perms.php

Go to the documentation of this file.

<?php
/* Copyright (C) 2002-2005  Rodolphe Quiedeville  <rodolphe@quiedeville.org>
 * Copyright (C) 2002-2003  Jean-Louis Bergamo    <jlb@j1b.org>
 * Copyright (C) 2004-2020  Laurent Destailleur   <eldy@users.sourceforge.net>
 * Copyright (C) 2004   Eric Seigne       <eric.seigne@ryxeo.com>
 * Copyright (C) 2005-2017  Regis Houssin     <regis.houssin@inodbox.com>
 * Copyright (C) 2020   Tobias Sekan      <tobias.sekan@startmail.com>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program. If not, see <https://www.gnu.org/licenses/>.
 */

require '../../main.inc.php';
require_once DOL_DOCUMENT_ROOT.'/user/class/usergroup.class.php';
require_once DOL_DOCUMENT_ROOT.'/core/lib/usergroups.lib.php';
require_once DOL_DOCUMENT_ROOT.'/core/lib/functions2.lib.php';
require_once DOL_DOCUMENT_ROOT.'/core/lib/admin.lib.php';

// Load translation files required by page
$langs->loadLangs(array('users', 'admin'));

$id = GETPOST('id', 'int');
$action = GETPOST('action', 'aZ09');
$confirm = GETPOST('confirm', 'alpha');
$module = GETPOST('module', 'alpha');
$rights = GETPOST('rights', 'int');
$contextpage = GETPOST('contextpage', 'aZ') ?GETPOST('contextpage', 'aZ') : 'groupperms'; // To manage different context of search

// Define if user can read permissions
$canreadperms = ($user->admin || $user->rights->user->user->lire);
// Define if user can modify group permissions
$caneditperms = ($user->admin || $user->rights->user->user->creer);
// Advanced permissions
$advancedpermsactive = false;
if (!empty($conf->global->MAIN_USE_ADVANCED_PERMS))
{
  $advancedpermsactive = true;
  $canreadperms = ($user->admin || ($user->rights->user->group_advance->read && $user->rights->user->group_advance->readperms));
  $caneditperms = ($user->admin || $user->rights->user->group_advance->write);
}

if (!$canreadperms) accessforbidden();

$object = new Usergroup($db);
$object->fetch($id);

$entity = $conf->entity;

// Initialize technical object to manage hooks of page. Note that conf->hooks_modules contains array of hook context
$hookmanager->initHooks(array('groupperms', 'globalcard'));


$parameters = array();
$reshook = $hookmanager->executeHooks('doActions', $parameters, $object, $action); // Note that $action and $object may have been modified by some hooks
if ($reshook < 0) setEventMessages($hookmanager->error, $hookmanager->errors, 'errors');

if (empty($reshook)) {
  if ($action == 'addrights' && $caneditperms) {
    $editgroup = new Usergroup($db);
    $result = $editgroup->fetch($id);
    if ($result > 0) {
      $result = $editgroup->addrights($rights, $module, '', $entity);
      if ($result < 0) {
        setEventMessages($editgroup->error, $editgroup->errors, 'errors');
      }
    } else {
      dol_print_error($db);
    }
  }

  if ($action == 'delrights' && $caneditperms) {
    $editgroup = new Usergroup($db);
    $result = $editgroup->fetch($id);
    if ($result > 0) {
      $result = $editgroup->delrights($rights, $module, '', $entity);
      if ($result < 0) {
        setEventMessages($editgroup->error, $editgroup->errors, 'errors');
      }
    } else {
      dol_print_error($db);
    }
  }
}


$form = new Form($db);

llxHeader('', $langs->trans("Permissions"));

if ($object->id > 0)
{
  /*
   * Affichage onglets
   */
  $object->getrights(); // Reload permission

  $head = group_prepare_head($object);
  $title = $langs->trans("Group");
  print dol_get_fiche_head($head, 'rights', $title, -1, 'group');

  // Charge les modules soumis a permissions
  $modules = array();
  $modulesdir = dolGetModulesDirs();

  $db->begin();

  foreach ($modulesdir as $dir)
  {
    $handle = @opendir(dol_osencode($dir));
    if (is_resource($handle))
    {
      while (($file = readdir($handle)) !== false)
      {
        if (is_readable($dir.$file) && substr($file, 0, 3) == 'mod' && substr($file, dol_strlen($file) - 10) == '.class.php')
        {
          $modName = substr($file, 0, dol_strlen($file) - 10);

          if ($modName)
          {
            include_once $dir.$file;
            $objMod = new $modName($db);
            // Load all lang files of module
            if (isset($objMod->langfiles) && is_array($objMod->langfiles))
            {
              foreach ($objMod->langfiles as $domain)
              {
                $langs->load($domain);
              }
            }
            // Load all permissions
            if ($objMod->rights_class)
            {
              $ret = $objMod->insert_permissions(0, $entity);
              $modules[$objMod->rights_class] = $objMod;
            }
          }
        }
      }
    }
  }

  $db->commit();

  // Read permissions of group
  $permsgroupbyentity = array();

  $sql = "SELECT DISTINCT r.id, r.libelle, r.module, gr.entity";
  $sql .= " FROM ".MAIN_DB_PREFIX."rights_def as r,";
  $sql .= " ".MAIN_DB_PREFIX."usergroup_rights as gr";
  $sql .= " WHERE gr.fk_id = r.id";
  $sql .= " AND gr.entity = ".$entity;
  $sql .= " AND gr.fk_usergroup = ".$object->id;

  dol_syslog("get user perms", LOG_DEBUG);
  $result = $db->query($sql);
  if ($result)
  {
    $num = $db->num_rows($result);
    $i = 0;
    while ($i < $num)
    {
      $obj = $db->fetch_object($result);
      if (!isset($permsgroupbyentity[$obj->entity]))
        $permsgroupbyentity[$obj->entity] = array();
        array_push($permsgroupbyentity[$obj->entity], $obj->id);
        $i++;
    }
    $db->free($result);
  } else {
    dol_print_error($db);
  }

  $linkback = '<a href="'.DOL_URL_ROOT.'/user/group/list.php?restore_lastsearch_values=1">'.$langs->trans("BackToList").'</a>';

  dol_banner_tab($object, 'id', $linkback, $user->rights->user->user->lire || $user->admin);

  print '<div class="fichecenter">';
  print '<div class="underbanner clearboth"></div>';

  /*
   * Ecran ajout/suppression permission
   */

  print '<table class="border centpercent tableforfield">';

  // Name (already in dol_banner, we keep it to have the GlobalGroup picto, but we should move it in dol_banner)
  if (!empty($conf->mutlicompany->enabled))
  {
    print '<tr><td class="titlefield">'.$langs->trans("Name").'</td>';
    print '<td colspan="2">'.$object->name.'';
    if (!$object->entity)
    {
      print img_picto($langs->trans("GlobalGroup"), 'redstar');
    }
    print "</td></tr>\n";
  }

  // Note
  print '<tr><td class="titlefield tdtop">'.$langs->trans("Description").'</td>';
  print '<td class="valeur sensiblehtmlcontent">';
  print dol_string_onlythesehtmltags(dol_htmlentitiesbr($object->note));
  print '</td>';
  print "</tr>\n";

  print '</table><br>';

  if ($user->admin) print info_admin($langs->trans("WarningOnlyPermissionOfActivatedModules"));

  $parameters = array();
  $reshook = $hookmanager->executeHooks('insertExtraHeader', $parameters, $object, $action); // Note that $action and $object may have been modified by some hooks
  if ($reshook < 0) setEventMessages($hookmanager->error, $hookmanager->errors, 'errors');

  print "\n";
  print '<div class="div-table-responsive-no-min">';
  print '<table class="noborder centpercent">';
  print '<tr class="liste_titre">';
  print '<td>'.$langs->trans("Module").'</td>';
  if ($caneditperms)
  {
    print '<td class="center nowrap">';
    print '<a class="reposition commonlink" title="'.dol_escape_htmltag($langs->trans("All")).'" alt="'.dol_escape_htmltag($langs->trans("All")).'" href="'.$_SERVER["PHP_SELF"].'?id='.$object->id.'&amp;action=addrights&amp;entity='.$entity.'&amp;module=allmodules">'.$langs->trans("All")."</a>";
    print '/';
    print '<a class="reposition commonlink" title="'.dol_escape_htmltag($langs->trans("None")).'" alt="'.dol_escape_htmltag($langs->trans("None")).'" href="'.$_SERVER["PHP_SELF"].'?id='.$object->id.'&amp;action=delrights&amp;entity='.$entity.'&amp;module=allmodules">'.$langs->trans("None")."</a>";
    print '</td>';
  }
  print '<td class="center" width="24">&nbsp;</td>';
  print '<td>'.$langs->trans("Permissions").'</td>';
  if ($user->admin) print '<td class="right">'.$langs->trans("ID").'</td>';
  print '</tr>'."\n";

  $sql = "SELECT r.id, r.libelle as label, r.module";
  $sql .= " FROM ".MAIN_DB_PREFIX."rights_def as r";
  $sql .= " WHERE r.libelle NOT LIKE 'tou%'"; // On ignore droits "tous"
  $sql .= " AND r.entity = ".$entity;
  if (empty($conf->global->MAIN_USE_ADVANCED_PERMS)) $sql .= " AND r.perms NOT LIKE '%_advance'"; // Hide advanced perms if option is disable
  $sql .= " ORDER BY r.module, r.id";

  $result = $db->query($sql);
  if ($result)
  {
    $num = $db->num_rows($result);
    $i = 0;
    $oldmod = '';

    while ($i < $num)
    {
      $obj = $db->fetch_object($result);

      // If line is for a module that doe snot existe anymore (absent of includes/module), we ignore it
      if (empty($modules[$obj->module]))
      {
        $i++;
        continue;
      }

      if ($oldmod <> $obj->module)
      {
        $oldmod = $obj->module;

        // Break detected, we get objMod
        $objMod = $modules[$obj->module];
        $picto = ($objMod->picto ? $objMod->picto : 'generic');

        // Show break line
        print '<tr class="oddeven trforbreak">';
        print '<td class="maxwidthonsmartphone tdoverflowonsmartphone">';
        print img_object('', $picto, 'class="pictoobjectwidth paddingright"').' '.$objMod->getName();
        print '<a name="'.$objMod->getName().'"></a>';
        print '</td>';
        if ($caneditperms)
        {
          print '<td class="center nowrap">';
          print '<a class="reposition" title='.$langs->trans("All").' alt='.$langs->trans("All").' href="'.$_SERVER["PHP_SELF"].'?id='.$object->id.'&amp;action=addrights&amp;entity='.$entity.'&amp;module='.$obj->module.'">'.$langs->trans("All")."</a>";
          print '/';
          print '<a class="reposition" title='.$langs->trans("None").' alt='.$langs->trans("None").' href="'.$_SERVER["PHP_SELF"].'?id='.$object->id.'&amp;action=delrights&amp;entity='.$entity.'&amp;module='.$obj->module.'">'.$langs->trans("None")."</a>";
          print '</td>';
        } else {
          print '<td>&nbsp;</td>';
        }
        print '<td colspan="2">&nbsp;</td>';

        // Permission id
        if ($user->admin) print '<td class="right"></td>';

        print '</tr>';
      }

      print '<!-- '.$obj->module.'->'.$obj->perms.($obj->subperms ? '->'.$obj->subperms : '').' -->'."\n";
      print '<tr class="oddeven">';

      // Picto and label of module
      print '<td class="maxwidthonsmartphone tdoverflowonsmartphone">';
      //print img_object('', $picto, 'class="inline-block pictoobjectwidth"').' '.$objMod->getName();
      print '</td>';

      if (is_array($permsgroupbyentity[$entity]))
      {
        if (in_array($obj->id, $permsgroupbyentity[$entity]))
        {
          // Own permission by group
          if ($caneditperms)
          {
            print '<td class="center"><a class="reposition" href="'.$_SERVER["PHP_SELF"].'?id='.$object->id.'&amp;action=delrights&amp;entity='.$entity.'&amp;rights='.$obj->id.'">';
            //print img_edit_remove($langs->trans("Remove"));
            print img_picto($langs->trans("Remove"), 'switch_on');
            print '</a></td>';
          }
          print '<td class="center nowrap">';
          print img_picto($langs->trans("Active"), 'tick');
          print '</td>';
        } else {
          // Do not own permission
          if ($caneditperms)
          {
            print '<td class="center"><a class="reposition" href="'.$_SERVER["PHP_SELF"].'?id='.$object->id.'&amp;action=addrights&amp;entity='.$entity.'&amp;rights='.$obj->id.'">';
            //print img_edit_add($langs->trans("Add"));
            print img_picto($langs->trans("Add"), 'switch_off');
            print '</a></td>';
          }
          print '<td>&nbsp</td>';
        }
      } else {
        // Do not own permission
        if ($caneditperms)
        {
          print '<td class="center"><a class="reposition" href="'.$_SERVER["PHP_SELF"].'?id='.$object->id.'&amp;action=addrights&amp;entity='.$entity.'&amp;rights='.$obj->id.'">';
          //print img_edit_add($langs->trans("Add"));
          print img_picto($langs->trans("Add"), 'switch_off');
          print '</a></td>';
        }
        print '<td>&nbsp</td>';
      }

      $permlabel = ($conf->global->MAIN_USE_ADVANCED_PERMS && ($langs->trans("PermissionAdvanced".$obj->id) != ("PermissionAdvanced".$obj->id)) ? $langs->trans("PermissionAdvanced".$obj->id) : (($langs->trans("Permission".$obj->id) != ("Permission".$obj->id)) ? $langs->trans("Permission".$obj->id) : $langs->trans($obj->label)));
      print '<td class="maxwidthonsmartphone">'.$permlabel.'</td>';

      // Permission id
      if ($user->admin) print '<td class="right"><span class="opacitymedium">'.$obj->id.'</span></td>';

      print '</tr>'."\n";

      $i++;
    }
  }
  print '</table>';
  print '</div>';

  print '</div>';

  $parameters = array();
  $reshook = $hookmanager->executeHooks('insertExtraFooter', $parameters, $object, $action); // Note that $action and $object may have been modified by some hooks
  if ($reshook < 0) setEventMessages($hookmanager->error, $hookmanager->errors, 'errors');

  print dol_get_fiche_end();
}

// End of page
llxFooter();
$db->close();