Dolibarr\Code\User\Classes\UserGroup::delrights()

Complexity

Conditions	23
Paths	1344

Size

Total Lines	116
Code Lines	70

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
    public function delrights($rid, $allmodule = '', $allperms = '', $entity = 0)
    {
        global $conf, $user, $langs;

        $error = 0;
        $wherefordel = '';

        $entity = (!empty($entity) ? $entity : $conf->entity);

        $this->db->begin();

        if (!empty($rid)) {
            $module = $perms = $subperms = '';

            // Si on a demande suppression d'un droit en particulier, on recupere
            // les caracteristiques module, perms et subperms de ce droit.
            $sql = "SELECT module, perms, subperms";
            $sql .= " FROM " . $this->db->prefix() . "rights_def";
            $sql .= " WHERE id = " . ((int) $rid);
            $sql .= " AND entity = " . ((int) $entity);

            $result = $this->db->query($sql);
            if ($result) {
                $obj = $this->db->fetch_object($result);
                if ($obj) {
                    $module = $obj->module;
                    $perms = $obj->perms;
                    $subperms = $obj->subperms;
                }
            } else {
                $error++;
                dol_print_error($this->db);
            }

            // Where for the list of permissions to delete
            $wherefordel = "id = " . ((int) $rid);
            // Suppression des droits induits
            if ($subperms == 'lire' || $subperms == 'read') {
                $wherefordel .= " OR (module='" . $this->db->escape($module) . "' AND perms='" . $this->db->escape($perms) . "' AND subperms IS NOT NULL)";
            }
            if ($perms == 'lire' || $perms == 'read') {
                $wherefordel .= " OR (module='" . $this->db->escape($module) . "')";
            }

            // Pour compatibilite, si lowid = 0, on est en mode suppression de tout
            // TODO To remove when this will be implemented by the caller
            //if (substr($rid,-1,1) == 0) $wherefordel="module='$module'";
        } else {
            // Add permission of the list $wherefordel
            if (!empty($allmodule)) {
                if ($allmodule == 'allmodules') {
                    $wherefordel = 'allmodules';
                } else {
                    $wherefordel = "module='" . $this->db->escape($allmodule) . "'";
                    if (!empty($allperms)) {
                        $wherefordel .= " AND perms='" . $this->db->escape($allperms) . "'";
                    }
                }
            }
        }

        // Suppression des droits de la liste wherefordel
        if (!empty($wherefordel)) {
            //print "$module-$perms-$subperms";
            $sql = "SELECT id";
            $sql .= " FROM " . $this->db->prefix() . "rights_def";
            $sql .= " WHERE entity = " . ((int) $entity);
            if (!empty($wherefordel) && $wherefordel != 'allmodules') {
                $sql .= " AND " . $wherefordel;
            }

            $result = $this->db->query($sql);
            if ($result) {
                $num = $this->db->num_rows($result);
                $i = 0;
                while ($i < $num) {
                    $nid = 0;

                    $obj = $this->db->fetch_object($result);
                    if ($obj) {
                        $nid = $obj->id;
                    }

                    $sql = "DELETE FROM " . $this->db->prefix() . "usergroup_rights";
                    $sql .= " WHERE fk_usergroup = $this->id AND fk_id=" . ((int) $nid);
                    $sql .= " AND entity = " . ((int) $entity);
                    if (!$this->db->query($sql)) {
                        $error++;
                    }

                    $i++;
                }
            } else {
                $error++;
                dol_print_error($this->db);
            }

            if (!$error) {
                $langs->load("other");
                $this->context = array('audit' => $langs->trans("PermissionsDelete") . ($rid ? ' (id=' . $rid . ')' : ''));

                // Call trigger
                $result = $this->call_trigger('USERGROUP_MODIFY', $user);
                if ($result < 0) {
                    $error++;
                }
                // End call triggers
            }
        }

        if ($error) {
            $this->db->rollback();
            return -$error;
        } else {
            $this->db->commit();
            return 1;
        }