1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
|
# --
# Kernel/Modules/CustomerTicketAttachment.pm - to get the attachments
# Copyright (C) 2001-2005 Martin Edenhofer <martin+code@otrs.org>
# --
# $Id: CustomerTicketAttachment.pm,v 1.1 2005/03/27 11:35:56 martin Exp $
# --
# This software comes with ABSOLUTELY NO WARRANTY. For details, see
# the enclosed file COPYING for license information (GPL). If you
# did not receive this file, see http://www.gnu.org/licenses/gpl.txt.
# --
package Kernel::Modules::CustomerTicketAttachment;
use strict;
use vars qw($VERSION);
$VERSION = '$Revision: 1.1 $';
$VERSION =~ s/^\$.*:\W(.*)\W.+?$/$1/;
# --
sub new {
my $Type = shift;
my %Param = @_;
# allocate new hash for object
my $Self = {};
bless ($Self, $Type);
foreach (keys %Param) {
$Self->{$_} = $Param{$_};
}
# check needed Opjects
foreach (qw(ParamObject DBObject TicketObject LayoutObject LogObject ConfigObject UserObject)) {
if (!$Self->{$_}) {
$Self->{LayoutObject}->FatalError(Message => "Got no $_!");
}
}
# get ArticleID
$Self->{ArticleID} = $Self->{ParamObject}->GetParam(Param => 'ArticleID');
$Self->{FileID} = $Self->{ParamObject}->GetParam(Param => 'FileID');
return $Self;
}
# --
sub Run {
my $Self = shift;
my %Param = @_;
my $Output = '';
# check params
if (!$Self->{FileID} || !$Self->{ArticleID}) {
$Output .= $Self->{LayoutObject}->CustomerHeader(Title => 'Error');
$Output .= $Self->{LayoutObject}->CustomerError(
Message => 'FileID and ArticleID are needed!',
Comment => 'Please contact your admin'
);
$Self->{LogObject}->Log(
Message => 'FileID and ArticleID are needed!',
Priority => 'error',
);
$Output .= $Self->{LayoutObject}->CustomerFooter();
return $Output;
}
# check permissions
my %ArticleData = $Self->{TicketObject}->ArticleGet(ArticleID => $Self->{ArticleID});
if (!$ArticleData{TicketID}) {
$Output .= $Self->{LayoutObject}->CustomerHeader(Title => 'Error');
$Output .= $Self->{LayoutObject}->CustomerError(
Message => "No TicketID for ArticleID ($Self->{ArticleID})!",
Comment => 'Please contact your admin'
);
$Self->{LogObject}->Log(
Message => "No TicketID for ArticleID ($Self->{ArticleID})!",
Priority => 'error',
);
$Output .= $Self->{LayoutObject}->CustomerFooter();
return $Output;
}
# check permission
if (!$Self->{TicketObject}->CustomerPermission(
Type => 'ro',
TicketID => $ArticleData{TicketID},
UserID => $Self->{UserID})) {
# error screen, don't show ticket
return $Self->{LayoutObject}->CustomerNoPermission(WithHeader => 'yes');
}
# geta attachment
if (my %Data = $Self->{TicketObject}->ArticleAttachment(
ArticleID => $Self->{ArticleID},
FileID => $Self->{FileID},
)) {
return $Self->{LayoutObject}->Attachment(%Data);
}
else {
$Output .= $Self->{LayoutObject}->CustomerHeader(Title => 'Error');
$Output .= $Self->{LayoutObject}->CustomerError(
Message => "No such attacment ($Self->{FileID})!",
Comment => 'Please contact your admin'
);
$Self->{LogObject}->Log(
Message => "No such attacment ($Self->{FileID})! May be an attack!!!",
Priority => 'error',
);
$Output .= $Self->{LayoutObject}->CustomerFooter();
return $Output;
}
}
# --
1;
|
