A clear and concise description of what you expected to happen.
+
+**Screenshots**
+If applicable, add screenshots to help explain your problem.
+
+**EspoCRM version**
+Specify the EspoCRM version (or versions) on which the bug occurs.
+
+**Additional context**
+Add any other context about the problem here.

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,4 @@
+contact_links:
+  - name: EspoCRM forum
+    url: https://forum.espocrm.com/
+    about: Please use our forum to ask questions not related to product development

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,20 @@
+---
+name: Feature request
+about: Suggest an idea for EspoCRM
+title: ''
+labels: ''
+assignees: ''
+
+---
+
+**Is your feature request related to a problem? Please describe.**
+A clear and concise description of what the problem is.
+
+**Describe the solution you'd like**
+A clear and concise description of what you want to happen.
+
+**Describe alternatives you've considered**
+A clear and concise description of any alternative solutions or features you've considered.
+
+**Additional context**
+Add any other context or screenshots about the feature request here.

.github/workflows/test-integration.yml

@@ -0,0 +1,64 @@
+name: Test Integration
+
+on:
+  schedule:
+    - cron:  '0 10 * * *'
+
+jobs:
+  test:
+    name: Test on PHP ${{ matrix.php-versions }}
+    runs-on: ubuntu-20.04
+    env:
+      TEST_DATABASE_HOST: '127.0.0.1'
+      TEST_DATABASE_PORT: '8888'
+      TEST_DATABASE_NAME: integration_test
+      TEST_DATABASE_USER: root
+      TEST_DATABASE_PASSWORD: password
+    services:
+      mysql:
+        image: mysql:8.0
+        env:
+          MYSQL_ALLOW_EMPTY_PASSWORD: false
+          MYSQ_USER: root
+          MYSQL_ROOT_PASSWORD: password
+          MYSQL_DATABASE: integration_test
+        ports:
+          - '8888:3306'
+        options: --health-cmd="mysqladmin ping" --health-interval=10s --health-timeout=5s --health-retries=3
+    strategy:
+      fail-fast: false
+      matrix:
+        php-versions: ['7.4', '8.1']
+        branches: ['master']
+
+    steps:
+    - uses: actions/checkout@v2
+      with:
+        ref: ${{ matrix.branches }}
+
+    - name: Setup Node.js
+      uses: actions/setup-node@v1
+      with:
+        node-version: 16.x
+
+    - name: Setup PHP with Composer
+      uses: shivammathur/setup-php@v2
+      with:
+        php-version: ${{ matrix.php-versions }}
+        tools: composer:v2
+        ini-values: memory_limit=1024M
+
+    - name: Start MySQL service
+      run: sudo systemctl start mysql
+
+    - name: Create DB table
+      run: mysql -h 127.0.0.1 --port 8888 -u root -ppassword -e 'CREATE DATABASE IF NOT EXISTS integration_test;'
+
+    - name: NPM install
+      run: npm install
+
+    - name: Build
+      run: grunt test
+
+    - name: Integration testing
+      run: vendor/bin/phpunit tests/integration

.github/workflows/test.yml

@@ -0,0 +1,48 @@
+name: Test
+
+on:
+  push:
+    branches:
+      - 'master'
+      - 'hotfix/**'
+    paths:
+      - '**.php'
+      - '**.json'
+      - '**.yml'
+      - 'composer.lock'
+      - 'phpstan.neon'
+
+  pull_request:
+    paths:
+      - '**.php'
+      - '**.json'
+      - '**.yml'
+      - 'composer.lock'
+      - 'phpstan.neon'
+
+jobs:
+  test:
+    name: Test on PHP ${{ matrix.php-versions }}
+    runs-on: ubuntu-20.04
+    strategy:
+      matrix:
+        php-versions: ['7.4', '8.0', '8.1']
+
+    steps:
+    - uses: actions/checkout@v2
+
+    - name: Setup PHP with Composer
+      uses: shivammathur/setup-php@v2
+      with:
+        php-version: ${{ matrix.php-versions }}
+        tools: composer:v2
+        ini-values: memory_limit=1024M
+
+    - name: Composer install
+      run: composer install
+
+    - name: Static analysis
+      run: vendor/bin/phpstan
+
+    - name: Unit testing
+      run: vendor/bin/phpunit tests/unit

.gitignore

@@ -4,6 +4,7 @@
 /data/preferences/*
 /data/.backup/*
 /data/config.php
+/data/config-internal.php
 /data/tmp/*
 /build
 /node_modules
@@ -18,4 +19,11 @@
 /composer.phar
 /vendor/
 /custom/Espo/Custom/*
+/custom/Espo/Modules/*
+!/custom/Espo/Custom/.htaccess
+!/custom/Espo/Modules/.htaccess
 /install/config.php
+
+client/css/espo/*
+client/lib/*
+client/modules/crm/lib/*

.htaccess

@@ -1,24 +1,44 @@
 <ifModule mod_headers.c>
-  Header always set Access-Control-Allow-Methods "POST, GET, PUT, PATCH, DELETE"
+    Header always set Access-Control-Allow-Methods "POST, GET, PUT, PATCH, DELETE"
 </ifModule>
 
-DirectoryIndex index.php index.html
+DirectoryIndex index.php
+
+Options -Indexes
 
 <IfModule mod_rewrite.c>
-  RewriteEngine On
+    RewriteEngine On
 
-  # PROTECTED DIRECTORIES
-  RewriteCond %{REQUEST_FILENAME} -d
-  RewriteRule ^/?(api|client)/ - [F]
+    # Forbid access. Not actual as redirect to `public` is applied.
+    # An extra security measure if redirect not fired.
+    RewriteRule ^/?data/ - [F]
+    RewriteRule ^/?application/ - [F]
+    RewriteRule ^/?custom/ - [F]
+    RewriteRule ^/?vendor/ - [F]
+    RewriteRule /?web\.config - [F]
 
-  RewriteRule ^/?data/ - [F]
-  RewriteRule ^/?application/ - [F]
-  RewriteRule ^/?custom/ - [F]
-  RewriteRule ^/?vendor/ - [F]
-  RewriteRule ^/?client/?$ - [F]
-  #END PROTECTED DIRECTORIES
+    # Forbid `public` dir.
+    RewriteCond %{ENV:REDIRECT_STATUS} !=200
+    RewriteRule ^/?public/? - [F,L]
 
-  RewriteRule .* - [E=HTTP_ESPO_CGI_AUTH:%{HTTP:Authorization}]
+    # Skip redirect for `client` dir.
+    RewriteRule ^client/ - [L]
 
-  RewriteRule /?web\.config - [F]
-</IfModule>
+# {#dev}
+    # Skip redirect for `node_modules` dir. Actual only for dev environment.
+    RewriteRule ^node_modules/ - [L]
+# {/dev}
+
+    # Store base path.
+    RewriteCond %{REQUEST_URI}::$1 ^(.*?/)(.*)::\2$
+    RewriteRule ^(.*)$ - [E=BASE:%1]
+
+    # Add trailing slash.
+    RewriteCond %{DOCUMENT_ROOT}/%{ENV:BASE}/public/$1 -d
+    RewriteRule ^(.*?[^/])$ %{REQUEST_URI}/ [L,R=301,NE]
+
+    # Rewrite to `public` dir.
+    RewriteRule ^((?!public/).*)$ %{ENV:BASE}/public/$1 [L,NC]
+
+    RewriteRule .* - [E=HTTP_ESPO_CGI_AUTH:%{HTTP:Authorization}]
+</IfModule>

Gruntfile.js

@@ -2,7 +2,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -19,113 +19,68 @@
  * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
  ************************************************************************/
 
- /**
-  * * `grunt` - full build
-  * * `grunt dev` - build only items needed for development (takes less time)
-  * * `grunt offline` - build but skip *composer install*
-  * * `grant release` - full build plus upgrade packages`
-  * * `grant test` - build for test running
-  * * `grant run-tests` - build and run unit and integratino tests
-  */
+/**
+* * `grunt` - full build;
+* * `grunt dev` - build only items needed for development (takes less time);
+* * `grunt offline` - build but skip *composer install*;
+* * `grunt internal` - build only libs and css;
+* * `grunt release` - full build plus upgrade packages`;
+* * `grunt test` - build for tests running;
+* * `grunt run-tests` - build and run unit and integration tests.
+*/
 
-module.exports = function (grunt) {
+const fs = require('fs');
+const cp = require('child_process');
+const path = require('path');
 
-    var jsFilesToMinify = [
-        'client/lib/jquery-2.1.4.min.js',
-        'client/lib/underscore-min.js',
-        'client/lib/es6-promise.min.js',
-        'client/lib/backbone-min.js',
-        'client/lib/handlebars.js',
-        'client/lib/base64.js',
-        'client/lib/jquery-ui.min.js',
-        'client/lib/jquery.ui.touch-punch.min.js',
-        'client/lib/moment.min.js',
-        'client/lib/moment-timezone.min.js',
-        'client/lib/moment-timezone-data.js',
-        'client/lib/jquery.timepicker.min.js',
-        'client/lib/jquery.autocomplete.js',
-        'client/lib/bootstrap.min.js',
-        'client/lib/bootstrap-datepicker.js',
-        'client/lib/bull.js',
-        'client/lib/marked.min.js',
-        'client/lib/autobahn.js',
-        'client/lib/gridstack.all.js',
+module.exports = grunt => {
 
-        'client/src/namespace.js',
-        'client/src/exceptions.js',
-        'client/src/loader.js',
-        'client/src/utils.js',
+    const pkg = grunt.file.readJSON('package.json');
+    const bundleConfig = require('./frontend/bundle-config.json');
 
-        'client/src/acl.js',
-        'client/src/model.js',
-        'client/src/model-offline.js',
-        'client/src/ajax.js',
-        'client/src/controller.js',
+    let jsFilesToBundle = getBundleLibList().concat(bundleConfig.jsFiles);
+    let jsFilesToCopy = getCopyLibDataList();
 
-        'client/src/ui.js',
-        'client/src/acl-manager.js',
-        'client/src/cache.js',
-        'client/src/storage.js',
-        'client/src/models/settings.js',
-        'client/src/language.js',
-        'client/src/metadata.js',
-        'client/src/field-manager.js',
-        'client/src/models/user.js',
-        'client/src/models/preferences.js',
-        'client/src/model-factory.js',
-        'client/src/collection-factory.js',
-        'client/src/pre-loader.js',
-        'client/src/controllers/base.js',
-        'client/src/router.js',
-        'client/src/date-time.js',
-        'client/src/layout-manager.js',
-        'client/src/theme-manager.js',
-        'client/src/session-storage.js',
-        'client/src/view-helper.js',
-        'client/src/page-title.js',
+    let libFilesToMinify = jsFilesToCopy
+        .filter(item => item.minify)
+        .reduce((map, item) => (
+            map[item.dest] = item.dest,
+            map
+        ), {});
 
-        'client/src/app.js'
-    ];
+    let currentPath = path.dirname(fs.realpathSync(__filename));
 
-    function camelCaseToHyphen (string){
-        if (string == null) {
-            return string;
-        }
-        return string.replace(/([a-z])([A-Z])/g, '$1-$2').toLowerCase();
-    }
+    let themeList = [];
 
-    var fs = require('fs');
-    var cp = require('child_process');
-    var path = require('path');
-
-    var currentPath = path.dirname(fs.realpathSync(__filename));
-
-    var themeList = [];
-    fs.readdirSync('application/Espo/Resources/metadata/themes').forEach(function (file) {
+    fs.readdirSync('application/Espo/Resources/metadata/themes').forEach(file => {
         themeList.push(file.substr(0, file.length - 5));
     });
 
-    var cssminFilesData = {};
-    var lessData = {};
-    themeList.forEach(function (theme) {
-        var name = camelCaseToHyphen(theme);
-        var files = {};
+    let cssminFilesData = {};
+
+    let lessData = {};
+
+    themeList.forEach(theme => {
+        let name = camelCaseToHyphen(theme);
+
+        let files = {};
+
         files['client/css/espo/'+name+'.css'] = 'frontend/less/'+name+'/main.less';
         files['client/css/espo/'+name+'-iframe.css'] = 'frontend/less/'+name+'/iframe/main.less';
 
         cssminFilesData['client/css/espo/'+name+'.css'] = 'client/css/espo/'+name+'.css';
         cssminFilesData['client/css/espo/'+name+'-iframe.css'] = 'client/css/espo/'+name+'-iframe.css';
-        var o = {
+
+        let o = {
             options: {
                 yuicompress: true,
             },
-            files: files
+            files: files,
         };
+
         lessData[theme] = o;
     });
 
-    var pkg = grunt.file.readJSON('package.json');
-
     grunt.initConfig({
         pkg: pkg,
 
@@ -135,45 +90,71 @@ module.exports = function (grunt) {
                     mode: 0755,
                     create: [
                         'build/tmp',
-                    ]
-                },
-
+                    ],
+                }
             }
         },
+
         clean: {
-            start: ['build/EspoCRM-*'],
+            start: [
+                'build/EspoCRM-*',
+                'client/lib/*',
+                'client/modules/crm/lib/*',
+                'client/css/espo/*',
+            ],
             final: ['build/tmp'],
             release: ['build/EspoCRM-' + pkg.version],
             beforeFinal: {
                 src: [
                     'build/tmp/custom/Espo/Custom/*',
+                    'build/tmp/custom/Espo/Modules/*',
                     '!build/tmp/custom/Espo/Custom/.htaccess',
+                    '!build/tmp/custom/Espo/Modules/.htaccess',
                     'build/tmp/install/config.php',
                     'build/tmp/vendor/*/*/.git',
+                    'build/tmp/custom/Espo/Custom/*',
+                    'build/tmp/client/custom/*',
+                    '!build/tmp/client/custom/modules',
+                    'build/tmp/client/custom/modules/*',
+                    '!build/tmp/client/custom/modules/dummy.txt',
                 ]
             }
         },
+
         less: lessData,
+
         cssmin: {
             themes: {
-                files: cssminFilesData
-            }
+                files: cssminFilesData,
+            },
         },
+
         uglify: {
             options: {
-                mangle: false,
+                mangle: true,
                 sourceMap: true,
-                banner: '/*! <%= pkg.name %> <%= grunt.template.today("yyyy-mm-dd") %> */\n',
+                output: {
+                    comments: /^!/,
+                },
+            },
+            bundle: {
+                options: {
+                    banner: '/*! <%= pkg.name %> <%= grunt.template.today("yyyy-mm-dd") %> */\n',
+                },
+                files: {
+                    'client/lib/espo.min.js': jsFilesToBundle,
+                },
+            },
+            lib: {
+                files: libFilesToMinify,
             },
-            'build/tmp/client/espo.min.js': jsFilesToMinify.map(function (item) {
-                return '' + item;
-            })
         },
+
         copy: {
             options: {
                 mode: true,
             },
-            frontendFolders: {
+            frontend: {
                 expand: true,
                 cwd: 'client',
                 src: [
@@ -185,29 +166,26 @@ module.exports = function (grunt) {
                     'img/**',
                     'css/**',
                     'sounds/**',
-                    'custom/**'
+                    'custom/**',
+                    'lib/**',
                 ],
                 dest: 'build/tmp/client',
             },
             frontendLib: {
-                expand: true,
-                dot: true,
-                cwd: 'client/lib',
-                src: '**',
-                dest: 'build/tmp/client/lib/',
+                files: jsFilesToCopy,
             },
             backend: {
                 expand: true,
                 dot: true,
                 src: [
-                    'api/**',
                     'application/**',
                     'custom/**',
                     'data/.data',
-                    'install/**',
-                    'portal/**',
                     'vendor/**',
                     'html/**',
+                    'public/**',
+                    'install/**',
+                    'bin/**',
                     'bootstrap.php',
                     'cron.php',
                     'daemon.php',
@@ -218,7 +196,6 @@ module.exports = function (grunt) {
                     'extension.php',
                     'websocket.php',
                     'command.php',
-                    'oauth-callback.php',
                     'index.php',
                     'LICENSE.txt',
                     '.htaccess',
@@ -234,120 +211,205 @@ module.exports = function (grunt) {
                 dest: 'build/EspoCRM-<%= pkg.version %>/',
             },
         },
-        chmod: {
-            php: {
-                options: {
-                    mode: '644'
-                },
-                src: [
-                    'build/EspoCRM-<%= pkg.version %>/**/*.php',
-                    'build/EspoCRM-<%= pkg.version %>/**/*.json',
-                    'build/EspoCRM-<%= pkg.version %>/**/*.config',
-                    'build/EspoCRM-<%= pkg.version %>/**/.htaccess',
-                    'build/EspoCRM-<%= pkg.version %>/client/**/*.js',
-                    'build/EspoCRM-<%= pkg.version %>/client/**/*.css',
-                    'build/EspoCRM-<%= pkg.version %>/client/**/*.tpl',
-                    'build/EspoCRM-<%= pkg.version %>/**/*.html',
-                    'build/EspoCRM-<%= pkg.version %>/**/*.txt',
-                ]
-            },
-            folders: {
-                options: {
-                    mode: '755'
-                },
-                src: [
-                    'build/EspoCRM-<%= pkg.version %>/install',
-                    'build/EspoCRM-<%= pkg.version %>/portal',
-                    'build/EspoCRM-<%= pkg.version %>/api',
-                    'build/EspoCRM-<%= pkg.version %>/api/v1',
-                    'build/EspoCRM-<%= pkg.version %>/api/v1/portal-access',
-                    'build/EspoCRM-<%= pkg.version %>',
-                ]
-            },
-            foldersWritable: {
-                options: {
-                    mode: '775'
-                },
-                src: [
-                    'build/EspoCRM-<%= pkg.version %>/data',
-                    'build/EspoCRM-<%= pkg.version %>/custom',
-                    'build/EspoCRM-<%= pkg.version %>/custom/Espo',
-                    'build/EspoCRM-<%= pkg.version %>/custom/Espo/Custom',
-                    'build/EspoCRM-<%= pkg.version %>/client/custom',
-                    'build/EspoCRM-<%= pkg.version %>/client/modules',
-                    'build/EspoCRM-<%= pkg.version %>/application/Espo/Modules',
-                ]
-            },
-        },
+
         replace: {
             version: {
                 options: {
                     patterns: [
                         {
                             match: 'version',
-                            replacement: '<%= pkg.version %>'
+                            replacement: '<%= pkg.version %>',
                         }
                     ]
                 },
                 files: [
                     {
                         src: 'build/tmp/application/Espo/Resources/defaults/config.php',
-                        dest: 'build/tmp/application/Espo/Resources/defaults/config.php'
+                        dest: 'build/tmp/application/Espo/Resources/defaults/config.php',
                     }
-                ]
-            }
+                ],
+            },
+            dev: {
+                options: {
+                    patterns: [
+                        {
+                            match: /\# \{\#dev\}(.*)\{\/dev\}/gs,
+                            replacement: '',
+                        }
+                    ]
+                },
+                files: [
+                    {
+                        src: 'build/tmp/.htaccess',
+                        dest: 'build/tmp/.htaccess',
+                    }
+                ],
+            },
         },
+
     });
 
-    grunt.registerTask("chmod-folders", function() {
-        cp.execSync("find . -type d -exec chmod 755 {} + ", {stdio: 'ignore', cwd: 'build/EspoCRM-' + pkg.version});
+    grunt.registerTask('chmod-folders', () => {
+        cp.execSync(
+            "find . -type d -exec chmod 755 {} +",
+            {
+                cwd: 'build/EspoCRM-' + pkg.version,
+            }
+        );
     });
 
-    grunt.registerTask("composer", function() {
-        cp.execSync("composer install --ignore-platform-reqs --no-dev", {stdio: 'ignore'});
+    grunt.registerTask('chmod-multiple', () => {
+        let dirPath = 'build/EspoCRM-' + pkg.version;
+
+        let fileList = [
+            {
+                name: '*.php',
+            },
+            {
+                name: '*.json',
+            },
+            {
+                name: '*.config',
+            },
+            {
+                name: '.htaccess',
+            },
+            {
+                name: '*.html',
+            },
+            {
+                name: '*.txt',
+            },
+            {
+                name: '*.js',
+                folder: 'client',
+            },
+            {
+                name: '*.css',
+                folder: 'client',
+            },
+            {
+                name: '*.tpl',
+                folder: 'client',
+            },
+        ];
+
+        let dirReadableList = [
+            'public/install',
+            'public/portal',
+            'public/api',
+            'public/api/v1',
+            'public/api/v1/portal-access',
+            '.',
+        ];
+
+        let dirWritableList = [
+            'data',
+            'custom',
+            'custom/Espo',
+            'custom/Espo/Custom',
+            'client/custom',
+            'client/modules',
+            'application/Espo/Modules',
+        ];
+
+        fileList.forEach(item => {
+            let path = item.folder || '.';
+            let name = item.name;
+
+            cp.execSync(
+                `find ${path} -type f -iname "${name}" -exec chmod 644 {} +`,
+                {
+                    cwd: dirPath,
+                }
+            );
+        });
+
+        dirReadableList.forEach(item => {
+            cp.execSync(
+                `chmod 755 ${item}`,
+                {
+                    cwd: dirPath,
+                }
+            );
+        });
+
+        dirWritableList.forEach(item => {
+            cp.execSync(
+                `chmod 775 ${item}`,
+                {
+                    cwd: dirPath,
+                }
+            );
+        });
+
+        cp.execSync(
+            `find bin -type f -exec chmod 754 {} +`,
+            {
+                cwd: dirPath,
+            }
+        );
     });
 
-    grunt.registerTask("composer-dev", function() {
-        cp.execSync("composer install --ignore-platform-reqs", {stdio: 'ignore'});
+    grunt.registerTask('composer-install', () => {
+        cp.execSync("composer install --no-dev", {stdio: 'ignore'});
     });
 
-    grunt.registerTask("upgrade", function() {
+    grunt.registerTask('composer-install-dev', () => {
+        cp.execSync("composer install", {stdio: 'ignore'});
+    });
+
+    grunt.registerTask('upgrade', () => {
         cp.execSync("node diff --all --vendor", {stdio: 'inherit'});
     });
 
-    grunt.registerTask("unit-tests-run", function() {
+    grunt.registerTask('unit-tests-run', () => {
         cp.execSync("vendor/bin/phpunit ./tests/unit", {stdio: 'inherit'});
     });
 
-    grunt.registerTask("integration-tests-run", function() {
+    grunt.registerTask('integration-tests-run', () => {
         cp.execSync("vendor/bin/phpunit ./tests/integration", {stdio: 'inherit'});
     });
 
-    grunt.registerTask("zip", function() {
-        var fs = require('fs');
+    grunt.registerTask('set-config-params', () => {
+        cp.execSync("composer run-script setConfigParams", {stdio: 'ignore'});
+    });
 
-        var resolve = this.async();
+    grunt.registerTask('zip', () => {
+        const archiver = require('archiver');
 
-        var folder = 'EspoCRM-' + pkg.version;
+        let resolve = this.async();
 
-        var zipPath = 'build/' + folder +'.zip';
-        if (fs.existsSync(zipPath)) fs.unlinkSync(zipPath);
+        let folder = 'EspoCRM-' + pkg.version;
 
-        var archiver = require('archiver');
-        var archive = archiver('zip');
+        let zipPath = 'build/' + folder +'.zip';
 
-        archive.on('error', function (err) {
+        if (fs.existsSync(zipPath)) {
+            fs.unlinkSync(zipPath);
+        }
+
+        let archive = archiver('zip');
+
+        archive.on('error', err => {
             grunt.fail.warn(err);
         });
-        var zipOutput = fs.createWriteStream(zipPath);
-        zipOutput.on('close', function () {
+
+        let zipOutput = fs.createWriteStream(zipPath);
+
+        zipOutput.on('close', () => {
             console.log("EspoCRM package has been built.");
+
             resolve();
         });
 
-        archive.directory(currentPath + '/build/' + folder, folder).pipe(zipOutput);
+        archive
+            .directory(currentPath + '/build/' + folder, folder)
+            .pipe(zipOutput)
+            .finalize();
+    });
 
-        archive.finalize();
+    grunt.registerTask('npm-install', () => {
+        cp.execSync("npm ci", {stdio: 'ignore'});
     });
 
     grunt.loadNpmTasks('grunt-contrib-clean');
@@ -357,34 +419,42 @@ module.exports = function (grunt) {
     grunt.loadNpmTasks('grunt-contrib-uglify');
     grunt.loadNpmTasks('grunt-contrib-copy');
     grunt.loadNpmTasks('grunt-replace');
-    grunt.loadNpmTasks('grunt-chmod');
+
+    grunt.registerTask('internal', [
+        'less',
+        'cssmin',
+        'uglify:bundle',
+        'copy:frontendLib',
+        'uglify:lib',
+    ]);
 
     grunt.registerTask('offline', [
         'clean:start',
         'mkdir:tmp',
-        'less',
-        'cssmin',
-        'uglify',
-        'copy:frontendFolders',
-        'copy:frontendLib',
+        'internal',
+        'copy:frontend',
         'copy:backend',
         'replace',
         'clean:beforeFinal',
         'copy:final',
         'chmod-folders',
-        'chmod:php',
-        'chmod:folders',
-        'chmod:foldersWritable',
+        'chmod-multiple',
         'clean:final',
     ]);
 
-    grunt.registerTask('default', [
-        'composer',
+    grunt.registerTask('build', [
+        'composer-install',
+        'npm-install',
+        'set-config-params',
         'offline',
     ]);
 
+    grunt.registerTask('default', [
+        'build',
+    ]);
+
     grunt.registerTask('release', [
-        'default',
+        'build',
         'upgrade',
         'zip',
         'clean:release',
@@ -397,7 +467,7 @@ module.exports = function (grunt) {
     ]);
 
     grunt.registerTask('run-unit-tests', [
-        'composer-dev',
+        'composer-install-dev',
         'unit-tests-run',
     ]);
 
@@ -407,12 +477,87 @@ module.exports = function (grunt) {
     ]);
 
     grunt.registerTask('dev', [
-        'composer-dev',
+        'composer-install-dev',
         'less',
     ]);
 
     grunt.registerTask('test', [
-        'composer-dev',
+        'composer-install-dev',
+        'npm-install',
         'offline',
     ]);
 };
+
+function getBundleLibList() {
+    const libs = require('./frontend/libs.json');
+
+    let list = [];
+
+    libs.forEach(item => {
+        if (!item.bundle) {
+            return;
+        }
+
+        if (item.files) {
+            item.files.forEach(item  => {
+                list.push(item.src);
+            });
+
+            return;
+        }
+
+        if (!item.src) {
+            throw new Error("No lib src.");
+        }
+
+        list.push(item.src);
+    });
+
+    return list;
+}
+
+function getCopyLibDataList() {
+    const libs = require('./frontend/libs.json');
+
+    let list = [];
+
+    libs.forEach(item => {
+        if (item.bundle) {
+            return;
+        }
+
+        let minify = item.minify;
+
+        if (item.files) {
+            item.files.forEach(item => {
+                list.push({
+                    src: item.src,
+                    dest: item.dest || 'client/lib/' + item.src.split('/').pop(),
+                    minify: minify,
+                });
+            });
+
+            return;
+        }
+
+        if (!item.src) {
+            throw new Error("No lib src.");
+        }
+
+        list.push({
+            src: item.src,
+            dest: item.dest || 'client/lib/' + item.src.split('/').pop(),
+            minify: minify,
+        });
+    });
+
+    return list;
+}
+
+function camelCaseToHyphen(string){
+    if (string === null) {
+        return string;
+    }
+
+    return string.replace(/([a-z])([A-Z])/g, '$1-$2').toLowerCase();
+}

README.md

@@ -1,6 +1,8 @@
 ## EspoCRM
 
-[EspoCRM is an Open Source CRM](https://www.espocrm.com) (Customer Relationship Management) software that allows you to see, enter and evaluate all your company relationships regardless of the type. People, companies or opportunities - all in an easy and intuitive interface.
+[![PHPStan level 8](https://img.shields.io/badge/PHPStan-level%208-brightgreen)](#espocrm)
+
+[EspoCRM is an Open Source CRM](https://www.espocrm.com) (Customer Relationship Management) software that allows you to see, enter and evaluate all your company relationships regardless of the type. People, companies or opportunities – all in an easy and intuitive interface.
 
 It's a web application with a frontend designed as a single page application and REST API backend written in PHP.
 
@@ -8,22 +10,22 @@ It's a web application with a frontend designed as a single page application and
 
 ### Requirements
 
-* PHP 7.2 and later (with pdo, json, gd, openssl, zip, imap, mbstring, curl extensions);
+* PHP 7.4 and later (with pdo, json, gd, openssl, zip, imap, mbstring, curl extensions);
 * MySQL 5.7 (and later), or MariaDB 10.1 (and later).
 
 For more information about server configuration see [this article](https://docs.espocrm.com/administration/server-configuration/).
 
 ### Documentation
 
-Documentation for administrators, users and developers is available [here](https://docs.espocrm.com).
+The documentation for administrators, users and developers is available [here](https://docs.espocrm.com).
 
-### How to report a bug
+### Bug reporting
 
 Create an issue [here](https://github.com/espocrm/espocrm/issues) or post on our [forum](http://forum.espocrm.com/forum/bug-reports).
 
-### How to install a stable version
+### Installing the stable version
 
-[Download](https://www.espocrm.com/download/) the latest version. See the [instructions](https://docs.espocrm.com/administration/installation/) about installation.
+See the [instructions](https://docs.espocrm.com/administration/installation/) about installation.
 
 ### Development
 
@@ -31,13 +33,13 @@ Create an issue [here](https://github.com/espocrm/espocrm/issues) or post on our
 * [Running tests](https://docs.espocrm.com/development/tests)
 * [Making translation](https://docs.espocrm.com/development/translation)
 
-### How to contribute
+### Contributing
 
 Before we can merge your pull request you need to accept our CLA [here](https://github.com/espocrm/cla). It's very simple to do.
 
 Branches:
 
-* *hotfix/** – upcoming maintenance release; fixes should be pushed to this branch;
+* *fix* – upcoming maintenance release; fixes should be pushed to this branch;
 * *master* – develop branch; new features should be pushed to this branch;
 * *stable* – last stable release.
 

application/Espo/Acl/Attachment.php

@@ -1,92 +0,0 @@
-<?php
-/************************************************************************
- * This file is part of EspoCRM.
- *
- * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
- * Website: https://www.espocrm.com
- *
- * EspoCRM is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * EspoCRM is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- *
- * The interactive user interfaces in modified source and object code versions
- * of this program must display Appropriate Legal Notices, as required under
- * Section 5 of the GNU General Public License version 3.
- *
- * In accordance with Section 7(b) of the GNU General Public License version 3,
- * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
- ************************************************************************/
-
-namespace Espo\Acl;
-
-use Espo\Entities\User as EntityUser;
-use Espo\ORM\Entity;
-
-class Attachment extends \Espo\Core\Acl\Acl
-{
-    public function checkEntityRead(EntityUser $user, Entity $entity, $data)
-    {
-        if ($user->isAdmin()) {
-            return true;
-        }
-
-        if ($entity->get('parentType') === 'Settings') {
-            return true;
-        }
-
-        $parent = null;
-        $hasParent = false;
-        if ($entity->get('parentId') && $entity->get('parentType')) {
-            $hasParent = true;
-            $parent = $this->getEntityManager()->getEntity($entity->get('parentType'), $entity->get('parentId'));
-        } else if ($entity->get('relatedId') && $entity->get('relatedType')) {
-            $hasParent = true;
-            $parent = $this->getEntityManager()->getEntity($entity->get('relatedType'), $entity->get('relatedId'));
-        }
-
-        if ($hasParent) {
-            if ($parent) {
-                if ($parent->getEntityType() === 'Note') {
-                    if ($parent->get('parentId') && $parent->get('parentType')) {
-                        $parentOfParent = $this->getEntityManager()->getEntity($parent->get('parentType'), $parent->get('parentId'));
-                        if ($parentOfParent && $this->getAclManager()->checkEntity($user, $parentOfParent)) {
-                            return true;
-                        }
-                    } else {
-                        return true;
-                    }
-                } else {
-                    if ($this->getAclManager()->checkEntity($user, $parent)) {
-                        return true;
-                    }
-                }
-            }
-        } else {
-            return true;
-        }
-
-        if ($this->checkEntity($user, $entity, $data, 'read')) {
-            return true;
-        }
-
-        return false;
-    }
-
-    public function checkIsOwner(EntityUser $user, Entity $entity)
-    {
-        if ($user->id === $entity->get('createdById')) {
-            return true;
-        }
-        return false;
-    }
-}

application/Espo/Acl/Email.php

@@ -1,121 +0,0 @@
-<?php
-/************************************************************************
- * This file is part of EspoCRM.
- *
- * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
- * Website: https://www.espocrm.com
- *
- * EspoCRM is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * EspoCRM is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- *
- * The interactive user interfaces in modified source and object code versions
- * of this program must display Appropriate Legal Notices, as required under
- * Section 5 of the GNU General Public License version 3.
- *
- * In accordance with Section 7(b) of the GNU General Public License version 3,
- * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
- ************************************************************************/
-
-namespace Espo\Acl;
-
-use Espo\Entities\User as EntityUser;
-use Espo\ORM\Entity;
-
-class Email extends \Espo\Core\Acl\Acl
-{
-    protected $ownerUserIdAttribute = 'usersIds';
-
-    public function checkEntityRead(EntityUser $user, Entity $entity, $data)
-    {
-        if ($this->checkEntity($user, $entity, $data, 'read')) {
-            return true;
-        }
-
-        if ($data === false) {
-            return false;
-        }
-        if (is_object($data)) {
-            if ($data->read === false || $data->read === 'no') {
-                return false;
-            }
-        }
-
-        if (!$entity->has('usersIds')) {
-            $entity->loadLinkMultipleField('users');
-        }
-        $userIdList = $entity->get('usersIds');
-        if (is_array($userIdList) && in_array($user->id, $userIdList)) {
-            return true;
-        }
-        return false;
-    }
-
-    public function checkIsOwner(EntityUser $user, Entity $entity)
-    {
-        if ($user->id === $entity->get('assignedUserId')) {
-            return true;
-        }
-
-        if ($user->id === $entity->get('createdById')) {
-            return true;
-        }
-
-        if ($entity->hasLinkMultipleId('assignedUsers', $user->id)) {
-            return true;
-        }
-
-        return false;
-    }
-
-    public function checkEntityDelete(EntityUser $user, Entity $entity, $data)
-    {
-        if ($user->isAdmin()) {
-            return true;
-        }
-
-        if ($data === false) {
-            return false;
-        }
-
-        if ($data->delete === 'own') {
-            if ($user->id === $entity->get('assignedUserId')) {
-                return true;
-            }
-
-            if ($user->id === $entity->get('createdById')) {
-                return true;
-            }
-
-            $assignedUserIdList = $entity->getLinkMultipleIdList('assignedUsers');
-            if (count($assignedUserIdList) === 1 && $entity->hasLinkMultipleId('assignedUsers', $user->id)) {
-                return true;
-            }
-            return false;
-        }
-
-        if ($this->checkEntity($user, $entity, $data, 'delete')) {
-            return true;
-        }
-
-        if ($data->edit !== 'no' || $data->create !== 'no') {
-            if ($entity->get('createdById') === $user->id) {
-                if ($entity->get('status') !== 'Sent' && $entity->get('status') !== 'Archived') {
-                    return true;
-                }
-            }
-        }
-
-        return false;
-    }
-}

application/Espo/Acl/EmailAddress.php

@@ -1,64 +0,0 @@
-<?php
-/************************************************************************
- * This file is part of EspoCRM.
- *
- * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
- * Website: https://www.espocrm.com
- *
- * EspoCRM is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * EspoCRM is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- *
- * The interactive user interfaces in modified source and object code versions
- * of this program must display Appropriate Legal Notices, as required under
- * Section 5 of the GNU General Public License version 3.
- *
- * In accordance with Section 7(b) of the GNU General Public License version 3,
- * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
- ************************************************************************/
-
-namespace Espo\Acl;
-
-use Espo\Entities\User as EntityUser;
-use Espo\ORM\Entity;
-
-class EmailAddress extends \Espo\Core\Acl\Acl
-{
-    public function checkEditInEntity(EntityUser $user, Entity $entity, Entity $excludeEntity)
-    {
-        $id = $entity->id;
-
-        $isFobidden = false;
-
-        $repository = $this->getEntityManager()->getRepository('EmailAddress');
-
-        if (!$user->isAdmin()) {
-            $entityWithSameAddressList = $repository->getEntityListByAddressId($id, $excludeEntity);
-            foreach ($entityWithSameAddressList as $e) {
-                if (!$this->getAclManager()->check($user, $e, 'edit')) {
-                    $isFobidden = true;
-                    if (
-                        $e->getEntityType() === 'User' &&
-                        $e->isPortal() &&
-                        $excludeEntity->getEntityType() === 'Contact' &&
-                        $e->get('contactId') === $excludeEntity->id
-                    ) {
-                        $isFobidden = false;
-                    }
-                    if ($isFobidden) break;
-                }
-            }
-        }
-        return !$isFobidden;
-    }
-}

application/Espo/Acl/Note.php

@@ -1,119 +0,0 @@
-<?php
-/************************************************************************
- * This file is part of EspoCRM.
- *
- * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
- * Website: https://www.espocrm.com
- *
- * EspoCRM is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * EspoCRM is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- *
- * The interactive user interfaces in modified source and object code versions
- * of this program must display Appropriate Legal Notices, as required under
- * Section 5 of the GNU General Public License version 3.
- *
- * In accordance with Section 7(b) of the GNU General Public License version 3,
- * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
- ************************************************************************/
-
-namespace Espo\Acl;
-
-use Espo\Entities\User as EntityUser;
-use Espo\ORM\Entity;
-
-class Note extends \Espo\Core\Acl\Acl
-{
-    protected $deleteThresholdPeriod = '1 month';
-
-    protected $editThresholdPeriod = '7 days';
-
-    public function checkIsOwner(EntityUser $user, Entity $entity)
-    {
-        if ($entity->get('type') === 'Post' && $user->id === $entity->get('createdById')) {
-            return true;
-        }
-        return false;
-    }
-
-    public function checkEntityCreate(EntityUser $user, Entity $entity, $data)
-    {
-        if ($entity->get('parentId') && $entity->get('parentType')) {
-            $parent = $this->getEntityManager()->getEntity($entity->get('parentType'), $entity->get('parentId'));
-            if ($parent) {
-                if ($this->getAclManager()->checkEntity($user, $parent, 'stream')) {
-                    return true;
-                }
-            }
-            return false;
-        }
-
-        return true;
-    }
-
-    public function checkEntityEdit(EntityUser $user, Entity $entity, $data)
-    {
-        if ($user->isAdmin()) {
-            return true;
-        }
-
-        if ($this->checkEntity($user, $entity, $data, 'edit')) {
-            if ($this->checkIsOwner($user, $entity)) {
-                $createdAt = $entity->get('createdAt');
-                if ($createdAt) {
-                    $noteEditThresholdPeriod = '-' . $this->getConfig()->get('noteEditThresholdPeriod', $this->editThresholdPeriod);
-                    $dt = new \DateTime();
-                    $dt->modify($noteEditThresholdPeriod);
-                    try {
-                        if ($dt->format('U') > (new \DateTime($createdAt))->format('U')) {
-                            return false;
-                        }
-                    } catch (\Exception $e) {
-                        return false;
-                    }
-                }
-            }
-            return true;
-        }
-
-        return false;
-    }
-
-    public function checkEntityDelete(EntityUser $user, Entity $entity, $data)
-    {
-        if ($user->isAdmin()) {
-            return true;
-        }
-
-        if ($this->checkEntity($user, $entity, $data, 'delete')) {
-            if ($this->checkIsOwner($user, $entity)) {
-                $createdAt = $entity->get('createdAt');
-                if ($createdAt) {
-                    $deleteThresholdPeriod = '-' . $this->getConfig()->get('noteDeleteThresholdPeriod', $this->deleteThresholdPeriod);
-                    $dt = new \DateTime();
-                    $dt->modify($deleteThresholdPeriod);
-                    try {
-                        if ($dt->format('U') > (new \DateTime($createdAt))->format('U')) {
-                            return false;
-                        }
-                    } catch (\Exception $e) {
-                        return false;
-                    }
-                }
-            }
-            return true;
-        }
-
-        return false;
-    }
-}

application/Espo/Acl/PhoneNumber.php

@@ -1,65 +0,0 @@
-<?php
-/************************************************************************
- * This file is part of EspoCRM.
- *
- * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
- * Website: https://www.espocrm.com
- *
- * EspoCRM is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * EspoCRM is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- *
- * The interactive user interfaces in modified source and object code versions
- * of this program must display Appropriate Legal Notices, as required under
- * Section 5 of the GNU General Public License version 3.
- *
- * In accordance with Section 7(b) of the GNU General Public License version 3,
- * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
- ************************************************************************/
-
-namespace Espo\Acl;
-
-use Espo\Entities\User as EntityUser;
-use Espo\ORM\Entity;
-
-class PhoneNumber extends \Espo\Core\Acl\Acl
-{
-    public function checkEditInEntity(EntityUser $user, Entity $entity, Entity $excludeEntity)
-    {
-        $id = $entity->id;
-
-        $isFobidden = false;
-
-        $repository = $this->getEntityManager()->getRepository('PhoneNumber');
-
-        if (!$user->isAdmin()) {
-            $entityWithSameNumberList = $repository->getEntityListByPhoneNumberId($id, $excludeEntity);
-            foreach ($entityWithSameNumberList as $e) {
-                if (!$this->getAclManager()->check($user, $e, 'edit')) {
-                    $isFobidden = true;
-                    if (
-                        $e->getEntityType() === 'User' &&
-                        $e->isPortal() &&
-                        $excludeEntity->getEntityType() === 'Contact' &&
-                        $e->get('contactId') === $excludeEntity->id
-                    ) {
-                        $isFobidden = false;
-                    }
-                    if ($isFobidden) break;
-                }
-            }
-        }
-
-        return !$isFobidden;
-    }
-}

application/Espo/Acl/Webhook.php

@@ -1,73 +0,0 @@
-<?php
-/************************************************************************
- * This file is part of EspoCRM.
- *
- * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
- * Website: https://www.espocrm.com
- *
- * EspoCRM is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * EspoCRM is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- *
- * The interactive user interfaces in modified source and object code versions
- * of this program must display Appropriate Legal Notices, as required under
- * Section 5 of the GNU General Public License version 3.
- *
- * In accordance with Section 7(b) of the GNU General Public License version 3,
- * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
- ************************************************************************/
-
-namespace Espo\Acl;
-
-use Espo\Entities\User as EntityUser;
-use Espo\ORM\Entity;
-
-class Webhook extends \Espo\Core\Acl\Acl
-{
-    public function checkIsOwner(EntityUser $user, Entity $entity)
-    {
-        return $user->id === $entity->get('userId') && $user->isApi();
-    }
-
-    public function checkEntityCreate(EntityUser $user, Entity $entity, $data)
-    {
-        if ($user->isAdmin()) return true;
-        if (!$data) return false;
-        if ($user->isApi() && $user->id === $entity->get('userId')) return true;
-        return false;
-    }
-
-    public function checkEntityRead(EntityUser $user, Entity $entity, $data)
-    {
-        if ($user->isAdmin()) return true;
-        if (!$data) return false;
-        if ($user->isApi() && $user->id === $entity->get('userId')) return true;
-        return false;
-    }
-
-    public function checkEntityDelete(EntityUser $user, Entity $entity, $data)
-    {
-        if ($user->isAdmin()) return true;
-        if (!$data) return false;
-        if ($user->isApi() && $user->id === $entity->get('userId')) return true;
-        return false;
-    }
-
-    public function checkEntityEdit(EntityUser $user, Entity $entity, $data)
-    {
-        if ($user->isAdmin()) return true;
-        if (!$data) return false;
-        if ($user->isApi() && $user->id === $entity->get('userId')) return true;
-        return false;
-    }
-}

application/Espo/AclPortal/Attachment.php

@@ -1,93 +0,0 @@
-<?php
-/************************************************************************
- * This file is part of EspoCRM.
- *
- * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
- * Website: https://www.espocrm.com
- *
- * EspoCRM is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * EspoCRM is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- *
- * The interactive user interfaces in modified source and object code versions
- * of this program must display Appropriate Legal Notices, as required under
- * Section 5 of the GNU General Public License version 3.
- *
- * In accordance with Section 7(b) of the GNU General Public License version 3,
- * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
- ************************************************************************/
-
-namespace Espo\AclPortal;
-
-use \Espo\Entities\User as EntityUser;
-use \Espo\ORM\Entity;
-
-class Attachment extends \Espo\Core\AclPortal\Base
-{
-    public function checkEntityRead(EntityUser $user, Entity $entity, $data)
-    {
-        if ($user->isAdmin()) {
-            return true;
-        }
-
-        if ($entity->get('parentType') === 'Settings') {
-            return true;
-        }
-
-        $parent = null;
-        $hasParent = false;
-        if ($entity->get('parentId') && $entity->get('parentType')) {
-            $hasParent = true;
-            $parent = $this->getEntityManager()->getEntity($entity->get('parentType'), $entity->get('parentId'));
-        } else if ($entity->get('relatedId') && $entity->get('relatedType')) {
-            $hasParent = true;
-            $parent = $this->getEntityManager()->getEntity($entity->get('relatedType'), $entity->get('relatedId'));
-        }
-
-        if ($hasParent) {
-            if ($parent) {
-                if ($parent->getEntityType() === 'Note') {
-                    if ($parent->get('parentId') && $parent->get('parentType')) {
-                        $parentOfParent = $this->getEntityManager()->getEntity($parent->get('parentType'), $parent->get('parentId'));
-                        if ($parentOfParent && $this->getAclManager()->checkEntity($user, $parentOfParent)) {
-                            return true;
-                        }
-                    } else {
-                        return true;
-                    }
-                } else {
-                    if ($this->getAclManager()->checkEntity($user, $parent)) {
-                        return true;
-                    }
-                }
-            }
-        } else {
-            return true;
-        }
-
-        if ($this->checkEntity($user, $entity, $data, 'read')) {
-            return true;
-        }
-
-        return false;
-    }
-
-    public function checkIsOwner(EntityUser $user, Entity $entity)
-    {
-        if ($user->id === $entity->get('createdById')) {
-            return true;
-        }
-        return false;
-    }
-}
-

application/Espo/AclPortal/EmailAddress.php

@@ -1,56 +0,0 @@
-<?php
-/************************************************************************
- * This file is part of EspoCRM.
- *
- * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
- * Website: https://www.espocrm.com
- *
- * EspoCRM is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * EspoCRM is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- *
- * The interactive user interfaces in modified source and object code versions
- * of this program must display Appropriate Legal Notices, as required under
- * Section 5 of the GNU General Public License version 3.
- *
- * In accordance with Section 7(b) of the GNU General Public License version 3,
- * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
- ************************************************************************/
-
-namespace Espo\AclPortal;
-
-use \Espo\Entities\User as EntityUser;
-use \Espo\ORM\Entity;
-
-class EmailAddress extends \Espo\Core\AclPortal\Base
-{
-    public function checkEditInEntity(EntityUser $user, Entity $entity, Entity $excludeEntity)
-    {
-        $id = $entity->id;
-
-        $isFobidden = false;
-
-        $repository = $this->getEntityManager()->getRepository('EmailAddress');
-
-        if (!$user->isAdmin()) {
-            $entityWithSameAddressList = $repository->getEntityListByAddressId($id, $excludeEntity);
-            foreach ($entityWithSameAddressList as $e) {
-                if (!$this->getAclManager()->check($user, $e, 'edit')) {
-                    $isFobidden = true;
-                    break;
-                }
-            }
-        }
-        return !$isFobidden;
-    }
-}

application/Espo/Classes/Acl/ActionHistoryRecord/OwnershipChecker.php

@@ -0,0 +1,49 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\Acl\ActionHistoryRecord;
+
+use Espo\Entities\User;
+
+use Espo\ORM\Entity;
+
+use Espo\Core\{
+    Acl\OwnershipOwnChecker,
+};
+
+/**
+ * @implements OwnershipOwnChecker<\Espo\Entities\ActionHistoryRecord>
+ */
+class OwnershipChecker implements OwnershipOwnChecker
+{
+    public function checkOwn(User $user, Entity $entity): bool
+    {
+        return $entity->get('userId') === $user->getId();
+    }
+}

application/Espo/Classes/Acl/Attachment/AccessChecker.php

@@ -0,0 +1,171 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\Acl\Attachment;
+
+use Espo\Entities\{
+    User,
+    Note,
+    Attachment,
+};
+
+use Espo\ORM\Entity;
+
+use Espo\Core\{
+    ORM\EntityManager,
+    AclManager,
+    Acl\ScopeData,
+    Acl\DefaultAccessChecker,
+    Acl\AccessEntityCREDChecker,
+    Acl\Traits\DefaultAccessCheckerDependency,
+};
+
+/**
+ * @implements AccessEntityCREDChecker<Attachment>
+ */
+class AccessChecker implements AccessEntityCREDChecker
+{
+    use DefaultAccessCheckerDependency;
+
+    private $aclManager;
+
+    private $entityManager;
+
+    public function __construct(
+        DefaultAccessChecker $defaultAccessChecker,
+        AclManager $aclManager,
+        EntityManager $entityManager
+    ) {
+        $this->defaultAccessChecker = $defaultAccessChecker;
+        $this->aclManager = $aclManager;
+        $this->entityManager = $entityManager;
+    }
+
+    public function checkEntityRead(User $user, Entity $entity, ScopeData $data): bool
+    {
+        /** @var Attachment $entity */
+
+        if ($entity->get('parentType') === 'Settings') {
+            // Allow the logo.
+            return true;
+        }
+
+        $parent = null;
+
+        $parentType = $entity->get('parentType');
+        $parentId = $entity->get('parentId');
+
+        $relatedType = $entity->get('relatedType');
+        $relatedId = $entity->get('relatedId');
+
+        if ($parentId && $parentType) {
+            $parent = $this->entityManager->getEntityById($parentType, $parentId);
+        }
+        else if ($relatedId && $relatedType) {
+            $parent = $this->entityManager->getEntityById($relatedType, $relatedId);
+        }
+
+        if (!$parent) {
+            if ($this->defaultAccessChecker->checkEntityRead($user, $entity, $data)) {
+                return true;
+            }
+
+            return false;
+        }
+
+        if ($parent->getEntityType() === 'Note') {
+            /** @var Note $parent */
+            $result = $this->checkEntityReadNoteParent($user, $parent);
+
+            if ($result !== null) {
+                return $result;
+            }
+        }
+        else if ($this->aclManager->checkEntity($user, $parent)) {
+            if (
+                $entity->getTargetField() &&
+                in_array(
+                    $entity->getTargetField(),
+                    $this->aclManager->getScopeForbiddenFieldList($user, $parent->getEntityType())
+                )
+            ) {
+                return false;
+            }
+
+            return true;
+        }
+
+        if ($this->defaultAccessChecker->checkEntityRead($user, $entity, $data)) {
+            return true;
+        }
+
+        return false;
+    }
+
+    private function checkEntityReadNoteParent(User $user, Note $note): ?bool
+    {
+        if ($note->getTargetType() === Note::TARGET_TEAMS) {
+            $intersect = array_intersect(
+                $note->getLinkMultipleIdList('teams') ?? [],
+                $user->getLinkMultipleIdList('teams') ?? []
+            );
+
+            if (count($intersect)) {
+                return true;
+            }
+
+            return null;
+        }
+
+        if ($note->getTargetType() === Note::TARGET_USERS) {
+            $isRelated = $this->entityManager
+                ->getRDBRepository('Note')
+                ->getRelation($note, 'users')
+                ->isRelated($user);
+
+            if ($isRelated) {
+                return true;
+            }
+
+            return null;
+        }
+
+        if (!$note->getParentId() || !$note->getParentType()) {
+            return null;
+        }
+
+        $parent = $this->entityManager->getEntity($note->getParentType(), $note->getParentId());
+
+        if ($parent && $this->aclManager->checkEntity($user, $parent)) {
+            return true;
+        }
+
+        return null;
+    }
+}

application/Espo/Classes/Acl/Attachment/OwnershipChecker.php

@@ -0,0 +1,55 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\Acl\Attachment;
+
+use Espo\Entities\User;
+
+use Espo\ORM\Entity;
+
+use Espo\Core\{
+    Acl\OwnershipOwnChecker,
+};
+
+/**
+ * @implements OwnershipOwnChecker<\Espo\Entities\Attachment>
+ */
+class OwnershipChecker implements OwnershipOwnChecker
+{
+    private const ATTR_CREATED_BY_ID = 'createdById';
+
+    public function checkOwn(User $user, Entity $entity): bool
+    {
+        if ($user->getId() === $entity->get(self::ATTR_CREATED_BY_ID)) {
+            return true;
+        }
+
+        return false;
+    }
+}

application/Espo/Classes/Acl/AuthToken/AccessChecker.php

@@ -0,0 +1,59 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\Acl\AuthToken;
+
+use Espo\Entities\User;
+
+use Espo\Core\{
+    Acl\ScopeData,
+    Acl\DefaultAccessChecker,
+    Acl\AccessEntityCREDChecker,
+    Acl\Traits\DefaultAccessCheckerDependency,
+};
+
+/**
+ * @implements AccessEntityCREDChecker<\Espo\Entities\AuthToken>
+ */
+class AccessChecker implements AccessEntityCREDChecker
+{
+    use DefaultAccessCheckerDependency;
+
+    private $defaultAccessChecker;
+
+    public function __construct(DefaultAccessChecker $defaultAccessChecker)
+    {
+        $this->defaultAccessChecker = $defaultAccessChecker;
+    }
+
+    public function checkCreate(User $user, ScopeData $data): bool
+    {
+        return false;
+    }
+}

application/Espo/Classes/Acl/Email/AccessChecker.php

@@ -0,0 +1,171 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\Acl\Email;
+
+use Espo\Entities\User;
+use Espo\Entities\Email;
+
+use Espo\ORM\Entity;
+
+use Espo\Core\{
+    Acl\Table,
+    Acl\ScopeData,
+    Acl\DefaultAccessChecker,
+    Acl\AccessEntityCREDSChecker,
+    Acl\Traits\DefaultAccessCheckerDependency,
+};
+
+/**
+ * @implements AccessEntityCREDSChecker<\Espo\Entities\Email>
+ */
+class AccessChecker implements AccessEntityCREDSChecker
+{
+    use DefaultAccessCheckerDependency;
+
+    public function __construct(DefaultAccessChecker $defaultAccessChecker)
+    {
+        $this->defaultAccessChecker = $defaultAccessChecker;
+    }
+
+    public function checkEntityRead(User $user, Entity $entity, ScopeData $data): bool
+    {
+        /** @var Email $entity */
+
+        if ($this->defaultAccessChecker->checkEntityRead($user, $entity, $data)) {
+            return true;
+        }
+
+        if ($data->isFalse()) {
+            return false;
+        }
+
+        if ($data->getRead() === Table::LEVEL_NO) {
+            return false;
+        }
+
+        if (!$entity->has('usersIds')) {
+            $entity->loadLinkMultipleField('users');
+        }
+
+        $userIdList = $entity->get('usersIds');
+
+        if (is_array($userIdList) && in_array($user->getId(), $userIdList)) {
+            return true;
+        }
+
+        return false;
+    }
+
+    public function checkEntityDelete(User $user, Entity $entity, ScopeData $data): bool
+    {
+        /** @var Email $entity */
+
+        if ($user->isAdmin()) {
+            return true;
+        }
+
+        if ($data->isFalse()) {
+            return false;
+        }
+
+        if ($data->getDelete() === Table::LEVEL_OWN) {
+            if ($user->getId() === $entity->get('assignedUserId')) {
+                return true;
+            }
+
+            if ($user->getId() === $entity->get('createdById')) {
+                return true;
+            }
+
+            /** @var string[] */
+            $assignedUserIdList = $entity->getLinkMultipleIdList('assignedUsers');
+
+            if (
+                count($assignedUserIdList) === 1 &&
+                $entity->hasLinkMultipleId('assignedUsers', $user->getId())
+            ) {
+                return true;
+            }
+
+            return false;
+        }
+
+        if ($this->defaultAccessChecker->checkEntityDelete($user, $entity, $data)) {
+            return true;
+        }
+
+        if ($data->getEdit() === Table::LEVEL_NO && $data->getCreate() === Table::LEVEL_NO) {
+            return false;
+        }
+
+        if ($entity->get('createdById') !== $user->getId()) {
+            return false;
+        }
+
+        if ($entity->get('status') !== 'Sent' && $entity->get('status') !== 'Archived') {
+            return true;
+        }
+
+        return false;
+    }
+
+    public function checkEntityEdit(User $user, Entity $entity, ScopeData $data): bool
+    {
+        /** @var Email $entity */
+
+        if (
+            $entity->getStatus() === Email::STATUS_DRAFT &&
+            $entity->getCreatedBy() &&
+            $entity->getCreatedBy()->getId() === $user->getId()
+        ) {
+            return true;
+        }
+
+        return $this->defaultAccessChecker->checkEntityEdit($user, $entity, $data);
+    }
+
+    public function checkEdit(User $user, ScopeData $data): bool
+    {
+        if ($data->getCreate() === Table::LEVEL_YES) {
+            return true;
+        }
+
+        return $this->defaultAccessChecker->checkEdit($user, $data);
+    }
+
+    public function checkDelete(User $user, ScopeData $data): bool
+    {
+        if ($data->getCreate() === Table::LEVEL_YES) {
+            return true;
+        }
+
+        return $this->defaultAccessChecker->checkDelete($user, $data);
+    }
+}

application/Espo/Classes/Acl/Email/AssignmentChecker.php

@@ -0,0 +1,51 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\Acl\Email;
+
+use Espo\Entities\User;
+
+use Espo\ORM\Entity;
+
+use Espo\Core\{
+    Acl\DefaultAssignmentChecker,
+};
+
+class AssignmentChecker extends DefaultAssignmentChecker
+{
+    protected function isPermittedAssignedUser(User $user, Entity $entity): bool
+    {
+        return true;
+    }
+
+    protected function isPermittedAssignedUsers(User $user, Entity $entity): bool
+    {
+        return true;
+    }
+}

application/Espo/Classes/Acl/Email/OwnershipChecker.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -27,46 +27,53 @@
  * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
  ************************************************************************/
 
-namespace Espo\AclPortal;
+namespace Espo\Classes\Acl\Email;
 
-use \Espo\Entities\User as EntityUser;
-use \Espo\ORM\Entity;
+use Espo\Entities\User;
+use Espo\Entities\Email;
 
-class Email extends \Espo\Core\AclPortal\Base
+use Espo\ORM\Entity;
+
+use Espo\Core\{
+    Acl\DefaultOwnershipChecker,
+    Acl\OwnershipOwnChecker,
+    Acl\OwnershipTeamChecker,
+};
+
+/**
+ * @implements OwnershipOwnChecker<\Espo\Entities\Email>
+ * @implements OwnershipTeamChecker<\Espo\Entities\Email>
+ */
+class OwnershipChecker implements OwnershipOwnChecker, OwnershipTeamChecker
 {
-    protected $ownerUserIdAttribute = 'usersIds';
+    private $defaultOwnershipChecker;
 
-    public function checkEntityRead(EntityUser $user, Entity $entity, $data)
+    public function __construct(DefaultOwnershipChecker $defaultOwnershipChecker)
     {
-        if ($this->checkEntity($user, $entity, $data, 'read')) {
+        $this->defaultOwnershipChecker = $defaultOwnershipChecker;
+    }
+
+    public function checkOwn(User $user, Entity $entity): bool
+    {
+        /** @var Email $entity */
+
+        if ($user->getId() === $entity->get('assignedUserId')) {
             return true;
         }
 
-        if ($data === false) {
-            return false;
-        }
-        if (is_object($data)) {
-            if ($data->read === false || $data->read === 'no') {
-                return false;
-            }
-        }
-
-        if (!$entity->has('usersIds')) {
-            $entity->loadLinkMultipleField('users');
-        }
-        $userIdList = $entity->get('usersIds');
-        if (is_array($userIdList) && in_array($user->id, $userIdList)) {
+        if ($user->getId() === $entity->get('createdById')) {
             return true;
         }
+
+        if ($entity->hasLinkMultipleId('assignedUsers', $user->getId())) {
+            return true;
+        }
+
         return false;
     }
 
-    public function checkIsOwner(EntityUser $user, Entity $entity)
+    public function checkTeam(User $user, Entity $entity): bool
     {
-        if ($user->id === $entity->get('createdById')) {
-            return true;
-        }
-        return false;
+        return $this->defaultOwnershipChecker->checkTeam($user, $entity);
     }
 }
-

application/Espo/Classes/Acl/EmailFilter/OwnershipChecker.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -27,57 +27,56 @@
  * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
  ************************************************************************/
 
-namespace Espo\Core\Authentication\TwoFactor\Methods;
+namespace Espo\Classes\Acl\EmailFilter;
 
 use Espo\Entities\User;
 
-use Espo\ORM\EntityManager;
-use Espo\Core\Authentication\TwoFactor\Utils\Totp as TotpUtils;
+use Espo\ORM\Entity;
 
-use StdClass;
+use Espo\Core\{
+    Acl\OwnershipOwnChecker,
+    ORM\EntityManager,
+};
 
-class Totp implements CodeVerify
+/**
+ * @implements OwnershipOwnChecker<\Espo\Entities\EmailFilter>
+ */
+class OwnershipChecker implements OwnershipOwnChecker
 {
-    protected $entityManager;
-    protected $totp;
+    private $entityManager;
 
-    public function __construct(EntityManager $entityManager, TotpUtils $totp)
+    public function __construct(EntityManager $entityManager)
     {
         $this->entityManager = $entityManager;
-        $this->totp = $totp;
     }
 
-    public function verifyCode(User $user, string $code) : bool
+    public function checkOwn(User $user, Entity $entity): bool
     {
-        $userData = $this->entityManager
-            ->getRepository('UserData')
-            ->getByUserId($user->id);
-
-        if (!$userData) {
+        if (!$entity->has('parentId') || !$entity->has('parentType')) {
             return false;
         }
 
-        if (!$userData->get('auth2FA')) {
+        $parentType = $entity->get('parentType');
+        $parentId = $entity->get('parentId');
+
+        if (!$parentType || !$parentId) {
             return false;
         }
 
-        if ($userData->get('auth2FAMethod') != 'Totp') {
+        $parent = $this->entityManager->getEntity($parentType, $parentId);
+
+        if (!$parent) {
             return false;
         }
 
-        $secret = $userData->get('auth2FATotpSecret');
-
-        if (!$secret) {
-            return false;
+        if ($parent->getEntityType() === 'User') {
+            return $parent->getId() === $user->getId();
         }
 
-        return $this->totp->verifyCode($secret, $code);
-    }
+        if ($parent->has('assignedUserId') && $parent->get('assignedUserId') === $user->getId()) {
+            return true;
+        }
 
-    public function getLoginData(User $user) : StdClass
-    {
-        return (object) [
-            'message' => 'enterTotpCode',
-        ];
+        return false;
     }
 }

application/Espo/Classes/Acl/Import/AccessChecker.php

@@ -0,0 +1,88 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\Acl\Import;
+
+use Espo\Entities\User;
+
+use Espo\ORM\Entity;
+
+use Espo\Core\{
+    Acl\ScopeData,
+    Acl\AccessEntityReadChecker,
+    Acl\AccessEntityDeleteChecker,
+};
+
+/**
+ * @implements AccessEntityReadChecker<\Espo\Entities\Import>
+ * @implements AccessEntityDeleteChecker<\Espo\Entities\Import>
+ */
+class AccessChecker implements AccessEntityReadChecker, AccessEntityDeleteChecker
+{
+    public function check(User $user, ScopeData $data): bool
+    {
+        return $data->isTrue();
+    }
+
+    public function checkRead(User $user, ScopeData $data): bool
+    {
+        return $data->isTrue();
+    }
+
+    public function checkDelete(User $user, ScopeData $data): bool
+    {
+        return $data->isTrue();
+    }
+
+    public function checkEntityRead(User $user, Entity $entity, ScopeData $data): bool
+    {
+        if ($user->isAdmin()) {
+            return true;
+        }
+
+        if ($user->getId() === $entity->get('createdById')) {
+            return true;
+        }
+
+        return false;
+    }
+
+    public function checkEntityDelete(User $user, Entity $entity, ScopeData $data): bool
+    {
+        if ($user->isAdmin()) {
+            return true;
+        }
+
+        if ($user->getId() === $entity->get('createdById')) {
+            return true;
+        }
+
+        return false;
+    }
+}

application/Espo/Classes/Acl/Note/AccessChecker.php

@@ -0,0 +1,175 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\Acl\Note;
+
+use Espo\Entities\User;
+
+use Espo\ORM\Entity;
+
+use Espo\Core\{
+    Acl\ScopeData,
+    Acl\DefaultAccessChecker,
+    Acl\AccessEntityCREDChecker,
+    Acl\Traits\DefaultAccessCheckerDependency,
+    AclManager,
+    ORM\EntityManager,
+    Utils\Config,
+};
+
+use DateTime;
+use Exception;
+
+/**
+ * @implements AccessEntityCREDChecker<\Espo\Entities\Note>
+ */
+class AccessChecker implements AccessEntityCREDChecker
+{
+    use DefaultAccessCheckerDependency;
+
+    private const EDIT_PERIOD = '7 days';
+
+    private const DELETE_PERIOD = '1 month';
+
+    private $defaultAccessChecker;
+
+    private $aclManager;
+
+    private $entityManager;
+
+    private $config;
+
+    public function __construct(
+        DefaultAccessChecker $defaultAccessChecker,
+        AclManager $aclManager,
+        EntityManager $entityManager,
+        Config $config
+    ) {
+        $this->defaultAccessChecker = $defaultAccessChecker;
+        $this->aclManager = $aclManager;
+        $this->entityManager = $entityManager;
+        $this->config = $config;
+    }
+
+    public function checkEntityCreate(User $user, Entity $entity, ScopeData $data): bool
+    {
+        $parentId = $entity->get('parentId');
+        $parentType = $entity->get('parentType');
+
+        if (!$parentId || !$parentType) {
+            return true;
+        }
+
+        $parent = $this->entityManager->getEntity($parentType, $parentId);
+
+        if ($parent && $this->aclManager->checkEntityStream($user, $parent)) {
+            return true;
+        }
+
+        return false;
+    }
+
+    public function checkEntityEdit(User $user, Entity $entity, ScopeData $data): bool
+    {
+        if ($user->isAdmin()) {
+            return true;
+        }
+
+        if (!$this->defaultAccessChecker->checkEntityEdit($user, $entity, $data)) {
+            return false;
+        }
+
+        if (!$this->aclManager->checkOwnershipOwn($user, $entity)) {
+            return true;
+        }
+
+        $createdAt = $entity->get('createdAt');
+
+        if (!$createdAt) {
+            return true;
+        }
+
+        $noteEditThresholdPeriod =
+            '-' .  $this->config->get('noteEditThresholdPeriod', self::EDIT_PERIOD);
+
+        $dt = new DateTime();
+
+        $dt->modify($noteEditThresholdPeriod);
+
+        try {
+            if ($dt->format('U') > (new DateTime($createdAt))->format('U')) {
+                return false;
+            }
+        }
+        catch (Exception $e) {
+            return false;
+        }
+
+        return true;
+    }
+
+    public function checkEntityDelete(User $user, Entity $entity, ScopeData $data): bool
+    {
+        if ($user->isAdmin()) {
+            return true;
+        }
+
+        if (!$this->defaultAccessChecker->checkEntityDelete($user, $entity, $data)) {
+            return false;
+        }
+
+        if (!$this->aclManager->checkOwnershipOwn($user, $entity)) {
+            return true;
+        }
+
+        $createdAt = $entity->get('createdAt');
+
+        if (!$createdAt) {
+            return true;
+        }
+
+        $deleteThresholdPeriod =
+            '-' . $this->config->get('noteDeleteThresholdPeriod', self::DELETE_PERIOD);
+
+        $dt = new DateTime();
+
+        $dt->modify($deleteThresholdPeriod);
+
+        try {
+            if ($dt->format('U') > (new DateTime($createdAt))->format('U')) {
+                return false;
+            }
+        }
+        catch (Exception $e) {
+            return false;
+        }
+
+        return true;
+    }
+}

application/Espo/Classes/Acl/Note/OwnershipChecker.php

@@ -0,0 +1,53 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\Acl\Note;
+
+use Espo\Entities\User;
+
+use Espo\ORM\Entity;
+
+use Espo\Core\{
+    Acl\OwnershipOwnChecker,
+};
+
+/**
+ * @implements OwnershipOwnChecker<\Espo\Entities\Note>
+ */
+class OwnershipChecker implements OwnershipOwnChecker
+{
+    public function checkOwn(User $user, Entity $entity): bool
+    {
+        if ($entity->get('type') === 'Post' && $user->getId() === $entity->get('createdById')) {
+            return true;
+        }
+
+        return false;
+    }
+}

application/Espo/Classes/Acl/Notification/OwnershipChecker.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -27,23 +27,27 @@
  * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
  ************************************************************************/
 
-namespace Espo\Modules\Crm\AclPortal;
+namespace Espo\Classes\Acl\Notification;
 
 use Espo\Entities\User;
+
 use Espo\ORM\Entity;
 
-use Espo\Core\AclPortal\Acl;
+use Espo\Core\{
+    Acl\OwnershipOwnChecker,
+};
 
-class Account extends Acl
+/**
+ * @implements OwnershipOwnChecker<\Espo\Entities\Notification>
+ */
+class OwnershipChecker implements OwnershipOwnChecker
 {
-    public function checkInAccount(User $user, Entity $entity)
+    public function checkOwn(User $user, Entity $entity): bool
     {
-        $accountIdList = $user->getLinkMultipleIdList('accounts');
-        if (count($accountIdList)) {
-            if (in_array($entity->id, $accountIdList)) {
-                return true;
-            }
+        if ($user->getId() === $entity->get('userId')) {
+            return true;
         }
+
         return false;
     }
 }

application/Espo/Classes/Acl/Portal/AccessChecker.php

@@ -0,0 +1,66 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\Acl\Portal;
+
+use Espo\Entities\User;
+
+use Espo\Core\{
+    Acl\ScopeData,
+    Acl\DefaultAccessChecker,
+    Acl\AccessEntityCREDChecker,
+    Acl\Traits\DefaultAccessCheckerDependency,
+    Acl\Table,
+    AclManager,
+};
+
+/**
+ * @implements AccessEntityCREDChecker<\Espo\Entities\Portal>
+ */
+class AccessChecker implements AccessEntityCREDChecker
+{
+    use DefaultAccessCheckerDependency;
+
+    private $defaultAccessChecker;
+
+    private $aclManager;
+
+    public function __construct(DefaultAccessChecker $defaultAccessChecker, AclManager $aclManager)
+    {
+        $this->defaultAccessChecker = $defaultAccessChecker;
+        $this->aclManager = $aclManager;
+    }
+
+    public function check(User $user, ScopeData $data): bool
+    {
+        $level = $this->aclManager->getPermissionLevel($user, 'portal');
+
+        return $level === Table::LEVEL_YES;
+    }
+}

application/Espo/Classes/Acl/ScheduledJob/AccessChecker.php

@@ -0,0 +1,92 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\Acl\ScheduledJob;
+
+use Espo\Entities\User;
+
+use Espo\ORM\Entity;
+
+use Espo\Core\{
+    Acl\ScopeData,
+    Acl\DefaultAccessChecker,
+    Acl\AccessEntityCREDChecker,
+    Acl\Traits\DefaultAccessCheckerDependency,
+};
+
+/**
+ * @implements AccessEntityCREDChecker<\Espo\Entities\ScheduledJob>
+ */
+class AccessChecker implements AccessEntityCREDChecker
+{
+    use DefaultAccessCheckerDependency;
+
+    private $defaultAccessChecker;
+
+    public function __construct(DefaultAccessChecker $defaultAccessChecker)
+    {
+        $this->defaultAccessChecker = $defaultAccessChecker;
+    }
+
+    public function checkEntityCreate(User $user, Entity $entity, ScopeData $data): bool
+    {
+        if ($entity->get('isInternal')) {
+            return false;
+        }
+
+        return $this->defaultAccessChecker->checkEntityCreate($user, $entity, $data);
+    }
+
+    public function checkEntityRead(User $user, Entity $entity, ScopeData $data): bool
+    {
+        if ($entity->get('isInternal')) {
+            return false;
+        }
+
+        return $this->defaultAccessChecker->checkEntityRead($user, $entity, $data);
+    }
+
+    public function checkEntityEdit(User $user, Entity $entity, ScopeData $data): bool
+    {
+        if ($entity->get('isInternal')) {
+            return false;
+        }
+
+        return $this->defaultAccessChecker->checkEntityEdit($user, $entity, $data);
+    }
+
+    public function checkEntityDelete(User $user, Entity $entity, ScopeData $data): bool
+    {
+        if ($entity->get('isInternal')) {
+            return false;
+        }
+
+        return $this->defaultAccessChecker->checkEntityDelete($user, $entity, $data);
+    }
+}

application/Espo/Classes/Acl/Team/OwnershipChecker.php

@@ -0,0 +1,52 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\Acl\Team;
+
+use Espo\Entities\User;
+
+use Espo\ORM\Entity;
+
+use Espo\Core\{
+    Acl\OwnershipOwnChecker,
+};
+
+/**
+ * @implements OwnershipOwnChecker<\Espo\Entities\Team>
+ */
+class OwnershipChecker implements OwnershipOwnChecker
+{
+    public function checkOwn(User $user, Entity $entity): bool
+    {
+        /** @var string[] */
+        $userTeamIdList = $user->getLinkMultipleIdList('teams');
+
+        return in_array($entity->getId(), $userTeamIdList);
+    }
+}

application/Espo/Classes/Acl/User/AccessChecker.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -27,72 +27,116 @@
  * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
  ************************************************************************/
 
-namespace Espo\Acl;
+namespace Espo\Classes\Acl\User;
+
+use Espo\Entities\User;
 
 use Espo\ORM\Entity;
-use Espo\Entities\User as EntityUser;
 
-class User extends \Espo\Core\Acl\Acl
+use Espo\Core\{
+    Acl\Table,
+    Acl\ScopeData,
+    Acl\DefaultAccessChecker,
+    Acl\AccessEntityCREDSChecker,
+    Acl\Traits\DefaultAccessCheckerDependency,
+    AclManager,
+};
+
+/**
+ * @implements AccessEntityCREDSChecker<User>
+ */
+class AccessChecker implements AccessEntityCREDSChecker
 {
-    public function checkIsOwner(EntityUser $user, Entity $entity)
+    use DefaultAccessCheckerDependency;
+
+    private $defaultAccessChecker;
+
+    private $aclManager;
+
+    public function __construct(DefaultAccessChecker $defaultAccessChecker, AclManager $aclManager)
     {
-        return $user->id === $entity->id;
+        $this->defaultAccessChecker = $defaultAccessChecker;
+        $this->aclManager = $aclManager;
     }
 
-    public function checkEntityRead(EntityUser $user, Entity $entity, $data)
+    public function checkEntityCreate(User $user, Entity $entity, ScopeData $data): bool
     {
-        if (!$user->isAdmin() && $entity->isPortal()) {
-            if ($this->getAclManager()->get($user, 'portalPermission') === 'yes') {
+        if (!$user->isAdmin()) {
+            return false;
+        }
+
+        /** @var User $entity */
+
+        if ($entity->isSuperAdmin() && !$user->isSuperAdmin()) {
+            return false;
+        }
+
+        return $this->defaultAccessChecker->checkEntityCreate($user, $entity, $data);
+    }
+
+    public function checkEntityRead(User $user, Entity $entity, ScopeData $data): bool
+    {
+        /** @var User $entity */
+
+        if ($entity->isPortal()) {
+            if ($this->aclManager->getPermissionLevel($user, 'portal') === Table::LEVEL_YES) {
                 return true;
             }
-        }
-        return $this->checkEntity($user, $entity, $data, 'read');
-    }
 
-    public function checkEntityCreate(EntityUser $user, Entity $entity, $data)
-    {
-        if (!$user->isAdmin()) {
             return false;
         }
+
         if ($entity->isSuperAdmin() && !$user->isSuperAdmin()) {
             return false;
         }
-        return $this->checkEntity($user, $entity, $data, 'create');
+
+        return $this->defaultAccessChecker->checkEntityRead($user, $entity, $data);
     }
 
-    public function checkEntityDelete(EntityUser $user, Entity $entity, $data)
+    public function checkEntityEdit(User $user, Entity $entity, ScopeData $data): bool
     {
-        if ($entity->id === 'system') {
-            return false;
-        }
-        if (!$user->isAdmin()) {
-            return false;
-        }
+        /** @var User $entity */
+
         if ($entity->isSystem()) {
             return false;
         }
-        if ($entity->isSuperAdmin() && !$user->isSuperAdmin()) {
-            return false;
-        }
-        return parent::checkEntityDelete($user, $entity, $data);
-    }
 
-    public function checkEntityEdit(EntityUser $user, Entity $entity, $data)
-    {
-        if ($entity->id === 'system') {
-            return false;
-        }
-        if ($entity->isSystem()) {
-            return false;
-        }
         if (!$user->isAdmin()) {
-            if ($user->id !== $entity->id) {
+            if ($user->getId() !== $entity->getId()) {
                 return false;
             }
         }
+
         if ($entity->isSuperAdmin() && !$user->isSuperAdmin()) {
             return false;
         }
-        return $this->checkEntity($user, $entity, $data, 'edit');
+
+        return $this->defaultAccessChecker->checkEntityEdit($user, $entity, $data);
+    }
+
+    public function checkEntityDelete(User $user, Entity $entity, ScopeData $data): bool
+    {
+        /** @var User $entity */
+
+        if (!$user->isAdmin()) {
+            return false;
+        }
+
+        if ($entity->isSystem()) {
+            return false;
+        }
+
+        if ($entity->isSuperAdmin() && !$user->isSuperAdmin()) {
+            return false;
+        }
+
+        return $this->defaultAccessChecker->checkEntityDelete($user, $entity, $data);
+    }
+
+    public function checkEntityStream(User $user, Entity $entity, ScopeData $data): bool
+    {
+        /** @var User $entity */
+
+        return $this->aclManager->checkUserPermission($user, $entity, 'user');
     }
 }

application/Espo/Classes/Acl/User/OwnershipChecker.php

@@ -0,0 +1,67 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\Acl\User;
+
+use Espo\Entities\User;
+use Espo\ORM\Entity;
+use Espo\Core\ORM\Entity as CoreEntity;
+
+use Espo\Core\{
+    Acl\OwnershipOwnChecker,
+    Acl\OwnershipTeamChecker,
+};
+
+/**
+ * @implements OwnershipOwnChecker<\Espo\Entities\User>
+ * @implements OwnershipTeamChecker<\Espo\Entities\User>
+ */
+class OwnershipChecker implements OwnershipOwnChecker, OwnershipTeamChecker
+{
+    public function checkOwn(User $user, Entity $entity): bool
+    {
+        return $user->getId() === $entity->getId();
+    }
+
+    public function checkTeam(User $user, Entity $entity): bool
+    {
+        assert($entity instanceof CoreEntity);
+
+        $intersect = array_intersect(
+            $user->getLinkMultipleIdList('teams') ?? [],
+            $entity->getLinkMultipleIdList('teams') ?? []
+        );
+
+        if (count($intersect)) {
+            return true;
+        }
+
+        return false;
+    }
+}

application/Espo/Classes/Acl/Webhook/AccessChecker.php

@@ -0,0 +1,110 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\Acl\Webhook;
+
+use Espo\Entities\User;
+
+use Espo\ORM\Entity;
+
+use Espo\Core\{
+    Acl\ScopeData,
+    Acl\DefaultAccessChecker,
+    Acl\AccessEntityCREDChecker,
+    Acl\Traits\DefaultAccessCheckerDependency,
+};
+
+/**
+ * @implements AccessEntityCREDChecker<\Espo\Entities\Webhook>
+ */
+class AccessChecker implements AccessEntityCREDChecker
+{
+    use DefaultAccessCheckerDependency;
+
+    private $defaultAccessChecker;
+
+    public function __construct(DefaultAccessChecker $defaultAccessChecker)
+    {
+        $this->defaultAccessChecker = $defaultAccessChecker;
+    }
+
+    public function check(User $user, ScopeData $data): bool
+    {
+        if ($user->isAdmin()) {
+            return true;
+        }
+
+        if (!$user->isApi()) {
+            return false;
+        }
+
+        if ($data->isFalse()) {
+            return false;
+        }
+
+        return true;
+    }
+
+    public function checkEntityCreate(User $user, Entity $entity, ScopeData $data): bool
+    {
+        return $this->checkEntityInternal($user, $entity, $data);
+    }
+
+    public function checkEntityRead(User $user, Entity $entity, ScopeData $data): bool
+    {
+        return $this->checkEntityInternal($user, $entity, $data);
+    }
+
+    public function checkEntityEdit(User $user, Entity $entity, ScopeData $data): bool
+    {
+        return $this->checkEntityInternal($user, $entity, $data);
+    }
+
+    public function checkEntityDelete(User $user, Entity $entity, ScopeData $data): bool
+    {
+        return $this->checkEntityInternal($user, $entity, $data);
+    }
+
+    private function checkEntityInternal(User $user, Entity $entity, ScopeData $data): bool
+    {
+        if ($user->isAdmin()) {
+            return true;
+        }
+
+        if ($data->isFalse()) {
+            return false;
+        }
+
+        if ($user->isApi() && $user->getId() === $entity->get('userId')) {
+            return true;
+        }
+
+        return false;
+    }
+}

application/Espo/Classes/Acl/Webhook/OwnershipChecker.php

@@ -0,0 +1,46 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\Acl\Webhook;
+
+use Espo\Entities\User;
+use Espo\ORM\Entity;
+
+use Espo\Core\Acl\OwnershipOwnChecker;
+
+/**
+ * @implements OwnershipOwnChecker<\Espo\Entities\Webhook>
+ */
+class OwnershipChecker implements OwnershipOwnChecker
+{
+    public function checkOwn(User $user, Entity $entity): bool
+    {
+        return $user->getId() === $entity->get('userId') && $user->isApi();
+    }
+}

application/Espo/Classes/AclPortal/Attachment/AccessChecker.php

@@ -0,0 +1,177 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\AclPortal\Attachment;
+
+use Espo\Entities\{
+    User,
+    Note,
+    Attachment,
+};
+
+use Espo\ORM\Entity;
+
+use Espo\Core\{
+    ORM\EntityManager,
+    Portal\AclManager,
+    Acl\ScopeData,
+    Acl\AccessEntityCREDChecker,
+    Portal\Acl\DefaultAccessChecker,
+    Portal\Acl\Traits\DefaultAccessCheckerDependency,
+};
+
+/**
+ * @implements AccessEntityCREDChecker<Attachment>
+ */
+class AccessChecker implements AccessEntityCREDChecker
+{
+    use DefaultAccessCheckerDependency;
+
+    private $defaultAccessChecker;
+
+    private $aclManager;
+
+    private $entityManager;
+
+    public function __construct(
+        DefaultAccessChecker $defaultAccessChecker,
+        AclManager $aclManager,
+        EntityManager $entityManager
+    ) {
+        $this->defaultAccessChecker = $defaultAccessChecker;
+        $this->aclManager = $aclManager;
+        $this->entityManager = $entityManager;
+    }
+
+    public function checkEntityRead(User $user, Entity $entity, ScopeData $data): bool
+    {
+        /** @var Attachment $entity */
+
+        if ($entity->get('parentType') === 'Settings') {
+            // Allow the logo.
+            return true;
+        }
+
+        $parent = null;
+
+        $parentType = $entity->get('parentType');
+        $parentId = $entity->get('parentId');
+
+        $relatedType = $entity->get('relatedType');
+        $relatedId = $entity->get('relatedId');
+
+        if ($parentId && $parentType) {
+            $parent = $this->entityManager->getEntityById($parentType, $parentId);
+        }
+        else if ($relatedId && $relatedType) {
+            $parent = $this->entityManager->getEntityById($relatedType, $relatedId);
+        }
+
+        if (!$parent) {
+            if ($entity->get('createdById') === $user->getId()) {
+                return true;
+            }
+
+            return false;
+        }
+
+        if ($parent->getEntityType() === 'Note') {
+            /** @var Note $parent */
+            $result = $this->checkEntityReadNoteParent($user, $parent);
+
+            if ($result !== null) {
+                return $result;
+            }
+        }
+        else if ($this->aclManager->checkEntity($user, $parent)) {
+            if (
+                $entity->getTargetField() &&
+                in_array(
+                    $entity->getTargetField(),
+                    $this->aclManager->getScopeForbiddenFieldList($user, $parent->getEntityType())
+                )
+            ) {
+                return false;
+            }
+
+            return true;
+        }
+
+        if ($this->defaultAccessChecker->checkEntityRead($user, $entity, $data)) {
+            return true;
+        }
+
+        return false;
+    }
+
+    private function checkEntityReadNoteParent(User $user, Note $note): ?bool
+    {
+        if ($note->isInternal()) {
+            return false;
+        }
+
+        if ($note->getTargetType() === Note::TARGET_PORTALS) {
+            $intersect = array_intersect(
+                $note->getLinkMultipleIdList('portals') ?? [],
+                $user->getLinkMultipleIdList('portals') ?? []
+            );
+
+            if (count($intersect)) {
+                return true;
+            }
+
+            return false;
+        }
+
+        if ($note->getTargetType() === Note::TARGET_USERS) {
+            $isRelated = $this->entityManager
+                ->getRDBRepository('Note')
+                ->getRelation($note, 'users')
+                ->isRelated($user);
+
+            if ($isRelated) {
+                return true;
+            }
+
+            return false;
+        }
+
+        if (!$note->getParentId() || !$note->getParentType()) {
+            return null;
+        }
+
+        $parent = $this->entityManager->getEntity($note->getParentType(), $note->getParentId());
+
+        if ($parent && $this->aclManager->checkEntity($user, $parent)) {
+            return true;
+        }
+
+        return null;
+    }
+}

application/Espo/Classes/AclPortal/Attachment/OwnershipChecker.php

@@ -0,0 +1,55 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\AclPortal\Attachment;
+
+use Espo\Entities\User;
+
+use Espo\ORM\Entity;
+
+use Espo\Core\{
+    Acl\OwnershipOwnChecker,
+};
+
+/**
+ * @implements OwnershipOwnChecker<\Espo\Entities\Attachment>
+ */
+class OwnershipChecker implements OwnershipOwnChecker
+{
+    private const ATTR_CREATED_BY_ID = 'createdById';
+
+    public function checkOwn(User $user, Entity $entity): bool
+    {
+        if ($user->getId() === $entity->get(self::ATTR_CREATED_BY_ID)) {
+            return true;
+        }
+
+        return false;
+    }
+}

application/Espo/Classes/AclPortal/Email/AccessChecker.php

@@ -0,0 +1,85 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\AclPortal\Email;
+
+use Espo\Entities\User;
+
+use Espo\ORM\Entity;
+
+use Espo\Core\ORM\Entity as CoreEntity;
+
+use Espo\Core\{
+    Acl\Table,
+    Acl\ScopeData,
+    Acl\AccessEntityCREDSChecker,
+    Portal\Acl\DefaultAccessChecker,
+    Portal\Acl\Traits\DefaultAccessCheckerDependency,
+};
+
+/**
+ * @implements AccessEntityCREDSChecker<\Espo\Entities\Email>
+ */
+class AccessChecker implements AccessEntityCREDSChecker
+{
+    use DefaultAccessCheckerDependency;
+
+    private $defaultAccessChecker;
+
+    public function __construct(
+        DefaultAccessChecker $defaultAccessChecker
+    ) {
+        $this->defaultAccessChecker = $defaultAccessChecker;
+    }
+
+    public function checkEntityRead(User $user, Entity $entity, ScopeData $data): bool
+    {
+        if ($this->defaultAccessChecker->checkEntityRead($user, $entity, $data)) {
+            return true;
+        }
+
+        if ($data->isFalse()) {
+            return false;
+        }
+
+        if ($data->getRead() === Table::LEVEL_NO) {
+            return false;
+        }
+
+        assert($entity instanceof CoreEntity);
+
+        $userIdList = $entity->getLinkMultipleIdLIst('users');
+
+        if (is_array($userIdList) && in_array($user->getId(), $userIdList)) {
+            return true;
+        }
+
+        return false;
+    }
+}

application/Espo/Classes/AclPortal/Email/OwnershipChecker.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -27,23 +27,27 @@
  * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
  ************************************************************************/
 
-namespace Espo\Modules\Crm\AclPortal;
+namespace Espo\Classes\AclPortal\Email;
 
 use Espo\Entities\User;
+
 use Espo\ORM\Entity;
 
-use Espo\Core\AclPortal\Acl;
+use Espo\Core\{
+    Acl\OwnershipOwnChecker,
+};
 
-class Contact extends Acl
+/**
+ * @implements OwnershipOwnChecker<\Espo\Entities\Email>
+ */
+class OwnershipChecker implements OwnershipOwnChecker
 {
-    public function checkIsOwnContact(User $user, Entity $entity)
+    public function checkOwn(User $user, Entity $entity): bool
     {
-        $contactId = $user->get('contactId');
-        if ($contactId) {
-            if ($entity->id === $contactId) {
-                return true;
-            }
+        if ($user->getId() === $entity->get('createdById')) {
+            return true;
         }
+
         return false;
     }
 }

application/Espo/Classes/AclPortal/Note/AccessChecker.php

@@ -0,0 +1,192 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\AclPortal\Note;
+
+use Espo\Entities\User;
+
+use Espo\ORM\Entity;
+
+use Espo\Core\{
+    Portal\AclManager,
+    Acl\ScopeData,
+    Acl\AccessEntityCREDChecker,
+    Portal\Acl\DefaultAccessChecker,
+    Portal\Acl\Traits\DefaultAccessCheckerDependency,
+    ORM\EntityManager,
+    Utils\Config,
+};
+
+use DateTime;
+use Exception;
+
+/**
+ * @implements AccessEntityCREDChecker<\Espo\Entities\Note>
+ */
+class AccessChecker implements AccessEntityCREDChecker
+{
+    use DefaultAccessCheckerDependency;
+
+    private const EDIT_PERIOD = '7 days';
+
+    private const DELETE_PERIOD = '1 month';
+
+    private $defaultAccessChecker;
+
+    private $aclManager;
+
+    private $entityManager;
+
+    private $config;
+
+    public function __construct(
+        DefaultAccessChecker $defaultAccessChecker,
+        AclManager $aclManager,
+        EntityManager $entityManager,
+        Config $config
+    ) {
+        $this->defaultAccessChecker = $defaultAccessChecker;
+        $this->aclManager = $aclManager;
+        $this->entityManager = $entityManager;
+        $this->config = $config;
+    }
+
+    public function checkEntityCreate(User $user, Entity $entity, ScopeData $data): bool
+    {
+        $parentId = $entity->get('parentId');
+        $parentType = $entity->get('parentType');
+
+        if (!$parentId || !$parentType) {
+            return $this->defaultAccessChecker->checkEntityCreate($user, $entity, $data);
+        }
+
+        $parent = $this->entityManager->getEntity($parentType, $parentId);
+
+        if ($parent && $this->aclManager->checkEntityStream($user, $parent)) {
+            return true;
+        }
+
+        return $this->defaultAccessChecker->checkEntityCreate($user, $entity, $data);
+    }
+
+    public function checkEntityRead(User $user, Entity $entity, ScopeData $data): bool
+    {
+        if ($entity->get('type') !== 'Post') {
+            return false;
+        }
+
+        if ($entity->get('type') === 'Post' && $entity->get('targetType')) {
+            return false;
+        }
+
+        if (!$entity->get('parentId') || !$entity->get('parentType')) {
+            return false;
+        }
+
+        $parent = $this->entityManager->getEntity($entity->get('parentType'), $entity->get('parentId'));
+
+        if ($parent) {
+            if ($this->aclManager->checkEntityStream($user, $parent)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+
+    public function checkEntityEdit(User $user, Entity $entity, ScopeData $data): bool
+    {
+        if (!$this->defaultAccessChecker->checkEntityEdit($user, $entity, $data)) {
+            return false;
+        }
+
+        if (!$this->aclManager->checkOwnershipOwn($user, $entity)) {
+            return true;
+        }
+
+        $createdAt = $entity->get('createdAt');
+
+        if (!$createdAt) {
+            return true;
+        }
+
+        $noteEditThresholdPeriod =
+            '-' .  $this->config->get('noteEditThresholdPeriod', self::EDIT_PERIOD);
+
+        $dt = new DateTime();
+
+        $dt->modify($noteEditThresholdPeriod);
+
+        try {
+            if ($dt->format('U') > (new DateTime($createdAt))->format('U')) {
+                return false;
+            }
+        }
+        catch (Exception $e) {
+            return false;
+        }
+
+        return true;
+    }
+
+    public function checkEntityDelete(User $user, Entity $entity, ScopeData $data): bool
+    {
+        if (!$this->defaultAccessChecker->checkEntityDelete($user, $entity, $data)) {
+            return false;
+        }
+
+        if (!$this->aclManager->checkOwnershipOwn($user, $entity)) {
+            return true;
+        }
+
+        $createdAt = $entity->get('createdAt');
+
+        if (!$createdAt) {
+            return true;
+        }
+
+        $deleteThresholdPeriod =
+            '-' . $this->config->get('noteDeleteThresholdPeriod', self::DELETE_PERIOD);
+
+        $dt = new DateTime();
+
+        $dt->modify($deleteThresholdPeriod);
+
+        try {
+            if ($dt->format('U') > (new DateTime($createdAt))->format('U')) {
+                return false;
+            }
+        }
+        catch (Exception $e) {
+            return false;
+        }
+
+        return true;
+    }
+}

application/Espo/Classes/AclPortal/Note/OwnershipChecker.php

@@ -0,0 +1,53 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\AclPortal\Note;
+
+use Espo\Entities\User;
+
+use Espo\ORM\Entity;
+
+use Espo\Core\{
+    Acl\OwnershipOwnChecker,
+};
+
+/**
+ * @implements OwnershipOwnChecker<\Espo\Entities\Note>
+ */
+class OwnershipChecker implements OwnershipOwnChecker
+{
+    public function checkOwn(User $user, Entity $entity): bool
+    {
+        if ($entity->get('type') === 'Post' && $user->getId() === $entity->get('createdById')) {
+            return true;
+        }
+
+        return false;
+    }
+}

application/Espo/Classes/AclPortal/Notification/OwnershipChecker.php

@@ -0,0 +1,53 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\AclPortal\Notification;
+
+use Espo\Entities\User;
+
+use Espo\ORM\Entity;
+
+use Espo\Core\{
+    Acl\OwnershipOwnChecker,
+};
+
+/**
+ * @implements OwnershipOwnChecker<\Espo\Entities\Notification>
+ */
+class OwnershipChecker implements OwnershipOwnChecker
+{
+    public function checkOwn(User $user, Entity $entity): bool
+    {
+        if ($user->getId() === $entity->get('userId')) {
+            return true;
+        }
+
+        return false;
+    }
+}

application/Espo/Classes/AclPortal/User/OwnershipChecker.php

@@ -0,0 +1,49 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\AclPortal\User;
+
+use Espo\Entities\User;
+
+use Espo\ORM\Entity;
+
+use Espo\Core\{
+    Acl\OwnershipOwnChecker,
+};
+
+/**
+ * @implements OwnershipOwnChecker<\Espo\Entities\User>
+ */
+class OwnershipChecker implements OwnershipOwnChecker
+{
+    public function checkOwn(User $user, Entity $entity): bool
+    {
+        return $user->getId() === $entity->getId();
+    }
+}

application/Espo/Classes/AddressFormatters/Formatter1.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -29,14 +29,14 @@
 
 namespace Espo\Classes\AddressFormatters;
 
-use Espo\Core\FieldUtils\Address\{
-    AddressFormatter,
-    AddressValue,
+use Espo\Core\{
+    Field\Address,
+    Field\Address\AddressFormatter,
 };
 
 class Formatter1 implements AddressFormatter
 {
-    public function format(AddressValue $address) : string
+    public function format(Address $address): string
     {
         $result = '';
 

application/Espo/Classes/AddressFormatters/Formatter2.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -29,14 +29,14 @@
 
 namespace Espo\Classes\AddressFormatters;
 
-use Espo\Core\FieldUtils\Address\{
-    AddressFormatter,
-    AddressValue,
+use Espo\Core\{
+    Field\Address,
+    Field\Address\AddressFormatter,
 };
 
 class Formatter2 implements AddressFormatter
 {
-    public function format(AddressValue $address) : string
+    public function format(Address $address): string
     {
         $result = '';
 

application/Espo/Classes/AddressFormatters/Formatter3.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -29,14 +29,14 @@
 
 namespace Espo\Classes\AddressFormatters;
 
-use Espo\Core\FieldUtils\Address\{
-    AddressFormatter,
-    AddressValue,
+use Espo\Core\{
+    Field\Address,
+    Field\Address\AddressFormatter,
 };
 
 class Formatter3 implements AddressFormatter
 {
-    public function format(AddressValue $address) : string
+    public function format(Address $address): string
     {
         $result = '';
 

application/Espo/Classes/AddressFormatters/Formatter4.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -29,14 +29,14 @@
 
 namespace Espo\Classes\AddressFormatters;
 
-use Espo\Core\FieldUtils\Address\{
-    AddressFormatter,
-    AddressValue,
+use Espo\Core\{
+    Field\Address,
+    Field\Address\AddressFormatter,
 };
 
 class Formatter4 implements AddressFormatter
 {
-    public function format(AddressValue $address) : string
+    public function format(Address $address): string
     {
         $result = '';
 

application/Espo/Classes/AppInfo/Binding.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -30,28 +30,26 @@
 namespace Espo\Classes\AppInfo;
 
 use Espo\Core\{
-    Utils\File\Manager as FileManager,
     Utils\Module,
     Binding\EspoBindingLoader,
     Binding\Binding as BindingItem,
+    Console\Command\Params,
 };
 
 class Binding
 {
-    protected $fileManager;
+    private $module;
 
-    public function __construct(FileManager $fileManager)
+    public function __construct(Module $module)
     {
-        $this->fileManager = $fileManager;
+        $this->module = $module;
     }
 
-    public function process(array $options, array $flagList) : ?string
+    public function process(Params $params): string
     {
         $result = '';
 
-        $bindingLoader = new EspoBindingLoader(
-            new Module($this->fileManager)
-        );
+        $bindingLoader = new EspoBindingLoader($this->module);
 
         $data = $bindingLoader->load();
 
@@ -71,14 +69,14 @@ class Binding
             $keyList = $data->getContextKeyList($context);
 
             foreach ($keyList as $key) {
-                $result .= $this->printItem($key, $data->getContext($context, $key), true);
+                $result .= $this->printItem($key, $data->getContext($context, $key));
             }
         }
 
         return $result;
     }
 
-    private function printItem(string $key, BindingItem $binding) : string
+    private function printItem(string $key, BindingItem $binding): string
     {
         $result = '';
 
@@ -94,6 +92,7 @@ class Binding
             BindingItem::CONTAINER_SERVICE => 'Service',
             BindingItem::VALUE => 'Value',
             BindingItem::CALLBACK => 'Callback',
+            BindingItem::FACTORY_CLASS_NAME => 'Factory',
         ][$type];
 
         $result .= $tab . "Type:  {$typeString}\n";

application/Espo/Classes/AppInfo/Container.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -32,12 +32,14 @@ namespace Espo\Classes\AppInfo;
 use Espo\Core\{
     Container as ContainerService,
     Utils\Metadata,
+    Console\Command\Params,
 };
 
 class Container
 {
-    protected $container;
-    protected $metadata;
+    private $container;
+
+    private $metadata;
 
     public function __construct(ContainerService $container, Metadata $metadata)
     {
@@ -45,9 +47,9 @@ class Container
         $this->metadata = $metadata;
     }
 
-    public function process(array $options, array $flagList) : ?string
+    public function process(Params $params): string
     {
-        $nameOnly = in_array('nameOnly', $flagList);
+        $nameOnly = $params->hasFlag('nameOnly');
 
         $result = '';
 
@@ -61,10 +63,11 @@ class Container
             'user',
         ];
 
+        /** @var string[] */
         $fileList = scandir('application/Espo/Core/Loaders');
 
         if (file_exists('custom/Espo/Custom/Core/Loaders')) {
-            $fileList = array_merge($fileList, scandir('custom/Espo/Custom/Core/Loaders'));
+            $fileList = array_merge($fileList, scandir('custom/Espo/Custom/Core/Loaders') ?: []);
         }
 
         foreach ($fileList as $file) {

application/Espo/Classes/AppInfo/Jobs.php

@@ -0,0 +1,68 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\AppInfo;
+
+use Espo\Core\Console\Command\Params;
+use Espo\Core\Utils\ClassFinder;
+use Espo\Core\Job\MetadataProvider;
+
+class Jobs
+{
+    private $classFinder;
+
+    private $metadataProvider;
+
+    public function __construct(ClassFinder $classFinder, MetadataProvider $metadataProvider)
+    {
+        $this->classFinder = $classFinder;
+        $this->metadataProvider = $metadataProvider;
+    }
+
+    public function process(Params $params): string
+    {
+        $result = "Available jobs:\n\n";
+
+        $list = array_map(
+            function ($item) {
+                return ' ' . $item;
+            },
+            array_unique(
+                array_merge(
+                    array_keys($this->classFinder->getMap('Jobs')),
+                    $this->metadataProvider->getScheduledJobNameList()
+                )
+            )
+        );
+
+        asort($list);
+
+        return $result . implode("\n", $list) . "\n";
+    }
+}

application/Espo/Classes/AppParams/TemplateEntityTypeList.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -31,7 +31,7 @@ namespace Espo\Classes\AppParams;
 
 use Espo\Core\{
     Acl,
-    Select\SelectManagerFactory,
+    Select\SelectBuilderFactory,
     ORM\EntityManager,
 };
 
@@ -40,18 +40,23 @@ use Espo\Core\{
  */
 class TemplateEntityTypeList
 {
-    protected $acl;
-    protected $selectManagerFactory;
-    protected $entityManager;
+    private $acl;
 
-    public function __construct(Acl $acl, SelectManagerFactory $selectManagerFactory, EntityManager $entityManager)
+    private $selectBuilderFactory;
+
+    private $entityManager;
+
+    public function __construct(Acl $acl, SelectBuilderFactory $selectBuilderFactory, EntityManager $entityManager)
     {
         $this->acl = $acl;
-        $this->selectManagerFactory = $selectManagerFactory;
+        $this->selectBuilderFactory = $selectBuilderFactory;
         $this->entityManager = $entityManager;
     }
 
-    public function get()
+    /**
+     * @return string[]
+     */
+    public function get(): array
     {
         if (!$this->acl->checkScope('Template')) {
             return [];
@@ -59,17 +64,21 @@ class TemplateEntityTypeList
 
         $list = [];
 
-        $selectManager = $this->selectManagerFactory->create('Template');
-
-        $selectParams = $selectManager->getEmptySelectParams();
-        $selectManager->applyAccess($selectParams);
-
-        $templateList = $this->entityManager->getRepository('Template')
+        $query = $this->selectBuilderFactory
+            ->create()
+            ->from('Template')
+            ->withAccessControlFilter()
+            ->buildQueryBuilder()
             ->select(['entityType'])
-            ->groupBy(['entityType'])
-            ->find($selectParams);
+            ->group(['entityType'])
+            ->build();
 
-        foreach ($templateList as $template) {
+        $templateCollection = $this->entityManager
+            ->getRDBRepository('Template')
+            ->clone($query)
+            ->find();
+
+        foreach ($templateCollection as $template) {
             $list[] = $template->get('entityType');
         }
 

application/Espo/Classes/AssignmentNotificators/Email.php

@@ -0,0 +1,316 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\AssignmentNotificators;
+
+use Espo\Services\Email as EmailService;
+use Espo\Services\Stream as StreamService;
+
+use Espo\Core\Notification\AssignmentNotificator;
+use Espo\Core\Notification\AssignmentNotificator\Params;
+use Espo\Core\Notification\UserEnabledChecker;
+use Espo\Core\InjectableFactory;
+use Espo\Core\AclManager;
+
+use Espo\ORM\EntityManager;
+use Espo\ORM\Entity;
+
+use Espo\Entities\User;
+use Espo\Entities\Notification;
+use Espo\Entities\Email as EmailEntity;
+
+use Espo\Repositories\Email as EmailRepository;
+use Espo\Repositories\EmailAddress as EmailAddressRepository;
+
+use DateTime;
+use Exception;
+
+class Email implements AssignmentNotificator
+{
+    private const DAYS_THRESHOLD = 2;
+
+    private ?StreamService $streamService = null;
+
+    private $user;
+
+    private $entityManager;
+
+    private $injectableFactory;
+
+    private $aclManager;
+
+    private $userChecker;
+
+    public function __construct(
+        User $user,
+        EntityManager $entityManager,
+        UserEnabledChecker $userChecker,
+        InjectableFactory $injectableFactory,
+        AclManager $aclManager
+    ) {
+        $this->user = $user;
+        $this->entityManager = $entityManager;
+        $this->userChecker = $userChecker;
+        $this->injectableFactory = $injectableFactory;
+        $this->aclManager = $aclManager;
+    }
+
+    public function process(Entity $entity, Params $params): void
+    {
+        /** @var EmailEntity $entity */
+
+        if (
+            !in_array(
+                $entity->get('status'),
+                [
+                    EmailEntity::STATUS_ARCHIVED,
+                    EmailEntity::STATUS_SENT,
+                    EmailEntity::STATUS_BEING_IMPORTED,
+                ]
+            )
+        ) {
+            return;
+        }
+
+        if ($params->getOption('isJustSent')) {
+            $previousUserIdList = [];
+        }
+        else {
+            $previousUserIdList = $entity->getFetched('usersIds');
+
+            if (!is_array($previousUserIdList)) {
+                $previousUserIdList = [];
+            }
+        }
+
+        $dateSent = $entity->get('dateSent');
+
+        if (!$dateSent) {
+            return;
+        }
+
+        try {
+            $dt = new DateTime($dateSent);
+        }
+        catch (Exception $e) {
+            return;
+        }
+
+        if ($dt->diff(new DateTime())->days > self::DAYS_THRESHOLD) {
+            return;
+        }
+
+        $emailUserIdList = $entity->get('usersIds');
+
+        if (is_null($emailUserIdList) || !is_array($emailUserIdList)) {
+            return;
+        }
+
+        $userIdList = [];
+
+        foreach ($emailUserIdList as $userId) {
+            if (
+                !in_array($userId, $userIdList) &&
+                !in_array($userId, $previousUserIdList) &&
+                $userId !== $this->user->getId()
+            ) {
+                $userIdList[] = $userId;
+            }
+        }
+
+        $data = [
+            'emailId' => $entity->getId(),
+            'emailName' => $entity->get('name'),
+        ];
+
+        /** @var EmailRepository $emailRepository */
+        $emailRepository = $this->entityManager->getRepository('Email');
+        /** @var EmailAddressRepository $emailAddressRepository */
+        $emailAddressRepository = $this->entityManager->getRepository('EmailAddress');
+
+        if (!$entity->has('from')) {
+            $emailRepository->loadFromField($entity);
+        }
+
+        if (!$entity->has('to')) {
+            $emailRepository->loadToField($entity);
+        }
+
+        $person = null;
+
+        $from = $entity->get('from');
+
+        if ($from) {
+            $person = $emailAddressRepository->getEntityByAddress($from, null, ['User', 'Contact', 'Lead']);
+
+            if ($person) {
+                $data['personEntityType'] = $person->getEntityType();
+                $data['personEntityName'] = $person->get('name');
+                $data['personEntityId'] = $person->getId();
+            }
+        }
+
+        $userIdFrom = null;
+
+        if ($person && $person->getEntityType() === 'User') {
+            $userIdFrom = $person->getId();
+        }
+
+        if (empty($data['personEntityId'])) {
+            $data['fromString'] = EmailService::parseFromName($entity->get('fromString'));
+
+            if (empty($data['fromString']) && $from) {
+                $data['fromString'] = $from;
+            }
+        }
+
+        $parent = null;
+
+        $parentId = $entity->get('parentId');
+        $parentType = $entity->get('parentType');
+
+        if ($parentType && $parentId) {
+            $parent = $this->entityManager->getEntityById($parentType, $parentId);
+        }
+
+        $account = null;
+
+        $accountId = $entity->get('accountId');
+
+        if ($accountId) {
+            $account = $this->entityManager->getEntityById('Account', $accountId);
+        }
+
+        foreach ($userIdList as $userId) {
+            if (!$userId) {
+                continue;
+            }
+
+            if ($userIdFrom === $userId) {
+                continue;
+            }
+
+            if ($entity->getLinkMultipleColumn('users', 'inTrash', $userId)) {
+                continue;
+            }
+
+            if (!$this->userChecker->checkAssignment('Email', $userId)) {
+                continue;
+            }
+
+            if (
+                $params->getOption('isBeingImported') ||
+                $params->getOption('isJustSent')
+            ) {
+                $folderId = $entity->getLinkMultipleColumn('users', 'folderId', $userId);
+
+                if ($folderId) {
+                    if (
+                        $this->entityManager
+                            ->getRDBRepository('EmailFolder')
+                            ->where([
+                                'id' => $folderId,
+                                'skipNotifications' => true,
+                            ])
+                            ->count()
+                    ) {
+                        continue;
+                    }
+                }
+            }
+
+            /** @var User|null $user */
+            $user = $this->entityManager->getEntity('User', $userId);
+
+            if (!$user) {
+                continue;
+            }
+
+            if ($user->isPortal()) {
+                continue;
+            }
+
+            if (!$this->aclManager->checkScope($user, 'Email')) {
+                continue;
+            }
+
+            $isArchivedOrBeingImported =
+                $entity->get('status') === EmailEntity::STATUS_ARCHIVED ||
+                $params->getOption('isBeingImported');
+
+            if (
+                $isArchivedOrBeingImported &&
+                $parent &&
+                $this->getStreamService()->checkIsFollowed($parent, $userId)
+            ) {
+                continue;
+            }
+
+            if (
+                $isArchivedOrBeingImported &&
+                $account &&
+                $this->getStreamService()->checkIsFollowed($account, $userId)
+            ) {
+                continue;
+            }
+
+            $existing = $this->entityManager
+                ->getRDBRepository(Notification::ENTITY_TYPE)
+                ->where([
+                    'type' => Notification::TYPE_EMAIL_RECEIVED,
+                    'userId' => $userId,
+                    'relatedId' => $entity->getId(),
+                    'relatedType' => 'Email',
+                ])
+                ->select(['id'])
+                ->findOne();
+
+            if ($existing) {
+                continue;
+            }
+
+            $this->entityManager->createEntity(Notification::ENTITY_TYPE, [
+                'type' => Notification::TYPE_EMAIL_RECEIVED,
+                'userId' => $userId,
+                'data' => $data,
+                'relatedId' => $entity->getId(),
+                'relatedType' => 'Email',
+            ]);
+        }
+    }
+
+    private function getStreamService(): StreamService
+    {
+        if (empty($this->streamService)) {
+            $this->streamService = $this->injectableFactory->create(StreamService::class);
+        }
+
+        return $this->streamService;
+    }
+}

application/Espo/Classes/Cleanup/Exports.php

@@ -0,0 +1,73 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\Cleanup;
+
+use Espo\Core\Cleanup\Cleanup;
+use Espo\Core\Utils\Config;
+use Espo\ORM\EntityManager;
+
+use Espo\Core\Field\DateTime;
+
+use Espo\Entities\Export;
+
+class Exports implements Cleanup
+{
+    private $config;
+
+    private $entityManager;
+
+    private string $cleanupPeriod = '2 days';
+
+    public function __construct(Config $config, EntityManager $entityManager)
+    {
+        $this->config = $config;
+        $this->entityManager = $entityManager;
+    }
+
+    public function process(): void
+    {
+        $period = '-' . $this->config->get('cleanupExportsPeriod', $this->cleanupPeriod);
+
+        $before = DateTime::createNow()
+            ->modify($period)
+            ->getString();
+
+        $delete = $this->entityManager
+            ->getQueryBuilder()
+            ->delete()
+            ->from(Export::ENTITY_TYPE)
+            ->where([
+                'createdAt<' => $before,
+            ])
+            ->build();
+
+        $this->entityManager->getQueryExecutor()->execute($delete);
+    }
+}

application/Espo/Classes/Cleanup/MassActions.php

@@ -0,0 +1,71 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\Cleanup;
+
+use Espo\Core\Cleanup\Cleanup;
+use Espo\Core\Utils\Config;
+use Espo\ORM\EntityManager;
+
+use Espo\Core\Field\DateTime;
+
+class MassActions implements Cleanup
+{
+    private $config;
+
+    private $entityManager;
+
+    private string $cleanupPeriod = '14 days';
+
+    public function __construct(Config $config, EntityManager $entityManager)
+    {
+        $this->config = $config;
+        $this->entityManager = $entityManager;
+    }
+
+    public function process(): void
+    {
+        $period = '-' . $this->config->get('cleanupMassActionsPeriod', $this->cleanupPeriod);
+
+        $before = DateTime::createNow()
+            ->modify($period)
+            ->getString();
+
+        $delete = $this->entityManager
+            ->getQueryBuilder()
+            ->delete()
+            ->from('MassAction')
+            ->where([
+                'createdAt<' => $before,
+            ])
+            ->build();
+
+        $this->entityManager->getQueryExecutor()->execute($delete);
+    }
+}

application/Espo/Classes/Cleanup/PasswordChangeRequests.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -27,47 +27,47 @@
  * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
  ************************************************************************/
 
-namespace Espo\Core\Authentication\TwoFactor\User;
+namespace Espo\Classes\Cleanup;
 
-use Espo\Entities\UserData;
-use Espo\Core\Authentication\TwoFactor\Utils\Totp as TotpUtils;
+use Espo\Core\Cleanup\Cleanup;
 use Espo\Core\Utils\Config;
+use Espo\Core\Field\DateTime;
 
-use StdClass;
+use Espo\ORM\EntityManager;
 
-class Totp implements CodeVerify
+use Espo\Entities\PasswordChangeRequest;
+
+class PasswordChangeRequests implements Cleanup
 {
-    protected $entityManager;
-    protected $totp;
+    private Config $config;
 
-    public function __construct(TotpUtils $totp, Config $config)
+    private EntityManager $entityManager;
+
+    private string $cleanupPeriod = '30 days';
+
+    public function __construct(Config $config, EntityManager $entityManager)
     {
-        $this->totp = $totp;
         $this->config = $config;
+        $this->entityManager = $entityManager;
     }
 
-    public function generateData(UserData $userData, StdClass $data, string $userName) : StdClass
+    public function process(): void
     {
-        $secret = $this->totp->createSecret();
+        $period = '-' . $this->config->get('cleanupPasswordChangeRequestsPeriod', $this->cleanupPeriod);
 
-        $label = rawurlencode($this->config->get('applicationName')) . ':' . rawurlencode($userName);
+        $before = DateTime::createNow()
+            ->modify($period)
+            ->getString();
 
-        return (object) [
-            'auth2FATotpSecret' => $secret,
-            'label' => $label,
-        ];
-    }
+        $delete = $this->entityManager
+            ->getQueryBuilder()
+            ->delete()
+            ->from(PasswordChangeRequest::ENTITY_TYPE)
+            ->where([
+                'createdAt<' => $before,
+            ])
+            ->build();
 
-    public function verify(UserData $userData, string $code) : bool
-    {
-        if (!$code) {
-            return false;
-        }
-
-        $code = str_replace(' ', '', trim($code));
-
-        $secret = $userData->get('auth2FATotpSecret');
-
-        return $this->totp->verifyCode($secret, $code);
+        $this->entityManager->getQueryExecutor()->execute($delete);
     }
 }

application/Espo/Classes/Cleanup/Reminders.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -29,17 +29,19 @@
 
 namespace Espo\Classes\Cleanup;
 
-use Espo\Core\{
-    Utils\Config,
-    ORM\EntityManager,
-};
+use Espo\Core\Cleanup\Cleanup;
+use Espo\Core\Utils\Config;
+use Espo\ORM\EntityManager;
 
 use DateTime;
 
-class Reminders
+class Reminders implements Cleanup
 {
-    protected $config;
-    protected $entityManager;
+    private $config;
+
+    private $entityManager;
+
+    private string $cleanupRemindersPeriod = '15 days';
 
     public function __construct(Config $config, EntityManager $entityManager)
     {
@@ -47,9 +49,7 @@ class Reminders
         $this->entityManager = $entityManager;
     }
 
-    protected $cleanupRemindersPeriod = '15 days';
-
-    public function process()
+    public function process(): void
     {
         $period = '-' . $this->config->get('cleanupRemindersPeriod', $this->cleanupRemindersPeriod);
 
@@ -57,7 +57,8 @@ class Reminders
 
         $dt->modify($period);
 
-        $delete = $this->entityManager->getQueryBuilder()
+        $delete = $this->entityManager
+            ->getQueryBuilder()
             ->delete()
             ->from('Reminder')
             ->where([

application/Espo/Classes/Cleanup/TwoFactorCodes.php

@@ -0,0 +1,77 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\Cleanup;
+
+use Espo\Core\Cleanup\Cleanup;
+use Espo\Core\Utils\Config;
+use Espo\Core\Utils\DateTime as DateTimeUtil;
+
+use Espo\ORM\EntityManager;
+
+use Espo\Entities\TwoFactorCode;
+
+use DateTime;
+
+class TwoFactorCodes implements Cleanup
+{
+    private const PERIOD = '5 days';
+
+    private $config;
+
+    private $entityManager;
+
+    public function __construct(Config $config, EntityManager $entityManager)
+    {
+        $this->config = $config;
+        $this->entityManager = $entityManager;
+    }
+
+    public function process(): void
+    {
+        $period = '-' . $this->config->get('cleanupTwoFactorCodesPeriod', self::PERIOD);
+
+        $from = (new DateTime())
+            ->modify($period)
+            ->format(DateTimeUtil::SYSTEM_DATE_TIME_FORMAT);
+
+        $query = $this->entityManager
+            ->getQueryBuilder()
+            ->delete()
+            ->from(TwoFactorCode::ENTITY_TYPE)
+            ->where([
+                'createdAt<' => $from,
+            ])
+            ->build();
+
+        $this->entityManager
+            ->getQueryExecutor()
+            ->execute($query);
+    }
+}

application/Espo/Classes/Cleanup/WebhookQueue.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -29,19 +29,19 @@
 
 namespace Espo\Classes\Cleanup;
 
-use Espo\Core\{
-    Utils\Config,
-    ORM\EntityManager,
-};
+use Espo\Core\Cleanup\Cleanup;
+use Espo\Core\Utils\Config;
+use Espo\ORM\EntityManager;
 
 use DateTime;
 
-class WebhookQueue
+class WebhookQueue implements Cleanup
 {
-    protected $cleanupWebhookQueuePeriod = '10 days';
+    private string $cleanupWebhookQueuePeriod = '10 days';
 
-    protected $config;
-    protected $entityManager;
+    private $config;
+
+    private $entityManager;
 
     public function __construct(Config $config, EntityManager $entityManager)
     {
@@ -49,7 +49,7 @@ class WebhookQueue
         $this->entityManager = $entityManager;
     }
 
-    public function process()
+    public function process(): void
     {
         $period = '-' . $this->config->get('cleanupWebhookQueuePeriod', $this->cleanupWebhookQueuePeriod);
 
@@ -58,7 +58,8 @@ class WebhookQueue
         $datetime->modify($period);
         $from = $datetime->format('Y-m-d H:i:s');
 
-        $query = $this->entityManager->getQueryBuilder()
+        $query1 = $this->entityManager
+            ->getQueryBuilder()
             ->delete()
             ->from('WebhookQueueItem')
             ->where([
@@ -70,9 +71,10 @@ class WebhookQueue
             ])
             ->build();
 
-        $this->entityManager->getQueryExecutor()->execute($query);
+        $this->entityManager->getQueryExecutor()->execute($query1);
 
-        $query = $this->entityManager->getQueryBuilder()
+        $query2 = $this->entityManager
+            ->getQueryBuilder()
             ->delete()
             ->from('WebhookEventQueueItem')
             ->where([
@@ -84,6 +86,6 @@ class WebhookQueue
             ])
             ->build();
 
-        $this->entityManager->getQueryExecutor()->execute($query);
+        $this->entityManager->getQueryExecutor()->execute($query2);
     }
 }

application/Espo/Classes/ConsoleCommands/Import.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -29,110 +29,109 @@
 
 namespace Espo\Classes\ConsoleCommands;
 
+use Espo\Tools\Import\Service;
+
+use Espo\Core\Utils\File\Manager as FileManager;
+
 use Espo\Core\{
-    ServiceFactory,
-    Console\Commands\Command,
+    Console\Command,
+    Console\Command\Params,
+    Console\IO,
 };
 
 use Throwable;
 
 class Import implements Command
 {
-    protected $serviceFactory;
+    private Service $service;
 
-    public function __construct(ServiceFactory $serviceFactory)
+    private FileManager $fileManager;
+
+    public function __construct(Service $service, FileManager $fileManager)
     {
-        $this->serviceFactory = $serviceFactory;
+        $this->service = $service;
+        $this->fileManager = $fileManager;
     }
 
-    public function run(array $options, array $flagList)
+    public function run(Params $params, IO $io) : void
     {
-        $id = $options['id'] ?? null;
-        $filePath = $options['file'] ?? null;
-        $paramsId = $options['paramsId'] ?? null;
+        $id = $params->getOption('id');
+        $filePath = $params->getOption('file');
+        $paramsId = $params->getOption('paramsId');
 
-        $service = $this->serviceFactory->create('Import');
-
-        $forceResume = in_array('resume', $flagList);
-        $revert = in_array('revert', $flagList);
+        $forceResume = $params->hasFlag('resume');
+        $revert = $params->hasFlag('revert');
 
         if (!$id && $filePath) {
             if (!$paramsId) {
-                $this->out("You need to specify --params-id option.\n");
+                $io->writeLine("You need to specify --params-id option.");
 
                 return;
             }
 
-            if (!file_exists($filePath)) {
-                $this->out("File not found.\n");
+            if (!$this->fileManager->isFile($filePath)) {
+                $io->writeLine("File not found.");
 
                 return;
             }
 
-            $contents = file_get_contents($filePath);
+            $contents = $this->fileManager->getContents($filePath);
 
             try {
-                $result = $service->importFileWithParamsId($contents, $paramsId);
+                $result = $this->service->importContentsWithParamsId($contents, $paramsId);
 
-                $resultId = $result->id;
-                $countCreated = $result->countCreated;
-                $countUpdated = $result->countUpdated;
+                $resultId = $result->getId();
+                $countCreated = $result->getCountCreated();
+                $countUpdated = $result->getCountUpdated();
             }
             catch (Throwable $e) {
-                $this->out("Error occured: ".$e->getMessage()."\n");
+                $io->writeLine("Error occurred: ". $e->getMessage() . "");
 
                 return;
             }
 
-            $this->out("Finished. Import ID: {$resultId}. Created: {$countCreated}. Updated: {$countUpdated}.\n");
+            $io->writeLine("Finished. Import ID: {$resultId}. Created: {$countCreated}. Updated: {$countUpdated}.");
 
             return;
         }
 
         if ($id && $revert) {
-            $this->out("Reverting import...\n");
+            $io->writeLine("Reverting import...");
 
             try {
-                $service->revert($id);
+                $this->service->revert($id);
             }
             catch (Throwable $e) {
-                $this->out("Error occured: " . $e->getMessage() . "\n");
+                $io->writeLine("Error occurred: " . $e->getMessage() . "");
 
                 return;
             }
 
-            $this->out("Finished.\n");
+            $io->writeLine("Finished.");
 
             return;
         }
 
         if ($id) {
-            $this->out("Running import, this may take a while...\n");
+            $io->writeLine("Running import, this may take a while...");
 
             try {
-                $result = $service->importById($id, true, $forceResume);
+                $result = $this->service->importById($id, true, $forceResume);
             }
             catch (Throwable $e) {
-                $this->out("Error occured: " . $e->getMessage() . "\n");
+                $io->writeLine("Error occurred: " . $e->getMessage() . "");
 
                 return;
             }
 
-            $countCreated = $result->countCreated;
-            $countUpdated = $result->countUpdated;
+            $countCreated = $result->getCountCreated();
+            $countUpdated = $result->getCountUpdated();
 
-            $this->out("Finished. Created: {$countCreated}. Updated: {$countUpdated}.\n");
+            $io->writeLine("Finished. Created: {$countCreated}. Updated: {$countUpdated}.");
 
             return;
         }
 
-        $this->out("Not enough params passed.\n");
-
-        return;
-    }
-
-    protected function out($string)
-    {
-        fwrite(\STDOUT, $string);
+        $io->writeLine("Not enough params passed.");
     }
 }

application/Espo/Classes/DefaultLayouts/DefaultSidePanelType.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -33,32 +33,32 @@ use Espo\Core\Utils\Metadata;
 
 class DefaultSidePanelType
 {
-    protected $metadata;
+    private $metadata;
 
     public function __construct(Metadata $metadata)
     {
         $this->metadata = $metadata;
     }
 
-    public function get(string $scope) : array
+    /**
+     * @return \stdClass[]
+     */
+    public function get(string $scope): array
     {
         $list = [];
 
         if (
-            $this->metadata->get(['entityDefs', $scope, 'fields', 'assignedUser', 'type']) === 'link'
-            &&
+            $this->metadata->get(['entityDefs', $scope, 'fields', 'assignedUser', 'type']) === 'link' &&
             $this->metadata->get(['entityDefs', $scope, 'links', 'assignedUser', 'entity']) === 'User'
             ||
-            $this->metadata->get(['entityDefs', $scope, 'fields', 'assignedUsers', 'type']) === 'linkMultiple'
-            &&
+            $this->metadata->get(['entityDefs', $scope, 'fields', 'assignedUsers', 'type']) === 'linkMultiple' &&
             $this->metadata->get(['entityDefs', $scope, 'links', 'assignedUsers', 'entity']) === 'User'
         ) {
             $list[] = (object) ['name' => ':assignedUser'];
         }
 
         if (
-            $this->metadata->get(['entityDefs', $scope, 'fields', 'teams', 'type']) === 'linkMultiple'
-            &&
+            $this->metadata->get(['entityDefs', $scope, 'fields', 'teams', 'type']) === 'linkMultiple' &&
             $this->metadata->get(['entityDefs', $scope, 'links', 'teams', 'entity']) === 'Team'
         ) {
             $list[] = (object) ['name' => 'teams'];

application/Espo/Classes/DuplicateWhereBuilders/Company.php

@@ -0,0 +1,114 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\DuplicateWhereBuilders;
+
+use Espo\Core\Duplicate\WhereBuilder;
+use Espo\Core\Field\EmailAddressGroup;
+use Espo\Core\ORM\Entity as CoreEntity;
+
+use Espo\ORM\{
+    Query\Part\Condition as Cond,
+    Query\Part\WhereItem,
+    Query\Part\Where\OrGroup,
+    Entity,
+};
+
+/**
+ * @implements WhereBuilder<CoreEntity>
+ */
+class Company implements WhereBuilder
+{
+    public function build(Entity $entity): ?WhereItem
+    {
+        assert($entity instanceof CoreEntity);
+
+        $orBuilder = OrGroup::createBuilder();
+
+        $toCheck = false;
+
+        if ($entity->get('name')) {
+            $orBuilder->add(
+                Cond::equal(
+                    Cond::column('name'),
+                    $entity->get('name')
+                ),
+            );
+
+            $toCheck = true;
+        }
+
+        if (
+            ($entity->get('emailAddress') || $entity->get('emailAddressData')) &&
+            (
+                $entity->isNew() ||
+                $entity->isAttributeChanged('emailAddress') ||
+                $entity->isAttributeChanged('emailAddressData')
+            )
+        ) {
+            foreach ($this->getEmailAddressList($entity) as $emailAddress) {
+                $orBuilder->add(
+                    Cond::equal(
+                        Cond::column('emailAddress'),
+                        $emailAddress
+                    )
+                );
+
+                $toCheck = true;
+            }
+        }
+
+        if (!$toCheck) {
+            return null;
+        }
+
+        return $orBuilder->build();
+    }
+
+    /**
+     * @return string[]
+     */
+    private function getEmailAddressList(CoreEntity $entity): array
+    {
+        if ($entity->get('emailAddressData')) {
+            /** @var EmailAddressGroup $eaGroup */
+            $eaGroup = $entity->getValueObject('emailAddress');
+
+            return $eaGroup->getAddressList();
+        }
+
+        if ($entity->get('emailAddress')) {
+            return [
+                $entity->get('emailAddress')
+            ];
+        }
+
+        return [];
+    }
+}

application/Espo/Classes/DuplicateWhereBuilders/Person.php

@@ -0,0 +1,123 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\DuplicateWhereBuilders;
+
+use Espo\Core\ORM\Entity as CoreEntity;
+
+use Espo\Core\{
+    Duplicate\WhereBuilder,
+    Field\EmailAddressGroup,
+};
+
+use Espo\ORM\{
+    Query\Part\Condition as Cond,
+    Query\Part\WhereItem,
+    Query\Part\Where\OrGroup,
+    Entity,
+};
+
+/**
+ * @implements WhereBuilder<CoreEntity>
+ */
+class Person implements WhereBuilder
+{
+    public function build(Entity $entity): ?WhereItem
+    {
+        assert($entity instanceof CoreEntity);
+
+        $orBuilder = OrGroup::createBuilder();
+
+        $toCheck = false;
+
+        if ($entity->get('firstName') || $entity->get('lastName')) {
+            $orBuilder->add(
+                Cond::and(
+                    Cond::equal(
+                        Cond::column('firstName'),
+                        $entity->get('firstName')
+                    ),
+                    Cond::equal(
+                        Cond::column('lastName'),
+                        $entity->get('lastName')
+                    )
+                )
+            );
+
+            $toCheck = true;
+        }
+
+        if (
+            ($entity->get('emailAddress') || $entity->get('emailAddressData')) &&
+            (
+                $entity->isNew() ||
+                $entity->isAttributeChanged('emailAddress') ||
+                $entity->isAttributeChanged('emailAddressData')
+            )
+        ) {
+            foreach ($this->getEmailAddressList($entity) as $emailAddress) {
+                $orBuilder->add(
+                    Cond::equal(
+                        Cond::column('emailAddress'),
+                        $emailAddress
+                    )
+                );
+
+                $toCheck = true;
+            }
+        }
+
+        if (!$toCheck) {
+            return null;
+        }
+
+        return $orBuilder->build();
+    }
+
+    /**
+     * @return string[]
+     */
+    private function getEmailAddressList(CoreEntity $entity): array
+    {
+        if ($entity->get('emailAddressData')) {
+            /** @var EmailAddressGroup $eaGroup */
+            $eaGroup = $entity->getValueObject('emailAddress');
+
+            return $eaGroup->getAddressList();
+        }
+
+        if ($entity->get('emailAddress')) {
+            return [
+                $entity->get('emailAddress')
+            ];
+        }
+
+        return [];
+    }
+}

application/Espo/Classes/FieldDuplicators/AttachmentMultiple.php

@@ -0,0 +1,90 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\FieldDuplicators;
+
+use Espo\Core\Record\Duplicator\FieldDuplicator;
+use Espo\ORM\Entity;
+use Espo\ORM\EntityManager;
+
+use Espo\Repositories\Attachment as AttachmentRepository;
+use Espo\Entities\Attachment;
+
+use stdClass;
+
+class AttachmentMultiple implements FieldDuplicator
+{
+    private $entityManager;
+
+    public function __construct(EntityManager $entityManager)
+    {
+        $this->entityManager = $entityManager;
+    }
+
+    public function duplicate(Entity $entity, string $field): stdClass
+    {
+        $valueMap = (object) [];
+
+        /** @var \Espo\ORM\Collection<Attachment> $attachmentList */
+        $attachmentList = $this->entityManager
+            ->getRDBRepository($entity->getEntityType())
+            ->getRelation($entity, $field)
+            ->find();
+
+        if (is_countable($attachmentList) && !count($attachmentList)) {
+            return $valueMap;
+        }
+
+        $idList = [];
+        $nameHash = (object) [];
+        $typeHash = (object) [];
+
+        /** @var AttachmentRepository $attachmentRepository */
+        $attachmentRepository = $this->entityManager->getRepository(Attachment::ENTITY_TYPE);
+
+        foreach ($attachmentList as $attachment) {
+            $copiedAttachment = $attachmentRepository->getCopiedAttachment($attachment);
+
+            $copiedAttachment->set('field', $field);
+
+            $this->entityManager->saveEntity($copiedAttachment);
+
+            $idList[] = $copiedAttachment->getId();
+
+            $nameHash->{$copiedAttachment->getId()} = $copiedAttachment->getName();
+            $typeHash->{$copiedAttachment->getId()} = $copiedAttachment->getType();
+        }
+
+        $valueMap->{$field . 'Ids'} = $idList;
+        $valueMap->{$field . 'Names'} = $nameHash;
+        $valueMap->{$field . 'Types'} = $typeHash;
+
+        return $valueMap;
+    }
+}

application/Espo/Classes/FieldDuplicators/File.php

@@ -0,0 +1,75 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\FieldDuplicators;
+
+use Espo\Core\Record\Duplicator\FieldDuplicator;
+use Espo\ORM\Entity;
+use Espo\ORM\EntityManager;
+
+use Espo\Repositories\Attachment as AttachmentRepository;
+use Espo\Entities\Attachment;
+
+use stdClass;
+
+class File implements FieldDuplicator
+{
+    private $entityManager;
+
+    public function __construct(EntityManager $entityManager)
+    {
+        $this->entityManager = $entityManager;
+    }
+
+    public function duplicate(Entity $entity, string $field): stdClass
+    {
+        $valueMap = (object) [];
+
+        /** @var Attachment|null $attachment */
+        $attachment = $this->entityManager
+            ->getRDBRepository($entity->getEntityType())
+            ->getRelation($entity, $field)
+            ->findOne();
+
+        if (!$attachment) {
+            return $valueMap;
+        }
+
+        /** @var AttachmentRepository $attachmentRepository */
+        $attachmentRepository = $this->entityManager->getRepository(Attachment::ENTITY_TYPE);
+
+        $copiedAttachment = $attachmentRepository->getCopiedAttachment($attachment);
+
+        $idAttribute = $field . 'Id';
+
+        $valueMap->$idAttribute = $copiedAttachment->getId();
+
+        return $valueMap;
+    }
+}

application/Espo/Classes/FieldDuplicators/LinkMultiple.php

@@ -0,0 +1,82 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\FieldDuplicators;
+
+use Espo\Core\Record\Duplicator\FieldDuplicator;
+use Espo\ORM\Entity;
+use Espo\ORM\EntityManager;
+
+use stdClass;
+
+class LinkMultiple implements FieldDuplicator
+{
+    private EntityManager $entityManager;
+
+    public function __construct(EntityManager $entityManager)
+    {
+        $this->entityManager = $entityManager;
+    }
+
+    public function duplicate(Entity $entity, string $field): stdClass
+    {
+        $valueMap = (object) [];
+
+        $entityDefs = $this->entityManager
+            ->getDefs()
+            ->getEntity($entity->getEntityType());
+
+        if (!$entity->hasRelation($field)) {
+            return $valueMap;
+        }
+
+        $relationDefs = $entityDefs->getRelation($field);
+
+        if (
+            !$relationDefs->hasForeignEntityType() ||
+            !$relationDefs->hasForeignRelationName()
+        ) {
+            return $valueMap;
+        }
+
+        $foreignRelationType = $this->entityManager
+            ->getDefs()
+            ->getEntity($relationDefs->getForeignEntityType())
+            ->getRelation($relationDefs->getForeignRelationName())
+            ->getType();
+
+        if ($foreignRelationType !== Entity::HAS_MANY) {
+            $valueMap->{$field . 'Ids'} = [];
+            $valueMap->{$field . 'Names'} = (object) [];
+            $valueMap->{$field . 'Columns'} = (object) [];
+        }
+
+        return $valueMap;
+    }
+}

application/Espo/Classes/FieldDuplicators/Wysiwyg.php

@@ -0,0 +1,117 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\FieldDuplicators;
+
+use Espo\Core\Record\Duplicator\FieldDuplicator;
+use Espo\ORM\Entity;
+use Espo\ORM\EntityManager;
+
+use Espo\Repositories\Attachment as AttachmentRepository;
+use Espo\Entities\Attachment;
+
+use stdClass;
+
+class Wysiwyg implements FieldDuplicator
+{
+    private $entityManager;
+
+    public function __construct(EntityManager $entityManager)
+    {
+        $this->entityManager = $entityManager;
+    }
+
+    public function duplicate(Entity $entity, string $field): stdClass
+    {
+        $valueMap = (object) [];
+
+        $contents = $entity->get($field);
+
+        if (!$contents) {
+            return $valueMap;
+        }
+
+        $matches = [];
+
+        $matchResult = preg_match_all("/\?entryPoint=attachment&amp;id=([^&=\"']+)/", $contents, $matches);
+
+        if (
+            !$matchResult ||
+            empty($matches[1]) ||
+            !is_array($matches[1])
+        ) {
+            return $valueMap;
+        }
+
+        $attachmentIdList = $matches[1];
+
+        /** @var Attachment[] $attachmentList */
+        $attachmentList = [];
+
+        foreach ($attachmentIdList as $id) {
+            /** @var Attachment|null $attachment */
+            $attachment = $this->entityManager->getEntity(Attachment::ENTITY_TYPE, $id);
+
+            if (!$attachment) {
+                continue;
+            }
+
+            $attachmentList[] = $attachment;
+        }
+
+        if (!count($attachmentList)) {
+            return $valueMap;
+        }
+
+        /** @var AttachmentRepository $attachmentRepository */
+        $attachmentRepository = $this->entityManager->getRepository(Attachment::ENTITY_TYPE);
+
+        foreach ($attachmentList as $attachment) {
+            $copiedAttachment = $attachmentRepository->getCopiedAttachment($attachment);
+
+            $copiedAttachment->set([
+                'relatedId' => null,
+                'relatedType' => $entity->getEntityType(),
+                'field' => $field,
+            ]);
+
+            $this->entityManager->saveEntity($copiedAttachment);
+
+            $contents = str_replace(
+                '?entryPoint=attachment&amp;id=' . $attachment->getId(),
+                '?entryPoint=attachment&amp;id=' . $copiedAttachment->getId(),
+                $contents
+            );
+        }
+
+        $valueMap->$field = $contents;
+
+        return $valueMap;
+    }
+}

application/Espo/Classes/FieldProcessing/Email/AddressDataLoader.php

@@ -0,0 +1,66 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\FieldProcessing\Email;
+
+use Espo\ORM\Entity;
+
+use Espo\Core\{
+    FieldProcessing\Loader,
+    FieldProcessing\Loader\Params,
+    ORM\EntityManager,
+};
+
+use Espo\Repositories\Email as EmailRepository;
+
+/**
+ * @implements Loader<\Espo\Entities\Email>
+ */
+class AddressDataLoader implements Loader
+{
+    private $entityManager;
+
+    public function __construct(EntityManager $entityManager)
+    {
+        $this->entityManager = $entityManager;
+    }
+
+    public function process(Entity $entity, Params $params): void
+    {
+        /** @var EmailRepository $repository */
+        $repository = $this->entityManager->getRepository('Email');
+
+        $repository->loadFromField($entity);
+        $repository->loadToField($entity);
+        $repository->loadCcField($entity);
+        $repository->loadBccField($entity);
+        $repository->loadReplyToField($entity);
+        $repository->loadNameHash($entity);
+    }
+}

application/Espo/Classes/FieldProcessing/Email/IcsDataLoader.php

@@ -0,0 +1,212 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\FieldProcessing\Email;
+
+use Espo\ORM\Entity;
+use Espo\ORM\EntityManager;
+use Espo\Repositories\EmailAddress as EmailAddressRepository;
+use Espo\Entities\EmailAddress;
+use Espo\Entities\Email;
+
+use Espo\Core\{
+    FieldProcessing\Loader,
+    FieldProcessing\Loader\Params,
+    Mail\Event\Event as EspoEvent,
+    Mail\Event\EventFactory,
+    Utils\Log,
+};
+
+use ICal\ICal;
+use ICal\Event;
+
+use Throwable;
+use stdClass;
+
+/**
+ * @implements Loader<\Espo\Entities\Email>
+ */
+class IcsDataLoader implements Loader
+{
+    private $entityManager;
+
+    private $log;
+
+    /**
+     * @var array<string,string>
+     */
+    private $entityTypeLinkMap = [
+        'User' => 'users',
+        'Contact' => 'contacts',
+        'Lead' => 'leads',
+    ];
+
+    public function __construct(EntityManager $entityManager, Log $log)
+    {
+        $this->entityManager = $entityManager;
+        $this->log = $log;
+    }
+
+    public function process(Entity $entity, Params $params): void
+    {
+        $icsContents = $entity->get('icsContents');
+
+        if ($icsContents === null) {
+            return;
+        }
+
+        $ical = new ICal();
+
+        $ical->initString($icsContents);
+
+        /* @var $event Event */
+        $event = $ical->events()[0] ?? null;
+
+        if ($event === null) {
+            return;
+        }
+
+        if ($event->status === 'CANCELLED') {
+            return;
+        }
+
+        $espoEvent = EventFactory::createFromU01jmg3Ical($ical);
+
+        $valueMap = (object) [
+            'sourceEmailId' => $entity->getId(),
+        ];
+
+        try {
+            $valueMap->name = $espoEvent->getName();
+            $valueMap->description = $espoEvent->getDescription();
+            $valueMap->dateStart = $espoEvent->getDateStart();
+            $valueMap->dateEnd = $espoEvent->getDateEnd();
+            $valueMap->location = $espoEvent->getLocation();
+            $valueMap->isAllDay = $espoEvent->isAllDay();
+
+            if ($espoEvent->isAllDay()) {
+                $valueMap->dateStartDate = $espoEvent->getDateStart();
+                $valueMap->dateEndDate = $espoEvent->getDateEnd();
+            }
+        }
+        catch (Throwable $e) {
+            $this->log->warning("Error while converting ICS event '" . $entity->getId() . "': " . $e->getMessage());
+
+            return;
+        }
+
+        /** @var EmailAddressRepository $emailAddressRepository */
+        $emailAddressRepository = $this->entityManager->getRepository(EmailAddress::ENTITY_TYPE);
+
+        $attendeeEmailAddressList = $espoEvent->getAttendeeEmailAddressList();
+
+        $organizerEmailAddress = $espoEvent->getOrganizerEmailAddress();
+
+        if ($organizerEmailAddress) {
+            $attendeeEmailAddressList[] = $organizerEmailAddress;
+        }
+
+        foreach ($attendeeEmailAddressList as $address) {
+            $personEntity = $emailAddressRepository->getEntityByAddress($address);
+
+            if (!$personEntity) {
+                continue;
+            }
+
+            $link = $this->entityTypeLinkMap[$personEntity->getEntityType()] ?? null;
+
+            if (!$link) {
+                continue;
+            }
+
+            $idsAttribute = $link . 'Ids';
+            $namesAttribute = $link . 'Names';
+
+            $idList = $valueMap->$idsAttribute ?? [];
+            $nameMap = $valueMap->$namesAttribute ?? (object) [];
+
+            $idList[] = $personEntity->getId();
+            $nameMap->{$personEntity->getId()} = $personEntity->get('name');
+
+            $valueMap->$idsAttribute = $idList;
+            $valueMap->$namesAttribute = $nameMap;
+        }
+
+        $eventData = (object) [
+            'valueMap' => $valueMap,
+            'uid' => $espoEvent->getUid(),
+            'createdEvent' => null,
+        ];
+
+        $this->loadCreatedEvent($entity, $espoEvent, $eventData);
+
+        $entity->set('icsEventData', $eventData);
+
+        $entity->set('icsEventDateStart', $espoEvent->getDateStart());
+
+        if ($espoEvent->isAllDay()) {
+            $entity->set('icsEventDateStartDate', $espoEvent->getDateStart());
+        }
+    }
+
+    private function loadCreatedEvent(Entity $entity, EspoEvent $espoEvent, stdClass $eventData): void
+    {
+        $emailSameEvent = $this->entityManager
+            ->getRDBRepository(Email::ENTITY_TYPE)
+            ->where([
+                'icsEventUid' => $espoEvent->getUid(),
+                'id!=' => $entity->getId()
+            ])
+            ->findOne();
+
+        if (!$emailSameEvent) {
+            return;
+        }
+
+        if (
+            !$emailSameEvent->get('createdEventId') ||
+            !$emailSameEvent->get('createdEventType')
+        ) {
+            return;
+        }
+
+        $createdEvent = $this->entityManager
+            ->getEntity($emailSameEvent->get('createdEventType'), $emailSameEvent->get('createdEventId'));
+
+        if (!$createdEvent) {
+            return;
+        }
+
+        $eventData->createdEvent = (object) [
+            'id' => $createdEvent->getId(),
+            'entityType' => $emailSameEvent->getEntityType(),
+            'name' => $createdEvent->get('name'),
+        ];
+    }
+}

application/Espo/Classes/FieldProcessing/Email/StringDataLoader.php

@@ -0,0 +1,135 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\FieldProcessing\Email;
+
+use Espo\ORM\Entity;
+
+use Espo\Repositories\EmailAddress as EmailAddressRepository;
+
+use Espo\Core\{
+    FieldProcessing\Loader,
+    FieldProcessing\Loader\Params,
+    ORM\EntityManager,
+};
+
+use Espo\Entities\Email;
+use Espo\Entities\User;
+
+/**
+ * @implements Loader<\Espo\Entities\Email>
+ */
+class StringDataLoader implements Loader
+{
+    private $entityManager;
+
+    private $user;
+
+    /**
+     * @var array<string,string>
+     */
+    private $fromEmailAddressNameCache = [];
+
+    public function __construct(EntityManager $entityManager, User $user)
+    {
+        $this->entityManager = $entityManager;
+        $this->user = $user;
+    }
+
+    public function process(Entity $entity, Params $params): void
+    {
+        /** @var Email $entity */
+
+        $userEmailAdddressIdList = [];
+
+        $emailAddressCollection = $this->entityManager
+            ->getRDBRepository('User')
+            ->getRelation($this->user, 'emailAddresses')
+            ->select(['id'])
+            ->find();
+
+        foreach ($emailAddressCollection as $emailAddress) {
+            $userEmailAdddressIdList[] = $emailAddress->getId();
+        }
+
+        if (
+            in_array($entity->get('fromEmailAddressId'), $userEmailAdddressIdList) ||
+            $entity->get('createdById') === $this->user->getId() && $entity->get('status') === Email::STATUS_SENT
+        ) {
+            $entity->loadLinkMultipleField('toEmailAddresses');
+
+            $idList = $entity->get('toEmailAddressesIds');
+            $names = $entity->get('toEmailAddressesNames');
+
+            if (empty($idList)) {
+                return;
+            }
+
+            $list = [];
+
+            foreach ($idList as $emailAddressId) {
+                $person = $this->getEmailAddressRepository()->getEntityByAddressId($emailAddressId, null, true);
+
+                $list[] = $person ? $person->get('name') : $names->$emailAddressId;
+            }
+
+            $entity->set('personStringData', 'To: ' . implode(', ', $list));
+
+            return;
+        }
+
+        /**  @var ?string */
+        $fromEmailAddressId = $entity->get('fromEmailAddressId');
+
+        if (!$fromEmailAddressId) {
+            return;
+        }
+
+        if (!array_key_exists($fromEmailAddressId, $this->fromEmailAddressNameCache)) {
+            $person = $this->getEmailAddressRepository()->getEntityByAddressId($fromEmailAddressId, null, true);
+
+            $fromName = $person ? $person->get('name') : null;
+
+            $this->fromEmailAddressNameCache[$fromEmailAddressId] = $fromName;
+        }
+
+        $fromName =
+            $this->fromEmailAddressNameCache[$fromEmailAddressId] ??
+            $entity->get('fromName') ??
+            $entity->get('fromEmailAddressName');
+
+        $entity->set('personStringData', $fromName);
+    }
+
+    private function getEmailAddressRepository(): EmailAddressRepository
+    {
+        /** @var EmailAddressRepository */
+        return $this->entityManager->getRepository('EmailAddress');
+    }
+}

application/Espo/Classes/FieldProcessing/Email/UserColumnsLoader.php

@@ -0,0 +1,83 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\FieldProcessing\Email;
+
+use Espo\ORM\Entity;
+
+use Espo\Core\{
+    FieldProcessing\Loader,
+    FieldProcessing\Loader\Params,
+    ORM\EntityManager,
+};
+
+use Espo\Entities\User;
+
+/**
+ * @implements Loader<\Espo\Entities\Email>
+ */
+class UserColumnsLoader implements Loader
+{
+    private $entityManager;
+
+    private $user;
+
+    public function __construct(EntityManager $entityManager, User $user)
+    {
+        $this->entityManager = $entityManager;
+        $this->user = $user;
+    }
+
+    public function process(Entity $entity, Params $params): void
+    {
+        $emailUser = $this->entityManager
+            ->getRDBRepository('EmailUser')
+            ->select(['isRead', 'isImportant', 'inTrash'])
+            ->where([
+                'deleted' => false,
+                'userId' => $this->user->getId(),
+                'emailId' => $entity->getId(),
+            ])
+            ->findOne();
+
+        if (!$emailUser) {
+            $entity->set('isRead', null);
+            $entity->clear('isImportant');
+            $entity->clear('inTrash');
+
+            return;
+        }
+
+        $entity->set([
+            'isRead' => $emailUser->get('isRead'),
+            'isImportant' => $emailUser->get('isImportant'),
+            'inTrash' => $emailUser->get('inTrash'),
+        ]);
+    }
+}

application/Espo/Classes/FieldProcessing/Import/CountsLoader.php

@@ -0,0 +1,69 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\FieldProcessing\Import;
+
+use Espo\ORM\Entity;
+
+use Espo\Core\{
+    FieldProcessing\Loader,
+    FieldProcessing\Loader\Params,
+    ORM\EntityManager,
+};
+
+use Espo\Repositories\Import as ImportRepository;
+
+/**
+ * @implements Loader<\Espo\Entities\Import>
+ */
+class CountsLoader implements Loader
+{
+    private $entityManager;
+
+    public function __construct(EntityManager $entityManager)
+    {
+        $this->entityManager = $entityManager;
+    }
+
+    public function process(Entity $entity, Params $params): void
+    {
+        /** @var ImportRepository $repository */
+        $repository = $this->entityManager->getRepository('Import');
+
+        $importedCount = $repository->countResultRecords($entity, 'imported');
+        $duplicateCount = $repository->countResultRecords($entity, 'duplicates');
+        $updatedCount = $repository->countResultRecords($entity, 'updated');
+
+        $entity->set([
+            'importedCount' => $importedCount,
+            'duplicateCount' => $duplicateCount,
+            'updatedCount' => $updatedCount,
+        ]);
+    }
+}

application/Espo/Classes/FieldProcessing/Note/AttachmentsLoader.php

@@ -0,0 +1,51 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\FieldProcessing\Note;
+
+use Espo\ORM\Entity;
+
+use Espo\Core\{
+    FieldProcessing\Loader,
+    FieldProcessing\Loader\Params,
+};
+
+use Espo\Entities\Note;
+
+/**
+ * @implements Loader<\Espo\Entities\Note>
+ */
+class AttachmentsLoader implements Loader
+{
+    public function process(Entity $entity, Params $params): void
+    {
+        /** @var Note $entity */
+        $entity->loadAttachments();
+    }
+}

application/Espo/Classes/FieldProcessing/Portal/UrlLoader.php

@@ -0,0 +1,67 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\FieldProcessing\Portal;
+
+use Espo\ORM\Entity;
+
+use Espo\Repositories\Portal as PortalRepository;
+use Espo\Entities\Portal;
+
+use Espo\Core\{
+    FieldProcessing\Loader,
+    FieldProcessing\Loader\Params,
+    ORM\EntityManager,
+};
+
+/**
+ * @implements Loader<\Espo\Entities\Portal>
+ */
+class UrlLoader implements Loader
+{
+    private $entityManager;
+
+    public function __construct(EntityManager $entityManager)
+    {
+        $this->entityManager = $entityManager;
+    }
+
+    public function process(Entity $entity, Params $params): void
+    {
+        /** @var Portal $entity */
+
+        $this->getPortalRepository()->loadUrlField($entity);
+    }
+
+    private function getPortalRepository(): PortalRepository
+    {
+        /** @var PortalRepository */
+        return $this->entityManager->getRepository('Portal');
+    }
+}

application/Espo/Classes/FieldProcessing/User/LastAccessLoader.php

@@ -0,0 +1,115 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\FieldProcessing\User;
+
+use Espo\ORM\Entity;
+
+use Espo\Core\{
+    FieldProcessing\Loader,
+    FieldProcessing\Loader\Params,
+    ORM\EntityManager,
+    Acl,
+    Acl\Table,
+};
+
+use DateTime;
+use Exception;
+
+/**
+ * @implements Loader<\Espo\Entities\User>
+ */
+class LastAccessLoader implements Loader
+{
+    private $entityManager;
+
+    private $acl;
+
+    public function __construct(EntityManager $entityManager, Acl $acl)
+    {
+        $this->entityManager = $entityManager;
+        $this->acl = $acl;
+    }
+
+    public function process(Entity $entity, Params $params): void
+    {
+        $forbiddenFieldList = $this->acl
+            ->getScopeForbiddenFieldList($entity->getEntityType(), Table::ACTION_READ);
+
+        if (in_array('lastAccess', $forbiddenFieldList)) {
+            return;
+        }
+
+        $authToken = $this->entityManager
+            ->getRDBRepository('AuthToken')
+            ->select(['id', 'lastAccess'])
+            ->where([
+                'userId' => $entity->getId(),
+            ])
+            ->order('lastAccess', 'DESC')
+            ->findOne();
+
+        $lastAccess = null;
+
+        if ($authToken) {
+            $lastAccess = $authToken->get('lastAccess');
+        }
+
+        $dt = null;
+
+        if ($lastAccess) {
+            try {
+                $dt = new DateTime($lastAccess);
+            }
+            catch (Exception $e) {}
+        }
+
+        $where = [
+            'userId' => $entity->getId(),
+            'isDenied' => false,
+        ];
+
+        if ($dt) {
+            $where['requestTime>'] = $dt->format('U');
+        }
+
+        $authLogRecord = $this->entityManager
+            ->getRDBRepository('AuthLogRecord')
+            ->select(['id', 'createdAt'])
+            ->where($where)
+            ->order('requestTime', true)
+            ->findOne();
+
+        if ($authLogRecord) {
+            $lastAccess = $authLogRecord->get('createdAt');
+        }
+
+        $entity->set('lastAccess', $lastAccess);
+    }
+}

application/Espo/Classes/FieldValidators/ArrayIntType.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify

application/Espo/Classes/FieldValidators/ArrayType.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -31,22 +31,31 @@ namespace Espo\Classes\FieldValidators;
 
 use Espo\ORM\Entity;
 
-class ArrayType extends BaseType
+use StdClass;
+
+class ArrayType
 {
-    public function checkRequired(Entity $entity, string $field, $validationValue, $data) : bool
+    public function checkRequired(Entity $entity, string $field): bool
     {
         return $this->isNotEmpty($entity, $field);
     }
 
-    public function checkMaxCount(Entity $entity, string $field, $validationValue, $data) : bool
+    public function checkMaxCount(Entity $entity, string $field, int $validationValue): bool
     {
-        if (!$this->isNotEmpty($entity, $field)) return true;
+        if (!$this->isNotEmpty($entity, $field)) {
+            return true;
+        }
+
         $list = $entity->get($field);
-        if (count($list) > $validationValue) return false;
+
+        if (count($list) > $validationValue) {
+            return false;
+        }
+
         return true;
     }
 
-    public function checkArray(Entity $entity, string $field, $validationValue, $data) : bool
+    public function rawCheckArray(StdClass $data, string $field): bool
     {
         if (isset($data->$field) && $data->$field !== null && !is_array($data->$field)) {
             return false;
@@ -55,12 +64,22 @@ class ArrayType extends BaseType
         return true;
     }
 
-    protected function isNotEmpty(Entity $entity, $field)
+    protected function isNotEmpty(Entity $entity, string $field): bool
     {
-        if (!$entity->has($field) || $entity->get($field) === null) return false;
+        if (!$entity->has($field) || $entity->get($field) === null) {
+            return false;
+        }
+
         $list = $entity->get($field);
-        if (!is_array($list)) return false;
-        if (count($list)) return true;
+
+        if (!is_array($list)) {
+            return false;
+        }
+
+        if (count($list)) {
+            return true;
+        }
+
         return false;
     }
 }

application/Espo/Classes/FieldValidators/ChecklistType.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify

application/Espo/Classes/FieldValidators/CurrencyType.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -33,7 +33,7 @@ use Espo\ORM\Entity;
 
 class CurrencyType extends FloatType
 {
-    protected function isNotEmpty(Entity $entity, $field)
+    protected function isNotEmpty(Entity $entity, string $field): bool
     {
         return
             $entity->has($field) && $entity->get($field) !== null &&

application/Espo/Classes/FieldValidators/DateType.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -31,14 +31,14 @@ namespace Espo\Classes\FieldValidators;
 
 use Espo\ORM\Entity;
 
-class DateType extends BaseType
+class DateType
 {
-    public function checkRequired(Entity $entity, string $field, $validationValue, $data) : bool
+    public function checkRequired(Entity $entity, string $field): bool
     {
         return $this->isNotEmpty($entity, $field);
     }
 
-    protected function isNotEmpty(Entity $entity, $field)
+    protected function isNotEmpty(Entity $entity, string $field): bool
     {
         return $entity->has($field) && $entity->get($field) !== null;
     }

application/Espo/Classes/FieldValidators/DatetimeOptionalType.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -33,15 +33,21 @@ use Espo\ORM\Entity;
 
 class DatetimeOptionalType extends DatetimeType
 {
-    public function checkRequired(Entity $entity, string $field, $validationValue, $data) : bool
+    public function checkRequired(Entity $entity, string $field): bool
     {
         return $this->isNotEmpty($entity, $field);
     }
 
-    protected function isNotEmpty(Entity $entity, $field)
+    protected function isNotEmpty(Entity $entity, string $field): bool
     {
-        if ($entity->has($field) && $entity->get($field) !== null) return true;
-        if ($entity->has($field . 'Date') && $entity->get($field . 'Date') !== null) return true;
+        if ($entity->has($field) && $entity->get($field) !== null) {
+            return true;
+        }
+
+        if ($entity->has($field . 'Date') && $entity->get($field . 'Date') !== null) {
+            return true;
+        }
+
         return false;
     }
 }

application/Espo/Classes/FieldValidators/DatetimeType.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify

application/Espo/Classes/FieldValidators/Email/EmailAddresses.php

@@ -0,0 +1,49 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\FieldValidators\Email;
+
+use Espo\ORM\Entity;
+
+class EmailAddresses
+{
+    public function checkRequired(Entity $entity, string $field): bool
+    {
+        if ($entity->get('status') === 'Draft') {
+            return true;
+        }
+
+        return $this->isNotEmpty($entity, $field);
+    }
+
+    private function isNotEmpty(Entity $entity, string $field): bool
+    {
+        return $entity->has($field) && $entity->get($field) !== '' && $entity->get($field) !== null;
+    }
+}

application/Espo/Classes/FieldValidators/EmailType.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -31,46 +31,61 @@ namespace Espo\Classes\FieldValidators;
 
 use Espo\ORM\Entity;
 
-class EmailType extends BaseType
+class EmailType
 {
-    public function checkRequired(Entity $entity, string $field, $validationValue, $data) : bool
+    public function checkRequired(Entity $entity, string $field): bool
     {
-        if ($this->isNotEmpty($entity, $field)) return true;
+        if ($this->isNotEmpty($entity, $field)) {
+            return true;
+        }
 
         $dataList = $entity->get($field . 'Data');
-        if (!is_array($dataList)) return false;
+
+        if (!is_array($dataList)) {
+            return false;
+        }
 
         foreach ($dataList as $item) {
-            if (!empty($item->emailAddress)) return true;
+            if (!empty($item->emailAddress)) {
+                return true;
+            }
         }
 
         return false;
     }
 
-    public function checkEmailAddress(Entity $entity, string $field, $validationValue, $data) : bool
+    public function checkEmailAddress(Entity $entity, string $field): bool
     {
         if ($this->isNotEmpty($entity, $field)) {
             $address = $entity->get($field);
+
             if (!filter_var($address, FILTER_VALIDATE_EMAIL)) {
                 return false;
             }
         }
 
         $dataList = $entity->get($field . 'Data');
-        if (is_array($dataList)) {
-            foreach ($dataList as $item) {
-                if (empty($item->emailAddress)) continue;
-                $address = $item->emailAddress;
-                if (!filter_var($address, FILTER_VALIDATE_EMAIL)) {
-                    return false;
-                }
+
+        if (!is_array($dataList)) {
+            return true;
+        }
+
+        foreach ($dataList as $item) {
+            if (empty($item->emailAddress)) {
+                continue;
+            }
+
+            $address = $item->emailAddress;
+
+            if (!filter_var($address, FILTER_VALIDATE_EMAIL)) {
+                return false;
             }
         }
 
         return true;
     }
 
-    protected function isNotEmpty(Entity $entity, $field)
+    protected function isNotEmpty(Entity $entity, string $field): bool
     {
         return $entity->has($field) && $entity->get($field) !== '' && $entity->get($field) !== null;
     }

application/Espo/Classes/FieldValidators/EnumType.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -31,14 +31,14 @@ namespace Espo\Classes\FieldValidators;
 
 use Espo\ORM\Entity;
 
-class EnumType extends BaseType
+class EnumType
 {
-    public function checkRequired(Entity $entity, string $field, $validationValue, $data) : bool
+    public function checkRequired(Entity $entity, string $field): bool
     {
         return $this->isNotEmpty($entity, $field);
     }
 
-    protected function isNotEmpty(Entity $entity, $field)
+    protected function isNotEmpty(Entity $entity, string $field): bool
     {
         return $entity->has($field) && $entity->get($field) !== null;
     }

application/Espo/Classes/FieldValidators/FileType.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify

application/Espo/Classes/FieldValidators/FloatType.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify

application/Espo/Classes/FieldValidators/ImageType.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify

application/Espo/Classes/FieldValidators/IntType.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -31,28 +31,46 @@ namespace Espo\Classes\FieldValidators;
 
 use Espo\ORM\Entity;
 
-class IntType extends BaseType
+class IntType
 {
-    public function checkRequired(Entity $entity, string $field, $validationValue, $data) : bool
+    public function checkRequired(Entity $entity, string $field): bool
     {
         return $this->isNotEmpty($entity, $field);
     }
 
-    public function checkMax(Entity $entity, string $field, $validationValue, $data) : bool
+    /**
+     * @param mixed $validationValue
+     */
+    public function checkMax(Entity $entity, string $field, $validationValue): bool
     {
-        if (!$this->isNotEmpty($entity, $field)) return true;
-        if ($entity->get($field) > $validationValue) return false;
+        if (!$this->isNotEmpty($entity, $field)) {
+            return true;
+        }
+
+        if ($entity->get($field) > $validationValue) {
+            return false;
+        }
+
         return true;
     }
 
-    public function checkMin(Entity $entity, string $field, $validationValue, $data) : bool
+    /**
+     * @param mixed $validationValue
+     */
+    public function checkMin(Entity $entity, string $field, $validationValue): bool
     {
-        if (!$this->isNotEmpty($entity, $field)) return true;
-        if ($entity->get($field) < $validationValue) return false;
+        if (!$this->isNotEmpty($entity, $field)) {
+            return true;
+        }
+
+        if ($entity->get($field) < $validationValue) {
+            return false;
+        }
+
         return true;
     }
 
-    protected function isNotEmpty(Entity $entity, $field)
+    protected function isNotEmpty(Entity $entity, string $field): bool
     {
         return $entity->has($field) && $entity->get($field) !== null;
     }

application/Espo/Classes/FieldValidators/JsonArrayType.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -31,21 +31,35 @@ namespace Espo\Classes\FieldValidators;
 
 use Espo\ORM\Entity;
 
-class JsonArrayType extends BaseType
-{
-    public function checkArray(Entity $entity, string $field, $validationValue, $data) : bool
-    {
-        if (!$entity->has($field) || $entity->get($field) === null) return true;
+use StdClass;
 
-        return is_array($entity->get($field));
+class JsonArrayType
+{
+    public function rawCheckArray(StdClass $data, string $field): bool
+    {
+        if (isset($data->$field) && $data->$field !== null && !is_array($data->$field)) {
+            return false;
+        }
+
+        return true;
     }
 
-    protected function isNotEmpty(Entity $entity, $field)
+    protected function isNotEmpty(Entity $entity, string $field): bool
     {
-        if (!$entity->has($field) || $entity->get($field) === null) return false;
+        if (!$entity->has($field) || $entity->get($field) === null) {
+            return false;
+        }
+
         $list = $entity->get($field);
-        if (!is_array($list)) return false;
-        if (count($list)) return true;
+
+        if (!is_array($list)) {
+            return false;
+        }
+
+        if (count($list)) {
+            return true;
+        }
+
         return false;
     }
 }

application/Espo/Classes/FieldValidators/LinkMultipleType.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -30,11 +30,19 @@
 namespace Espo\Classes\FieldValidators;
 
 use Espo\ORM\Entity;
+use Espo\Core\ORM\Entity as CoreEntity;
 
-class LinkMultipleType extends BaseType
+class LinkMultipleType
 {
-    public function checkRequired(Entity $entity, string $field, $validationValue, $data) : bool
+    public function checkRequired(Entity $entity, string $field): bool
     {
-        return count($entity->getLinkMultipleIdList($field)) > 0;
+        if (!$entity instanceof CoreEntity) {
+            return false;
+        }
+
+        /** @var string[] */
+        $idList = $entity->getLinkMultipleIdList($field);
+
+        return count($idList) > 0;
     }
 }

application/Espo/Classes/FieldValidators/LinkParentType.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -31,14 +31,18 @@ namespace Espo\Classes\FieldValidators;
 
 use Espo\ORM\Entity;
 
-class LinkParentType extends BaseType
+class LinkParentType
 {
-    public function checkRequired(Entity $entity, string $field, $validationValue, $data) : bool
+    public function checkRequired(Entity $entity, string $field): bool
     {
         $idAttribute = $field . 'Id';
         $typeAttribute = $field . 'Type';
 
-        if (!$entity->has($idAttribute) || $entity->get($idAttribute) === '' || $entity->get($idAttribute) === null) {
+        if (
+            !$entity->has($idAttribute) ||
+            $entity->get($idAttribute) === '' ||
+            $entity->get($idAttribute) === null
+        ) {
             return false;
         }
 

application/Espo/Classes/FieldValidators/LinkType.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -31,9 +31,9 @@ namespace Espo\Classes\FieldValidators;
 
 use Espo\ORM\Entity;
 
-class LinkType extends BaseType
+class LinkType
 {
-    public function checkRequired(Entity $entity, string $field, $validationValue, $data) : bool
+    public function checkRequired(Entity $entity, string $field): bool
     {
         $idAttribute = $field . 'Id';
 

application/Espo/Classes/FieldValidators/MultiEnumType.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify

application/Espo/Classes/FieldValidators/PersonNameType.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -31,21 +31,41 @@ namespace Espo\Classes\FieldValidators;
 
 use Espo\ORM\Entity;
 
-class PersonNameType extends BaseType
+use Espo\Core\{
+    Utils\FieldUtil,
+};
+
+class PersonNameType
 {
-    public function checkRequired(Entity $entity, string $field, $validationValue, $data) : bool
+    private $fieldUtil;
+
+    public function __construct(FieldUtil $fieldUtil)
+    {
+        $this->fieldUtil = $fieldUtil;
+    }
+
+    public function checkRequired(Entity $entity, string $field): bool
     {
         $isEmpty = true;
-        foreach ($this->getActualAttributeList($entity, $field) as $attribute) {
+
+        $attributeList = $this->fieldUtil->getActualAttributeList($entity->getEntityType(), $field);
+
+        foreach ($attributeList as $attribute) {
             if ($attribute === 'salutation' . ucfirst($field)) {
                 continue;
             }
+
             if ($entity->has($attribute) && $entity->get($attribute) !== '') {
                 $isEmpty = false;
+
                 break;
             }
         }
-        if ($isEmpty) return false;
+
+        if ($isEmpty) {
+            return false;
+        }
+
         return true;
     }
 }

application/Espo/Classes/FieldValidators/PhoneType.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -31,23 +31,30 @@ namespace Espo\Classes\FieldValidators;
 
 use Espo\ORM\Entity;
 
-class PhoneType extends BaseType
+class PhoneType
 {
-    public function checkRequired(Entity $entity, string $field, $validationValue, $data) : bool
+    public function checkRequired(Entity $entity, string $field): bool
     {
-        if ($this->isNotEmpty($entity, $field)) return true;
+        if ($this->isNotEmpty($entity, $field)) {
+            return true;
+        }
 
         $dataList = $entity->get($field . 'Data');
-        if (!is_array($dataList)) return false;
+
+        if (!is_array($dataList)) {
+            return false;
+        }
 
         foreach ($dataList as $item) {
-            if (!empty($item->phoneNumber)) return true;
+            if (!empty($item->phoneNumber)) {
+                return true;
+            }
         }
 
         return false;
     }
 
-    protected function isNotEmpty(Entity $entity, $field)
+    protected function isNotEmpty(Entity $entity, string $field): bool
     {
         return $entity->has($field) && $entity->get($field) !== '' && $entity->get($field) !== null;
     }

application/Espo/Classes/FieldValidators/VarcharType.php

@@ -3,7 +3,7 @@
  * This file is part of EspoCRM.
  *
  * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014-2021 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
  * Website: https://www.espocrm.com
  *
  * EspoCRM is free software: you can redistribute it and/or modify
@@ -31,25 +31,27 @@ namespace Espo\Classes\FieldValidators;
 
 use Espo\ORM\Entity;
 
-class VarcharType extends BaseType
+class VarcharType
 {
-    public function checkRequired(Entity $entity, string $field, $validationValue, $data) : bool
+    public function checkRequired(Entity $entity, string $field): bool
     {
         return $this->isNotEmpty($entity, $field);
     }
 
-    public function checkMaxLength(Entity $entity, string $field, $validationValue, $data) : bool
+    public function checkMaxLength(Entity $entity, string $field, int $validationValue): bool
     {
         if ($this->isNotEmpty($entity, $field)) {
             $value = $entity->get($field);
+
             if (mb_strlen($value) > $validationValue) {
                 return false;
             }
         }
+
         return true;
     }
 
-    protected function isNotEmpty(Entity $entity, $field)
+    protected function isNotEmpty(Entity $entity, string $field): bool
     {
         return $entity->has($field) && $entity->get($field) !== '' && $entity->get($field) !== null;
     }

application/Espo/Classes/JobPreparators/CheckEmailAccounts.php

@@ -0,0 +1,109 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2022 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
+ * Website: https://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Classes\JobPreparators;
+
+use Espo\Core\Utils\DateTime;
+use Espo\Core\Job\Job\Status;
+use Espo\Core\Job\Preparator;
+use Espo\Core\Job\Preparator\Data;
+
+use Espo\ORM\EntityManager;
+
+use Espo\Entities\Job as JobEntity;
+
+use DateTimeImmutable;
+
+class CheckEmailAccounts implements Preparator
+{
+    private $entityManager;
+
+    public function __construct(EntityManager $entityManager)
+    {
+        $this->entityManager = $entityManager;
+    }
+
+    public function prepare(Data $data, DateTimeImmutable $executeTime): void
+    {
+        $collection = $this->entityManager
+            ->getRDBRepository('EmailAccount')
+            ->join('assignedUser', 'assignedUserAdditional')
+            ->where([
+                'status' => 'Active',
+                'useImap' => true,
+                'assignedUserAdditional.isActive' => true,
+            ])
+            ->find();
+
+        foreach ($collection as $entity) {
+            $running = $this->entityManager
+                ->getRDBRepository(JobEntity::ENTITY_TYPE)
+                ->where([
+                    'scheduledJobId' => $data->getId(),
+                    'status' => [
+                        Status::RUNNING,
+                        Status::READY,
+                    ],
+                    'targetType' => 'EmailAccount',
+                    'targetId' => $entity->getId(),
+                ])
+                ->findOne();
+
+            if ($running) {
+                continue;
+            }
+
+            $countPending = $this->entityManager
+                ->getRDBRepository(JobEntity::ENTITY_TYPE)
+                ->where([
+                    'scheduledJobId' => $data->getId(),
+                    'status' => Status::PENDING,
+                    'targetType' => 'EmailAccount',
+                    'targetId' => $entity->getId(),
+                ])
+                ->count();
+
+            if ($countPending > 1) {
+                continue;
+            }
+
+            $jobEntity = $this->entityManager->getNewEntity(JobEntity::ENTITY_TYPE);
+
+            $jobEntity->set([
+                'name' => $data->getName(),
+                'scheduledJobId' => $data->getId(),
+                'executeTime' => $executeTime->format(DateTime::SYSTEM_DATE_TIME_FORMAT),
+                'targetType' => 'EmailAccount',
+                'targetId' => $entity->getId(),
+            ]);
+
+            $this->entityManager->saveEntity($jobEntity);
+        }
+    }
+}