$folder->getName())),getMLText("invalid_request_token")); } if (!isset($_POST["folderid"]) || !is_numeric($_POST["folderid"]) || intval($_POST["folderid"])<1) { UI::exitError(getMLText("folder_title", array("foldername" => getMLText("invalid_folder_id"))),getMLText("invalid_folder_id")); } $folderid = $_POST["folderid"]; $folder = $dms->getFolder($folderid); if (!is_object($folder)) { UI::exitError(getMLText("folder_title", array("foldername" => getMLText("invalid_folder_id"))),getMLText("invalid_folder_id")); } if (!isset($_POST["action"]) || (strcasecmp($_POST["action"], "delattributegroup") && strcasecmp($_POST["action"], "addattributegroup"))) { UI::exitError(getMLText("folder_title", array("foldername" => $folder->getName())),getMLText("invalid_action")); } $action = $_POST["action"]; if (isset($_POST["groupid"]) && (!is_numeric($_POST["groupid"]) || $_POST["groupid"]<-1)) { UI::exitError(getMLText("folder_title", array("foldername" => $folder->getName())),getMLText("unknown_group")); } $groupid = isset($_POST["groupid"]) ? $_POST["groupid"] : -1; if (isset($_POST["groupid"])&&$_POST["groupid"]!=-1){ $group=$dms->getAttributeDefinitionGroup($groupid); if (!$user->isAdmin()) UI::exitError(getMLText("folder_title", array("foldername" => $folder->getName())),getMLText("access_denied")); } $folderPathHTML = getFolderPathHTML($folder, true); if ($folder->getAccessMode($user) < M_READ) { UI::exitError(getMLText("folder_title", array("foldername" => $folder->getName())),getMLText("access_denied")); } // Delete notification ------------------------------------------------------- if ($action == "delattributegroup") { if ($groupid > 0) { $res = $folder->removeAttributeDefinitionGroup($group); $obj = $dms->getGroup($groupid); } switch ($res) { case -1: UI::exitError(getMLText("folder_title", array("foldername" => $folder->getName())),isset($userid) ? getMLText("unknown_user") : getMLText("unknown_group")); break; case -2: UI::exitError(getMLText("folder_title", array("foldername" => $folder->getName())),getMLText("access_denied")); break; case -3: UI::exitError(getMLText("folder_title", array("foldername" => $folder->getName())),getMLText("already_subscribed")); break; case -4: UI::exitError(getMLText("folder_title", array("foldername" => $folder->getName())),getMLText("internal_error")); break; case 0: break; } } // Add notification ---------------------------------------------------------- else if ($action == "addattributegroup") { if ($groupid != -1) { $res = $folder->addAttributeDefinitionGroup($group, false); switch ($res) { case -1: UI::exitError(getMLText("folder_title", array("foldername" => $folder->getName())),getMLText("unknown_group")); break; case -2: UI::exitError(getMLText("folder_title", array("foldername" => $folder->getName())),getMLText("access_denied")); break; case -3: UI::exitError(getMLText("folder_title", array("foldername" => $folder->getName())),getMLText("already_subscribed")); break; case -4: UI::exitError(getMLText("folder_title", array("foldername" => $folder->getName())),getMLText("internal_error")); break; case 0: break; } } } header("Location:../out/out.FolderAttributeGroup.php?folderid=".$folderid); ?>