diff --git a/resources/inc/class.bo_acl.inc.php b/resources/inc/class.bo_acl.inc.php new file mode 100755 index 0000000000..504128fc67 --- /dev/null +++ b/resources/inc/class.bo_acl.inc.php @@ -0,0 +1,266 @@ +egw_cats = new categories('','resources'); + $this->debug = False; + + //all this is only needed when called from uiacl. + if($session) + { + $this->read_sessiondata(); + $this->use_session = True; + foreach(array('start','query','sort','order') as $var) + { + if (isset($_POST[$var])) + { + $this->$var = $_POST[$var]; + } + elseif (isset($_GET[$var])) + { + $this->$var = $_GET[$var]; + } + } + $this->save_sessiondata(); + $this->cats = $this->egw_cats->return_sorted_array(0,false,'','','',true); + } + } + + /** + * PHP4 constructor + * + * @param boolean $session + * @deprecated use __construct() + * @return bo_acl + */ + function bo_acl($session=False) + { + self::__construct($session); + } + + /** + * get list of cats where current user has given rights + * + * @author Cornelius Weiss + * @param int $perm_type one of EGW_ACL_READ, EGW_ACL_ADD, EGW_ACL_EDIT, EGW_ACL_DELETE, EGW_ACL_DIRECT_BOOKING + * @param int $parent_id=0 cat_id of parent to return only children of that category + * @return array cat_id => cat_name + * TODO mark subcats and so on! + */ + function get_cats($perm_type,$parent_id=0) + { + $cats = $this->egw_cats->return_sorted_array(0,false,'','','',true,$parent_id); + #_debug_array($cats); + if (!is_array($cats)) $cats = array(); + foreach($cats as $key=>$cat) { + #echo "key:$key"._debug_array($value)."
"; + #_debug_array($cat)."hier
"; + if($this->is_permitted($cat['id'],$perm_type)) + { + $s = str_repeat('  ',$cat['level']) . stripslashes($cat['name']); + if ($cat['app_name'] == 'phpgw' || $cat['owner'] == '-1') + { + $s .= ' ♦'; + } + $perm_cats[$cat['id']] = $s; + } + } + return isset($perm_cats)?$perm_cats:array(); + } + + + /** + * gets name of category + * + * @author Lukas Weiss + * @param int $cat_id + * @return mixed name of category + */ + static public function get_cat_name($cat_id) + { + return $GLOBALS['egw']->categories->id2name($cat_id); + } + + /** + * gets userid of admin for given category + * + * @author Cornelius Weiss + * @param int $cat_id + * @return int userid of cat admin + */ + static public function get_cat_admin($cat_id) + { + $cat_rights = self::get_rights($cat_id); + foreach ($cat_rights as $userid => $right) + { + if ($right & EGW_ACL_CAT_ADMIN) + { + return $userid; + } + } + // check for an inherited cat admin + if (($parent = $GLOBALS['egw']->categories->id2name($cat_id,'parent'))) + { + return self::get_cat_admin($parent); + } + return lang('none'); + } + + /** + * Permissions including inherited ones + * + * @var array cat_id => rights + */ + static private $permissions; + static private $resource_acl; + + /** + * Get permissions of current user on a given category + * + * @param int $cat_id + * @return int + */ + static public function get_permissions($cat_id) + { + if (!isset(self::$permissions[$cat_id])) + { + if (is_null(self::$resource_acl)) + { + self::$resource_acl = $GLOBALS['egw']->acl->get_all_location_rights($GLOBALS['egw_info']['user']['account_id'],'resources',true); + } + self::$permissions[$cat_id] = (int)self::$resource_acl['L'.$cat_id]; + if (($parent = $GLOBALS['egw']->categories->id2name($cat_id,'parent'))) + { + self::$permissions[$cat_id] |= self::get_permissions($parent); + } + } + //echo "

".__METHOD__."($cat_id) = ".self::$permissions[$cat_id]."

\n"; + return self::$permissions[$cat_id]; + } + + /** + * checks one of the following rights for current user: + * + * EGW_ACL_READ, EGW_ACL_ADD, EGW_ACL_EDIT, EGW_ACL_DELETE, EGW_ACL_DIRECT_BOOKING + * + * @param int $cat_id + * @param int $right + * @return boolean user is permitted or not for right + */ + static public function is_permitted($cat_id,$right) + { + if (!isset(self::$permissions[$cat_id])) + { + self::get_permissions($cat_id); + } + //echo "

".__METHOD__."($cat_id,$right) = ".self::$permissions[$cat_id]." & $right = ".(self::$permissions[$cat_id] & $right)."

\n"; + return (boolean) (self::$permissions[$cat_id] & $right); + } + + /** + * gets all rights from all user for given cat + * + * @param int $cat_id + * @return array userid => right + */ + static public function get_rights($cat_id) + { + return $GLOBALS['egw']->acl->get_all_rights('L'.$cat_id,'resources'); + } + + + // privat functions from here on ------------------------------------------------------------------------- + function save_sessiondata() + { + $data = array( + 'start' => $this->start, + 'query' => $this->query, + 'sort' => $this->sort, + 'order' => $this->order, + 'limit' => $this->limit, + ); + if($this->debug) { echo '
Read:'; _debug_array($data); } + $GLOBALS['egw']->session->appsession('session_data','resources_acl',$data); + } + + function read_sessiondata() + { + $data = $GLOBALS['egw']->session->appsession('session_data','resources_acl'); + if($this->debug) { echo '
Read:'; _debug_array($data); } + + $this->start = $data['start']; + $this->query = $data['query']; + $this->sort = $data['sort']; + $this->order = $data['order']; + $this->limit = $data['limit']; + } + + function set_rights($cat_id,$read,$write,$calread,$calbook,$admin) + { + $readcat = $read ? $read : array(); + $writecat = $write ? $write : array(); + $calreadcat = $calread ? $calread : array(); + $calbookcat = $calbook ? $calbook : array(); + $admincat = $admin ? $admin : array(); + + $GLOBALS['egw']->acl->delete_repository('resources','L' . $cat_id,false); + + foreach($GLOBALS['egw']->accounts->get_list() as $num => $account) + { + $account_id = $account['account_id']; + $rights = false; + $rights = in_array($account_id,$readcat) ? ($rights | EGW_ACL_READ) : false; + $rights = in_array($account_id,$writecat) ? ($rights | EGW_ACL_READ | EGW_ACL_ADD | EGW_ACL_EDIT | EGW_ACL_DELETE): $rights; + $rights = in_array($account_id,$calreadcat) ? ($rights | EGW_ACL_CALREAD) : $rights; + $rights = in_array($account_id,$calbookcat) ? ($rights | EGW_ACL_DIRECT_BOOKING | EGW_ACL_CALREAD) : $rights; + $rights = in_array($account_id,$admincat) ? ($rights = 511) : $rights; + if ($rights) + { + $GLOBALS['egw']->acl->add_repository('resources','L'.$cat_id,$account_id,$rights); + } + } + } +}