1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
|
# --
# Copyright (C) 2001-2021 OTRS AG, https://otrs.com/
# --
# This software comes with ABSOLUTELY NO WARRANTY. For details, see
# the enclosed file COPYING for license information (GPL). If you
# did not receive this file, see https://www.gnu.org/licenses/gpl-3.0.txt.
# --
package Kernel::Output::HTML::TicketMenu::Generic;
use parent 'Kernel::Output::HTML::Base';
use strict;
use warnings;
our @ObjectDependencies = (
'Kernel::System::Log',
'Kernel::Config',
'Kernel::System::Ticket',
'Kernel::System::Group',
);
sub Run {
my ( $Self, %Param ) = @_;
# get log object
my $LogObject = $Kernel::OM->Get('Kernel::System::Log');
# check needed stuff
if ( !$Param{Ticket} ) {
$LogObject->Log(
Priority => 'error',
Message => 'Need Ticket!'
);
return;
}
# get config object
my $ConfigObject = $Kernel::OM->Get('Kernel::Config');
# check if frontend module registered, if not, do not show action
if ( $Param{Config}->{Action} ) {
my $Module = $ConfigObject->Get('Frontend::Module')->{ $Param{Config}->{Action} };
return if !$Module;
# get ticket object
my $TicketObject = $Kernel::OM->Get('Kernel::System::Ticket');
# check permission
my $Config = $ConfigObject->Get("Ticket::Frontend::$Param{Config}->{Action}");
if ( $Config->{Permission} ) {
my $AccessOk = $TicketObject->TicketPermission(
Type => $Config->{Permission},
TicketID => $Param{Ticket}->{TicketID},
UserID => $Self->{UserID},
LogNo => 1,
);
return if !$AccessOk;
}
if ( $Config->{RequiredLock} ) {
if (
$TicketObject->TicketLockGet( TicketID => $Param{Ticket}->{TicketID} )
)
{
my $AccessOk = $TicketObject->OwnerCheck(
TicketID => $Param{Ticket}->{TicketID},
OwnerID => $Self->{UserID},
);
return if !$AccessOk;
}
}
}
# group check
if ( $Param{Config}->{Group} ) {
my @Items = split /;/, $Param{Config}->{Group};
my $AccessOk;
ITEM:
for my $Item (@Items) {
my ( $Permission, $Name ) = $Item =~ m{^([^:]+):(.*)$};
if ( !$Permission || !$Name ) {
$LogObject->Log(
Priority => 'error',
Message => "Invalid config for Key Group: '$Item'! "
. "Need something like '\$Permission:\$Group;'",
);
}
my %Groups = $Kernel::OM->Get('Kernel::System::Group')->PermissionUserGet(
UserID => $Self->{UserID},
Type => $Permission,
);
next ITEM if !%Groups;
my %GroupsReverse = reverse %Groups;
next ITEM if !$GroupsReverse{$Name};
$AccessOk = 1;
last ITEM;
}
return if !$AccessOk;
}
# check acl
if ( $Param{Config}->{Action} ) {
my %ACLLookup = reverse( %{ $Param{ACL} || {} } );
return if ( !$ACLLookup{ $Param{Config}->{Action} } );
}
# return item
return { %{ $Param{Config} }, %{ $Param{Ticket} }, %Param };
}
1;
|
