<?php /** * eGgroupWare admin - admin command: edit/add a user * * @link http://www.egroupware.org * @author Ralf Becker <RalfBecker-AT-outdoor-training.de> * @package admin * @copyright (c) 2007-10 by Ralf Becker <RalfBecker-AT-outdoor-training.de> * @license http://opensource.org/licenses/gpl-license.php GPL - GNU General Public License * @version $Id$ */ /** * admin command: edit/add a user */ class admin_cmd_edit_user extends admin_cmd_change_pw { /** * Constructor * * @param string/int/array $account account name or id (!$account to add a new account), or array with all parameters * @param array $set=null array with all data to change * @param string $password=null password * @param boolean $run_addaccount_hook=null default run addaccount for new accounts and editaccount for existing ones */ function __construct($account,$set=null,$password=null,$run_addaccount_hook=null) { if (!is_array($account)) { $account = array( 'account' => $account, 'set' => $set, 'password' => is_null($password) ? $set['account_passwd'] : $password, 'run_addaccount_hook' => $run_addaccount_hook, ); } admin_cmd::__construct($account); } /** * change the password of a given user * * @param boolean $check_only=false only run the checks (and throw the exceptions), but not the command itself * @return string success message * @throws egw_exception_no_admin * @throws egw_exception_wrong_userinput(lang("Unknown account: %1 !!!",$this->account),15); * @throws egw_exception_wrong_userinput(lang('Error changing the password for %1 !!!',$this->account),99); */ protected function exec($check_only=false) { // check creator is still admin and not explicitly forbidden to edit accounts/groups if ($this->creator) $this->_check_admin('account_access',$this->account ? 16 : 4); admin_cmd::_instanciate_accounts(); $data = $this->set; $data['account_type'] = 'u'; if ($this->account) // existing account { $data['account_id'] = admin_cmd::parse_account($this->account); $data['old_loginid'] = admin_cmd::$accounts->id2name($data['account_id']); } if (!$data['account_lid'] && (!$this->account || !is_null($data['account_lid']))) { throw new egw_exception_wrong_userinput(lang('You must enter a loginid'),9); } // Check if an account already exists as system user, and if it does deny creation if ($GLOBALS['egw_info']['server']['account_repository'] == 'ldap' && !$GLOBALS['egw_info']['server']['ldap_allow_systemusernames'] && function_exists('posix_getpwnam') && posix_getpwnam($data['account_lid'])) { throw new egw_exception_wrong_userinput(lang('There already is a system-user with this name. User\'s should not have the same name as a systemuser'),99); } if (!$data['account_lastname'] && (!$this->account || !is_null($data['account_lastname']))) { throw new egw_exception_wrong_userinput(lang('You must enter a lastname'),9); } if (!is_null($data['account_lid']) && ($id = admin_cmd::$accounts->name2id($data['account_lid'],'account_lid','u')) && $id !== $data['account_id']) { throw new egw_exception_wrong_userinput(lang('That loginid has already been taken'),999); } if (isset($data['account_passwd_2']) && $data['account_passwd'] != $data['account_passwd_2']) { throw new egw_exception_wrong_userinput(lang('The two passwords are not the same'),0); } $data['account_expires'] = $expires = self::_parse_expired($data['account_expires'],(boolean)$this->account); $data['account_status'] = is_null($expires) ? null : ($expires == -1 || $expires > time() ? 'A' : ''); $data['changepassword'] = admin_cmd::parse_boolean($data['changepassword'],$this->account ? null : true); $data['anonymous'] = admin_cmd::parse_boolean($data['anonymous'],$this->account ? null : false); if ($data['mustchangepassword'] && $data['changepassword']) { $data['account_lastpwd_change']=0; } if (!$data['account_primary_group'] && $this->account) { $data['account_primary_group'] = null; // dont change } else { if (!$data['account_primary_group'] && admin_cmd::$accounts->exists('Default') == 2) { $data['account_primary_group'] = 'Default'; } $data['account_primary_group'] = admin_cmd::parse_account($data['account_primary_group'],false); } if (!$data['account_groups'] && $this->account) { $data['account_groups'] = null; // dont change } else { if (!$data['account_groups'] && admin_cmd::$accounts->exists('Default') == 2) { $data['account_groups'] = array('Default'); } $data['account_groups'] = admin_cmd::parse_accounts($data['account_groups'],false); } if ($check_only) return true; if ($this->account) { if (!($old = admin_cmd::$accounts->read($data['account_id']))) { throw new egw_exception_wrong_userinput(lang("Unknown account: %1 !!!",$this->account),15); } // as the current account class always sets all values, we have to add the not specified ones foreach($data as $name => &$value) { if (is_null($value)) $value = $old[$name]; } } if (!($data['account_id'] = admin_cmd::$accounts->save($data))) { //_debug_array($data); throw new egw_exception_db(lang("Error saving account!"),11); } if ($data['account_groups']) { admin_cmd::$accounts->set_memberships($data['account_groups'],$data['account_id']); } if (!is_null($data['anonymous'])) { admin_cmd::_instanciate_acl(); if ($data['anonymous']) { admin_cmd::$acl->add_repository('phpgwapi','anonymous',$data['account_id'],1); } else { admin_cmd::$acl->delete_repository('phpgwapi','anonymous',$data['account_id']); } } if (!is_null($data['changepassword'])) { if (!$data['changepassword']) { admin_cmd::$acl->add_repository('preferences','nopasswordchange',$data['account_id'],1); } else { admin_cmd::$acl->delete_repository('preferences','nopasswordchange',$data['account_id']); } } // for existing accounts we have to change the password explicitly (at least that's what the old UI does) if($this->account && !is_null($this->password)) { admin_cmd_change_pw::exec(); // calling the exec method of the admin_cmd_change_pw } $data['account_passwd'] = $this->password; $GLOBALS['hook_values'] =& $data; $GLOBALS['egw']->hooks->process($GLOBALS['hook_values']+array( 'location' => $this->account && $this->run_addaccount_hook !== true ? 'editaccount' : 'addaccount' ),False,True); // called for every app now, not only enabled ones) return lang("Account %1 %2",$this->account ? $this->account : $data['account_lid'], $this->account ? lang('updated') : lang("created with id #%1",$data['account_id'])); } /** * Return a title / string representation for a given command, eg. to display it * * @return string */ function __tostring() { return lang('%1 user %2',$this->account ? lang('Edit') : lang('Add'), admin_cmd::display_account($this->account ? $this->account : $this->set['account_lid'])); } /** * parse the expired string and return the expired date as timestamp * * @param string $str date, 'never', 'already' or '' (=dont change, or default of never of new accounts) * @param boolean $exists * @return int timestamp, 0 for already, -1 for never or null for dont change * @throws egw_exception_wrong_userinput(lang('Invalid formated date "%1"!',$datein),6); */ private function _parse_expired($str,$existing) { switch($str) { case '': if ($existing) return null; // fall through --> default for new accounts is never case 'never': return -1; case 'already': return 0; } return admin_cmd::parse_date($str); } }