|
1
|
|
|
<?php |
|
2
|
|
|
|
|
3
|
|
|
/** |
|
4
|
|
|
* Functions to support the permissions controller |
|
5
|
|
|
* |
|
6
|
|
|
* @name ElkArte Forum |
|
7
|
|
|
* @copyright ElkArte Forum contributors |
|
8
|
|
|
* @license BSD http://opensource.org/licenses/BSD-3-Clause |
|
9
|
|
|
* |
|
10
|
|
|
* @version 1.1 Release Candidate 2 |
|
11
|
|
|
*/ |
|
12
|
|
|
|
|
13
|
|
|
namespace ElkArte\sources\subs\SettingsFormAdapter; |
|
14
|
|
|
|
|
15
|
|
|
/** |
|
16
|
|
|
* Class to initialize inline permissions sub-form and save its settings |
|
17
|
|
|
*/ |
|
18
|
|
|
class InlinePermissions extends Adapter |
|
19
|
|
|
{ |
|
20
|
|
|
/** |
|
21
|
|
|
* @var array |
|
22
|
|
|
*/ |
|
23
|
|
|
private $permissions = array(); |
|
24
|
|
|
|
|
25
|
|
|
/** |
|
26
|
|
|
* @var string[] |
|
27
|
|
|
*/ |
|
28
|
|
|
private $permissionList = array(); |
|
29
|
|
|
|
|
30
|
|
|
/** |
|
31
|
|
|
* @var string[] |
|
32
|
|
|
*/ |
|
33
|
|
|
private $illegal_permissions = array(); |
|
34
|
|
|
|
|
35
|
|
|
/** |
|
36
|
|
|
* @var string[] |
|
37
|
|
|
*/ |
|
38
|
|
|
private $illegal_guest_permissions = array(); |
|
39
|
|
|
|
|
40
|
|
|
/** |
|
41
|
|
|
* @var int[] |
|
42
|
|
|
*/ |
|
43
|
|
|
private $excluded_groups = array(); |
|
44
|
|
|
|
|
45
|
|
|
private $permissionsObject; |
|
46
|
|
|
private $db; |
|
47
|
|
|
|
|
48
|
|
|
/** |
|
49
|
|
|
* @return string[] |
|
50
|
|
|
*/ |
|
51
|
|
|
public function getPermissions() |
|
52
|
|
|
{ |
|
53
|
|
|
return $this->permissions; |
|
54
|
|
|
} |
|
55
|
|
|
|
|
56
|
|
|
/** |
|
57
|
|
|
* @param string[] $permissions |
|
58
|
|
|
*/ |
|
59
|
4 |
|
public function setPermissions($permissions) |
|
60
|
|
|
{ |
|
61
|
4 |
|
$this->permissions = $permissions; |
|
62
|
|
|
|
|
63
|
|
|
// Load the permission list |
|
64
|
4 |
|
$this->permissionList = array_map( |
|
65
|
|
|
function ($permission) |
|
66
|
|
|
{ |
|
67
|
4 |
|
return $permission[1]; |
|
68
|
4 |
|
}, $this->permissions |
|
69
|
4 |
|
); |
|
70
|
|
|
|
|
71
|
|
|
// Load the permission settings that guests cannot have |
|
72
|
4 |
|
$this->illegal_guest_permissions = array_intersect( |
|
73
|
4 |
|
array_map( |
|
74
|
4 |
|
function ($permission) |
|
75
|
|
|
{ |
|
76
|
4 |
|
return str_replace(array('_any', '_own'), '', $permission[1]); |
|
77
|
4 |
|
}, $this->permissions |
|
78
|
4 |
|
), $this->permissionsObject->getIllegalGuestPermissions() |
|
79
|
4 |
|
); |
|
80
|
4 |
|
} |
|
81
|
|
|
|
|
82
|
|
|
/** |
|
83
|
|
|
* @return int[] |
|
84
|
|
|
*/ |
|
85
|
|
|
public function getExcludedGroups() |
|
86
|
|
|
{ |
|
87
|
|
|
return $this->excluded_groups; |
|
88
|
|
|
} |
|
89
|
|
|
|
|
90
|
|
|
/** |
|
91
|
|
|
* @param int[] $excluded_groups |
|
92
|
|
|
*/ |
|
93
|
2 |
|
public function setExcludedGroups($excluded_groups) |
|
94
|
|
|
{ |
|
95
|
2 |
|
$this->excluded_groups = $excluded_groups; |
|
96
|
2 |
|
} |
|
97
|
|
|
|
|
98
|
|
|
/** |
|
99
|
|
|
* InlinePermissions constructor. |
|
100
|
|
|
*/ |
|
101
|
4 |
|
public function __construct() |
|
102
|
|
|
{ |
|
103
|
4 |
|
$this->db = database(); |
|
104
|
|
|
|
|
105
|
|
|
// Make sure they can't do certain things, |
|
106
|
|
|
// unless they have the right permissions. |
|
107
|
4 |
|
$this->permissionsObject = new \Permissions; |
|
108
|
4 |
|
$this->illegal_permissions = $this->permissionsObject->getIllegalPermissions(); |
|
109
|
4 |
|
} |
|
110
|
|
|
|
|
111
|
|
|
/** |
|
112
|
|
|
* Save the permissions of a form containing inline permissions. |
|
113
|
|
|
*/ |
|
114
|
2 |
|
public function save() |
|
115
|
|
|
{ |
|
116
|
|
|
// No permissions? Not a great deal to do here. |
|
117
|
2 |
|
if (!allowedTo('manage_permissions')) |
|
118
|
2 |
|
{ |
|
119
|
|
|
return; |
|
120
|
|
|
} |
|
121
|
2 |
|
$insertRows = array(); |
|
122
|
2 |
|
foreach ($this->permissionList as $permission) |
|
123
|
|
|
{ |
|
124
|
2 |
|
if (!isset($_POST[$permission])) |
|
125
|
2 |
|
{ |
|
126
|
1 |
|
continue; |
|
127
|
|
|
} |
|
128
|
|
|
|
|
129
|
2 |
|
foreach ($_POST[$permission] as $id_group => $value) |
|
130
|
|
|
{ |
|
131
|
2 |
|
if (in_array($value, array('on', 'deny')) && !in_array($permission, $this->illegal_permissions)) |
|
132
|
2 |
|
{ |
|
133
|
2 |
|
$insertRows[] = array($permission, (int) $id_group, $value == 'on' ? 1 : 0); |
|
134
|
2 |
|
} |
|
135
|
2 |
|
} |
|
136
|
2 |
|
} |
|
137
|
|
|
|
|
138
|
|
|
// Remove the old permissions... |
|
139
|
2 |
|
$this->permissionsObject->deletePermissions($this->permissionList); |
|
140
|
|
|
|
|
141
|
|
|
// ...and replace them with new ones. |
|
142
|
2 |
|
require_once(SUBSDIR . '/ManagePermissions.subs.php'); |
|
143
|
2 |
|
replacePermission($insertRows); |
|
144
|
|
|
|
|
145
|
|
|
// Do a full child update. |
|
146
|
2 |
|
$this->permissionsObject->updateChild(array(), -1); |
|
147
|
|
|
|
|
148
|
|
|
// Just in case we cached this. |
|
149
|
2 |
|
updateSettings(array('settings_updated' => time())); |
|
150
|
2 |
|
} |
|
151
|
|
|
|
|
152
|
|
|
/** |
|
153
|
|
|
* Initialize a form with inline permissions settings. |
|
154
|
|
|
* It loads a context variables for each permission. |
|
155
|
|
|
* This function is used by several settings screens to set specific permissions. |
|
156
|
|
|
* |
|
157
|
|
|
* @uses ManagePermissions language |
|
158
|
|
|
* @uses ManagePermissions template |
|
159
|
|
|
*/ |
|
160
|
4 |
|
public function prepare() |
|
161
|
|
|
{ |
|
162
|
4 |
|
global $modSettings; |
|
163
|
|
|
|
|
164
|
|
|
// No permissions? Not a great deal to do here. |
|
165
|
4 |
|
if (!allowedTo('manage_permissions')) |
|
166
|
4 |
|
{ |
|
167
|
|
|
return; |
|
168
|
|
|
} |
|
169
|
|
|
|
|
170
|
|
|
// Load the permission settings for guests |
|
171
|
4 |
|
foreach ($this->permissions as $permission) |
|
172
|
|
|
{ |
|
173
|
4 |
|
$this->context[$permission[1]] = array( |
|
174
|
|
|
-1 => array( |
|
175
|
4 |
|
'id' => -1, |
|
176
|
4 |
|
'is_postgroup' => false, |
|
177
|
4 |
|
'status' => 'off', |
|
178
|
4 |
|
), |
|
179
|
|
|
0 => array( |
|
180
|
4 |
|
'id' => 0, |
|
181
|
4 |
|
'is_postgroup' => false, |
|
182
|
4 |
|
'status' => 'off', |
|
183
|
4 |
|
), |
|
184
|
|
|
); |
|
185
|
4 |
|
} |
|
186
|
|
|
|
|
187
|
4 |
|
$request = $this->db->query('', ' |
|
188
|
|
|
SELECT id_group, CASE WHEN add_deny = {int:denied} THEN {string:deny} ELSE {string:on} END AS status, permission |
|
189
|
|
|
FROM {db_prefix}permissions |
|
190
|
|
|
WHERE id_group IN (-1, 0) |
|
191
|
4 |
|
AND permission IN ({array_string:permissions})', |
|
192
|
|
|
array( |
|
193
|
4 |
|
'denied' => 0, |
|
194
|
4 |
|
'permissions' => $this->permissionList, |
|
195
|
4 |
|
'deny' => 'deny', |
|
196
|
4 |
|
'on' => 'on', |
|
197
|
|
|
) |
|
198
|
4 |
|
); |
|
199
|
4 |
|
while ($row = $this->db->fetch_assoc($request)) |
|
200
|
|
|
{ |
|
201
|
2 |
|
$this->context[$row['permission']][$row['id_group']]['status'] = $row['status']; |
|
202
|
2 |
|
} |
|
203
|
4 |
|
$this->db->free_result($request); |
|
204
|
|
|
|
|
205
|
4 |
|
$request = $this->db->query('', ' |
|
206
|
|
|
SELECT mg.id_group, mg.group_name, mg.min_posts, COALESCE(p.add_deny, -1) AS status, p.permission |
|
207
|
|
|
FROM {db_prefix}membergroups AS mg |
|
208
|
|
|
LEFT JOIN {db_prefix}permissions AS p ON (p.id_group = mg.id_group AND p.permission IN ({array_string:permissions})) |
|
209
|
|
|
WHERE mg.id_group NOT IN (1, 3) |
|
210
|
4 |
|
AND mg.id_parent = {int:not_inherited}' . (empty($modSettings['permission_enable_postgroups']) ? ' |
|
211
|
4 |
|
AND mg.min_posts = {int:min_posts}' : '') . ' |
|
212
|
4 |
|
ORDER BY mg.min_posts, CASE WHEN mg.id_group < {int:newbie_group} THEN mg.id_group ELSE 4 END, mg.group_name', |
|
213
|
|
|
array( |
|
214
|
4 |
|
'not_inherited' => -2, |
|
215
|
4 |
|
'min_posts' => -1, |
|
216
|
4 |
|
'newbie_group' => 4, |
|
217
|
4 |
|
'permissions' => $this->permissionList, |
|
218
|
|
|
) |
|
219
|
4 |
|
); |
|
220
|
4 |
|
while ($row = $this->db->fetch_assoc($request)) |
|
221
|
|
|
{ |
|
222
|
|
|
// Initialize each permission as being 'off' until proven otherwise. |
|
223
|
4 |
|
foreach ($this->permissions as $permission) |
|
224
|
|
|
{ |
|
225
|
4 |
|
if (!isset($this->context[$permission[1]][$row['id_group']])) |
|
226
|
4 |
|
{ |
|
227
|
4 |
|
$this->context[$permission[1]][$row['id_group']] = array( |
|
228
|
4 |
|
'id' => $row['id_group'], |
|
229
|
4 |
|
'name' => $row['group_name'], |
|
230
|
4 |
|
'is_postgroup' => $row['min_posts'] != -1, |
|
231
|
4 |
|
'status' => 'off', |
|
232
|
|
|
); |
|
233
|
4 |
|
} |
|
234
|
4 |
|
} |
|
235
|
|
|
|
|
236
|
4 |
|
$this->context[$row['permission']][$row['id_group']]['status'] = empty($row['status']) ? 'deny' : ($row['status'] == 1 ? 'on' : 'off'); |
|
237
|
4 |
|
} |
|
238
|
4 |
|
$this->db->free_result($request); |
|
239
|
4 |
|
$this->filterIllegalPermissions(); |
|
240
|
4 |
|
$this->prepareContext(); |
|
241
|
4 |
|
} |
|
242
|
|
|
|
|
243
|
|
|
/** |
|
244
|
|
|
* Prepare the template by loading context |
|
245
|
|
|
* variables for each permission. |
|
246
|
|
|
* |
|
247
|
|
|
* @uses ManagePermissions template |
|
248
|
|
|
* @uses ManagePermissions languuge |
|
249
|
|
|
*/ |
|
250
|
4 |
|
protected function prepareContext() |
|
251
|
|
|
{ |
|
252
|
4 |
|
global $context, $txt; |
|
253
|
|
|
|
|
254
|
4 |
|
loadTemplate('ManagePermissions'); |
|
255
|
4 |
|
loadLanguage('ManagePermissions'); |
|
256
|
|
|
|
|
257
|
|
|
// Load the names for guests |
|
258
|
4 |
|
foreach ($this->permissions as $permission) |
|
259
|
|
|
{ |
|
260
|
4 |
View Code Duplication |
if (isset($this->context[$permission[1]][-1])) |
|
261
|
4 |
|
{ |
|
262
|
4 |
|
$this->context[$permission[1]][-1]['name'] = $txt['membergroups_guests']; |
|
263
|
4 |
|
} |
|
264
|
4 |
View Code Duplication |
if (isset($this->context[$permission[1]][0])) |
|
265
|
4 |
|
{ |
|
266
|
4 |
|
$this->context[$permission[1]][0]['name'] = $txt['membergroups_members']; |
|
267
|
4 |
|
} |
|
268
|
4 |
|
} |
|
269
|
|
|
|
|
270
|
4 |
|
$context['permissions'] = $this->context; |
|
271
|
4 |
|
} |
|
272
|
|
|
|
|
273
|
|
|
/** |
|
274
|
|
|
* Some permissions cannot be given to certain groups. Remove them. |
|
275
|
|
|
*/ |
|
276
|
4 |
|
private function filterIllegalPermissions() |
|
277
|
|
|
{ |
|
278
|
4 |
|
foreach ($this->permissions as $permission) |
|
279
|
|
|
{ |
|
280
|
4 |
|
$excluded_groups = $this->excluded_groups; |
|
281
|
4 |
|
if (isset($permission['excluded_groups'])) |
|
282
|
4 |
|
{ |
|
283
|
2 |
|
$excluded_groups += $permission['excluded_groups']; |
|
284
|
2 |
|
} |
|
285
|
4 |
|
foreach ($excluded_groups as $group) |
|
286
|
|
|
{ |
|
287
|
2 |
|
if (isset($this->context[$permission[1]][$group])) |
|
288
|
2 |
|
{ |
|
289
|
2 |
|
unset($this->context[$permission[1]][$group]); |
|
290
|
2 |
|
} |
|
291
|
4 |
|
} |
|
292
|
|
|
// Is this permission one that guests can't have? |
|
293
|
4 |
|
if (in_array($permission[1], $this->illegal_guest_permissions)) |
|
294
|
4 |
|
{ |
|
295
|
2 |
|
unset($this->context[$permission[1]][-1]); |
|
296
|
2 |
|
} |
|
297
|
|
|
|
|
298
|
|
|
// Is this permission outright disabled? |
|
299
|
4 |
|
if (in_array($permission[1], $this->illegal_permissions)) |
|
300
|
4 |
|
{ |
|
301
|
2 |
|
unset($this->context[$permission[1]]); |
|
302
|
2 |
|
} |
|
303
|
4 |
|
} |
|
304
|
4 |
|
} |
|
305
|
|
|
} |
|
306
|
|
|
|