seeddms-code/views/bootstrap/class.Acl.php
2016-03-04 09:36:44 +01:00

285 lines
9.3 KiB
PHP

<?php
/**
* Implementation of Acl view
*
* @category DMS
* @package SeedDMS
* @license GPL 2
* @version @version@
* @author Uwe Steinmann <uwe@steinmann.cx>
* @copyright Copyright (C) 2002-2005 Markus Westphal,
* 2006-2008 Malcolm Cowe, 2010 Matteo Lucarelli,
* 2010-2012 Uwe Steinmann
* @version Release: @package_version@
*/
/**
* Include parent class
*/
require_once("class.Bootstrap.php");
/**
* Class which outputs the html page for Acl view
*
* @category DMS
* @package SeedDMS
* @author Uwe Steinmann <uwe@steinmann.cx>
* @copyright Copyright (C) 2016 Uwe Steinmann
* @version Release: @package_version@
*/
class SeedDMS_View_Acl extends SeedDMS_Bootstrap_Style {
function js() { /* {{{ */
$selrole = $this->params['selrole'];
header('Content-Type: application/javascript');
?>
$('#acostree').tree({
autoOpen: 0,
saveState: 'acostree<?php echo ($selrole ? $selrole->getID() : ''); ?>',
openedIcon: '<i class="icon-minus-sign"></i>',
closedIcon: '<i class="icon-plus-sign"></i>',
onCreateLi: function(node, $li) {
switch(node.permission) {
case "-1":
$li.find('.jqtree-element span:last-child').after('<span style="position: absolute; right:10px;" class="jqtree-remove-permission" data-acoid="'+node.acoid+'" data-aroid="'+node.aroid+'"><i class="icon-minus-sign"></i></span> <span style="position: absolute; right:50px;" class="jqtree-toggle-permission" data-acoid="'+node.acoid+'" data-aroid="'+node.aroid+'"><i class="icon-exchange"></i></span>');
$li.attr('style', 'background-color:#FDD');
break;
case "1":
$li.find('.jqtree-element span:last-child').after('<span style="position: absolute; right:10px;" class="jqtree-remove-permission" data-acoid="'+node.acoid+'" data-aroid="'+node.aroid+'"><i class="icon-minus-sign"></i></span> <span style="position: absolute; right:50px;" class="jqtree-toggle-permission" data-acoid="'+node.acoid+'" data-aroid="'+node.aroid+'"><i class="icon-exchange"></i></span>');
$li.attr('style', 'background-color:#DFD');
break;
default:
$li.find('.jqtree-element span:last-child').after('<span style="position: absolute; right:10px;" class="jqtree-add-permission" data-acoid="'+node.acoid+'" data-aroid="'+node.aroid+'"><i class="icon-plus-sign"></i></span>');
}
}
});
$('#acostree').on('click', '.jqtree-toggle-permission', function(event) {
acoid = $(event.target).parent().attr('data-acoid');
aroid = $(event.target).parent().attr('data-aroid');
$.ajax('../op/op.Acl.php?action=toggle_permission&acoid='+acoid+'&aroid='+aroid, {
dataType: 'json',
success: function(data, textStatus) {
if(data.type == 'success') {
timeout = 1500;
$('#acostree').tree('loadDataFromUrl');
} else {
timeout = 3500;
}
noty({text: data.msg, type: data.type, dismissQueue: true, layout: 'topRight', theme: 'defaultTheme', timeout: timeout});
},
});
});
$('#acostree').on('click', '.jqtree-add-permission', function(event) {
acoid = $(event.target).parent().attr('data-acoid');
aroid = $(event.target).parent().attr('data-aroid');
$.ajax('../op/op.Acl.php?action=add_permission&acoid='+acoid+'&aroid='+aroid, {
dataType: 'json',
success: function(data, textStatus) {
if(data.type == 'success') {
timeout = 1500;
$('#acostree').tree('loadDataFromUrl');
} else {
timeout = 3500;
}
noty({text: data.msg, type: data.type, dismissQueue: true, layout: 'topRight', theme: 'defaultTheme', timeout: timeout});
},
});
});
$('#acostree').on('click', '.jqtree-remove-permission', function(event) {
acoid = $(event.currentTarget).attr('data-acoid');
aroid = $(event.currentTarget).attr('data-aroid');
$.ajax('../op/op.Acl.php?action=remove_permission&acoid='+acoid+'&aroid='+aroid, {
dataType: 'json',
success: function(data, textStatus) {
if(data.type == 'success') {
timeout = 1500;
$('#acostree').tree('loadDataFromUrl');
} else {
timeout = 3500;
}
noty({text: data.msg, type: data.type, dismissQueue: true, layout: 'topRight', theme: 'defaultTheme', timeout: timeout});
},
});
});
$('#add_aro').on('click', function(event) {
roleid = $(event.currentTarget).attr('data-roleid');
$.ajax('../op/op.Acl.php?action=add_aro&roleid='+roleid, {
dataType: 'json',
success: function(data, textStatus) {
if(data.type == 'success') {
timeout = 1500;
window.location='out.Acl.php?action=show&roleid=' + roleid;
} else {
timeout = 3500;
}
noty({text: data.msg, type: data.type, dismissQueue: true, layout: 'topRight', theme: 'defaultTheme', timeout: timeout});
},
});
});
$(document).ready( function() {
$( "#selector" ).change(function() {
window.location='out.Acl.php?action=show&roleid=' + $(this).val();
// $('#acostree').tree({dataUrl: 'out.Acl.php?action=tree&roleid=' + $(this).val()});
});
});
<?php
} /* }}} */
function info() { /* {{{ */
$dms = $this->params['dms'];
$user = $this->params['user'];
$selrole = $this->params['selrole'];
if($selrole) {
$this->contentHeading(getMLText("role_info"));
$users = $selrole->getUsers();
if($users) {
echo "<table class=\"table table-condensed\"><thead><tr><th>".getMLText('name')."</th><th></th></tr></thead><tbody>";
foreach($users as $currUser) {
echo "<tr>";
echo "<td>";
echo htmlspecialchars($currUser->getFullName())." (".htmlspecialchars($currUser->getLogin()).")";
echo "<br /><a href=\"mailto:".$currUser->getEmail()."\">".htmlspecialchars($currUser->getEmail())."</a>";
if($currUser->getComment())
echo "<br /><small>".htmlspecialchars($currUser->getComment())."</small>";
echo "</td>";
echo "<td>";
if($this->check_access(array('UsrMgr', 'RemoveUser'))) {
echo "<div class=\"list-action\">";
if($this->check_access('UsrMgr'))
echo "<a href=\"../out/out.UsrMgr.php?userid=".$currUser->getID()."\"><i class=\"icon-edit\"></i></a> ";
if($this->check_access('RemoveUser'))
echo "<a href=\"../out/out.RemoveUser.php?userid=".$currUser->getID()."\"><i class=\"icon-remove\"></i></a>";
echo "</div>";
}
echo "</td>";
echo "</tr>";
}
echo "</tbody></table>";
}
}
} /* }}} */
/**
* Show tree of acos
*
*/
private function _tree($aro=null, $aco=null) { /* {{{ */
$children = array();
$tchildren = $aco->getChildren();
if($tchildren) {
foreach($tchildren as $child) {
$node = array();
if(false === ($perm = $child->getPermission($aro)))
$node['permission'] = 0;
else
$node['permission'] = $perm;
$node['id'] = $child->getID();
$node['label'] = $child->getAlias();
$node['acoid'] = $child->getID();
$node['aroid'] = $aro ? $aro->getID() : 0;
$nchildren = $this->_tree($aro, $child);
if($nchildren) {
$node['is_folder'] = true;
$node['children'] = $nchildren;
}
$children[] = $node;
}
}
return $children;
} /* }}} */
/**
* List all registered hooks
*
*/
public function tree() { /* {{{ */
$dms = $this->params['dms'];
$selrole = $this->params['selrole'];
$result = array();
if($selrole) {
$aro = SeedDMS_Aro::getInstance($selrole, $dms);
$acos = SeedDMS_Aco::getRoot($dms);
foreach($acos as $aco) {
if(false === ($perm = $aco->getPermission($aro)))
$tree['permission'] = 0;
else
$tree['permission'] = $perm;
$tree['id'] = $aco->getID();
$tree['label'] = $aco->getAlias();
$tree['acoid'] = $aco->getID();
$tree['aroid'] = $aro ? $aro->getID() : 0;
$tree['is_folder'] = true;
$tree['children'] = $this->_tree($aro, $aco);
$result[] = $tree;
}
}
echo json_encode($result);
} /* }}} */
public function show() { /* {{{ */
$dms = $this->params['dms'];
$user = $this->params['user'];
$roles = $this->params['allroles'];
$selrole = $this->params['selrole'];
$settings = $this->params['settings'];
$accessop = $this->params['accessobject'];
$this->htmlStartPage(getMLText("admin_tools"));
$this->globalNavigation();
$this->contentStart();
$this->pageNavigation(getMLText("admin_tools"), "admin_tools");
if(!$settings->_advancedAcl) {
$this->warningMsg(getMLText("access_control_is_off"));
}
?>
<div class="row-fluid">
<div class="span4">
<?php
$this->contentHeading(getMLText("role"));
?>
<div class="well">
<select class="chzn-select" id="selector">
<option value="-1"><?php echo getMLText("choose_role")?>
<?php
foreach ($roles as $currRole) {
print "<option value=\"".$currRole->getID()."\" ".($selrole && $currRole->getID()==$selrole->getID() ? 'selected' : '').">" . htmlspecialchars($currRole->getName());
}
?>
</select>
</div>
<?php if($accessop->check_view_access($this, array('action'=>'info')) || $user->isAdmin()) { ?>
<div class="ajax" data-view="Acl" data-action="info" <?php echo ($selrole ? "data-query=\"roleid=".$selrole->getID()."\"" : "") ?>></div>
<?php } ?>
</div>
<div class="span8">
<?php
$this->contentHeading(getMLText("access_control"));
$aro = SeedDMS_Aro::getInstance($selrole, $dms);
if(!$aro) {
$this->warningMsg(getMLText("missing_request_object"));
echo "<button id=\"add_aro\" class=\"btn btn-primary\" data-roleid=\"".$selrole->getID()."\">".getMLText('add')."</button>";
} else {
?>
<div id="acostree" data-url="out.Acl.php?action=tree&roleid=<?= ($selrole ? $selrole->getID() : 0) ?>">Berechtigungen werden geladen ...</div>
<?php
}
?>
</div>
</div>
<?php
$this->htmlEndPage();
} /* }}} */
}