1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
|
<?php
/**
* $Horde: horde/admin/perms/edit.php,v 1.38.2.2 2005/01/03 12:25:29 jan Exp $
*
* Copyright 1999-2005 Chuck Hagenbuch <chuck@horde.org>
*
* See the enclosed file COPYING for license information (LGPL). If you
* did not receive this file, see http://www.fsf.org/copyleft/lgpl.html.
*/
@define('HORDE_BASE', dirname(__FILE__) . '/../..');
require_once HORDE_BASE . '/lib/base.php';
require_once 'Horde/Menu.php';
require_once 'Horde/Group.php';
require_once 'Horde/Tree.php';
require_once 'Horde/Variables.php';
/* Form libraries. */
require_once 'Horde/Form.php';
require_once 'Horde/Form/Renderer.php';
if (!Auth::isAdmin()) {
Horde::authenticationFailureRedirect();
}
$groups = &Group::singleton();
$auth = &Auth::singleton($conf['auth']['driver']);
/* Set up the form variables. */
$vars = &Variables::getDefaultVariables();
$cid = $vars->get('cid');
$category = $vars->get('category');
$permission = &$perms->getPermissionById($cid);
/* See if we need to (and are supposed to) autocreate the
* permission. */
if ($category !== null) {
$permission = &$perms->getPermission($category);
if (is_a($permission, 'PEAR_Error') && Util::getFormData('autocreate')) {
/* Check to see if the permission we are copying from exists before
* we autocreate. */
$copyFrom = Util::getFormData('autocreate_copy');
if ($copyFrom && !$perms->exists($copyFrom)) {
$copyFrom = null;
}
$parent = $vars->get('parent');
$permission = &$perms->newPermission($category);
$result = $perms->addPermission($permission, $parent);
if (!is_a($result, 'PEAR_Error')) {
$form = 'edit.inc';
$cid = $perms->getPermissionId($permission);
}
if ($copyFrom) {
/* We have autocreated the permission and we have been told to
* copy an existing permission for the defaults. */
$copyFromObj = &$perms->getPermission($copyFrom);
$permission->addGuestPermission($copyFromObj->getGuestPermissions(), false);
$permission->addDefaultPermission($copyFromObj->getDefaultPermissions(), false);
$permission->addCreatorPermission($copyFromObj->getCreatorPermissions(), false);
foreach ($copyFromObj->getUserPermissions() as $user => $uperm) {
$permission->addUserPermission($user, $uperm, false);
}
foreach ($copyFromObj->getGroupPermissions() as $group => $gperm) {
$permission->addGroupPermission($group, $gperm, false);
}
} else {
/* We have autocreated the permission and we don't have an
* existing permission to copy. See if some defaults were
* supplied. */
$addPerms = Util::getFormData('autocreate_guest');
if ($addPerms) {
$permission->addGuestPermission($addPerms, false);
}
$addPerms = Util::getFormData('autocreate_default');
if ($addPerms) {
$permission->addDefaultPermission($addPerms, false);
}
$addPerms = Util::getFormData('autocreate_creator');
if ($addPerms) {
$permission->addCreatorPermission($addPerms, false);
}
}
$permission->save();
} else {
$cid = $perms->getPermissionId($permission);
}
$vars->set('cid', $cid);
} else {
$permission = &$perms->getPermissionById($cid);
}
/* If the permission fetched is an error return to the permissions
* list. */
if (is_a($permission, 'PEAR_Error')) {
$notification->push(_("Attempt to edit a non-existent permission."), 'horde.error');
$url = Horde::applicationUrl('admin/perms/index.php', true);
header('Location: ' . $url);
exit;
}
$form = &Horde_Form::singleton('', $vars);
$form->setButtons(_("Update"), true);
$form->addHidden('', 'cid', 'text', false);
/* Set up the columns for the permissions matrix. */
$cols = Perms::getPermsArray();
/* Default permissions. */
$perm_val = $permission->getDefaultPermissions();
/* Define a single matrix row for default perms. */
$matrix = array();
$matrix[0] = Perms::integerToArray($perm_val);
$form->setSection('default', _("All Authenticated Users"), Horde::img('perms.png'), false);
$form->addVariable(_("Default Permissions"), 'deflt', 'matrix', false, false, null, array($cols, array(0 => ''), $matrix));
/* Guest permissions. */
$perm_val = $permission->getGuestPermissions();
/* Define a single matrix row for guest perms. */
$matrix = array();
$matrix[0] = Perms::integerToArray($perm_val);
$form->setSection('guest', _("Guest Permissions"), '', false);
$form->addVariable(_("Guest permissions"), 'guest', 'matrix', false, false, null, array($cols, array(0 => ''), $matrix));
/* Object creator permissions. */
$perm_val = $permission->getCreatorPermissions();
/* Define a single matrix row for creator perms. */
$matrix = array();
$matrix[0] = Perms::integerToArray($perm_val);
$form->setSection('creator', _("Creator Permissions"), Horde::img('user.png'), false);
$form->addVariable(_("Object creator permissions"), 'creator', 'matrix', false, false, null, array($cols, array(0 => ''), $matrix));
/* Users permissions. */
$perm_val = $permission->getUserPermissions();
$form->setSection('users', _("Individual Users"), Horde::img('user.png'), false);
if ($auth->hasCapability('list')) {
/* The auth driver has list capabilities so set up an array which
* the matrix field type will recognise to set up an enum box for
* adding new users to the permissions matrix. */
$new_users = array();
$user_list = $auth->listUsers();
if (is_a($user_list, 'PEAR_Error')) {
$new_users = true;
} else {
sort($user_list);
foreach ($user_list as $user) {
if (!isset($perm_val[$user])) {
$new_users[$user] = $user;
}
}
}
} else {
/* No list capabilities, setting to true so that the matrix field
* type will offer a text input box for adding new users. */
$new_users = true;
}
/* Set up the matrix array, breaking up each permission integer into
* an array. The keys of this array will be the row headers. */
$rows = array();
$matrix = array();
foreach ($perm_val as $u_id => $u_perms) {
$rows[$u_id] = $u_id;
$matrix[$u_id] = Perms::integerToArray($u_perms);
}
$form->addVariable(_("User permissions"), 'u', 'matrix', false, false, null, array($cols, $rows, $matrix, $new_users));
/* Groups permissions. */
$perm_val = $permission->getGroupPermissions();
$form->setSection('groups', _("Groups"), Horde::img('group.png'), false);
$group_list = $groups->listGroups();
if (!empty($group_list)) {
/* There is an available list of groups so set up an array which
* the matrix field type will recognise to set up an enum box for
* adding new groups to the permissions matrix. */
$new_groups = array();
foreach ($group_list as $groupId => $group) {
if (!isset($perm_val[$groupId])) {
$new_groups[$groupId] = $group;
}
}
} else {
/* Do not offer a text box to add new groups. */
$new_groups = false;
}
/* Set up the matrix array, break up each permission integer into an
* array. The keys of this array will be the row headers. */
$rows = array();
$matrix = array();
foreach ($perm_val as $g_id => $g_perms) {
$rows[$g_id] = isset($group_list[$g_id]) ? $group_list[$g_id] : $g_id;
$matrix[$g_id] = Perms::integerToArray($g_perms);
}
$form->addVariable(_("Group permissions"), 'g', 'matrix', false, false, null, array($cols, $rows, $matrix, $new_groups));
/* Set form title. */
$form->setTitle(sprintf(_("Edit permissions for '%s'"), $perms->getTitle($permission->getName())));
if ($form->validate($vars)) {
$form->getInfo($vars, $info);
/* Collapse the array for default/guest/creator. */
$info['default'] = isset($info['deflt'][0]) ? $info['deflt'][0] : null;
$info['guest'] = isset($info['guest'][0]) ? $info['guest'][0] : null;
$info['creator'] = isset($info['creator'][0]) ? $info['creator'][0] : null;
/* Update and save the permissions. */
$permission->updatePermissions($info);
$permission->save();
$notification->push(sprintf(_("Updated '%s'."), $permission->getShortName()), 'horde.success');
$url = Util::addParameter('admin/perms/edit.php', 'cid', $permission->getId());
$url = Horde::applicationUrl($url, true);
header('Location: ' . $url);
exit;
}
$title = _("Permissions Administration");
require HORDE_TEMPLATES . '/common-header.inc';
require HORDE_TEMPLATES . '/admin/common-header.inc';
$notification->notify(array('listeners' => 'status'));
/* Render the form. */
$renderer = &new Horde_Form_Renderer();
$form->renderActive($renderer, $vars, 'edit.php', 'post');
echo '<br />';
require_once 'Horde/Perms/UI.php';
$ui = &new Perms_UI($perms);
$ui->renderTree($cid);
require HORDE_TEMPLATES . '/common-footer.inc';
|
