mirror of
https://git.code.sf.net/p/seeddms/code
synced 2024-11-26 15:32:13 +00:00
288 lines
9.4 KiB
PHP
288 lines
9.4 KiB
PHP
<?php
|
||
/**
|
||
* Implementation of access restricitions
|
||
*
|
||
* @category DMS
|
||
* @package SeedDMS
|
||
* @license GPL 2
|
||
* @version @version@
|
||
* @author Uwe Steinmann <uwe@steinmann.cx>
|
||
* @copyright Copyright (C) 2010-2012 Uwe Steinmann
|
||
* @version Release: @package_version@
|
||
*/
|
||
|
||
/**
|
||
* Class to check certain access restrictions
|
||
*
|
||
* @category DMS
|
||
* @package SeedDMS
|
||
* @author Uwe Steinmann <uwe@steinmann.cx>
|
||
* @copyright Copyright (C) 2010-2012 Uwe Steinmann
|
||
* @version Release: @package_version@
|
||
*/
|
||
class SeedDMS_AccessOperation {
|
||
/**
|
||
* @var object $obj object being accessed
|
||
* @access protected
|
||
*/
|
||
private $obj;
|
||
|
||
/**
|
||
* @var object $user user requesting the access
|
||
* @access protected
|
||
*/
|
||
private $user;
|
||
|
||
/**
|
||
* @var object $settings SeedDMS Settings
|
||
* @access protected
|
||
*/
|
||
private $settings;
|
||
|
||
function __construct($obj, $user, $settings) { /* {{{ */
|
||
$this->obj = $obj;
|
||
$this->user = $user;
|
||
$this->settings = $settings;
|
||
} /* }}} */
|
||
|
||
/**
|
||
* Check if removal of version is allowed
|
||
*
|
||
* This check can only be done for documents. Removal of versions is
|
||
* only allowed if this is turned on in the settings and there are
|
||
* at least 2 versions avaiable. Everybody with write access on the
|
||
* document may delete versions. The admin may even delete a version
|
||
* even if is disallowed in the settings.
|
||
*/
|
||
function mayRemoveVersion() { /* {{{ */
|
||
if(get_class($this->obj) == 'SeedDMS_Core_Document') {
|
||
$versions = $this->obj->getContent();
|
||
if ((($this->settings->_enableVersionDeletion && ($this->obj->getAccessMode($this->user) == M_ALL)) || $this->user->isAdmin() ) && (count($versions) > 1)) {
|
||
return true;
|
||
}
|
||
}
|
||
return false;
|
||
} /* }}} */
|
||
|
||
/**
|
||
* Check if document status may be overwritten
|
||
*
|
||
* This check can only be done for documents. Overwriting the document
|
||
* status is
|
||
* only allowed if this is turned on in the settings and the current
|
||
* status is either 'releaѕed' or 'obsoleted'.
|
||
* The admin may even modify the status
|
||
* even if is disallowed in the settings.
|
||
*/
|
||
function mayOverrideStatus() { /* {{{ */
|
||
if(get_class($this->obj) == 'SeedDMS_Core_Document') {
|
||
$latestContent = $this->obj->getLatestContent();
|
||
$status = $latestContent->getStatus();
|
||
if ((($this->settings->_enableVersionModification && ($this->obj->getAccessMode($this->user) == M_ALL)) || $this->user->isAdmin()) && ($status["status"]==S_DRAFT || $status["status"]==S_RELEASED || $status["status"]==S_OBSOLETE)) {
|
||
return true;
|
||
}
|
||
}
|
||
return false;
|
||
} /* }}} */
|
||
|
||
/**
|
||
* Check if reviewers/approvers may be edited
|
||
*
|
||
* This check can only be done for documents. Overwriting the document
|
||
* reviewers/approvers is only allowed if version modification is turned on
|
||
* in the settings and the document is in 'draft review' status. The
|
||
* admin may even set reviewers/approvers if is disallowed in the
|
||
* settings.
|
||
*/
|
||
function maySetReviewersApprovers() { /* {{{ */
|
||
if(get_class($this->obj) == 'SeedDMS_Core_Document') {
|
||
$latestContent = $this->obj->getLatestContent();
|
||
$status = $latestContent->getStatus();
|
||
if ((($this->settings->_enableVersionModification && ($this->obj->getAccessMode($this->user) == M_ALL)) || $this->user->isAdmin()) && ($status["status"]==S_DRAFT_REV || $status["status"]==S_DRAFT_APP && $this->settings->_workflowMode == 'traditional_only_approval')) {
|
||
return true;
|
||
}
|
||
}
|
||
return false;
|
||
} /* }}} */
|
||
|
||
/**
|
||
* Check if recipients may be edited
|
||
*
|
||
* This check can only be done for documents. Setting the document
|
||
* recipients is only allowed if version modification is turned on
|
||
* in the settings. The
|
||
* admin may even set recipients if is disallowed in the
|
||
* settings.
|
||
*/
|
||
function maySetRecipients() { /* {{{ */
|
||
if(get_class($this->obj) == 'SeedDMS_Core_Document') {
|
||
$latestContent = $this->obj->getLatestContent();
|
||
$status = $latestContent->getStatus();
|
||
if ((($this->settings->_enableVersionModification && ($this->obj->getAccessMode($this->user) == M_ALL)) || $this->user->isAdmin()) && ($status["status"]==S_RELEASED)) {
|
||
return true;
|
||
}
|
||
}
|
||
return false;
|
||
} /* }}} */
|
||
|
||
/**
|
||
* Check if revisors may be edited
|
||
*
|
||
* This check can only be done for documents. Setting the document
|
||
* revisors is only allowed if version modification is turned on
|
||
* in the settings. The
|
||
* admin may even set revisors if is disallowed in the
|
||
* settings.
|
||
*/
|
||
function maySetRevisors() { /* {{{ */
|
||
if(get_class($this->obj) == 'SeedDMS_Core_Document') {
|
||
$latestContent = $this->obj->getLatestContent();
|
||
$status = $latestContent->getStatus();
|
||
if ((($this->settings->_enableVersionModification && ($this->obj->getAccessMode($this->user) == M_ALL)) || $this->user->isAdmin()) && ($status["status"]==S_RELEASED || $status["status"]==S_IN_REVISION)) {
|
||
return true;
|
||
}
|
||
}
|
||
return false;
|
||
} /* }}} */
|
||
|
||
/**
|
||
* Check if workflow may be edited
|
||
*
|
||
* This check can only be done for documents. Overwriting the document
|
||
* workflow is only allowed if version modification is turned on
|
||
* in the settings and the document is in it's initial status. The
|
||
* admin may even set the workflow if is disallowed in the
|
||
* settings.
|
||
*/
|
||
function maySetWorkflow() { /* {{{ */
|
||
if(get_class($this->obj) == 'SeedDMS_Core_Document') {
|
||
$latestContent = $this->obj->getLatestContent();
|
||
$workflow = $latestContent->getWorkflow();
|
||
if ((($this->settings->_enableVersionModification && ($this->obj->getAccessMode($this->user) == M_ALL)) || $this->user->isAdmin()) && (!$workflow || ($workflow->getInitState()->getID() == $latestContent->getWorkflowState()->getID()))) {
|
||
return true;
|
||
}
|
||
}
|
||
return false;
|
||
} /* }}} */
|
||
|
||
/**
|
||
* Check if expiration date may be set
|
||
*
|
||
* This check can only be done for documents. Setting the documents
|
||
* expiration date is only allowed if the document has not been obsoleted.
|
||
*/
|
||
function maySetExpires() { /* {{{ */
|
||
if(get_class($this->obj) == 'SeedDMS_Core_Document') {
|
||
$latestContent = $this->obj->getLatestContent();
|
||
$status = $latestContent->getStatus();
|
||
if ((($this->obj->getAccessMode($this->user) == M_ALL) || $this->user->isAdmin()) && ($status["status"]!=S_OBSOLETE)) {
|
||
return true;
|
||
}
|
||
}
|
||
return false;
|
||
} /* }}} */
|
||
|
||
/**
|
||
* Check if comment may be edited
|
||
*
|
||
* This check can only be done for documents. Setting the documents
|
||
* comment date is only allowed if version modification is turned on in
|
||
* the settings and the document has not been obsoleted.
|
||
* The admin may set the comment even if is
|
||
* disallowed in the settings.
|
||
*/
|
||
function mayEditComment() { /* {{{ */
|
||
if(get_class($this->obj) == 'SeedDMS_Core_Document') {
|
||
if($this->obj->isLocked()) {
|
||
$lockingUser = $this->obj->getLockingUser();
|
||
if (($lockingUser->getID() != $this->user->getID()) && ($this->obj->getAccessMode($this->user) != M_ALL)) {
|
||
return false;
|
||
}
|
||
}
|
||
$latestContent = $this->obj->getLatestContent();
|
||
$status = $latestContent->getStatus();
|
||
if ((($this->settings->_enableVersionModification && ($this->obj->getAccessMode($this->user) >= M_READWRITE)) || $this->user->isAdmin()) && ($status["status"]!=S_OBSOLETE)) {
|
||
return true;
|
||
}
|
||
}
|
||
return false;
|
||
} /* }}} */
|
||
|
||
/**
|
||
* Check if attributes may be edited
|
||
*
|
||
* Setting the object attributes
|
||
* is only allowed if version modification is turned on in
|
||
* the settings and the document has not been obsoleted.
|
||
* The admin may set the comment even if is
|
||
* disallowed in the settings.
|
||
*/
|
||
function mayEditAttributes() { /* {{{ */
|
||
if(get_class($this->obj) == 'SeedDMS_Core_Document') {
|
||
$latestContent = $this->obj->getLatestContent();
|
||
$status = $latestContent->getStatus();
|
||
$workflow = $latestContent->getWorkflow();
|
||
if ((($this->settings->_enableVersionModification && ($this->obj->getAccessMode($this->user) >= M_READWRITE)) || $this->user->isAdmin()) && ($status["status"]==S_DRAFT_REV || ($workflow && $workflow->getInitState()->getID() == $latestContent->getWorkflowState()->getID()))) {
|
||
return true;
|
||
}
|
||
}
|
||
return false;
|
||
} /* }}} */
|
||
|
||
/**
|
||
* Check if document content may be reviewed
|
||
*
|
||
* Reviewing a document content is only allowed if the document was not
|
||
* obsoleted. There are other requirements which are not taken into
|
||
* account here.
|
||
*/
|
||
function mayReview() { /* {{{ */
|
||
if(get_class($this->obj) == 'SeedDMS_Core_Document') {
|
||
$latestContent = $this->obj->getLatestContent();
|
||
$status = $latestContent->getStatus();
|
||
if ($status["status"]!=S_OBSOLETE) {
|
||
return true;
|
||
}
|
||
}
|
||
return false;
|
||
} /* }}} */
|
||
|
||
/**
|
||
* Check if document content may be approved
|
||
*
|
||
* Approving a document content is only allowed if the document was not
|
||
* obsoleted. There are other requirements which are not taken into
|
||
* account here.
|
||
*/
|
||
function mayApprove() { /* {{{ */
|
||
if(get_class($this->obj) == 'SeedDMS_Core_Document') {
|
||
$latestContent = $this->obj->getLatestContent();
|
||
$status = $latestContent->getStatus();
|
||
if ($status["status"]!=S_OBSOLETE) {
|
||
return true;
|
||
}
|
||
}
|
||
return false;
|
||
} /* }}} */
|
||
|
||
/**
|
||
* Check if document content may be revised
|
||
*
|
||
* Revising a document content is only allowed if the document was not
|
||
* obsoleted. There are other requirements which are not taken into
|
||
* account here.
|
||
*/
|
||
function mayRevise() { /* {{{ */
|
||
if(get_class($this->obj) == 'SeedDMS_Core_Document') {
|
||
$latestContent = $this->obj->getLatestContent();
|
||
$status = $latestContent->getStatus();
|
||
if ($status["status"]!=S_OBSOLETE) {
|
||
return true;
|
||
}
|
||
}
|
||
return false;
|
||
} /* }}} */
|
||
|
||
}
|
||
?>
|