mirror of
https://git.code.sf.net/p/seeddms/code
synced 2024-11-26 23:42:11 +00:00
1403 lines
46 KiB
PHP
1403 lines
46 KiB
PHP
<?php
|
|
define('USE_PHP_SESSION', 0);
|
|
|
|
include("../inc/inc.Settings.php");
|
|
require_once "SeedDMS/Core.php";
|
|
|
|
$db = new SeedDMS_Core_DatabaseAccess($settings->_dbDriver, $settings->_dbHostname, $settings->_dbUser, $settings->_dbPass, $settings->_dbDatabase);
|
|
$db->connect() or die ("Could not connect to db-server \"" . $settings->_dbHostname . "\"");
|
|
$dms = new SeedDMS_Core_DMS($db, $settings->_contentDir.$settings->_contentOffsetDir);
|
|
|
|
if(USE_PHP_SESSION) {
|
|
session_start();
|
|
$userobj = null;
|
|
if(isset($_SESSION['userid']))
|
|
$userobj = $dms->getUser($_SESSION['userid']);
|
|
elseif($settings->_enableGuestLogin)
|
|
$userobj = $dms->getUser($settings->_guestID);
|
|
else
|
|
exit;
|
|
$dms->setUser($userobj);
|
|
} else {
|
|
require_once("../inc/inc.ClassSession.php");
|
|
$session = new SeedDMS_Session($db);
|
|
if (isset($_COOKIE["mydms_session"])) {
|
|
$dms_session = $_COOKIE["mydms_session"];
|
|
if(!$resArr = $session->load($dms_session)) {
|
|
/* Delete Cookie */
|
|
setcookie("mydms_session", $dms_session, time()-3600, $settings->_httpRoot);
|
|
if($settings->_enableGuestLogin)
|
|
$userobj = $dms->getUser($settings->_guestID);
|
|
else
|
|
exit;
|
|
}
|
|
|
|
/* Load user data */
|
|
$userobj = $dms->getUser($resArr["userID"]);
|
|
if (!is_object($userobj)) {
|
|
/* Delete Cookie */
|
|
setcookie("mydms_session", $dms_session, time()-3600, $settings->_httpRoot);
|
|
if($settings->_enableGuestLogin)
|
|
$userobj = $dms->getUser($settings->_guestID);
|
|
else
|
|
exit;
|
|
}
|
|
if($userobj->isAdmin()) {
|
|
if($resArr["su"]) {
|
|
$userobj = $dms->getUser($resArr["su"]);
|
|
}
|
|
}
|
|
$dms->setUser($userobj);
|
|
}
|
|
}
|
|
|
|
|
|
require 'Slim/Slim.php';
|
|
\Slim\Slim::registerAutoloader();
|
|
|
|
function doLogin() { /* {{{ */
|
|
global $app, $dms, $userobj, $session, $settings;
|
|
|
|
$username = $app->request()->post('user');
|
|
$password = $app->request()->post('pass');
|
|
|
|
$userobj = $dms->getUserByLogin($username);
|
|
if(!$userobj || md5($password) != $userobj->getPwd()) {
|
|
if(USE_PHP_SESSION) {
|
|
unset($_SESSION['userid']);
|
|
} else {
|
|
setcookie("mydms_session", $session->getId(), time()-3600, $settings->_httpRoot);
|
|
}
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'Login failed', 'data'=>''));
|
|
} else {
|
|
if(USE_PHP_SESSION) {
|
|
$_SESSION['userid'] = $userobj->getId();
|
|
} else {
|
|
if(!$id = $session->create(array('userid'=>$userobj->getId(), 'theme'=>$userobj->getTheme(), 'lang'=>$userobj->getLanguage()))) {
|
|
exit;
|
|
}
|
|
|
|
// Set the session cookie.
|
|
if($settings->_cookieLifetime)
|
|
$lifetime = time() + intval($settings->_cookieLifetime);
|
|
else
|
|
$lifetime = 0;
|
|
setcookie("mydms_session", $id, $lifetime, $settings->_httpRoot);
|
|
$dms->setUser($userobj);
|
|
}
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$userobj->getId()));
|
|
}
|
|
} /* }}} */
|
|
|
|
function doLogout() { /* {{{ */
|
|
global $app, $dms, $userobj, $session, $settings;
|
|
|
|
if(USE_PHP_SESSION) {
|
|
unset($_SESSION['userid']);
|
|
} else {
|
|
setcookie("mydms_session", $session->getId(), time()-3600, $settings->_httpRoot);
|
|
}
|
|
$userobj = null;
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>''));
|
|
} /* }}} */
|
|
|
|
function setFullName() { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
|
|
if(!$userobj) {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'Not logged in', 'data'=>''));
|
|
}
|
|
$userobj->setFullName($app->request()->put('fullname'));
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$userobj->getFullName()));
|
|
} /* }}} */
|
|
|
|
function setEmail($id) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
|
|
if(!$userobj) {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'Not logged in', 'data'=>''));
|
|
}
|
|
$userobj->setEmail($app->request()->put('fullname'));
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$userid));
|
|
} /* }}} */
|
|
|
|
function getLockedDocuments() { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
|
|
if(false !== ($documents = $dms->getDocumentsLockedByUser($userobj))) {
|
|
$documents = SeedDMS_Core_DMS::filterAccess($documents, $userobj, M_READ);
|
|
foreach($documents as $document) {
|
|
$lc = $document->getLatestContent();
|
|
$recs[] = array(
|
|
'type'=>'document',
|
|
'id'=>$document->getId(),
|
|
'date'=>$document->getDate(),
|
|
'name'=>$document->getName(),
|
|
'mimetype'=>$lc->getMimeType(),
|
|
'version'=>$lc->getVersion(),
|
|
'size'=>$lc->getFileSize(),
|
|
'comment'=>$document->getComment(),
|
|
'keywords'=>$document->getKeywords(),
|
|
);
|
|
}
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$recs));
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'', 'data'=>''));
|
|
}
|
|
} /* }}} */
|
|
|
|
function getFolder($id) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
$forcebyname = $app->request()->get('forcebyname');
|
|
if(is_numeric($id) && empty($forcebyname))
|
|
$folder = $dms->getFolder($id);
|
|
else {
|
|
$parentid = $app->request()->get('parentid');
|
|
$folder = $dms->getFolderByName($id, $parentid);
|
|
}
|
|
if($folder) {
|
|
if($folder->getAccessMode($userobj) >= M_READ) {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
$data = array(
|
|
'id'=>$folder->getID(),
|
|
'name'=>$folder->getName()
|
|
);
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$data));
|
|
} else {
|
|
$app->response()->status(404);
|
|
}
|
|
} else {
|
|
$app->response()->status(404);
|
|
}
|
|
} /* }}} */
|
|
|
|
function getFolderParent($id) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
if($id == 0) {
|
|
echo json_encode(array('success'=>true, 'message'=>'id is 0', 'data'=>''));
|
|
return;
|
|
}
|
|
$root = $dms->getRootFolder();
|
|
if($root->getId() == $id) {
|
|
echo json_encode(array('success'=>true, 'message'=>'id is root folder', 'data'=>''));
|
|
return;
|
|
}
|
|
$folder = $dms->getFolder($id);
|
|
$parent = $folder->getParent();
|
|
if($parent) {
|
|
$rec = array('type'=>'folder', 'id'=>$parent->getId(), 'name'=>$parent->getName());
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$rec));
|
|
} else {
|
|
echo json_encode(array('success'=>false, 'message'=>'', 'data'=>''));
|
|
}
|
|
} /* }}} */
|
|
|
|
function getFolderPath($id) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
if($id == 0) {
|
|
echo json_encode(array('success'=>true, 'message'=>'id is 0', 'data'=>''));
|
|
return;
|
|
}
|
|
$folder = $dms->getFolder($id);
|
|
|
|
$path = $folder->getPath();
|
|
$data = array();
|
|
foreach($path as $element) {
|
|
$data[] = array('id'=>$element->getId(), 'name'=>htmlspecialchars($element->getName()));
|
|
}
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$data));
|
|
} /* }}} */
|
|
|
|
function getFolderAttributes($id) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
$folder = $dms->getFolder($id);
|
|
|
|
if($folder) {
|
|
if ($folder->getAccessMode($userobj) >= M_READ) {
|
|
$recs = array();
|
|
$attributes = $folder->getAttributes();
|
|
foreach($attributes as $attribute) {
|
|
$recs[] = array(
|
|
'id'=>$attribute->getId(),
|
|
'value'=>$attribute->getValue(),
|
|
'name'=>$attribute->getAttributeDefinition()->getName(),
|
|
);
|
|
}
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$recs));
|
|
} else {
|
|
$app->response()->status(404);
|
|
}
|
|
}
|
|
} /* }}} */
|
|
|
|
function getFolderChildren($id) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
if($id == 0) {
|
|
$folder = $dms->getRootFolder();
|
|
$recs = array(array('type'=>'folder', 'id'=>$folder->getId(), 'name'=>$folder->getName()));
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$recs));
|
|
} else {
|
|
$folder = $dms->getFolder($id);
|
|
if($folder) {
|
|
if($folder->getAccessMode($userobj) >= M_READ) {
|
|
$recs = array();
|
|
$subfolders = $folder->getSubFolders();
|
|
$subfolders = SeedDMS_Core_DMS::filterAccess($subfolders, $userobj, M_READ);
|
|
foreach($subfolders as $subfolder) {
|
|
$recs[] = array(
|
|
'type'=>'folder',
|
|
'id'=>$subfolder->getId(),
|
|
'name'=>htmlspecialchars($subfolder->getName()),
|
|
'comment'=>$subfolder->getComment(),
|
|
'date'=>$subfolder->getDate(),
|
|
);
|
|
}
|
|
$documents = $folder->getDocuments();
|
|
$documents = SeedDMS_Core_DMS::filterAccess($documents, $userobj, M_READ);
|
|
foreach($documents as $document) {
|
|
$lc = $document->getLatestContent();
|
|
if($lc) {
|
|
$recs[] = array(
|
|
'type'=>'document',
|
|
'id'=>$document->getId(),
|
|
'date'=>$document->getDate(),
|
|
'name'=>htmlspecialchars($document->getName()),
|
|
'mimetype'=>$lc->getMimeType(),
|
|
'version'=>$lc->getVersion(),
|
|
'size'=>$lc->getFileSize(),
|
|
'comment'=>$document->getComment(),
|
|
'keywords'=>$document->getKeywords(),
|
|
);
|
|
}
|
|
}
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$recs));
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'No access', 'data'=>''));
|
|
}
|
|
} else {
|
|
$app->response()->status(404);
|
|
}
|
|
}
|
|
} /* }}} */
|
|
|
|
function createFolder($id) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
|
|
if(!$userobj) {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'Not logged in', 'data'=>''));
|
|
}
|
|
|
|
if($id == 0) {
|
|
echo json_encode(array('success'=>true, 'message'=>'id is 0', 'data'=>''));
|
|
return;
|
|
}
|
|
$parent = $dms->getFolder($id);
|
|
if($parent) {
|
|
if($name = $app->request()->post('name')) {
|
|
$comment = $app->request()->post('comment');
|
|
$attributes = $app->request()->post('attributes');
|
|
$newattrs = array();
|
|
foreach($attributes as $attrname=>$attrvalue) {
|
|
$attrdef = $dms->getAttributeDefinitionByName($attrname);
|
|
if($attrdef) {
|
|
$newattrs[$attrdef->getID()] = $attrvalue;
|
|
}
|
|
}
|
|
if($folder = $parent->addSubFolder($name, $comment, $userobj, 0, $newattrs)) {
|
|
|
|
$rec = array('id'=>$folder->getId(), 'name'=>$folder->getName(), 'comment'=>$folder->getComment());
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$rec));
|
|
} else {
|
|
echo json_encode(array('success'=>false, 'message'=>'', 'data'=>''));
|
|
}
|
|
} else {
|
|
echo json_encode(array('success'=>false, 'message'=>'', 'data'=>''));
|
|
}
|
|
} else {
|
|
echo json_encode(array('success'=>false, 'message'=>'', 'data'=>''));
|
|
}
|
|
} /* }}} */
|
|
|
|
function moveFolder($id) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
|
|
if(!$userobj) {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'Not logged in', 'data'=>''));
|
|
}
|
|
|
|
$mfolder = $dms->getFolder($id);
|
|
if($mfolder) {
|
|
if ($mfolder->getAccessMode($userobj) >= M_READ) {
|
|
$folderid = $app->request()->post('dest');
|
|
if($folder = $dms->getFolder($folderid)) {
|
|
if($folder->getAccessMode($userobj) >= M_READWRITE) {
|
|
if($mfolder->setParent($folder)) {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>''));
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'Error moving folder', 'data'=>''));
|
|
}
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'No access on destination folder', 'data'=>''));
|
|
}
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'No destination folder', 'data'=>''));
|
|
}
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'No access', 'data'=>''));
|
|
}
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'No folder', 'data'=>''));
|
|
}
|
|
} /* }}} */
|
|
|
|
function deleteFolder($id) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
|
|
if(!$userobj) {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'Not logged in', 'data'=>''));
|
|
}
|
|
|
|
if($id == 0) {
|
|
echo json_encode(array('success'=>true, 'message'=>'id is 0', 'data'=>''));
|
|
return;
|
|
}
|
|
$mfolder = $dms->getFolder($id);
|
|
if($mfolder) {
|
|
if ($mfolder->getAccessMode($userobj) >= M_READWRITE) {
|
|
if($mfolder->remove()) {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>''));
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'Error deleting folder', 'data'=>''));
|
|
}
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'No access', 'data'=>''));
|
|
}
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'No folder', 'data'=>''));
|
|
}
|
|
} /* }}} */
|
|
|
|
function uploadDocument($id) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
|
|
if(!$userobj) {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'Not logged in', 'data'=>''));
|
|
}
|
|
|
|
if($id == 0) {
|
|
echo json_encode(array('success'=>true, 'message'=>'id is 0', 'data'=>''));
|
|
return;
|
|
}
|
|
$mfolder = $dms->getFolder($id);
|
|
if($mfolder) {
|
|
if ($mfolder->getAccessMode($userobj) >= M_READWRITE) {
|
|
$docname = $app->request()->get('name');
|
|
$origfilename = $app->request()->get('origfilename');
|
|
$content = $app->getInstance()->request()->getBody();
|
|
$temp = tempnam('/tmp', 'lajflk');
|
|
$handle = fopen($temp, "w");
|
|
fwrite($handle, $content);
|
|
fclose($handle);
|
|
$finfo = finfo_open(FILEINFO_MIME_TYPE);
|
|
$userfiletype = finfo_file($finfo, $temp);
|
|
$fileType = ".".pathinfo($origfilename, PATHINFO_EXTENSION);
|
|
finfo_close($finfo);
|
|
$res = $mfolder->addDocument($docname, '', 0, $userobj, '', array(), $temp, $origfilename ? $origfilename : basename($temp), $fileType, $userfiletype, 0);
|
|
unlink($temp);
|
|
if($res) {
|
|
$doc = $res[0];
|
|
$rec = array('id'=>$doc->getId(), 'name'=>$doc->getName());
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'Upload succeded', 'data'=>$rec));
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'Upload failed', 'data'=>''));
|
|
}
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'No access', 'data'=>''));
|
|
}
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'No folder', 'data'=>''));
|
|
}
|
|
} /* }}} */
|
|
|
|
function getDocument($id) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
$document = $dms->getDocument($id);
|
|
if($document) {
|
|
if ($document->getAccessMode($userobj) >= M_READ) {
|
|
$lc = $document->getLatestContent();
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
$data = array(
|
|
'id'=>$id,
|
|
'name'=>htmlspecialchars($document->getName()),
|
|
'comment'=>htmlspecialchars($document->getComment()),
|
|
'date'=>$document->getDate(),
|
|
'mimetype'=>$lc->getMimeType(),
|
|
'version'=>$lc->getVersion(),
|
|
'orig_filename'=>$lc->getOriginalFileName(),
|
|
'size'=>$lc->getFileSize(),
|
|
'keywords'=>htmlspecialchars($document->getKeywords()),
|
|
);
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$data));
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'No access', 'data'=>''));
|
|
}
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'No document', 'data'=>''));
|
|
}
|
|
} /* }}} */
|
|
|
|
function deleteDocument($id) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
$document = $dms->getDocument($id);
|
|
if($document) {
|
|
if ($document->getAccessMode($userobj) >= M_READWRITE) {
|
|
if($document->remove()) {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>''));
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'Error removing document', 'data'=>''));
|
|
}
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'No access', 'data'=>''));
|
|
}
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'No document', 'data'=>''));
|
|
}
|
|
} /* }}} */
|
|
|
|
function moveDocument($id) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
$document = $dms->getDocument($id);
|
|
if($document) {
|
|
if ($document->getAccessMode($userobj) >= M_READ) {
|
|
$folderid = $app->request()->post('dest');
|
|
if($folder = $dms->getFolder($folderid)) {
|
|
if($folder->getAccessMode($userobj) >= M_READWRITE) {
|
|
if($document->setFolder($folder)) {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>''));
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'Error moving document', 'data'=>''));
|
|
}
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'No access on destination folder', 'data'=>''));
|
|
}
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'No destination folder', 'data'=>''));
|
|
}
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'No access', 'data'=>''));
|
|
}
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'No document', 'data'=>''));
|
|
}
|
|
} /* }}} */
|
|
|
|
function getDocumentContent($id) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
$document = $dms->getDocument($id);
|
|
|
|
if($document) {
|
|
if ($document->getAccessMode($userobj) >= M_READ) {
|
|
$lc = $document->getLatestContent();
|
|
$app->response()->header('Content-Type', $lc->getMimeType());
|
|
$app->response()->header("Content-Disposition: filename=\"" . $document->getName().$lc->getFileType() . "\"");
|
|
$app->response()->header("Content-Length", filesize($dms->contentDir . $lc->getPath()));
|
|
$app->response()->header("Expires", "0");
|
|
$app->response()->header("Cache-Control", "no-cache, must-revalidate");
|
|
$app->response()->header("Pragma", "no-cache");
|
|
|
|
readfile($dms->contentDir . $lc->getPath());
|
|
} else {
|
|
$app->response()->status(404);
|
|
}
|
|
}
|
|
|
|
} /* }}} */
|
|
|
|
function getDocumentVersions($id) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
$document = $dms->getDocument($id);
|
|
|
|
if($document) {
|
|
if ($document->getAccessMode($userobj) >= M_READ) {
|
|
$recs = array();
|
|
$lcs = $document->getContent();
|
|
foreach($lcs as $lc) {
|
|
$recs[] = array(
|
|
'version'=>$lc->getVersion(),
|
|
'date'=>$lc->getDate(),
|
|
'mimetype'=>$lc->getMimeType(),
|
|
'size'=>$lc->getFileSize(),
|
|
'comment'=>htmlspecialchars($lc->getComment()),
|
|
);
|
|
}
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$recs));
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'No access', 'data'=>''));
|
|
}
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'No such document', 'data'=>''));
|
|
}
|
|
} /* }}} */
|
|
|
|
function getDocumentVersion($id, $version) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
$document = $dms->getDocument($id);
|
|
|
|
if($document) {
|
|
if ($document->getAccessMode($userobj) >= M_READ) {
|
|
$lc = $document->getContentByVersion($version);
|
|
$app->response()->header('Content-Type', $lc->getMimeType());
|
|
$app->response()->header("Content-Disposition", "filename=\"" . $document->getName().$lc->getFileType() . "\"");
|
|
$app->response()->header("Content-Length", filesize($dms->contentDir . $lc->getPath()));
|
|
$app->response()->header("Expires", "0");
|
|
$app->response()->header("Cache-Control", "no-cache, must-revalidate");
|
|
$app->response()->header("Pragma", "no-cache");
|
|
|
|
readfile($dms->contentDir . $lc->getPath());
|
|
} else {
|
|
$app->response()->status(404);
|
|
}
|
|
}
|
|
} /* }}} */
|
|
|
|
function getDocumentFiles($id) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
$document = $dms->getDocument($id);
|
|
|
|
if($document) {
|
|
if ($document->getAccessMode($userobj) >= M_READ) {
|
|
$recs = array();
|
|
$files = $document->getDocumentFiles();
|
|
foreach($files as $file) {
|
|
$recs[] = array(
|
|
'id'=>$file->getId(),
|
|
'name'=>$file->getName(),
|
|
'date'=>$file->getDate(),
|
|
'mimetype'=>$file->getMimeType(),
|
|
'comment'=>$file->getComment(),
|
|
);
|
|
}
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$recs));
|
|
} else {
|
|
$app->response()->status(404);
|
|
}
|
|
}
|
|
} /* }}} */
|
|
|
|
function getDocumentFile($id, $fileid) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
$document = $dms->getDocument($id);
|
|
|
|
if($document) {
|
|
if ($document->getAccessMode($userobj) >= M_READ) {
|
|
$file = $document->getDocumentFile($fileid);
|
|
$app->response()->header('Content-Type', $file->getMimeType());
|
|
$app->response()->header("Content-Disposition", "filename=\"" . $document->getName().$file->getFileType() . "\"");
|
|
$app->response()->header("Content-Length", filesize($dms->contentDir . $file->getPath()));
|
|
$app->response()->header("Expires", "0");
|
|
$app->response()->header("Cache-Control", "no-cache, must-revalidate");
|
|
$app->response()->header("Pragma", "no-cache");
|
|
|
|
readfile($dms->contentDir . $file->getPath());
|
|
} else {
|
|
$app->response()->status(404);
|
|
}
|
|
}
|
|
} /* }}} */
|
|
|
|
function getDocumentLinks($id) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
$document = $dms->getDocument($id);
|
|
|
|
if($document) {
|
|
if ($document->getAccessMode($userobj) >= M_READ) {
|
|
$recs = array();
|
|
$links = $document->getDocumentLinks();
|
|
foreach($links as $link) {
|
|
$recs[] = array(
|
|
'id'=>$link->getId(),
|
|
'target'=>$link->getTarget(),
|
|
'public'=>$link->isPublic(),
|
|
);
|
|
}
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$recs));
|
|
} else {
|
|
$app->response()->status(404);
|
|
}
|
|
}
|
|
} /* }}} */
|
|
|
|
function getDocumentAttributes($id) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
$document = $dms->getDocument($id);
|
|
|
|
if($document) {
|
|
if ($document->getAccessMode($userobj) >= M_READ) {
|
|
$recs = array();
|
|
$attributes = $document->getAttributes();
|
|
foreach($attributes as $attribute) {
|
|
$recs[] = array(
|
|
'id'=>$attribute->getId(),
|
|
'value'=>$attribute->getValue(),
|
|
'name'=>$attribute->getAttributeDefinition()->getName(),
|
|
);
|
|
}
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$recs));
|
|
} else {
|
|
$app->response()->status(404);
|
|
}
|
|
}
|
|
} /* }}} */
|
|
|
|
function getDocumentPreview($id, $version=0, $width=0) { /* {{{ */
|
|
global $app, $dms, $userobj, $settings;
|
|
$document = $dms->getDocument($id);
|
|
|
|
if($document) {
|
|
if ($document->getAccessMode($userobj) >= M_READ) {
|
|
if($version)
|
|
$object = $document->getContentByVersion($version);
|
|
else
|
|
$object = $document->getLatestContent();
|
|
if(!$object)
|
|
exit;
|
|
|
|
if(!empty($width))
|
|
$previewer = new SeedDMS_Preview_Previewer($settings->_cacheDir, $width);
|
|
else
|
|
$previewer = new SeedDMS_Preview_Previewer($settings->_cacheDir);
|
|
if(!$previewer->hasPreview($object))
|
|
$previewer->createPreview($object);
|
|
$app->response()->header('Content-Type', 'image/png');
|
|
$app->response()->header("Content-Disposition", "filename=\"preview-" . $document->getID()."-".$object->getVersion()."-".$width.".png" . "\"");
|
|
$app->response()->header("Content-Length", $previewer->getFilesize($object));
|
|
// $app->response()->header("Expires", "0");
|
|
// $app->response()->header("Cache-Control", "no-cache, must-revalidate");
|
|
// $app->response()->header("Pragma", "no-cache");
|
|
|
|
$previewer->getPreview($object);
|
|
} else {
|
|
$app->response()->status(404);
|
|
}
|
|
}
|
|
} /* }}} */
|
|
|
|
function getAccount() { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
if($userobj) {
|
|
$account = array();
|
|
$account['id'] = $userobj->getId();
|
|
$account['login'] = $userobj->getLogin();
|
|
$account['fullname'] = $userobj->getFullName();
|
|
$account['email'] = $userobj->getEmail();
|
|
$account['language'] = $userobj->getLanguage();
|
|
$account['theme'] = $userobj->getTheme();
|
|
$account['role'] = $userobj->getRole();
|
|
$account['comment'] = $userobj->getComment();
|
|
$account['isguest'] = $userobj->isGuest();
|
|
$account['isadmin'] = $userobj->isAdmin();
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$account));
|
|
} else {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'Not logged in', 'data'=>''));
|
|
}
|
|
} /* }}} */
|
|
|
|
/**
|
|
* Search for documents in the database
|
|
*
|
|
* If the request parameter 'mode' is set to 'typeahead', it will
|
|
* return a list of words only.
|
|
*/
|
|
function doSearch() { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
|
|
$querystr = $app->request()->get('query');
|
|
$mode = $app->request()->get('mode');
|
|
if(!$limit = $app->request()->get('limit'))
|
|
$limit = 5;
|
|
$resArr = $dms->search($querystr);
|
|
$entries = array();
|
|
$count = 0;
|
|
if($resArr['folders']) {
|
|
foreach ($resArr['folders'] as $entry) {
|
|
if ($entry->getAccessMode($userobj) >= M_READ) {
|
|
$entries[] = $entry;
|
|
$count++;
|
|
}
|
|
if($count >= $limit)
|
|
break;
|
|
}
|
|
}
|
|
$count = 0;
|
|
if($resArr['docs']) {
|
|
foreach ($resArr['docs'] as $entry) {
|
|
if ($entry->getAccessMode($userobj) >= M_READ) {
|
|
$entries[] = $entry;
|
|
$count++;
|
|
}
|
|
if($count >= $limit)
|
|
break;
|
|
}
|
|
}
|
|
|
|
switch($mode) {
|
|
case 'typeahead';
|
|
$recs = array();
|
|
foreach ($entries as $entry) {
|
|
/* Passing anything back but a string does not work, because
|
|
* the process function of bootstrap.typeahead needs an array of
|
|
* strings.
|
|
*
|
|
* As a quick solution to distingish folders from documents, the
|
|
* name will be preceeded by a 'F' or 'D'
|
|
|
|
$tmp = array();
|
|
if(get_class($entry) == 'SeedDMS_Core_Document') {
|
|
$tmp['type'] = 'folder';
|
|
} else {
|
|
$tmp['type'] = 'document';
|
|
}
|
|
$tmp['id'] = $entry->getID();
|
|
$tmp['name'] = $entry->getName();
|
|
$tmp['comment'] = $entry->getComment();
|
|
*/
|
|
if(get_class($entry) == 'SeedDMS_Core_Document') {
|
|
$recs[] = 'D'.$entry->getName();
|
|
} else {
|
|
$recs[] = 'F'.$entry->getName();
|
|
}
|
|
}
|
|
if($recs)
|
|
// array_unshift($recs, array('type'=>'', 'id'=>0, 'name'=>$querystr, 'comment'=>''));
|
|
array_unshift($recs, ' '.$querystr);
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode($recs);
|
|
//echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$recs));
|
|
break;
|
|
default:
|
|
$recs = array();
|
|
foreach ($entries as $entry) {
|
|
if(get_class($entry) == 'SeedDMS_Core_Document') {
|
|
$document = $entry;
|
|
$lc = $document->getLatestContent();
|
|
$recs[] = array(
|
|
'type'=>'document',
|
|
'id'=>$document->getId(),
|
|
'date'=>$document->getDate(),
|
|
'name'=>$document->getName(),
|
|
'mimetype'=>$lc->getMimeType(),
|
|
'version'=>$lc->getVersion(),
|
|
'size'=>$lc->getFileSize(),
|
|
'comment'=>$document->getComment(),
|
|
'keywords'=>$document->getKeywords(),
|
|
);
|
|
} elseif(get_class($entry) == 'SeedDMS_Core_Folder') {
|
|
$folder = $entry;
|
|
$recs[] = array(
|
|
'type'=>'folder',
|
|
'id'=>$folder->getId(),
|
|
'name'=>$folder->getName(),
|
|
'comment'=>$folder->getComment(),
|
|
'date'=>$folder->getDate(),
|
|
);
|
|
}
|
|
}
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$recs));
|
|
break;
|
|
}
|
|
} /* }}} */
|
|
|
|
/**
|
|
* Search for documents/folders with a given attribute=value
|
|
*
|
|
*/
|
|
function doSearchByAttr() { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
|
|
$attrname = $app->request()->get('name');
|
|
$query = $app->request()->get('value');
|
|
if(!$limit = $app->request()->get('limit'))
|
|
$limit = 50;
|
|
$attrdef = $dms->getAttributeDefinitionByName($attrname);
|
|
$entries = array();
|
|
if($attrdef) {
|
|
$resArr = $attrdef->getObjects($query, $limit);
|
|
if($resArr['folders']) {
|
|
foreach ($resArr['folders'] as $entry) {
|
|
if ($entry->getAccessMode($userobj) >= M_READ) {
|
|
$entries[] = $entry;
|
|
}
|
|
}
|
|
}
|
|
if($resArr['docs']) {
|
|
foreach ($resArr['docs'] as $entry) {
|
|
if ($entry->getAccessMode($userobj) >= M_READ) {
|
|
$entries[] = $entry;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
$recs = array();
|
|
foreach ($entries as $entry) {
|
|
if(get_class($entry) == 'SeedDMS_Core_Document') {
|
|
$document = $entry;
|
|
$lc = $document->getLatestContent();
|
|
$recs[] = array(
|
|
'type'=>'document',
|
|
'id'=>$document->getId(),
|
|
'date'=>$document->getDate(),
|
|
'name'=>$document->getName(),
|
|
'mimetype'=>$lc->getMimeType(),
|
|
'version'=>$lc->getVersion(),
|
|
'size'=>$lc->getFileSize(),
|
|
'comment'=>$document->getComment(),
|
|
'keywords'=>$document->getKeywords(),
|
|
);
|
|
} elseif(get_class($entry) == 'SeedDMS_Core_Folder') {
|
|
$folder = $entry;
|
|
$recs[] = array(
|
|
'type'=>'folder',
|
|
'id'=>$folder->getId(),
|
|
'name'=>$folder->getName(),
|
|
'comment'=>$folder->getComment(),
|
|
'date'=>$folder->getDate(),
|
|
);
|
|
}
|
|
}
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$recs));
|
|
} /* }}} */
|
|
|
|
function checkIfAdmin() { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
if(!$userobj) {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'Not logged in', 'data'=>''));
|
|
return;
|
|
}
|
|
if(!$userobj->isAdmin()) {
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'You must be logged in with an administrator account to access this resource', 'data'=>''));
|
|
return;
|
|
}
|
|
|
|
return true;
|
|
} /* }}} */
|
|
|
|
function createAccount() { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
|
|
checkIfAdmin();
|
|
|
|
$userName = $app->request()->post('user');
|
|
$password = $app->request()->post('pass');
|
|
$fullname = $app->request()->post('name');
|
|
$email = $app->request()->post('email');
|
|
$language = $app->request()->post('language');
|
|
$theme = $app->request()->post('theme');
|
|
$comment = $app->request()->post('comment');
|
|
|
|
$newAccount = $dms->addUser($userName, $password, $fullname, $email, $language, $theme, $comment);
|
|
if ($newAccount === false)
|
|
{
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'Account could not be created, maybe it already exists', 'data'=>''));
|
|
return;
|
|
}
|
|
|
|
$result = array(
|
|
'id'=>$newAccount->getID()
|
|
);
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$result));
|
|
return;
|
|
} /* }}} */
|
|
|
|
function getAccountById($id) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
checkIfAdmin();
|
|
if(is_numeric($id))
|
|
$account = $dms->getUser($id);
|
|
else {
|
|
$account = $dms->getUserByLogin($id);
|
|
}
|
|
if($account) {
|
|
$data = array();
|
|
$data['id'] = $account->getId();
|
|
$data['login'] = $account->getLogin();
|
|
$data['fullname'] = $account->getFullName();
|
|
$data['email'] = $account->getEmail();
|
|
$data['language'] = $account->getLanguage();
|
|
$data['theme'] = $account->getTheme();
|
|
$data['role'] = $account->getRole();
|
|
$data['comment'] = $account->getComment();
|
|
$outputDisabled = ($account->isDisabled() === true || $account->isDisabled() === '1');
|
|
$data['isdisabled'] = $outputDisabled;
|
|
$data['isguest'] = $account->isGuest();
|
|
$data['isadmin'] = $account->isAdmin();
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$data));
|
|
} else {
|
|
$app->response()->status(404);
|
|
}
|
|
} /* }}} */
|
|
|
|
function setDisabledAccount($id) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
checkIfAdmin();
|
|
if ($app->request()->put('disable') == null)
|
|
{
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'You must PUT a disabled state', 'data'=>''));
|
|
return;
|
|
}
|
|
|
|
$isDisabled = false;
|
|
$status = $app->request()->put('disable');
|
|
if ($status == 'true' || $status == '1')
|
|
{
|
|
$isDisabled = true;
|
|
}
|
|
|
|
if(is_numeric($id))
|
|
$account = $dms->getUser($id);
|
|
else {
|
|
$account = $dms->getUserByLogin($id);
|
|
}
|
|
|
|
if($account) {
|
|
$account->setDisabled($isDisabled);
|
|
$data = array();
|
|
$data['id'] = $account->getId();
|
|
$data['login'] = $account->getLogin();
|
|
$data['fullname'] = $account->getFullName();
|
|
$data['email'] = $account->getEmail();
|
|
$outputDisabled = ($account->isDisabled() === true || $account->isDisabled() === '1');
|
|
$data['isdisabled'] = $outputDisabled;
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$data));
|
|
} else {
|
|
$app->response()->status(404);
|
|
}
|
|
} /* }}} */
|
|
|
|
function createGroup() { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
checkIfAdmin();
|
|
$groupName = $app->request()->post('name');
|
|
$comment = $app->request()->post('comment');
|
|
|
|
$newGroup = $dms->addGroup($groupName, $comment);
|
|
if ($newGroup === false)
|
|
{
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'Group could not be created, maybe it already exists', 'data'=>''));
|
|
return;
|
|
}
|
|
|
|
$result = array(
|
|
'id'=>$newGroup->getID()
|
|
);
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$result));
|
|
return;
|
|
} /* }}} */
|
|
|
|
function getGroup($id) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
checkIfAdmin();
|
|
if(is_numeric($id))
|
|
$group = $dms->getGroup($id);
|
|
else {
|
|
$group = $dms->getGroupByName($id);
|
|
}
|
|
if($group) {
|
|
$data = array();
|
|
$data['id'] = $group->getId();
|
|
$data['name'] = $group->getName();
|
|
$data['comment'] = $group->getComment();
|
|
$data['users'] = array();
|
|
foreach ($group->getUsers() as $user) {
|
|
$data['users'][] = array('id' => $user->getID(), 'login' => $user->getLogin());
|
|
}
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$data));
|
|
} else {
|
|
$app->response()->status(404);
|
|
}
|
|
} /* }}} */
|
|
|
|
function changeGroupMembership($id, $operationType) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
checkIfAdmin();
|
|
|
|
if(is_numeric($id))
|
|
$group = $dms->getGroup($id);
|
|
else {
|
|
$group = $dms->getGroupByName($id);
|
|
}
|
|
|
|
if ($app->request()->put('userid') == null)
|
|
{
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'Please PUT the userid', 'data'=>''));
|
|
return;
|
|
}
|
|
$userId = $app->request()->put('userid');
|
|
if(is_numeric($userId))
|
|
$user = $dms->getUser($userId);
|
|
else {
|
|
$user = $dms->getUserByLogin($userId);
|
|
}
|
|
|
|
if (!($group && $user)) {
|
|
$app->response()->status(404);
|
|
}
|
|
|
|
$operationResult = false;
|
|
|
|
if ($operationType == 'add')
|
|
{
|
|
$operationResult = $group->addUser($user);
|
|
}
|
|
if ($operationType == 'remove')
|
|
{
|
|
$operationResult = $group->removeUser($user);
|
|
}
|
|
|
|
if ($operationResult === false)
|
|
{
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
$message = 'Could not add user to the group.';
|
|
if ($operationType == 'remove')
|
|
{
|
|
$message = 'Could not remove user from group.';
|
|
}
|
|
echo json_encode(array('success'=>false, 'message'=>'Something went wrong. ' . $message, 'data'=>''));
|
|
return;
|
|
}
|
|
|
|
$data = array();
|
|
$data['id'] = $group->getId();
|
|
$data['name'] = $group->getName();
|
|
$data['comment'] = $group->getComment();
|
|
$data['users'] = array();
|
|
foreach ($group->getUsers() as $userObj) {
|
|
$data['users'][] = array('id' => $userObj->getID(), 'login' => $userObj->getLogin());
|
|
}
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$data));
|
|
} /* }}} */
|
|
|
|
function addUserToGroup($id) { /* {{{ */
|
|
changeGroupMembership($id, 'add');
|
|
} /* }}} */
|
|
|
|
function removeUserFromGroup($id) { /* {{{ */
|
|
changeGroupMembership($id, 'remove');
|
|
} /* }}} */
|
|
|
|
function setFolderInheritsAccess($id) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
checkIfAdmin();
|
|
if ($app->request()->put('enable') == null)
|
|
{
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'You must PUT an "enable" value', 'data'=>''));
|
|
return;
|
|
}
|
|
|
|
$inherit = false;
|
|
$status = $app->request()->put('enable');
|
|
if ($status == 'true' || $status == '1')
|
|
{
|
|
$inherit = true;
|
|
}
|
|
|
|
if(is_numeric($id))
|
|
$folder = $dms->getFolder($id);
|
|
else {
|
|
$folder = $dms->getFolderByName($id);
|
|
}
|
|
|
|
if($folder) {
|
|
$folder->setInheritAccess($inherit);
|
|
$folderId = $folder->getId();
|
|
$folder = null;
|
|
// reread from db
|
|
$folder = $dms->getFolder($folderId);
|
|
$success = ($folder->inheritsAccess() == $inherit);
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>$success, 'message'=>'', 'data'=>$data));
|
|
} else {
|
|
$app->response()->status(404);
|
|
}
|
|
} /* }}} */
|
|
|
|
function addUserAccessToFolder($id) { /* {{{ */
|
|
changeFolderAccess($id, 'add', 'user');
|
|
} /* }}} */
|
|
|
|
function addGroupAccessToFolder($id) { /* {{{ */
|
|
changeFolderAccess($id, 'add', 'group');
|
|
} /* }}} */
|
|
|
|
function removeUserAccessFromFolder($id) { /* {{{ */
|
|
changeFolderAccess($id, 'remove', 'user');
|
|
} /* }}} */
|
|
|
|
function removeGroupAccessFromFolder($id) { /* {{{ */
|
|
changeFolderAccess($id, 'remove', 'group');
|
|
} /* }}} */
|
|
|
|
function changeFolderAccess($id, $operationType, $userOrGroup) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
checkIfAdmin();
|
|
|
|
if(is_numeric($id))
|
|
$folder = $dms->getfolder($id);
|
|
else {
|
|
$folder = $dms->getfolderByName($id);
|
|
}
|
|
if (!$folder) {
|
|
$app->response()->status(404);
|
|
return;
|
|
}
|
|
|
|
$userOrGroupIdInput = $app->request()->put('id');
|
|
if ($operationType == 'add')
|
|
{
|
|
if ($app->request()->put('id') == null)
|
|
{
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'Please PUT the user or group Id', 'data'=>''));
|
|
return;
|
|
}
|
|
|
|
if ($app->request()->put('mode') == null)
|
|
{
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>false, 'message'=>'Please PUT the access mode', 'data'=>''));
|
|
return;
|
|
}
|
|
|
|
$modeInput = $app->request()->put('mode');
|
|
|
|
$mode = M_NONE;
|
|
if ($modeInput == 'read')
|
|
{
|
|
$mode = M_READ;
|
|
}
|
|
if ($modeInput == 'readwrite')
|
|
{
|
|
$mode = M_READWRITE;
|
|
}
|
|
if ($modeInput == 'all')
|
|
{
|
|
$mode = M_ALL;
|
|
}
|
|
}
|
|
|
|
|
|
$userOrGroupId = $userOrGroupIdInput;
|
|
if(!is_numeric($userOrGroupIdInput) && $userOrGroup == 'user')
|
|
{
|
|
$userOrGroupObj = $dms->getUserByLogin($userOrGroupIdInput);
|
|
}
|
|
if(!is_numeric($userOrGroupIdInput) && $userOrGroup == 'group')
|
|
{
|
|
$userOrGroupObj = $dms->getGroupByName($userOrGroupIdInput);
|
|
}
|
|
if(is_numeric($userOrGroupIdInput) && $userOrGroup == 'user')
|
|
{
|
|
$userOrGroupObj = $dms->getUser($userOrGroupIdInput);
|
|
}
|
|
if(is_numeric($userOrGroupIdInput) && $userOrGroup == 'group')
|
|
{
|
|
$userOrGroupObj = $dms->getGroup($userOrGroupIdInput);
|
|
}
|
|
if (!$userOrGroupObj) {
|
|
$app->response()->status(404);
|
|
return;
|
|
}
|
|
$userOrGroupId = $userOrGroupObj->getId();
|
|
|
|
$operationResult = false;
|
|
|
|
if ($operationType == 'add' && $userOrGroup == 'user')
|
|
{
|
|
$operationResult = $folder->addAccess($mode, $userOrGroupId, true);
|
|
}
|
|
if ($operationType == 'remove' && $userOrGroup == 'user')
|
|
{
|
|
$operationResult = $folder->removeAccess($userOrGroupId, true);
|
|
}
|
|
|
|
if ($operationType == 'add' && $userOrGroup == 'group')
|
|
{
|
|
$operationResult = $folder->addAccess($mode, $userOrGroupId, false);
|
|
}
|
|
if ($operationType == 'remove' && $userOrGroup == 'group')
|
|
{
|
|
$operationResult = $folder->removeAccess($userOrGroupId, false);
|
|
}
|
|
|
|
if ($operationResult === false)
|
|
{
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
$message = 'Could not add user/group access to this folder.';
|
|
if ($operationType == 'remove')
|
|
{
|
|
$message = 'Could not remove user/group access from this folder.';
|
|
}
|
|
echo json_encode(array('success'=>false, 'message'=>'Something went wrong. ' . $message, 'data'=>''));
|
|
return;
|
|
}
|
|
|
|
$data = array();
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$data));
|
|
} /* }}} */
|
|
|
|
function clearFolderAccessList($id) { /* {{{ */
|
|
global $app, $dms, $userobj;
|
|
checkIfAdmin();
|
|
|
|
if(is_numeric($id))
|
|
$folder = $dms->getFolder($id);
|
|
else {
|
|
$folder = $dms->getFolderByName($id);
|
|
}
|
|
if (!$folder)
|
|
{
|
|
$app->response()->status(404);
|
|
return;
|
|
}
|
|
$operationResult = $folder->clearAccessList();
|
|
$data = array();
|
|
$app->response()->header('Content-Type', 'application/json');
|
|
if (!$operationResult)
|
|
{
|
|
echo json_encode(array('success'=>false, 'message'=>'Something went wrong. Could not clear access list for this folder.', 'data'=>$data));
|
|
}
|
|
echo json_encode(array('success'=>true, 'message'=>'', 'data'=>$data));
|
|
} /* }}} */
|
|
|
|
//$app = new Slim(array('mode'=>'development', '_session.handler'=>null));
|
|
$app = new \Slim\Slim(array('mode'=>'development', '_session.handler'=>null));
|
|
|
|
$app->configureMode('production', function () use ($app) {
|
|
$app->config(array(
|
|
'log.enable' => true,
|
|
'log.path' => '/tmp/',
|
|
'debug' => false
|
|
));
|
|
});
|
|
|
|
$app->configureMode('development', function () use ($app) {
|
|
$app->config(array(
|
|
'log.enable' => false,
|
|
'debug' => true
|
|
));
|
|
});
|
|
|
|
// use post for create operation
|
|
// use get for retrieval operation
|
|
// use put for update operation
|
|
// use delete for delete operation
|
|
$app->post('/login', 'doLogin');
|
|
$app->get('/logout', 'doLogout');
|
|
$app->get('/account', 'getAccount');
|
|
$app->get('/search', 'doSearch');
|
|
$app->get('/searchbyattr', 'doSearchByAttr');
|
|
$app->get('/folder/:id', 'getFolder');
|
|
$app->post('/folder/:id/move', 'moveFolder');
|
|
$app->delete('/folder/:id', 'deleteFolder');
|
|
$app->get('/folder/:id/children', 'getFolderChildren');
|
|
$app->get('/folder/:id/parent', 'getFolderParent');
|
|
$app->get('/folder/:id/path', 'getFolderPath');
|
|
$app->get('/folder/:id/attributes', 'getFolderAttributes');
|
|
$app->post('/folder/:id/createfolder', 'createFolder');
|
|
$app->put('/folder/:id/document', 'uploadDocument');
|
|
$app->get('/document/:id', 'getDocument');
|
|
$app->delete('/document/:id', 'deleteDocument');
|
|
$app->post('/document/:id/move', 'moveDocument');
|
|
$app->get('/document/:id/content', 'getDocumentContent');
|
|
$app->get('/document/:id/versions', 'getDocumentVersions');
|
|
$app->get('/document/:id/version/:version', 'getDocumentVersion');
|
|
$app->get('/document/:id/files', 'getDocumentFiles');
|
|
$app->get('/document/:id/file/:fileid', 'getDocumentFile');
|
|
$app->get('/document/:id/links', 'getDocumentLinks');
|
|
$app->get('/document/:id/attributes', 'getDocumentAttributes');
|
|
$app->get('/document/:id/preview/:version/:width', 'getDocumentPreview');
|
|
$app->put('/account/fullname', 'setFullName');
|
|
$app->put('/account/email', 'setEmail');
|
|
$app->get('/account/locked', 'getLockedDocuments');
|
|
$app->post('/accounts', 'createAccount');
|
|
$app->get('/accounts/:id', 'getAccountById');
|
|
$app->put('/accounts/:id/disable', 'setDisabledAccount');
|
|
$app->post('/groups', 'createGroup');
|
|
$app->get('/groups/:id', 'getGroup');
|
|
$app->put('/groups/:id/addUser', 'addUserToGroup');
|
|
$app->put('/groups/:id/removeUser', 'removeUserFromGroup');
|
|
$app->put('/folder/:id/setInherit', 'setFolderInheritsAccess');
|
|
$app->put('/folder/:id/access/group/add', 'addGroupAccessToFolder'); //
|
|
$app->put('/folder/:id/access/user/add', 'addUserAccessToFolder'); //
|
|
$app->put('/folder/:id/access/group/remove', 'removeGroupAccessFromFolder');
|
|
$app->put('/folder/:id/access/user/remove', 'removeUserAccessFromFolder');
|
|
$app->put('/folder/:id/access/clear', 'clearFolderAccessList');
|
|
$app->run();
|
|
|
|
?>
|