mambax7 / newbb

class/PermissionForumHandler.php

<?php declare(strict_types=1);

namespace XoopsModules\Newbb;

/**
 * NewBB,  the forum module for XOOPS project
 *
 * @copyright      XOOPS Project (https://xoops.org)
 * @license        GNU GPL 2.0 or later (https://www.gnu.org/licenses/gpl-2.0.html)
 * @author         Taiwen Jiang (phppp or D.J.) <phppp@users.sourceforge.net>
 * @since          4.00
 */

use Xmf\IPAddress;
use Xmf\Yaml;
use XoopsModules\Newbb;

//defined("NEWBB_HANDLER_PERMISSION") || require_once __DIR__  .'/permission.php';
//define("NEWBB_HANDLER_PERMISSION_FORUM", 1);

if (\defined('FORUM_PERM_ITEMS') && \class_exists('ForumPermissionHandler')) {
    exit('access denied');
}
// irmtfan add pdf and print permissions.
\define('FORUM_PERM_ITEMS', 'access,view,post,reply,edit,delete,addpoll,vote,attach,noapprove,type,html,signature,pdf,print');

/**
 * Class PermissionForumHandler
 */
class PermissionForumHandler extends PermissionHandler
{
    protected string $templateFilename;

    /**
     * @param \XoopsDatabase|null $db
     */
    public function __construct(\XoopsDatabase $db = null)
    {
        //        $this->PermissionHandler($db);
        parent::__construct($db);
        $this->templateFilename = XOOPS_VAR_PATH . '/configs/newbb_permission_template.php';
    }

    /**
     * @param bool $fullname
     * @return array
     */
    public function getValidPerms(bool $fullname = false): array
    {
        static $validPerms = [];
        if (isset($validPerms[(int)$fullname])) {
            return $validPerms[(int)$fullname];
        }
        $items = \array_filter(\array_map('\trim', \explode(',', \FORUM_PERM_ITEMS)));
        if (!empty($fullname)) {
            foreach (\array_keys($items) as $key) {
                $items[$key] = 'forum_' . $items[$key];
            }
        }
        $validPerms[(int)$fullname] = $items;

        return $items;
    }

    /**
     * @param int $mid
     * @param int $id
     * @return array
     */
    public function getValidItems(int $mid, int $id = 0): array
    {
        static $suspension = [];
        $full_items = [];
        if (empty($mid)) {
            return $full_items;
        }

        require_once \dirname(__DIR__) . '/include/functions.user.php';
        $uid = \is_object($GLOBALS['xoopsUser']) ? $GLOBALS['xoopsUser']->getVar('uid') : 0;
        $ip  = IPAddress::fromRequest()->asReadable();
        if (!empty($GLOBALS['xoopsModuleConfig']['enable_usermoderate']) && !isset($suspension[$uid][$id])
            && !\newbbIsAdmin($id)) {
            /** @var ModerateHandler $moderateHandler */
            $moderateHandler = Helper::getInstance()->getHandler('Moderate');
            if ($moderateHandler->verifyUser($uid, '', $id)) {
                $suspension[$uid][$ip][$id] = 0;
            } else {
                $suspension[$uid][$ip][$id] = 1;
            }
        }

        $items = $this->getValidPerms();
        foreach ($items as $item) {
            /* skip access for suspended users */
            //if ( !empty($suspension[$uid][$ip][$id]) && in_array($item, array("post", "reply", "edit", "delete", "addpoll", "vote", "attach", "noapprove", "type")) ) continue;
            if (!empty($suspension[$uid][$ip][$id])) {
                continue;
            }
            $full_items[] = "'forum_{$item}'";
        }

        return $full_items;
    }

    /*
    * Returns permissions for a certain type
    *
    * @param int $id id of the item (forum, topic or possibly post) to get permissions for
    *
    * @return array
    */

    /**
     * @param int|mixed[] $id
     * @return array
     */
    public function getPermissions($id = 0): array
    {
        $permissions = [];
        if (\is_object($GLOBALS['xoopsModule']) && 'newbb' === $GLOBALS['xoopsModule']->getVar('dirname')) {
            $modid = $GLOBALS['xoopsModule']->getVar('mid');
        } else {
            /** @var \XoopsModuleHandler $moduleHandler */
            $moduleHandler = \xoops_getHandler('module');
            $xoopsNewBB    = $moduleHandler->getByDirname('newbb');
            $modid         = $xoopsNewBB->getVar('mid');
            unset($xoopsNewBB);
        }

        // Get user's groups
        $groups = \is_object($GLOBALS['xoopsUser']) ? $GLOBALS['xoopsUser']->getGroups() : [XOOPS_GROUP_ANONYMOUS];
        // Create string of groupid's separated by commas, inserted in a set of brackets
        if ((is_countable($groups) ? \count($groups) : 0) < 1) {
            return [];
        }
        // Create criteria for getting only the permissions regarding this module and this user's groups
        $criteria = new \CriteriaCompo(new \Criteria('gperm_modid', $modid));
        $criteria->add(new \Criteria('gperm_groupid', '(' . \implode(',', $groups) . ')', 'IN'));
        if ($id) {
            if (\is_array($id)) {
                $criteria->add(new \Criteria('gperm_itemid', '(' . \implode(',', $id) . ')', 'IN'));
            } else {
                $criteria->add(new \Criteria('gperm_itemid', (int)$id));
            }
        }
        $gperm_names = \implode(', ', $this->getValidItems($modid, $id));

It seems like $id can also be of type array<mixed,mixed>; however, parameter $id of XoopsModules\Newbb\PermissionForumHandler::getValidItems() does only seem to accept integer, maybe add an additional type check?

        // Add criteria for gpermnames
        $criteria->add(new \Criteria('gperm_name', '(' . $gperm_names . ')', 'IN'));
        // Get all permission objects in this module and for this user's groups
        $userpermissions = $this->getObjects($criteria, true);

        // Set the granted permissions to 1
        foreach ($userpermissions as $gperm_id => $gperm) {
            $permissions[$gperm->getVar('gperm_itemid')][$gperm->getVar('gperm_name')] = 1;
        }
        $userpermissions = null;
        unset($userpermissions);

        // Return the permission array
        return $permissions;
    }

    /**
     * @param int|Forum  $forum
     * @param bool $topic_locked
     * @param bool $isAdmin
     * @return array
     */
    public function getPermissionTable($forum = 0, bool $topic_locked = false, bool $isAdmin = false): array
    {
        $perm = [];

        $forumId = $forum;
        if (\is_object($forum)) {
            $forumId = $forum->getVar('forum_id');
        }

        $permissionSet = $this->getPermissions($forumId);

        $permItems = $this->getValidPerms();
        foreach ($permItems as $item) {
            if ('access' === $item) {
                continue;
            }
            if ($isAdmin
                || ((is_countable($permissionSet) && isset($permissionSet[$forumId]['forum_' . $item])
                     && (!$topic_locked
                         || 'view' === $item)))) {
                $perm[] = \constant('_MD_NEWBB_CAN_' . \mb_strtoupper((string) $item));
            } else {
                $perm[] = \constant('_MD_NEWBB_CANNOT_' . \mb_strtoupper((string) $item));
            }
        }

        return $perm;
    }

    /**
     * @param int $forum_id
     * @return bool
     */
    public function deleteByForum(int $forum_id): bool
    {
        $forum_id = (int)$forum_id;
        if (empty($forum_id)) {
            return false;
        }
        /** @var \XoopsGroupPermHandler $grouppermHandler */
        $grouppermHandler = \xoops_getHandler('groupperm');
        $criteria         = new \CriteriaCompo(new \Criteria('gperm_modid', $GLOBALS['xoopsModule']->getVar('mid')));
        $items            = $this->getValidPerms(true);
        $criteria->add(new \Criteria('gperm_name', "('" . \implode("', '", $items) . "')", 'IN'));
        $criteria->add(new \Criteria('gperm_itemid', $forum_id));

        return $grouppermHandler->deleteAll($criteria);
    }

    /**
     * @param int $forum
     * @param int $mid
     * @return bool
     */
    public function applyTemplate(int $forum, int $mid = 0): bool
    {
        if (!$perm_template = $this->getTemplate()) {
            return false;
        }

        if (empty($mid)) {
            if (\is_object($GLOBALS['xoopsModule']) && 'newbb' === $GLOBALS['xoopsModule']->getVar('dirname')) {
                $mid = $GLOBALS['xoopsModule']->getVar('mid');
            } else {
                /** @var \XoopsModuleHandler $moduleHandler */
                $moduleHandler = \xoops_getHandler('module');
                $newbb         = $moduleHandler->getByDirname('newbb');
                $mid           = $newbb->getVar('mid');
                unset($newbb);
            }
        }

        /** @var \XoopsMemberHandler $memberHandler */
        $memberHandler = \xoops_getHandler('member');
        $glist         = $memberHandler->getGroupList();
        $perms         = $this->getValidPerms(true);
        foreach (\array_keys($glist) as $group) {
            foreach ($perms as $perm) {
                if (!empty($perm_template[$group][$perm])) {
                    $this->validateRight($perm, (int)$forum, $group, $mid);
                } else {
                    $this->deleteRight($perm, (int)$forum, $group, $mid);
                }
            }
        }

        return true;
    }

    /**
     * @return array
     */
    public function getTemplate(): array
    {
        $perms = Yaml::readWrapped($this->templateFilename);

        $perms = (false !== $perms) ? $perms : [];

The condition false !== $perms is always true.

        return $perms;
    }

    /**
     * @param array $perms
     * @param int   $groupid
     * @return bool|int
     */
    public function setTemplate(array $perms, int $groupid = 0)
    {
        return Yaml::saveWrapped($perms, $this->templateFilename);
    }
}