perms_model

Complexity

Total Complexity

44

Size/Duplication

Total Lines	238
Duplicated Lines	0 %

Importance

Changes

0

13 Methods

Rating	Name	Duplication	Size	Complexity
A	get_default_role()	0	18	4
A	get_role_info()	0	8	2
A	extend_permissions()	0	11	3
A	set_default_role()	0	11	2
A	get_role_permissions()	0	17	4
A	file_get_user_role()	0	18	4
A	file_get_users()	0	16	3
A	get_permissions()	0	14	3
A	remove_user_role()	0	11	3
A	__construct()	0	9	1
A	get_user_role()	0	23	6
A	get_user_list()	0	21	6
A	add_user_role()	0	11	3

<?php

class perms_model extends Model {

    private $all_permissions = [
        'read_file',
        'write_file',
        'manage_user',
        'see_global_trash',
        'see_history_detail'
    ];

    private $implied_permissions = [
        "write_file" => ["read_file"],
    ];

    private $default_rp = [
        "none" => [],
        "reader" => ['read_file'],
        "author" => ['write_file', 'see_history_detail'],
        "admin" => ['write_file', 'manage_user', 'see_global_trash', 'see_history_detail']
    ];

    private $role_permissions = [];

    function __construct() {
        $this->load_model("jugaad_model");
        $this->load_model("auth_model");

        $this->load_library("db_lib");

        $this->default_rp["superadmin"] = $this->all_permissions;

        $this->role_permissions = $this->get_role_info();
    }

    private function extend_permissions($permissions) {
        $e_perms = [];

        foreach ($permissions as $perm) {
            array_push($e_perms, $perm);
            if (isset($this->implied_permissions[$perm])) {
                $e_perms = array_merge($e_perms, $this->implied_permissions[$perm]);
            }
        }

        return array_unique($e_perms);
    }

    function get_role_info() {

It is generally recommended to explicitly declare the visibility for methods.

        $perms = [];

        foreach ($this->default_rp as $role => $value) {
            $perms[$role] = $this->extend_permissions($value);
        }

        return $perms;
    }

    function add_user_role($file_id, $user, $role) {

It is generally recommended to explicitly declare the visibility for methods.

        // Add admin user for a file
        if ($file_id === false || !$user) {
            return false;
        }
        return $this->db_lib->prepared_execute(

The property db_lib does not exist on perms_model. Since you implemented __get, consider adding a @property annotation.

            $this->DB->jugaad,

The property $DB is declared private in Model. Since you implement __get, consider adding a @property or @property-read.

            "INSERT INTO `file_permissions` (`file_id`, `user`, `role`) VALUES (?, ?, ?)",
            "iss",
            [$file_id, $user, $role],
            false
        );
    }

    function remove_user_role($file_id, $user) {

It is generally recommended to explicitly declare the visibility for methods.

        // Remove admin user for a file
        if ($file_id === false || !$user) {
            return false;
        }
        return $this->db_lib->prepared_execute(

The property db_lib does not exist on perms_model. Since you implemented __get, consider adding a @property annotation.

            $this->DB->jugaad,

The property $DB is declared private in Model. Since you implement __get, consider adding a @property or @property-read.

            "DELETE FROM `file_permissions` WHERE `file_id`=? AND `user`=?",
            "is",
            [$file_id, $user],
            false
        );
    }

    function get_default_role($file_id) {

It is generally recommended to explicitly declare the visibility for methods.

        // Get default role for a file
        if ($file_id === false) {
            return false;
        }
        $stmt = $this->db_lib->prepared_execute(

The property db_lib does not exist on perms_model. Since you implemented __get, consider adding a @property annotation.

            $this->DB->jugaad,

The property $DB is declared private in Model. Since you implement __get, consider adding a @property or @property-read.

            "SELECT `default_role` FROM `files` WHERE `id`=?",
            "i",
            [$file_id]
        );
        if (!$stmt) {
            return false;
        }
        if ($row = $stmt->get_result()->fetch_row()) {
            return $row[0];
        }
        return false;
    }

    function set_default_role($file_id, $role) {

It is generally recommended to explicitly declare the visibility for methods.

        // Set default role for a file
        if ($file_id === false) {
            return false;
        }
        return $this->db_lib->prepared_execute(

The property db_lib does not exist on perms_model. Since you implemented __get, consider adding a @property annotation.

            $this->DB->jugaad,

The property $DB is declared private in Model. Since you implement __get, consider adding a @property or @property-read.

            "UPDATE `files` SET `default_role`=? WHERE `id`=?",
            "si",
            [$role, $file_id],
            false
        );
    }

    private function file_get_user_role($file_id, $user) {
        // Check permissions for a single file
        if ($file_id === false) {
            return false;
        }
        $stmt = $this->db_lib->prepared_execute(

The property db_lib does not exist on perms_model. Since you implemented __get, consider adding a @property annotation.

            $this->DB->jugaad,

The property $DB is declared private in Model. Since you implement __get, consider adding a @property or @property-read.

            "SELECT `role` FROM `file_permissions` WHERE `file_id`=? AND `user`=?",
            "is",
            [$file_id, $user]
        );
        if (!$stmt) {
            return false;
        }
        if ($row = $stmt->get_result()->fetch_row()) {
            return $row[0];
        }
        return false;
    }

    function get_user_role($file_id, $user) {

It is generally recommended to explicitly declare the visibility for methods.

        // Check permissions for file with inherited permissions
        if ($this->auth_model->is_admin($user)) {

The property auth_model does not exist on perms_model. Since you implemented __get, consider adding a @property annotation.

            return 'superadmin';
        }

        if ($file_id === false) {
            return false;
        }
        $orig_file_id = $file_id;
        do {
            $file = $this->jugaad_model->get_file($file_id);

The property jugaad_model does not exist on perms_model. Since you implemented __get, consider adding a @property annotation.

            if ($file === false) {
                return false;
            }
            $role = $this->file_get_user_role($file_id, $user);
            if ($role !== false) {
                return $role;
            }
            $file_id = $file['parent'];
        } while ($file_id >= 0);

        return $this->get_default_role($orig_file_id);
    }

    private function file_get_users($file_id) {
        // Get list of privileged users for a single file
        if ($file_id === false) {
            return false;
        }
        $stmt = $this->db_lib->prepared_execute(

The property db_lib does not exist on perms_model. Since you implemented __get, consider adding a @property annotation.

            $this->DB->jugaad,

The property $DB is declared private in Model. Since you implement __get, consider adding a @property or @property-read.

            "SELECT `file_id`, `user`, `role` FROM `file_permissions` WHERE `file_id`=?",
            "i",
            [$file_id]
        );
        if (!$stmt) {
            return false;
        }
        $user_list = $stmt->get_result()->fetch_all(MYSQLI_ASSOC);
        return $user_list;
    }

    function get_user_list($file_id) {

It is generally recommended to explicitly declare the visibility for methods.

        // Get list of privileged users for file with inherited permissions
        if ($file_id === false) {
            return false;
        }
        $user_list = [];
        do {
            $file = $this->jugaad_model->get_file($file_id);

The property jugaad_model does not exist on perms_model. Since you implemented __get, consider adding a @property annotation.

            if ($file === false) {
                return false;
            }
            $file_users = $this->file_get_users($file_id);
            foreach ($file_users as $user) {
                if (!isset($user_list[$user['user']])) {
                    $user_list[$user['user']] = $user;
                }
            }
            $file_id = $file['parent'];
        } while ($file_id >= 0);

        return $user_list;
    }

    function get_role_permissions($role) {

It is generally recommended to explicitly declare the visibility for methods.

        if ($role === false) {
            return false;
        }

        $perm_list = $this->role_permissions[$role];

        $user_can = [];

        foreach ($this->all_permissions as $perm) {
            $user_can[$perm] = false;
            if (in_array($perm, $perm_list)) {
                $user_can[$perm] = true;
            }
        }

        return $user_can;
    }

    function get_permissions($file_id, $user) {

It is generally recommended to explicitly declare the visibility for methods.

        if ($file_id === false) {
            return false;
        }

        // Return false if file does not exists
        if (false === $this->jugaad_model->get_file_type($file_id)) {

The property jugaad_model does not exist on perms_model. Since you implemented __get, consider adding a @property annotation.

            return false;
        }

        $role = $this->get_user_role($file_id, $user);
        $user_can = $this->get_role_permissions($role);

        return $user_can;
    }

}