in-portal
No OneTemporary
Actions

Subscribers

None

File Metadata

Created: Thu, Feb 6, 9:54 PM

in-portal
View Options

	Index: branches/5.1.x/core/units/permissions/permissions_event_handler.php
	===================================================================
	--- branches/5.1.x/core/units/permissions/permissions_event_handler.php (revision 13824)
	+++ branches/5.1.x/core/units/permissions/permissions_event_handler.php (revision 13825)
	@@ -1,248 +1,248 @@
	<?php
	/**
	* @version $Id$
	* @package In-Portal
	* @copyright Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
	* @license GNU/GPL
	* In-Portal is Open Source software.
	* This means that this software may have been modified pursuant
	* the GNU General Public License, and as distributed it includes
	* or is derivative of works licensed under the GNU General Public License
	* or other free or open source software licenses.
	* See http://www.in-portal.org/license for copyright notices and details.
	*/

	defined('FULL_PATH') or die('restricted access!');

	class PermissionsEventHandler extends kDBEventHandler {

	/**
	* Allows to override standart permission mapping
	*
	*/
	function mapPermissions()
	{
	parent::mapPermissions();
	$permissions = Array(
	'OnGroupSavePermissions' => Array('subitem' => 'advanced:manage_permissions'),
	);
	$this->permMapping = array_merge($this->permMapping, $permissions);
	}

	/**
	* Save category permissions
	*
	* @param kEvent $event
	*/
	function OnCategorySavePermissions(&$event)
	{
	- $group_id = $this->Application->GetVar('group_id');
	+ $group_id = $this->Application->GetVar('current_group_id');
	$category_id = $this->Application->GetVar('c_id');
	$permissions = $this->Application->GetVar($event->getPrefixSpecial(true));

	if (isset($permissions[$group_id])) {
	$permissions = $permissions[$group_id];

	$object =& $event->getObject( Array('skip_autoload' => true) );
	$permissions_helper =& $this->Application->recallObject('PermissionsHelper');
	/* @var $permissions_helper kPermissionsHelper */

	$permissions_helper->LoadPermissions($group_id, $category_id, 0, 'c');

	// format: <perm_name>['inherited'] \|\| <perm_name>['value']

	$delete_ids = Array();
	$create_sql = Array();
	$update_sql = Array();
	$create_mask = '(%s,%s,'.$group_id.',%s,0,'.$category_id.')';
	$new_id = (int)$this->Conn->GetOne('SELECT MIN('.$object->IDField.') FROM '.$object->TableName);
	if($new_id > 0) $new_id = 0;
	--$new_id;

	foreach ($permissions as $perm_name => $perm_data) {
	$inherited = $perm_data['inherited'];
	$perm_value = isset($perm_data['value']) ? $perm_data['value'] : false;
	$perm_id = $permissions_helper->getPermissionID($perm_name);

	if ($inherited && ($perm_id != 0)) {
	// permission become inherited (+ direct value was set before) => DELETE
	$delete_ids[] = $permissions_helper->getPermissionID($perm_name);
	}

	if (!$inherited) {
	// not inherited
	if (($perm_id != 0) && ($perm_value != $permissions_helper->getPermissionValue($perm_name))) {
	// record was found in db & new value differs from old one => UPDATE
	$update_sql[$perm_id] = ' UPDATE '.$object->TableName.'
	SET PermissionValue = '.$perm_value.'
	WHERE (PermissionId = '.$perm_id.')';
	}

	if ($perm_id == 0) {
	// not found in db, but set directly => INSERT
	$create_sql[] = sprintf($create_mask, $new_id--, $this->Conn->qstr($perm_name), $this->Conn->qstr($perm_value));
	}
	}
	// permission state was not changed in all other cases
	}

	$this->UpdatePermissions($event, $create_sql, $update_sql, $delete_ids);
	}

	$event->MasterEvent->SetRedirectParam('item_prefix', $this->Application->GetVar('item_prefix'));
	- $event->MasterEvent->SetRedirectParam('group_id', $this->Application->GetVar('current_group_id'));
	+ $event->MasterEvent->SetRedirectParam('group_id', $this->Application->GetVar('group_id'));
	}

	/**
	* Saves permissions while editing group
	*
	* @param kEvent $event
	*/
	function OnGroupSavePermissions(&$event)
	{
	if (!$this->Application->CheckPermission('in-portal:user_groups.advanced:manage_permissions', 1)) {
	// no permission to save permissions
	return false;
	}

	$permissions = $this->Application->GetVar($event->getPrefixSpecial(true));
	if (!$permissions) {
	return false;
	}

	$object =& $event->getObject( Array('skip_autoload' => true) );
	$group_id = $this->Application->GetVar('g_id');
	$permissions_helper =& $this->Application->recallObject('PermissionsHelper');
	/* @var $permissions_helper kPermissionsHelper */

	$permissions_helper->LoadPermissions($group_id, 0, 1, 'g');

	$delete_ids = Array();
	$create_sql = Array();
	$create_mask = '(%s,%s,'.$group_id.',%s,1,0)';

	$new_id = (int)$this->Conn->GetOne('SELECT MIN('.$object->IDField.') FROM '.$object->TableName);
	if($new_id > 0) $new_id = 0;
	--$new_id;

	$sections_helper =& $this->Application->recallObject('SectionsHelper');
	foreach ($permissions as $section_name => $section_permissions) {
	$section_data =& $sections_helper->getSectionData($section_name);

	if ($section_data && isset($section_data['perm_prefix'])) {
	// using permission from other prefix
	$section_name = $this->Application->getUnitOption($section_data['perm_prefix'].'.main', 'PermSection');
	}

	foreach ($section_permissions as $perm_name => $perm_value) {

	if (!$permissions_helper->isOldPermission($section_name, $perm_name)) {
	$perm_name = $section_name.'.'.$perm_name;
	}

	$db_perm_value = $permissions_helper->getPermissionValue($perm_name);
	if ($db_perm_value == 1 && $perm_value == 0) {
	// permission was disabled => delete it's record
	$delete_ids[] = $permissions_helper->getPermissionID($perm_name);
	}
	elseif ($db_perm_value == 0 && $perm_value == 1) {
	// permission was enabled => created it's record
	$create_sql[$perm_name] = sprintf($create_mask, $new_id--, $this->Conn->qstr($perm_name), $this->Conn->qstr($perm_value));
	}
	// permission state was not changed in all other cases
	}
	}

	$this->UpdatePermissions($event, $create_sql, Array(), $delete_ids);

	if ($this->Application->GetVar('advanced_save') == 1) {
	// advanced permission popup [save button]
	$this->finalizePopup($event);
	// $event->redirect = 'incs/just_close';
	}
	elseif ($this->Application->GetVar('section_name') != '') {
	// save simple permissions before opening advanced permission popup
	$event->redirect = false;
	}

	}

	/**
	* Apply modification sqls to permissions table
	*
	* @param kEvent $event
	* @param Array $create_sql
	* @param Array $update_sql
	* @param Array $delete_ids
	*/
	function UpdatePermissions(&$event, $create_sql, $update_sql, $delete_ids)
	{
	$object =& $event->getObject();
	/* @var $object kDBItem */

	if ($delete_ids) {
	$action = clDELETE;
	$object->Load($delete_ids[count($delete_ids) - 1]);

	$delete_sql = ' DELETE FROM '.$object->TableName.'
	WHERE '.$object->IDField.' IN ('.implode(',', $delete_ids).')';
	$this->Conn->Query($delete_sql);
	}

	if ($create_sql) {
	$create_sql = ' INSERT INTO '.$object->TableName.'
	VALUES '.implode(',', $create_sql);
	$this->Conn->Query($create_sql);

	$sql = 'SELECT MIN(' . $object->IDField . ')
	FROM ' . $object->TableName;
	$id = $this->Conn->GetOne($sql);

	$action = clCREATE;
	$object->Load($id);
	}

	if ($update_sql) {
	foreach ($update_sql as $id => $sql) {
	$this->Conn->Query($sql);
	}

	$action = clUPDATE;
	$object->Load($id);
	$object->SetDBField('PermissionValue', $object->GetDBField('PermissionValue') ? 0 : 1);
	}

	if ($delete_ids \|\| $create_sql \|\| $update_sql) {
	$object->setModifiedFlag($action);

	if ($event->Name == 'OnCategorySavePermissions') {
	$this->Application->StoreVar('PermCache_UpdateRequired', 1);
	}
	}
	}

	/**
	* Don't delete permissions from live table in case of new category creation.
	* Called as much times as permission count for categories set, so don't
	* perform any sql queries here!
	*
	* @param kEvent $event
	*/
	function OnBeforeDeleteFromLive(&$event)
	{
	if ($event->Prefix == 'c-perm') {
	// only when saving category permissions, not group permissions
	$foreign_keys = $event->getEventParam('foreign_key');

	if ((count($foreign_keys) == 1) && ($foreign_keys[0] == 0)) {
	// parent item has zero id
	$temp_object =& $this->Application->recallObject('c');
	if ($temp_object->isLoaded()) {
	// category with id = 0 found in temp table
	$event->status = erFAIL;
	}
	}
	}
	}

	}
	\ No newline at end of file
	Index: branches/5.1.x/core/admin_templates/categories/categories_edit_permissions.tpl
	===================================================================
	--- branches/5.1.x/core/admin_templates/categories/categories_edit_permissions.tpl (revision 13824)
	+++ branches/5.1.x/core/admin_templates/categories/categories_edit_permissions.tpl (revision 13825)
	@@ -1,212 +1,219 @@
	<inp2:adm_SetPopupSize width="880" height="680"/>

	<inp2:m_include t="incs/header"/>
	<inp2:m_RenderElement name="combined_header" prefix="c" section="in-portal:browse" g[grid]="Radio" title_preset="categories_permissions" tab_preset="Default"/>

	<inp2:m_include template="catalog/catalog_elements"/>
	<inp2:m_include t="categories/categories_tabs"/>

	<!-- ToolBar -->
	<table class="toolbar" height="30" cellspacing="0" cellpadding="0" width="100%" border="0">
	<tbody>
	<tr>
	<td>
	<script type="text/javascript" src="js/ajax.js"></script>
	<script type="text/javascript" src="js/catalog.js"></script>
	<script type="text/javascript">
	Request.progressText = '<inp2:m_phrase name="la_title_Loading" no_editing="1" escape="1"/>';

	Catalog.prototype.AfterInit = function () {
	- $('#current_group_id').change();
	+ $('#group_id').change();
	}

	Catalog.prototype.go_to_group = function($group_id) {
	this.switchTab(); // refresh current item tab
	}

	Catalog.prototype.refreshTab = function($prefix, $div_id, $force) {
	- var $group_id = $('#current_group_id').val();
	+ var $group_id = $('#group_id').val();
	// alert('refreshTab. GroupID: '+$group_id);
	var $tab_group_id = document.getElementById($div_id).getAttribute('group_id');
	if ($group_id != $tab_group_id \|\| $force) {
	// query tab content only in case if not queried or category don't match
	var $url = this.URLMask.replace('#ITEM_PREFIX#', $prefix).replace('#GROUP_ID#', $group_id);
	this.BusyRequest[$prefix] = false;

	Request.makeRequest($url, this.BusyRequest[$prefix], $div_id, this.successCallback, this.errorCallback, $div_id, this);
	}
	/*else {
	alert('refresh disabled = {tab: '+this.ActivePrefix+'; group_id: '+$group_id+'}');
	}*/
	}

	// adds information about tab to tab_registry
	Catalog.prototype.registerTab = function($tab_id) {
	var $tab = document.getElementById($tab_id + '_div');
	var $index = this.TabRegistry.length;
	this.TabRegistry[$index] = new Array();
	this.TabRegistry[$index]['tab_id'] = $tab_id;
	this.TabRegistry[$index]['prefix'] = $tab.getAttribute('prefix');
	this.TabRegistry[$index]['dep_buttons'] = new Array();
	this.TabRegistry[$index]['index'] = $index;
	}

	Catalog.prototype.displaySearch = function ($prefix) {

	}

	Catalog.prototype.submit_event = function($prefix_special, $event, $t) {
	var $prev_template = get_hidden_field('t');
	if (isset($event)) set_hidden_field('events[' + $prefix_special + ']', $event);
	if (isset($t)) set_hidden_field('t', $t);

	var $tab_id = this.queryTabRegistry('prefix', this.ActivePrefix, 'tab_id');
	this.submit_kernel_form();

	set_hidden_field('t', $prev_template);
	}

	var $PermManager = new Catalog('<inp2:m_Link template="categories/permissions_tab" item_prefix="#ITEM_PREFIX#" group_id="#GROUP_ID#" no_amp="1" pass="m,c"/>', 'permmanager_', 'CategoryPermissionEditor');

	a_toolbar = new ToolBar();
	a_toolbar.AddButton( new ToolBarButton('select', '<inp2:m_phrase label="la_ToolTip_Save" escape="1"/>', function() {
	submit_event('c','<inp2:c_SaveEvent/>');
	}
	) );
	a_toolbar.AddButton( new ToolBarButton('cancel', '<inp2:m_phrase label="la_ToolTip_Cancel" escape="1"/>', function() {
	submit_event('c','OnCancelEdit');
	}
	) );

	a_toolbar.AddButton( new ToolBarSeparator('sep1') );

	a_toolbar.AddButton( new ToolBarButton('prev', '<inp2:m_phrase label="la_ToolTip_Prev" escape="1"/>', function() {
	go_to_id('c', '<inp2:c_PrevId/>');
	}
	) );
	a_toolbar.AddButton( new ToolBarButton('next', '<inp2:m_phrase label="la_ToolTip_Next" escape="1"/>', function() {
	go_to_id('c', '<inp2:c_NextId/>');
	}
	) );

	function edit(){ }

	a_toolbar.Render();

	<inp2:m_if check="c_IsSingle">
	a_toolbar.HideButton('prev');
	a_toolbar.HideButton('next');
	a_toolbar.HideButton('sep1');
	<inp2:m_else/>
	<inp2:m_if check="c_IsLast">
	a_toolbar.DisableButton('next');
	</inp2:m_if>
	<inp2:m_if check="c_IsFirst">
	a_toolbar.DisableButton('prev');
	</inp2:m_if>
	</inp2:m_if>
	</script>
	</td>

	<inp2:m_RenderElement name="search_main_toolbar" prefix="g" grid="Radio"/>
	</tr>
	</tbody>
	</table>

	<inp2:c_SaveWarning name="grid_save_warning"/>

	<div id="scroll_container" mode="minimal">
	<table class="edit-form" style="border-bottom: 1px solid black;">
	<inp2:m_RenderElement name="subsection" title="la_section_General"/>
	<tr class="<inp2:m_odd_even odd='edit-form-odd' even='edit-form-even'/>">
	<td class="label-cell">
	<inp2:m_Phrase name="la_fld_Group"/>:
	</td>
	<td class="control-mid"> </td>
	<td class="control-cell">
	- <select name="current_group_id" id="current_group_id">
	+ <select name="group_id" id="group_id">
	<inp2:m_DefineElement name="group_element">
	<option value="<inp2:Field name='GroupId'/>"><inp2:Field name="Name"/></option>
	</inp2:m_DefineElement>

	<inp2:g_PrintList render_as="group_element" per_page="-1"/>
	</select>
	</td>
	</tr>

	<inp2:m_RenderElement name="inp_edit_filler"/>
	</table>
	</div>

	<br/>

	<!-- item tabs: begin -->
	<inp2:m_DefineElement name="item_tab" title="" special="">
	<td class="tab-spacer"><img src="img/spacer.gif" width="3" height="1"/></td>
	<td id="<inp2:m_param name="prefix"/><inp2:m_param name="special"/>_tab" class="tab">
	<img src="<inp2:m_TemplatesBase module='$icon_module'/>/img/itemicons/<inp2:m_Param name='icon'/>" width="16" height="16" align="absmiddle" alt=""/>
	<a href="#" onclick="$PermManager.switchTab('<inp2:m_param name="prefix"/>'); return false;" class="tab-link">
	<inp2:m_param name="title"/>
	</a>
	</td>
	</inp2:m_DefineElement>

	<inp2:m_DefineElement name="permission_tabs">
	<inp2:adm_ListCatalogTabs render_as="item_tab" title_property="PermTabText"/>
	</inp2:m_DefineElement>

	<inp2:m_RenderElement name="tabs_container" tabs_render_as="permission_tabs"/>
	<!-- item tabs: end -->

	<inp2:c-perm_PrintTabs template="categories/permissions_tab" tab_init="1"/>

	<inp2:m_include t="incs/footer"/>

	<script type="text/javascript">
	var $last_group_id = false;

	function update_light(perm_name, value)
	{
	document.getElementById('light_'+perm_name).src = 'img/perm_' + (value ? 'green' : 'red') + '.gif';
	}

	function inherited_click(perm_name, inherited_value, state, access_cb_id)
	{
	if (state) {
	update_light(perm_name, inherited_value);
	document.getElementById(access_cb_id).disabled = true;
	}
	else {
	update_light(perm_name, document.getElementById(access_cb_id).checked)
	document.getElementById(access_cb_id).disabled = false;
	}
	}

	$(document).ready(
	function() {
	// last selected group
	- set_hidden_field('group_id', $('#current_group_id').val());
	+ set_hidden_field('current_group_id', $('#group_id').val());

	- $('#current_group_id').change(
	+ $('#group_id').change(
	function ($e) {
	var $group_id = $(this).val();

	if ($last_group_id !== false) {
	// save permissions from previous selected group
	- set_hidden_field('group_id', $last_group_id);
	+ set_hidden_field('current_group_id', $last_group_id);
	set_hidden_field('item_prefix', $PermManager.ActivePrefix);
	$PermManager.submit_event('c', 'OnPreSave', 'categories/permissions_tab');
	}

	// get permissions from new group
	$PermManager.go_to_group($group_id);

	// remember previous selected group
	$last_group_id = $group_id;
	}
	);

	$PermManager.Init(false);
	}
	);
	+
	+ Application.setHook(
	+ new Array ('c:OnPreSaveAndGoToTab', 'c:OnPreSaveAndGo', 'c:OnSave'),
	+ function($event) {
	+ set_hidden_field('current_group_id', $last_group_id);
	+ }
	+ );
	</script>
	\ No newline at end of file

in-portalNo OneTemporaryActions

File Metadata

in-portalView Options

Event Timeline

in-portal
No OneTemporary
Actions

in-portal
View Options