in-portal
No OneTemporary
Actions

Subscribers

None

File Metadata

Created: Mon, Jan 6, 4:38 AM

in-portal
View Options

	Index: branches/RC/core/kernel/processors/main_processor.php
	===================================================================
	--- branches/RC/core/kernel/processors/main_processor.php (revision 10030)
	+++ branches/RC/core/kernel/processors/main_processor.php (revision 10031)
	@@ -1,1113 +1,1115 @@
	<?php

	class kMainTagProcessor extends TagProcessor {

	function Init($prefix, $special, $event_params = null)
	{
	parent::Init($prefix, $special, $event_params);

	$actions =& $this->Application->recallObject('kActions');
	$actions->Set('t', $this->Application->GetVar('t'));
	$actions->Set('sid', $this->Application->GetSID());
	$actions->Set('m_opener', $this->Application->GetVar('m_opener') );
	}

	/**
	* Used to handle calls where tag name
	* match with existing php function name
	*
	* @param Tag $tag
	* @return string
	*/
	function ProcessTag(&$tag)
	{
	if ($tag->Tag=='include') $tag->Tag='MyInclude';
	return parent::ProcessTag($tag);
	}

	/**
	* Base folder for all template includes
	*
	* @param Array $params
	* @return string
	*/
	function TemplatesBase($params)
	{
	if ($this->Application->IsAdmin()) {
	$module = isset($params['module']) ? $params['module'] : 'core';
	if ($module == 'in-portal') {
	$module = 'kernel';
	}
	$path = preg_replace('/\/(.?)\/(.)/', $module.'/\\2', THEMES_PATH); // remove leading slash + substitute module
	}
	else {
	$path = substr(THEMES_PATH, 1);
	$module = isset($params['module']) ? $params['module'] : 'core';

	if (strtolower($module) == 'in-portal') {
	$module_folder = 'platform';
	}
	else {
	$module_folder = $this->Application->findModule('Name', $module, 'TemplatePath');
	}
	$path .= '/'.trim($module_folder, '/').'/';
	}
	return $this->Application->BaseURL().$path;
	}

	/**
	* Creates <base href ..> HTML tag for all templates
	* affects future css, js files and href params of links
	*
	* @return string
	* @access public
	*/
	function Base_Ref($params)
	{
	return '<base href="'.$this->TemplatesBase($params).'/" />';
	}

	/**
	* Returns base url for web-site
	*
	* @return string
	* @access public
	*/
	function BaseURL()
	{
	return $this->Application->BaseURL();
	}

	//for compatability with K3 tags
	function Base($params)
	{
	return $this->TemplatesBase($params).'/';
	}

	function ProjectBase($params)
	{
	return $this->Application->BaseURL();
	}

	/*function Base($params)
	{
	return $this->Application->BaseURL().$params['add'];
	}*/

	/**
	* Used to create link to any template.
	* use "pass" paramter if "t" tag to specify
	* prefix & special of object to be represented
	* in resulting url
	*
	* @param Array $params
	* @return string
	* @access public
	*/
	function T($params)
	{
	//by default link to current template
	$t = $this->SelectParam($params, 't,template');
	unset($params['t']);
	unset($params['template']);
	$prefix=isset($params['prefix']) ? $params['prefix'] : ''; unset($params['prefix']);
	$index_file = isset($params['index_file']) ? $params['index_file'] : null; unset($params['index_file']);

	return $this->Application->HREF($t, $prefix, $params, $index_file);
	}

	function Link($params)
	{
	if (isset($params['template'])) {
	$params['t'] = $params['template'];
	unset($params['template']);
	}
	if (!isset($params['pass']) && !isset($params['no_pass'])) $params['pass'] = 'm';
	if (isset($params['no_pass'])) unset($params['no_pass']);

	if( $this->Application->GetVar('admin') ) $params['admin'] = 1;

	return $this->T($params);
	}

	function Env($params)
	{
	$t = $params['template'];
	unset($params['template']);
	return $this->Application->BuildEnv($t, $params, 'm', null, false);
	}

	function FormAction($params)
	{
	$params['pass'] = 'all,m';
	$params['pass_category'] = 1;

	return $this->Application->HREF('', '', $params);
	}

	/*// NEEDS TEST
	function Config($params)
	{
	return $this->Application->ConfigOption($params['var']);
	}

	function Object($params)
	{
	$name = $params['name'];
	$method = $params['method'];

	$tmp =& $this->Application->recallObject($name);
	if ($tmp != null) {
	if (method_exists($tmp, $method))
	return $tmp->$method($params);
	else
	echo "Method $method does not exist in object ".get_class($tmp)." named $name<br>";
	}
	else
	echo "Object $name does not exist in the appliaction<br>";
	}*/

	/**
	* Tag, that always returns true.
	* For parser testing purposes
	*
	* @param Array $params
	* @return bool
	* @access public
	*/
	function True($params)
	{
	return true;
	}

	/**
	* Tag, that always returns false.
	* For parser testing purposes
	*
	* @param Array $params
	* @return bool
	* @access public
	*/
	function False($params)
	{
	return false;
	}

	/**
	* Returns block parameter by name
	*
	* @param Array $params
	* @return stirng
	* @access public
	*/
	function Param($params)
	{
	//$parser =& $this->Application->recallObject('TemplateParser');
	$name = $params['name'];
	if (isset($this->Application->LateParsed[$name])) {
	$f = $this->Application->PreParsedBlocks['capture_'.$name.$this->Application->LateParsed[$name]];
	$this->Application->Parser->SetParam($name, $f(array()));
	}

	$res = $this->Application->Parser->GetParam($params['name']);
	if ($res === false) $res = '';
	if (isset($params['plus']))
	$res += $params['plus'];
	return $res;
	}

	function DefaultParam($params)
	{
	foreach ($params as $key => $val) {
	if ($this->Application->Parser->GetParam($key) === false) {
	$this->Application->Parser->SetParam($key, $val);
	}
	}
	}

	/**
	* Gets value of specified field from specified prefix_special and set it as parser param
	*
	* @param Array $params
	*/
	/*function SetParam($params)
	{
	// <inp2:m_SetParam param="custom_name" src="cf:FieldName"/>
	list($prefix_special, $field_name) = explode(':', $params['src']);

	$object =& $this->Application->recallObject($prefix_special);
	$name = $this->SelectParam($params, 'param,name,var');

	$this->Application->Parser->SetParam($name, $object->GetField($field_name) );
	}*/

	/**
	* Compares block parameter with value specified
	*
	* @param Array $params
	* @return bool
	* @access public
	*/
	function ParamEquals($params)
	{
	//$parser =& $this->Application->recallObject('TemplateParser');
	$name = $this->SelectParam($params, 'name,var,param');
	$value = $params['value'];
	return ($this->Application->Parser->GetParam($name) == $value);
	}

	/*function PHP_Self($params)
	{
	return $HTTP_SERVER_VARS['PHP_SELF'];
	}
	*/

	/**
	* Returns session variable value by name
	*
	* @param Array $params
	* @return string
	* @access public
	*/
	function Recall($params)
	{
	$var_name = $this->SelectParam($params,'name,var,param');

	if (isset($params['persistent']) && $params['persistent']) {
	$ret = $this->Application->RecallPersistentVar($var_name);
	}
	else {
	$ret = $this->Application->RecallVar($var_name);
	}

	$ret = ($ret === false && isset($params['no_null'])) ? '' : $ret;
	if (getArrayValue($params, 'special') \|\| getArrayValue($params, 'htmlchars')) {
	$ret = htmlspecialchars($ret);
	}

	if (getArrayValue($params, 'urlencode')) {
	$ret = urlencode($ret);
	}

	return $ret;
	}

	function RemoveVar($params)
	{
	$this->Application->RemoveVar( $this->SelectParam($params,'name,var,param') );
	}

	// bad style to store something from template to session !!! (by Alex)
	// Used here only to test how session works, nothing more
	function Store($params)
	{
	//echo"Store $params[name]<br>";
	$name = $params['name'];
	$value = $params['value'];
	$this->Application->StoreVar($name,$value);
	}

	/**
	* Sets application variable value(-s)
	*
	* @param Array $params
	* @access public
	*/
	function Set($params)
	{
	foreach ($params as $param => $value) {
	$this->Application->SetVar($param, $value);
	}
	}

	/**
	* Increment application variable
	* specified by number specified
	*
	* @param Array $params
	* @access public
	*/
	function Inc($params)
	{
	$this->Application->SetVar($params['param'], $this->Application->GetVar($params['param']) + $params['by']);
	}

	/**
	* Retrieves application variable
	* value by name
	*
	* @param Array $params
	* @return string
	* @access public
	*/
	function Get($params)
	{
	$ret = $this->Application->GetVar($this->SelectParam($params, 'name,var,param'), '');
	return getArrayValue($params, 'htmlchars') ? htmlspecialchars($ret) : $ret;
	}

	/**
	* Retrieves application constant
	* value by name
	*
	* @param Array $params
	* @return string
	* @access public
	*/
	function GetConst($params)
	{
	return defined($this->SelectParam($params, 'name,const')) ? constant($this->SelectParam($params, 'name,const,param')) : '';
	}

	/**
	* Retrieves configuration variable value by name
	*
	* @param Array $params
	* @return string
	* @access public
	*/
	function GetConfig($params)
	{
	$config_name = $this->SelectParam($params, 'name,var');
	$ret = $this->Application->ConfigValue($config_name);
	if( getArrayValue($params, 'escape') ) $ret = addslashes($ret);
	return $ret;
	}

	function ConfigEquals($params)
	{
	$option = $this->SelectParam($params, 'name,option,var');
	return $this->Application->ConfigValue($option) == getArrayValue($params, 'value');
	}

	/**
	* Creates all hidden fields
	* needed for kernel_form
	*
	* @param Array $params
	* @return string
	* @access public
	*/
	function DumpSystemInfo($params)
	{
	$actions =& $this->Application->recallObject('kActions');
	$actions->Set('t', $this->Application->GetVar('t') );

	$params = $actions->GetParams();
	$o='';
	foreach ($params AS $name => $val)
	{
	$o .= "<input type='hidden' name='$name' id='$name' value='$val'>\n";
	}
	return $o;
	}

	/**
	* Used for search sidebox on front-end only
	*
	* @param Array $params
	* @return string
	* @author Alex
	*/
	function GetFormHiddens($params)
	{
	$t = $this->SelectParam($params, 'template,t');
	unset($params['template']);

	$form_fields = Array ();
	if ($this->Application->RewriteURLs()) {
	$session =& $this->Application->recallObject('Session');
	if ($session->NeedQueryString()) {
	$form_fields['sid'] = $this->Application->GetSID();
	}
	}
	else {
	$form_fields['env'] = $this->Application->BuildEnv($t, $params, 'm', null, false);
	}

	if ($this->Application->GetVar('admin') == 1) {
	$form_fields['admin'] = 1;
	}

	$ret = '';
	$field_tpl = '<input type="hidden" name="%1$s" id="%1$s" value="%2$s"/>'."\n";
	foreach ($form_fields as $form_field => $field_value) {
	$ret .= sprintf($field_tpl, $form_field, $field_value);
	}

	return $ret;
	}

	function Odd_Even($params)
	{
	$odd = $params['odd'];
	$even = $params['even'];
	if (!isset($params['var'])) {
	$var = 'odd_even';
	}
	else {
	$var = $params['var'];
	}

	if ($this->Application->GetVar($var) == 'even') {
	if (!isset($params['readonly']) \|\| !$params['readonly']) {
	$this->Application->SetVar($var, 'odd');
	}
	return $even;
	}
	else {
	if (!isset($params['readonly']) \|\| !$params['readonly']) {
	$this->Application->SetVar($var, 'even');
	}
	return $odd;
	}
	}

	/**
	* Returns phrase translation by name
	*
	* @param Array $params
	* @return string
	* @access public
	*/
	function Phrase($params)
	{
	// m:phrase name="phrase_name" default="Tr-alala" updated="2004-01-29 12:49"
	$phrase_name = $this->SelectParam($params, 'label,name,title');
	if (isset($params['source']) && $params['source']) {
	$phrase_name = $this->Application->GetVar($phrase_name);
	if (array_key_exists('default', $params) && !$phrase_name) {
	$phrase_name = $params['default'];
	}
	}

	$translation = $this->Application->Phrase($phrase_name);

	if (isset($params['escape']) && $params['escape']) {
	$translation = htmlspecialchars($translation, ENT_QUOTES);
	$translation = addslashes($translation);
	}
	return $translation;
	}

	// for tabs
	function is_active($params)
	{
	$test_templ = $this->SelectParam($params, 'templ,template,t');
	if ( !getArrayValue($params,'allow_empty') )
	{
	$if_true=getArrayValue($params,'true') ? $params['true'] : 1;
	$if_false=getArrayValue($params,'false') ? $params['false'] : 0;
	}
	else
	{
	$if_true=$params['true'];
	$if_false=$params['false'];
	}

	if ( preg_match("/^".str_replace('/', '\/', $test_templ)."/i", $this->Application->GetVar('t'))) {
	return $if_true;
	}
	else {
	return $if_false;
	}
	}

	function IsNotActive($params)
	{
	return !$this->is_active($params);
	}

	function IsActive($params)
	{
	return $this->is_active($params);
	}

	function is_t_active($params)
	{
	return $this->is_active($params);
	}

	function CurrentTemplate($params)
	{
	return $this->is_active($params);
	}

	/**
	* Checks if session variable
	* specified by name value match
	* value passed as parameter
	*
	* @param Array $params
	* @return string
	* @access public
	*/
	function RecallEquals($params)
	{
	$name = $this->SelectParam($params, 'name,var');
	$value = $params['value'];

	if (isset($params['persistent']) && $params['persistent']) {
	return $this->Application->RecallPersistentVar($name) == $value;
	}

	return ($this->Application->RecallVar($name) == $value);
	}

	/**
	* Checks if application variable
	* specified by name value match
	* value passed as parameter
	*
	* @param Array $params
	* @return bool
	* @access public
	*/
	function GetEquals($params)
	{
	$name = $this->SelectParam($params, 'var,name,param');
	$value = $params['value'];
	if ($this->Application->GetVar($name) == $value) {
	return 1;
	}
	}

	/**
	* Includes template
	* and returns it's
	* parsed version
	*
	* @param Array $params
	* @return string
	* @access public
	*/
	function MyInclude($params)
	{
	if (defined('NPARSER') && NPARSER) {
	return $this->Application->Parser->IncludeTemplate($params, isset($params['is_silent']) ? 1 : 0);
	}

	$BlockParser =& $this->Application->makeClass('TemplateParser');
	/* @var $BlockParser TemplateParser */

	// $BlockParser->SetParams($params);
	$parser =& $this->Application->Parser;
	$this->Application->Parser =& $BlockParser;

	// this is for the parser to know the master template in case an error occurs,
	// ParseTemplate will reset it anyway, but this will allow error handler to display the tempalte
	// which tries to include missing template for example
	$this->Application->Parser->TemplateName = $parser->TemplateName;

	$t = $this->SelectParam($params, 't,template,block,name');
	$t = eregi_replace("\.tpl$", '', $t);

	if (!$t) {
	trigger_error('Template name not specified in <b><inp2:m_include .../></b> tag', E_USER_ERROR);
	}

	if (isset($this->Application->PreParsedBlocks[$t]) ) {
	$params['name'] = $t;
	$res = $this->Application->ParseBlock($params);
	}
	else {
	$res = $BlockParser->ParseTemplate($t, 1, $params, isset($params['is_silent']) ? 1 : 0 );
	}

	if (!$BlockParser->DataExists && ((isset($params['data_exists']) && $params['data_exists']) \|\| isset($params['block_no_data']))) {
	if ($block_no_data = getArrayValue($params, 'block_no_data')) {
	if (isset($this->Application->PreParsedBlocks[$block_no_data]) ) {
	// block_no_data is another block name
	$res = $this->Application->ParseBlock(Array('name' => $block_no_data));
	}
	else {
	// block_no_data is template name (only looks through real templates)
	$res = $BlockParser->ParseTemplate($block_no_data, 1, Array(), getArrayValue($params, 'is_silent'));
	}
	}
	else {
	$res = '';
	}
	}

	$this->Application->Parser =& $parser;
	$this->Application->Parser->DataExists = $this->Application->Parser->DataExists \|\| $BlockParser->DataExists;

	if (isset($params['return_params']) && $params['return_params']) {
	$new_params = array_merge($this->Application->Parser->Params, $BlockParser->ParamsStack[0]);
	$this->Application->Parser->SetParams($new_params, false);
	}

	return $res;
	}

	function ModuleInclude($params)
	{
	$ret = '';
	$block_params = array_merge($params, Array('is_silent' => 2)); // don't make fatal errors in case if template is missing
	$current_template = $this->Application->GetVar('t');
	$skip_prefixes = isset($params['skip_prefixes']) ? explode(',', $params['skip_prefixes']) : Array();
	foreach ($this->Application->ModuleInfo as $module_name => $module_data) {
	$module_key = strtolower($module_name);

	if ($module_name == 'In-Portal') {
	$module_prefix = $this->Application->IsAdmin() ? 'in-portal/' : $module_data['TemplatePath'];
	}
	else {
	$module_prefix = $this->Application->IsAdmin() ? $module_key.'/' : rtrim($module_data['TemplatePath'], '/').'/';
	}

	$block_params['t'] = $module_prefix.$this->SelectParam($params, $module_key.'_template,'.$module_key.'_t,template,t');
	if ($block_params['t'] == $current_template \|\| in_array($module_data['Var'], $skip_prefixes)) continue;

	$no_data = $this->SelectParam($params, $module_key.'_block_no_data,block_no_data');
	if ($no_data) {
	$block_params['block_no_data'] = $module_prefix.'/'.$no_data;
	}
	$ret .= $this->MyInclude($block_params);
	}
	return $ret;
	}

	function ModuleEnabled($params)
	{
	return $this->Application->isModuleEnabled( $params['module'] );
	}

	/*function Kernel_Scripts($params)
	{
	return '<script type="text/javascript" src="'.PROTOCOL.SERVER_NAME.BASE_PATH.'/kernel3/js/grid.js"></script>';
	}*/


	/*function GetUserPermission($params)
	{
	// echo"GetUserPermission $params[name]";
	if ($this->Application->RecallVar('user_type') == 1)
	return 1;
	else {
	$perm_name = $params[name];
	$aPermissions = unserialize($this->Application->RecallVar('user_permissions'));
	if ($aPermissions)
	return $aPermissions[$perm_name];
	}
	}*/


	/**
	* Set's parser block param value
	*
	* @param Array $params
	* @access public
	*/
	function AddParam($params)
	{
	$parser =& $this->Application->Parser; // recallObject('TemplateParser');
	foreach ($params as $param => $value) {
	$this->Application->SetVar($param, $value);
	$parser->SetParam($param, $value);
	$parser->AddParam('/\$'.$param.'/', $value);
	}
	}

	/*function ParseToVar($params)
	{
	$var = $params['var'];
	$tagdata = $params['tag'];
	$parser =& $this->Application->Parser; //recallObject('TemplateParser');
	$res = $this->Application->ProcessTag($tagdata);

	$parser->SetParam($var, $res);
	$parser->AddParam('/\$'.$var.'/', $res);
	return '';
	}*/

	/*function TagNotEmpty($params)
	{
	$tagdata = $params['tag'];
	$res = $this->Application->ProcessTag($tagdata);
	return $res != '';
	}*/

	/*function TagEmpty($params)
	{
	return !$this->TagNotEmpty($params);
	}*/

	/**
	* Parses block and returns result
	*
	* @param Array $params
	* @return string
	* @access public
	*/
	function ParseBlock($params)
	{
	$parser =& $this->Application->Parser; // recallObject('TemplateParser');
	return $parser->ParseBlock($params);
	}

	function RenderElement($params)
	{
	if (isset($params['design']) && $params['design']) {
	$block_name = $params['name'];
	if ($block_name != '__this__') {
	// prepare content
	$block_params = $params;
	$block_params['template'] = $block_name;
	$block_params['return_params'] = 1;
	$block_params['strip_nl'] = 2;
	$block_content = $this->MyInclude($block_params);

	if (isset($params['data_exists']) && $params['data_exists'] && !$block_content) {
	return '';
	}

	// prepare design
	$block_params = Array (
	'content' => $block_content,
	);
	}

	$block_params['name'] = $params['design'];
	return $this->Application->ParseBlock($block_params, 1);
	}

	return $this->ParseBlock($params);
	}

	function RenderElements($params)
	{
	if (!isset($params['elements']) \|\| !$params['elements']) return;
	$elements = explode(',', $params['elements']);
	if (isset($params['skip']) && $params['skip']) {
	$tmp_skip = explode(',', $params['skip']);
	foreach ($tmp_skip as $elem) {
	$skip[] = trim($elem);
	}
	}
	else {
	$skip = array();
	}
	unset($params['elements']);
	$o = '';
	foreach ($elements as $an_element)
	{
	$cur = trim($an_element);
	if (in_array($cur,$skip) \|\| !$cur) continue;
	$pass_params = $params;
	$pass_params['name'] = $cur;
	$o .= $this->RenderElement($pass_params);
	}
	return $o;

	}

	/**
	* Checks if debug mode is on
	*
	* @param Array $params
	* @return bool
	* @access public
	*/
	function IsDebugMode($params)
	{
	return $this->Application->isDebugMode();
	}

	function MassParse($params)
	{
	$qty = $params['qty'];
	$block = $params['block'];
	$mode = $params['mode'];

	$o = '';
	if ($mode == 'func') {
	$func = create_function('$params', '
	$o = \'<tr>\';
	$o.= \'<td>a\'.$params[\'param1\'].\'</td>\';
	$o.= \'<td>a\'.$params[\'param2\'].\'</td>\';
	$o.= \'<td>a\'.$params[\'param3\'].\'</td>\';
	$o.= \'<td>a\'.$params[\'param4\'].\'</td>\';
	$o.= \'</tr>\';
	return $o;
	');
	for ($i=1; $i<$qty; $i++) {
	$block_params['param1'] = rand(1, 10000);
	$block_params['param2'] = rand(1, 10000);
	$block_params['param3'] = rand(1, 10000);
	$block_params['param4'] = rand(1, 10000);
	$o .= $func($block_params);
	}
	return $o;
	}

	$block_params['name'] = $block;

	for ($i=0; $i<$qty; $i++) {
	$block_params['param1'] = rand(1, 10000);
	$block_params['param2'] = rand(1, 10000);
	$block_params['param3'] = rand(1, 10000);
	$block_params['param4'] = rand(1, 10000);
	$block_params['passed'] = $params['passed'];
	$block_params['prefix'] = 'm';

	$o.= $this->Application->ParseBlock($block_params, 1);
	}
	return $o;
	}

	function LoggedIn($params)
	{
	return $this->Application->LoggedIn();
	}

	/**
	* Allows to check if permission exists directly in template and perform additional actions if required
	*
	* @param Array $params
	* @return bool
	*/
	function CheckPermission($params)
	{
	$perm_helper =& $this->Application->recallObject('PermissionsHelper');
	return $perm_helper->TagPermissionCheck($params);
	}

	/**
	* Checks if user is logged in and if not redirects it to template passed
	*
	* @param Array $params
	*/
	function RequireLogin($params)
	{
	$t = $this->Application->GetVar('t');
	if ($next_t = getArrayValue($params, 'next_template')) {
	$t = $next_t;
	}

	// check by permissions: begin
	if ((isset($params['perm_event']) && $params['perm_event']) \|\|
	(isset($params['perm_prefix']) && $params['perm_prefix']) \|\|
	(isset($params['permissions']) && $params['permissions'])) {

	$perm_helper =& $this->Application->recallObject('PermissionsHelper');
	/* @var $perm_helper kPermissionsHelper */

	$perm_status = $perm_helper->TagPermissionCheck($params);
	if (!$perm_status) {
	list($redirect_template, $redirect_params) = $perm_helper->getPermissionTemplate($params);
	$this->Application->Redirect($redirect_template, $redirect_params);
	}
	else {
	return ;
	}
	}
	// check by permissions: end

	// check by configuration value: begin
	$condition = getArrayValue($params, 'condition');
	if (!$condition) {
	$condition = true;
	}
	else {
	if (substr($condition, 0, 1) == '!') {
	$condition = !$this->Application->ConfigValue(substr($condition, 1));
	}
	else {
	$condition = $this->Application->ConfigValue($condition);
	}
	}
	// check by configuration value: end

	// check by belonging to group: begin
	$group = $this->SelectParam($params, 'group');
	$group_access = true;
	if ($group) {
	$conn =& $this->Application->GetADODBConnection();
	$group_id = $conn->GetOne('SELECT GroupId FROM '.TABLE_PREFIX.'PortalGroup WHERE Name = '.$conn->qstr($group));
	if ($group_id) {
	$groups = explode(',', $this->Application->RecallVar('UserGroups'));
	$group_access = in_array($group_id, $groups);
	}
	}
	// check by belonging to group: end

	if ((!$this->Application->LoggedIn() \|\| !$group_access) && $condition) {
	$redirect_params = $this->Application->HttpQuery->getRedirectParams();
	$redirect_params['next_template'] = $t;

	if (array_key_exists('pass_category', $params)) {
	$redirect_params['pass_category'] = $params['pass_category'];
	}

	if ( $this->Application->LoggedIn() && !$group_access) {
	$this->Application->Redirect( $params['no_group_perm_template'], $redirect_params);
	}

	+ $redirect_params['lang_mode'] = ''; // if expiration happens while editing language it will be in temp mode
	+ $redirect_params['m_wid'] = ''; // remove wid, otherwise parent window may add wid to its name breaking all the frameset (for <a> targets)
	$this->Application->Redirect($params['login_template'], $redirect_params);
	}
	}

	function IsMember($params)
	{
	$group = getArrayValue($params, 'group');
	$conn =& $this->Application->DB;
	$group_id = $conn->GetOne('SELECT GroupId FROM '.TABLE_PREFIX.'PortalGroup WHERE Name = '.$conn->qstr($group));
	if ($group_id) {
	$groups = explode(',', $this->Application->RecallVar('UserGroups'));
	$group_access = in_array($group_id, $groups);
	}
	return $group_access;
	}

	/**
	* Checks if SSL is on and redirects to SSL URL if needed
	* If SSL_URL is not defined in config - the tag does not do anything
	* If for_logged_in_only="1" exits if user is not logged in.
	* If called without params forces https right away. If called with by_config="1" checks the
	* Require SSL setting from General Config and if it is ON forces https
	*
	* @param unknown_type $params
	*/
	function CheckSSL($params)
	{
	$ssl = $this->Application->ConfigValue('SSL_URL');
	if (!$ssl) return; //SSL URL is not set - no way to require SSL

	$require = false;

	if (isset($params['mode']) && $params['mode'] == 'required') {
	$require = true;
	if (isset($params['for_logged_in_only']) && $params['for_logged_in_only'] && !$this->Application->LoggedIn()) {
	$require = false;
	}

	if (isset($params['condition'])) {
	if (!$this->Application->ConfigValue($params['condition'])) {
	$require = false;
	}
	}
	}

	$http_query =& $this->Application->recallObject('HTTPQuery');
	$pass = $http_query->getRedirectParams();

	if ($require) {
	if (PROTOCOL == 'https://') {
	$this->Application->SetVar('__KEEP_SSL__', 1);
	return;
	}
	$this->Application->Redirect('', array_merge_recursive2($pass, Array('__SSL__' => 1)));
	}
	else {
	if (PROTOCOL == 'https://' && $this->Application->ConfigValue('Force_HTTP_When_SSL_Not_Required')) {
	if ($this->Application->GetVar('__KEEP_SSL__')) return;
	$pass = array('pass'=>'m', 'm_cat_id'=>0);
	$this->Application->Redirect('', array_merge_recursive2($pass, Array('__SSL__' => 0)));
	}
	}
	}

	function ConstOn($params)
	{
	$name = $this->SelectParam($params,'name,const');
	return constOn($name);
	}

	function SetDefaultCategory($params)
	{
	$category_id = $this->Application->findModule('Name', $params['module'], 'RootCat');
	$this->Application->SetVar('m_cat_id', $category_id);
	}

	function XMLTemplate($params)
	{
	safeDefine('DBG_SKIP_REPORTING', 1);

	if (isset($params['cache']) && $params['cache']) {
	$nextyear = intval(date('Y') + 1);

	$format = "D, d M Y H:i:s";
	$expiration = gmdate($format, mktime() + $params['cache']).' GMT';
	$last_modified = mktime();

	header ('Cache-Control: public, cache, max-age='.$params['cache']);
	header ("Expires: $expiration");
	header ('Pragma: public');

	// Getting headers sent by the client.
	$headers = request_headers();

	// Checking if the client is validating his cache and if it is current.
	if (isset($headers['If-Modified-Since']) && (strtotime($headers['If-Modified-Since']) > $last_modified-$params['cache'])) {
	// Client's cache IS current, so we just respond '304 Not Modified'.
	header('Last-Modified: '.date($format, strtotime($headers['If-Modified-Since'])).' GMT', true, 304);
	exit();
	} else {
	// Image not cached or cache outdated, we respond '200 OK' and output the image.
	header('Last-Modified: '.gmdate($format, $last_modified).' GMT', true, 200);
	}
	}

	return $this->Application->XMLHeader(getArrayValue($params, 'xml_version'));
	}

	function Header($params)
	{
	header($params['data']);
	}

	function NoDebug($params)
	{
	define('DBG_SKIP_REPORTING', 1);
	}

	function RootCategoryName($params)
	{
	$root_phrase = $this->Application->ConfigValue('Root_Name');
	return $this->Application->Phrase($root_phrase);
	}

	/**
	* Allows to attach file directly from email event template
	*
	* @param Array $params
	*/
	function AttachFile($params)
	{
	$esender =& $application->recallObject('EmailSender'.(isset($params['special']) ? '.'.$params['special'] : ''));
	/* @var $esender kEmailSendingHelper */

	$path = FULL_PATH.'/'.$params['path'];
	if (file_exists($path)) {
	$esender->AddAttachment($path);
	}
	}

	function CaptchaImage($params){
	$captcha_helper =& $this->Application->recallObject('CaptchaHelper');
	/* @var $captcha_helper kCaptchaHelper */
	$captcha_helper->GenerateCaptchaImage(
	$this->Application->RecallVar($this->Application->GetVar('var')),
	$this->Application->GetVar('w'),
	$this->Application->GetVar('h'),
	true
	);
	}

	function SID($params)
	{
	return $this->Application->GetSID();
	}

	function ModuleInfo($params)
	{
	return $this->Application->findModule($params['key'], $params['value'], $params['return']);
	}

	function Random($params)
	{
	return rand(1, 100000000);
	}
	}

	Property changes on: branches/RC/core/kernel/processors/main_processor.php
	___________________________________________________________________
	Modified: cvs2svn:cvs-rev
	## -1 +1 ##
	-1.80.2.6
	\ No newline at end of property
	+1.80.2.7
	\ No newline at end of property
	Index: branches/RC/core/units/general/helpers/permissions_helper.php
	===================================================================
	--- branches/RC/core/units/general/helpers/permissions_helper.php (revision 10030)
	+++ branches/RC/core/units/general/helpers/permissions_helper.php (revision 10031)
	@@ -1,604 +1,606 @@
	<?php

	class kPermissionsHelper extends kHelper {

	/**
	* Current set of permissions for group being edited
	*
	* @var Array
	*/
	var $Permissions = Array();

	function LoadPermissions($group_id, $cat_id, $type = 1, $prefix = '')
	{
	$perm_table = $this->Application->getUnitOption('perm', 'TableName');
	$perm_table = $this->Application->GetTempName($perm_table, 'prefix:'.$prefix);
	$sql = 'SELECT *
	FROM '.$perm_table.'
	WHERE (GroupId = '.$group_id.') AND (CatId = '.$cat_id.') AND (Type = '.$type.')';
	$permissions = $this->Conn->Query($sql, 'Permission');

	$this->Permissions = Array();
	foreach ($permissions as $perm_name => $perm_options) {
	$perm_record['value'] = $perm_options['PermissionValue'];
	$perm_record['id'] = $perm_options['PermissionId'];
	$this->Permissions[$perm_name] = $perm_record;
	}
	}

	function getPermissionValue($perm_name)
	{
	return isset($this->Permissions[$perm_name]) ? $this->Permissions[$perm_name]['value'] : 0;
	}

	function getPermissionID($perm_name)
	{
	return isset($this->Permissions[$perm_name]) ? $this->Permissions[$perm_name]['id'] : 0;
	}

	/**
	* This is old permission like ADMIN or LOGIN
	*
	* @param string $section_name
	* @param string $perm_name
	* @return bool
	*/
	function isOldPermission($section_name, $perm_name)
	{
	return $section_name == 'in-portal:root' && $perm_name != 'view';
	}

	/**
	* Returns permission names to check based on event name and item prefix (main item or subitem)
	*
	* @param kEvent $event
	* @return Array
	*/
	function getPermissionByEvent(&$event, $perm_mapping)
	{
	$top_prefix = $event->getEventParam('top_prefix');

	$pefix_type = ($top_prefix == $event->Prefix) ? 'self' : 'subitem';
	$perm_mapping = getArrayValue($perm_mapping, $event->Name);

	if (!$perm_mapping[$pefix_type]) {
	trigger_error('Permission mappings not defined for event <b>'.$top_prefix.' <- '.$event->Prefix.':'.$event->Name.'</b>', E_USER_ERROR);
	}

	if ($perm_mapping[$pefix_type] === true) {
	// event is defined in mapping but is not checked by permissions
	return true;
	}

	return explode('\|', $perm_mapping[$pefix_type]);
	}

	/**
	* Common event permission checking method
	*
	* @param kEvent $event
	*/
	function CheckEventPermission(&$event, $perm_mapping)
	{
	$section = $event->getSection();
	if (preg_match('/^CATEGORY:(.*)/', $section)) {
	return $this->CheckEventCategoryPermission($event, $perm_mapping);
	}

	$top_prefix = $event->getEventParam('top_prefix');
	$check_perms = $this->getPermissionByEvent($event, $perm_mapping);

	if ($check_perms === true) {
	// event is defined in mapping but is not checked by permissions
	return true;
	}

	$perm_status = false;
	foreach ($check_perms as $perm_name) {
	// check if at least one of required permissions is set
	$perm_name = $section.'.'.$perm_name;
	$perm_status = $this->CheckPermission($perm_name, 1);
	if (($perm_name == $section.'.add') && $perm_status && ($top_prefix == $event->Prefix)) {
	// main item, add permission allowed, but ID is > 0, then deny permission
	// how to get id here
	}
	if ($perm_status) {
	return $perm_status;
	}
	}

	if (!$perm_status) {
	if ($this->Application->isDebugMode()) {
	// for debugging purposes
	$event->SetRedirectParam('section', $section);
	$event->SetRedirectParam('main_prefix', $top_prefix);
	$event->SetRedirectParam('event_name', $event->Name);
	$event->SetRedirectParam('next_template', $this->Application->GetVar('t'));
	}
	$event->status = erPERM_FAIL;
	}
	return $perm_status;
	}

	/**
	* Returns owner + primary category for each item (used for permission checking)
	*
	* @param string $prefix
	* @param string $ids
	* @return Array
	* @author Alex
	*/
	function GetCategoryItemData($prefix, $ids)
	{
	if (is_array($ids)) {
	$ids = implode(',', $ids);
	}
	$id_field = $this->Application->getUnitOption($prefix, 'IDField');
	$table_name = $this->Application->getUnitOption($prefix, 'TableName');
	$ci_table = $this->Application->getUnitOption('ci', 'TableName');

	$owner_field = $this->Application->getUnitOption($prefix, 'OwnerField');
	if (!$owner_field) {
	$owner_field = 'CreatedById';
	}

	$sql = 'SELECT item_table.'.$id_field.', item_table.'.$owner_field.' AS CreatedById, ci.CategoryId
	FROM '.$table_name.' item_table
	LEFT JOIN '.$ci_table.' ci ON ci.ItemResourceId = item_table.ResourceId
	WHERE item_table.'.$id_field.' IN ('.$ids.') AND (ci.PrimaryCat = 1)';
	return $this->Conn->Query($sql, $id_field);
	}

	/**
	* Checks non-system permission on event per category basis
	*
	* @param kEvent $event
	*/
	function CheckEventCategoryPermission(&$event, $event_perm_mapping)
	{
	// mapping between specific permissions and common permissions
	$perm_mapping = Array('add' => 'ADD', 'add.pending' => 'ADD.PENDING', 'edit' => 'MODIFY', 'edit.pending' => 'MODIFY.PENDING', 'delete' => 'DELETE', 'view' => 'VIEW');

	$top_prefix = $event->getEventParam('top_prefix');
	$event_handler =& $this->Application->recallObject($event->Prefix.'_EventHandler');
	/* @var $event_handler kCatDBEventHandler */

	$raise_warnings = $event->getEventParam('raise_warnings');
	$event->setEventParam('raise_warnings', 0);
	if ($event->Prefix != $top_prefix) {
	$top_event = new kEvent($top_prefix.':'.$event->Name);
	$id = $event_handler->getPassedID($top_event);
	}
	else {
	$id = $event_handler->getPassedID($event);
	}
	$event->setEventParam('raise_warnings', $raise_warnings);

	$owner_id = -1; // owner is root if not detected
	if (!$id) {
	// item being created -> check by current (before editing started, saved in OnPreCreate event) category permissions
	$category_id = $this->Application->IsAdmin() ? $this->Application->RecallVar('m_cat_id') : $this->Application->GetVar('m_cat_id');
	}
	elseif ($top_prefix == 'c' \|\| $top_prefix == 'st') {
	$category_id = $id;
	}
	else {
	// item being edited -> check by it's primary category permissions
	$items_info = $this->GetCategoryItemData($top_prefix, $id);
	$category_id = $items_info[$id]['CategoryId'];
	$owner_id = $items_info[$id]['CreatedById'];
	}

	// specific permission check for pending & owner permissions: begin
	$new_item = $this->Application->IsAdmin() && $event_handler->isNewItemCreate($event) ? true : false;
	$check_status = $this->checkCombinedPermissions($event, $owner_id, $category_id, $new_item);
	if (isset($check_status)) {
	return $check_status;
	}
	// specific permission check for pending & owner permissions: end

	$perm_status = false;
	$check_perms = $this->getPermissionByEvent($event, $event_perm_mapping);

	if ($check_perms === true) {
	// event is defined in mapping but is not checked by permissions
	return true;
	}

	$item_prefix = $this->Application->getUnitOption($top_prefix, 'PermItemPrefix');
	foreach ($check_perms as $perm_name) {
	// check if at least one of required permissions is set
	if (!isset($perm_mapping[$perm_name])) {
	// not mapped permission (e.g. advanced:approve) -> skip
	continue;
	}
	$perm_name = $item_prefix.'.'.$perm_mapping[$perm_name];
	$perm_status = $this->CheckPermission($perm_name, 0, $category_id);

	if ($perm_status) {
	return $perm_status;
	}
	}

	if (!$perm_status) {
	$event->SetRedirectParam('index_file', 'index.php'); // because called from browse.php
	if ($this->Application->isDebugMode()) {
	// for debugging purposes
	$event->SetRedirectParam('section', $event->getSection());
	$event->SetRedirectParam('main_prefix', $top_prefix);
	$event->SetRedirectParam('event_name', $event->Name);
	$event->SetRedirectParam('next_template', $this->Application->GetVar('t'));
	}
	$event->status = erPERM_FAIL;
	}
	return $perm_status;
	}

	/**
	* Allows to check combined permissions (.owner, .pending) for add/modify/delete operations from admin & front-end
	*
	* @param kEvent $event
	* @param int $owner_id
	* @param int $category_id
	* @param bool $new_item
	* @return mixed
	*/
	function checkCombinedPermissions(&$event, $owner_id, $category_id, $new_item = false)
	{
	$ret = null; // true/false when used, null when not used
	$top_prefix = $event->getEventParam('top_prefix');

	// check admin permission
	if (substr($event->Name, 0, 9) == 'OnPreSave') {
	if ($new_item) {
	$ret = $this->AddCheckPermission($category_id, $top_prefix);
	}
	else {
	// add & modify because $new_item is false, when item is aready created & then saved in temp table (even with 0 id)
	$ret = $this->AddCheckPermission($category_id, $top_prefix) \|\|
	$this->ModifyCheckPermission($owner_id, $category_id, $top_prefix);
	}
	}

	// check front-end permissions
	switch ($event->Name) {
	case 'OnCreate':
	$ret = $this->AddCheckPermission($category_id, $top_prefix);
	break;

	case 'OnUpdate':
	$ret = $this->ModifyCheckPermission($owner_id, $category_id, $top_prefix);
	break;

	case 'OnDelete':
	case 'OnMassDelete':
	$ret = $this->DeleteCheckPermission($owner_id, $category_id, $top_prefix);
	break;
	}

	if ($ret === 0) {
	// permission check failed (user has no permission)
	$event->status = erPERM_FAIL;
	}

	return $ret;
	}

	function TagPermissionCheck($params, $is_owner = false)
	{
	$perm_prefix = getArrayValue($params, 'perm_prefix');
	$perm_event = getArrayValue($params, 'perm_event');
	$permission_groups = getArrayValue($params, 'permissions');

	if ($permission_groups) {
	// check permissions by permission names in current category
	$permission_groups = explode('\|', $permission_groups);
	$group_has_permission = false;

	$perm_category = isset($params['cat_id']) ? $params['cat_id'] : $this->Application->GetVar('m_cat_id');

	if ($perm_prefix) {
	// use primary category of item with id from {perm_prefix}_id as base for permission checking
	$perm_category = $this->getPrimaryCategory($perm_prefix);
	}

	$is_system = isset($params['system']) && $params['system'] ? 1 : 0;
	foreach ($permission_groups as $permission_group) {
	$permissions = explode(',', $permission_group);
	$has_permission = true;
	foreach ($permissions as $permission) {
	$owner_checked = (strpos($permission, '.OWNER.') !== false) ? $is_owner : true;
	$has_permission = $has_permission && $this->CheckPermission($permission, $is_system, $perm_category) && $owner_checked;
	}
	$group_has_permission = $group_has_permission \|\| $has_permission;

	if ($group_has_permission) {
	return true;
	}
	}
	return false;
	}
	elseif ($perm_event) {
	// check permission by event name
	list($prefix, $event) = explode(':', $perm_event);
	$event_handler =& $this->Application->recallObject($prefix.'_EventHandler');
	return $event_handler->CheckPermission( new kEvent($perm_event) );
	}

	return true;
	}

	/**
	* Returns item's primary category (get item_id from request)
	*
	* @param string $prefix
	* @return int
	*/
	function getPrimaryCategory($prefix)
	{
	$id_field = $this->Application->getUnitOption($prefix, 'IDField');
	$table_name = $this->Application->getUnitOption($prefix, 'TableName');
	$id = $this->Application->GetVar($prefix.'_id');

	if (!$id) return $this->Application->GetVar('m_cat_id');

	$sql = 'SELECT ResourceId
	FROM '.$table_name.'
	WHERE '.$id_field.' = '.$id;
	$resource_id = $this->Conn->GetOne($sql);

	$sql = 'SELECT CategoryId
	FROM '.$this->Application->getUnitOption('ci', 'TableName').'
	WHERE ItemResourceId = '.$resource_id.' AND PrimaryCat = 1';
	return $this->Conn->GetOne($sql);
	}

	/**
	* Returns no permission template to redirect to
	*
	* @param Array $params
	* @return Array
	*/
	function getPermissionTemplate($params)
	{
	$t = $this->Application->GetVar('t');
	if ($next_t = getArrayValue($params, 'next_template')) {
	$t = $next_t;
	}

	$redirect_params = $this->Application->HttpQuery->getRedirectParams();
	+ $redirect_params['lang_mode'] = '';
	+ $redirect_params['m_wid'] = '';

	if (array_key_exists('pass_category', $params)) {
	$redirect_params['pass_category'] = $params['pass_cateogry'];
	}

	if (!$this->Application->LoggedIn()) {
	$redirect_template = $params['login_template'];
	if (!$redirect_template && $this->Application->IsAdmin()) {
	$redirect_template = 'login';
	}
	$redirect_params['next_template'] = $t;
	}
	else {
	if (isset($params['no_permissions_template'])) {
	$redirect_template = $params['no_permissions_template'];
	}
	else {
	$redirect_template = $this->Application->IsAdmin() ? 'no_permission' : $this->Application->ConfigValue('NoPermissionTemplate');
	}

	if ($this->Application->isDebugMode()) {
	$redirect_params['from_template'] = 1;
	$redirect_params['perms'] = $params[ isset($params['permissions']) ? 'permissions' : 'perm_event' ];
	$redirect_params['next_template'] = $t;
	}
	}

	if (isset($params['index_file']) && $params['index_file']) {
	$redirect_params['index_file'] = $params['index_file'];
	}

	return Array($redirect_template, $redirect_params);
	}

	/**
	* Check current user permissions based on it's group permissions in specified category (for non-system permissions) or just checks if system permission is set
	*
	* @param string $name permission name
	* @param int $cat_id category id, current used if not specified
	* @param int $type permission type {1 - system, 0 - per category}
	* @return int
	*/
	function CheckPermission($name, $type = 1, $cat_id = null)
	{
	$user_id = $this->Application->RecallVar('user_id');
	return $this->CheckUserPermission($user_id, $name, $type, $cat_id);
	}

	function CheckUserPermission($user_id, $name, $type = 1, $cat_id = null)
	{
	if ($user_id == -1) {
	// "root" is allowed anywhere
	return $name == 'SYSTEM_ACCESS.READONLY' ? 0 : 1;
	}

	if ($type == 1) {
	// "system" permission are always checked per "Home" category (ID = 0)
	$cat_id = 0;
	}

	if (!isset($cat_id)) {
	$cat_id = $this->Application->GetVar('m_cat_id');
	}

	$cache_key = $name.'\|'.$type.'\|'.$cat_id;
	$perm_value = $this->Application->getCache('permissions', $cache_key);
	if ($perm_value !== false) {
	return $perm_value;
	}

	// perm cache is build only based on records in db, that's why if permission is not explicitly denied, then
	// that (perm cache creator) code thinks that it is allowed & adds corresponding record and code below will
	// return incorrect results

	if ($user_id == $this->Application->RecallVar('user_id')) {
	$groups = explode(',', $this->Application->RecallVar('UserGroups'));
	}
	else { // checking not current user
	$sql = 'SELECT GroupId FROM '.TABLE_PREFIX.'UserGroup
	WHERE (PortalUserId = '.$user_id.') AND
	( (MembershipExpires IS NULL) OR ( MembershipExpires >= UNIX_TIMESTAMP() ) )';
	$groups = $this->Conn->GetCol($sql);
	array_push($groups, $this->Application->ConfigValue('User_LoggedInGroup') );
	}

	if (preg_match('/(.*)\.VIEW$/', $name) && ($type == 0)) {
	// cached view permission of category: begin
	if (strpos($cat_id, '\|') !== false) {
	$category_path = explode('\|', substr($cat_id, 1, -1));
	$cat_id = end($category_path);
	}

	$sql = 'SELECT PermissionConfigId
	FROM '.TABLE_PREFIX.'PermissionConfig
	WHERE PermissionName = '.$this->Conn->qstr($name);
	$perm_id = $this->Conn->GetOne($sql);

	$sql = 'SELECT PermId
	FROM '.TABLE_PREFIX.'PermCache
	WHERE (PermId = '.$perm_id.') AND (CategoryId = '.$cat_id.')';

	$view_filters = Array();
	foreach ($groups as $group) {
	$view_filters[] = 'FIND_IN_SET('.$group.', ACL)';
	}
	$sql .= ' AND ('.implode(' OR ', $view_filters).')';
	$perm_value = $this->Conn->GetOne($sql) ? 1 : 0;

	$this->Application->setCache('permissions', $cache_key, $perm_value);
	return $perm_value;
	// cached view permission of category: end
	}

	if (is_numeric($cat_id) && $cat_id == 0) {
	$cat_hierarchy = Array(0);
	}
	else {
	if (strpos($cat_id, '\|') !== false) {
	$cat_hierarchy = $cat_id;
	}
	else {
	$sql = 'SELECT ParentPath
	FROM '.$this->Application->getUnitOption('c', 'TableName').'
	WHERE CategoryId = '.$cat_id;
	$cat_hierarchy = $this->Conn->GetOne($sql);
	}

	$cat_hierarchy = explode('\|', substr($cat_hierarchy, 1, -1));
	$cat_hierarchy = array_reverse($cat_hierarchy);
	array_push($cat_hierarchy, 0);
	}

	$perm_value = 0;
	$groups = implode(',',$groups);
	foreach ($cat_hierarchy as $category_id) {
	$sql = 'SELECT SUM(PermissionValue)
	FROM '.TABLE_PREFIX.'Permissions
	WHERE Permission = "'.$name.'" AND CatId = '.$category_id.' AND GroupId IN ('.$groups.') AND Type = '.$type;
	$res = $this->Conn->GetOne($sql);
	if ($res !== false && !is_null($res)) {
	$perm_value = $res ? 1 : 0;
	break;
	}
	}

	$this->Application->setCache('permissions', $cache_key, $perm_value);
	return $perm_value;
	}

	/**
	* Allows to check MODIFY & OWNER.MODFY +/- PENDING permission combinations on item
	*
	* @param int $owner_id user_id, that is owner of the item
	* @param int $category_id primary category of item
	* @param string $prefix prefix of item
	* @return int {0 - no MODIFY permission, 1 - has MODIFY permission, 2 - has MODIFY.PENDING permission}
	*/
	function ModifyCheckPermission($owner_id, $category_id, $prefix)
	{
	$perm_prefix = $this->Application->getUnitOption($prefix, 'PermItemPrefix');

	$live_modify = $this->CheckPermission($perm_prefix.'.MODIFY', ptCATEGORY, $category_id);
	if ($live_modify) {
	return 1;
	}
	else if ($this->CheckPermission($perm_prefix.'.MODIFY.PENDING', ptCATEGORY, $category_id)) {
	return 2;
	}

	if ($owner_id == $this->Application->RecallVar('user_id')) {
	// user is item's OWNER -> check this permissions first
	$live_modify = $this->CheckPermission($perm_prefix.'.OWNER.MODIFY', ptCATEGORY, $category_id);
	if ($live_modify) {
	return 1;
	}
	else if ($this->CheckPermission($perm_prefix.'.OWNER.MODIFY.PENDING', ptCATEGORY, $category_id)) {
	return 2;
	}
	}

	return 0;
	}

	/**
	* Allows to check DELETE & OWNER.DELETE permission combinations on item
	*
	* @param int $owner_id user_id, that is owner of the item
	* @param int $category_id primary category of item
	* @param string $prefix prefix of item
	* @return int {0 - no DELETE permission, 1 - has DELETE/OWNER.DELETE permission}
	*/
	function DeleteCheckPermission($owner_id, $category_id, $prefix)
	{
	$perm_prefix = $this->Application->getUnitOption($prefix, 'PermItemPrefix');

	$live_delete = $this->CheckPermission($perm_prefix.'.DELETE', ptCATEGORY, $category_id);
	if ($live_delete) {
	return 1;
	}

	if ($owner_id == $this->Application->RecallVar('user_id')) {
	// user is item's OWNER -> check this permissions first
	$live_delete = $this->CheckPermission($perm_prefix.'.OWNER.DELETE', ptCATEGORY, $category_id);
	if ($live_delete) {
	return 1;
	}
	}

	return 0;
	}

	/**
	* Allows to check ADD +/- PENDING permission combinations on item
	*
	* @param int $category_id primary category of item
	* @param string $prefix prefix of item
	* @return int {0 - no ADD permission, 1 - has ADD permission, 2 - has ADD.PENDING permission}
	*/
	function AddCheckPermission($category_id, $prefix)
	{
	$perm_prefix = $this->Application->getUnitOption($prefix, 'PermItemPrefix');

	$live_add = $this->CheckPermission($perm_prefix.'.ADD', ptCATEGORY, $category_id);
	if ($live_add) {
	return 1;
	}
	else if ($this->CheckPermission($perm_prefix.'.ADD.PENDING', ptCATEGORY, $category_id)) {
	return 2;
	}

	return 0;
	}
	}

	?>
	\ No newline at end of file

	Property changes on: branches/RC/core/units/general/helpers/permissions_helper.php
	___________________________________________________________________
	Modified: cvs2svn:cvs-rev
	## -1 +1 ##
	-1.32.2.1
	\ No newline at end of property
	+1.32.2.2
	\ No newline at end of property
	Index: branches/RC/core/admin_templates/users/user_edit_password.tpl
	===================================================================
	--- branches/RC/core/admin_templates/users/user_edit_password.tpl (revision 10030)
	+++ branches/RC/core/admin_templates/users/user_edit_password.tpl (revision 10031)
	@@ -1,40 +1,40 @@
	<inp2:adm_SetPopupSize width="564" height="377"/>
	<inp2:m_include t="incs/header"/>
	-<inp2:m_RenderElement name="combined_header" section="proj-base:users" pagination="0" prefix="u" title_preset="admins_edit"/>
	+<inp2:m_RenderElement name="combined_header" section="proj-base:users" perm_section="ADMIN" permission_type="" pagination="0" prefix="u" title_preset="admins_edit"/>

	<!-- ToolBar --->
	<table class="toolbar" height="30" cellspacing="0" cellpadding="0" width="100%" border="0">
	<tbody>
	<tr>
	<td>
	<script type="text/javascript">
	a_toolbar = new ToolBar();
	a_toolbar.AddButton( new ToolBarButton('select', '<inp2:m_phrase label="la_ToolTip_Save" escape="1"/>', function() {
	submit_event('u','OnUpdatePassword');
	}
	) );
	a_toolbar.AddButton( new ToolBarButton('cancel', '<inp2:m_phrase label="la_ToolTip_Cancel" escape="1"/>', function() {
	cancel_edit('u','OnCancelEdit','<inp2:u_SaveEvent/>','<inp2:m_Phrase label="la_FormCancelConfirmation" escape="1"/>');
	}
	) );

	a_toolbar.Render();
	</script>
	</td>
	</tr>
	</tbody>
	</table>

	<inp2:u_SaveWarning name="grid_save_warning"/>
	<inp2:u_ErrorWarning name="form_error_warning"/>
	<table width="100%" border="0" cellspacing="0" cellpadding="4" class="table-collapsed">
	<inp2:m_RenderElement name="inp_id_label" prefix="u" field="PortalUserId" title="!la_fld_Id!"/>
	<inp2:m_RenderElement name="inp_label" prefix="u" field="Login" title="la_fld_Username"/>
	<inp2:m_RenderElement name="inp_edit_password" prefix="u" field="Password" title="la_fld_Password"/>
	<inp2:m_RenderElement name="inp_edit_password" prefix="u" field="VerifyPassword" title="la_fld_VerifyPassword"/>
	<inp2:m_RenderElement name="inp_label" prefix="u" field="FirstName" title="la_fld_FirstName"/>
	<inp2:m_RenderElement name="inp_label" prefix="u" field="LastName" title="la_fld_LastName"/>
	<inp2:m_RenderElement name="inp_label" prefix="u" field="Email" title="la_fld_Email"/>
	</table>

	<inp2:m_include t="incs/footer"/>

	Property changes on: branches/RC/core/admin_templates/users/user_edit_password.tpl
	___________________________________________________________________
	Modified: cvs2svn:cvs-rev
	## -1 +1 ##
	-1.5.2.1
	\ No newline at end of property
	+1.5.2.2
	\ No newline at end of property
	Index: branches/RC/core/admin_templates/js/ajax.js
	===================================================================
	--- branches/RC/core/admin_templates/js/ajax.js (revision 10030)
	+++ branches/RC/core/admin_templates/js/ajax.js (revision 10031)
	@@ -1,455 +1,456 @@
	function preg_print_pre(obj, reg)
	{
	if (!reg) reg = /.*/;
	var p = ''
	for (var prop in obj) {
	if (prop.match(reg) ) {
	p += prop + ': '+obj[prop] + '\n'
	}
	}
	alert(p)
	}


	// Main AJAX classs
	function Request() {}

	Request.timeout = 60000; //60 seconds
	Request.method = 'GET';
	Request.headers = new Array();
	Request.params = null;

	Request.makeRequest = function(p_url, p_busyReq, p_progId, p_successCallBack, p_errorCallBack, p_pass, p_object) {
	//p_url: the web service url
	//p_busyReq: is a request for this object currently in progress?
	//p_progId: element id where progress HTML should be shown
	//p_successCallBack: callback function for successful response
	//p_errorCallBack: callback function for erroneous response
	//p_pass: string of params to pass to callback functions
	//p_object: object of params to pass to callback functions

	if (p_busyReq) return;
	var req = Request.getRequest();
	if (req != null) {
	p_busyReq = true;
	Request.showProgress(p_progId);
	req.onreadystatechange = function() {
	if (req.readyState == 4) {
	p_busyReq = false;
	window.clearTimeout(toId);
	try {
	if (req.status == 200) {
	// preg_print_pre(req)
	p_successCallBack(req, p_pass, p_object);
	} else {
	p_errorCallBack(req, p_pass, p_object);
	}
	Request.hideProgress(p_progId);
	}
	catch (e) {
	// alert('AJAX error')
	}
	}
	}
	var $ajax_mark = (p_url.indexOf('?') ? '&' : '?') + 'ajax=yes';
	req.open(Request.method, p_url + $ajax_mark, true);

	if (Request.method == 'POST') {
	Request.headers['Content-type'] = 'application/x-www-form-urlencoded';
	Request.headers['referer'] = p_url;
	}
	else {
	Request.headers['If-Modified-Since'] = 'Sat, 1 Jan 2000 00:00:00 GMT';
	}

	Request.sendHeaders(req);
	if (Request.method == 'POST') {
	req.send(Request.params);
	Request.method = 'GET'; // restore method back to GET
	}
	else {
	req.send(null);
	}

	var toId = window.setTimeout( function() {if (p_busyReq) req.abort();}, Request.timeout );
	}
	}

	Request.processRedirect = function($request) {
	var $match_redirect = new RegExp('^#redirect#(.*)').exec($request.responseText);
	if ($match_redirect != null) {
	// redirect to external template requested
	window.location.href = $match_redirect[1];
	return true;
	}
	return false;
	}
	Request.sendHeaders = function($request) {
	for (var $header_name in Request.headers) {
	if (typeof Request.headers[$header_name] == 'function') {
	continue;
	}
	$request.setRequestHeader($header_name, Request.headers[$header_name]);
	}
	Request.headers = new Array(); // reset header afterwards
	}

	Request.getRequest = function() {
	var xmlHttp;
	try { xmlHttp = new ActiveXObject('MSXML2.XMLHTTP'); return xmlHttp; } catch (e) {}
	try { xmlHttp = new ActiveXObject('Microsoft.XMLHTTP'); return xmlHttp; } catch (e) {}
	try { xmlHttp = new XMLHttpRequest(); return xmlHttp; } catch(e) {}
	return null;
	}

	Request.showProgress = function(p_id) {
	if (p_id != '') {
	Request.setOpacity(20, p_id);

	if (!document.getElementById(p_id + '_progress')) {
	document.body.appendChild(Request.getProgressObject(p_id));
	}
	else {
	var $progress_div = document.getElementById(p_id + '_progress');
	$progress_div.style.top = getRealTop(p_id) + 'px';
	$progress_div.style.height = document.getElementById(p_id).clientHeight;
	$progress_div.style.display = 'block';
	}
	// document.getElementById(p_id).innerHTML = Request.getProgressHtml();
	}
	}

	Request.hideProgress = function(p_id) {
	if (p_id != '') {
	document.getElementById(p_id + '_progress').style.display = 'none';
	Request.setOpacity(100, p_id);
	}
	}

	Request.setOpacity = function (opacity, id) {
	var elem = typeof(id)=='string' ? document.getElementById(id) : id;
	var object = elem.style;
	object.opacity = (opacity / 100);
	object.MozOpacity = (opacity / 100);
	object.KhtmlOpacity = (opacity / 100);
	object.filter = "alpha(opacity=" + opacity + ")";
	}

	Request.getProgressHtml = function() {
	return "<p class='progress'>" + Request.progressText + "<br /><img src='img/ajax_progress.gif' align='absmiddle' width='100' height='7' alt='" + Request.progressText + "'/></p>";
	}

	Request.getProgressObject = function($id) {
	var $div = document.createElement('DIV');
	var $parent_div = document.getElementById($id);

	$div.id = $id + '_progress';

	$div.style.width = $parent_div.clientWidth + 'px';
	$div.style.height = '150px'; // default height if div is empty (first ajax request for div)
	$div.style.left = getRealLeft($parent_div) + 'px';
	$div.style.top = getRealTop($parent_div) + 'px';
	$div.style.position = 'absolute';

	/*$div.style.border = '1px solid green';
	$div.style.backgroundColor = '#FF0000';*/

	$div.innerHTML = '<table style="width: 100%; height: 100%;"><tr><td style="text-align: center;">'+Request.progressText+'<br /><img src="img/ajax_progress.gif" align="absmiddle" width="100" height="7" alt="'+escape(Request.progressText)+'" /></td></tr></table>';
	return $div;
	}

	Request.getErrorHtml = function(p_req) {
	//TODO: implement accepted way to handle request error
	return '[status: ' + p_req.status + '; status_text: ' + p_req.statusText + '; responce_text: ' + p_req.responseText + ']';
	}

	Request.serializeForm = function(theform) {
	if (typeof(theform) == 'string') {
	theform = document.getElementById(theform);
	}

	var els = theform.elements;
	var len = els.length;
	var queryString = '';

	Request.addField = function(name, value) {
	if (queryString.length > 0) queryString += '&';
	queryString += encodeURIComponent(name) + '=' + encodeURIComponent(value);
	};

	for (var i = 0; i<len; i++) {
	var el = els[i];
	if (el.disabled) continue;

	switch(el.type) {
	case 'text':
	case 'password':
	case 'hidden':
	case 'textarea':
	Request.addField(el.name, el.value);
	break;

	case 'select-one':
	if (el.selectedIndex >= 0) {
	Request.addField(el.name, el.options[el.selectedIndex].value);
	}
	break;

	case 'select-multiple':
	for (var j = 0; j < el.options.length; j++) {
	if (!el.options[j].selected) continue;
	Request.addField(el.name, el.options[j].value);
	}
	break;

	case 'checkbox':
	case 'radio':
	if (!el.checked) continue;
	Request.addField(el.name,el.value);
	break;
	}
	}
	return queryString;
	};

	// AJAX ProgressBar class
	function AjaxProgressBar($url) {
	this.WindowTitle = this.GetWindow().document.title;
	this.URL = $url;
	this.BusyRequest = false;
	this.LastResponceTime = this.GetMicroTime();
	this.ProgressPercent = 0; // progress percent
	this.ProgressTime = new Array();
	this.Query();
	}

	AjaxProgressBar.prototype.GetWindow = function() {
	return window.parent ? window.parent : window;
	}

	AjaxProgressBar.prototype.GetMicroTime = function() {
	var $now = new Date();
	return Math.round($now.getTime() / 1000); // because miliseconds are returned too
	}

	AjaxProgressBar.prototype.Query = function() {
	// prompt('requestinng', this.URL);
	Request.makeRequest(this.URL, this.BusyRequest, '', this.successCallback, this.errorCallback, '', this);
	}

	// return time needed for progress to finish
	AjaxProgressBar.prototype.GetEstimatedTime = function() {
	return Math.ceil((100 - this.ProgressPercent) * Math.sum(this.ProgressTime) / this.ProgressPercent);
	}

	AjaxProgressBar.prototype.successCallback = function($request, $params, $object) {
	var $responce = $request.responseText;
	var $match_redirect = new RegExp('^#redirect#(.*)').exec($responce);
	if ($match_redirect != null) {
	$object.showProgress(100);
	// redirect to external template requested
	window.location.href = $match_redirect[1];
	return false;
	}

	if ($object.showProgress($responce)) {
	$object.Query();
	}
	}

	AjaxProgressBar.prototype.errorCallback = function($request, $params, $object) {
	alert('AJAX Error; class: AjaxProgressBar; ' + Request.getErrorHtml($request));
	}

	AjaxProgressBar.prototype.FormatTime = function ($seconds) {
	$seconds = parseInt($seconds);

	var $minutes = Math.floor($seconds / 60);
	if ($minutes < 10) $minutes = '0' + $minutes;
	$seconds = $seconds % 60;
	if ($seconds < 10) $seconds = '0' + $seconds;

	return $minutes + ':' + $seconds;
	}

	AjaxProgressBar.prototype.showProgress = function ($percent) {
	this.ProgressPercent = $percent;
	var $now = this.GetMicroTime();
	this.ProgressTime[this.ProgressTime.length] = $now - this.LastResponceTime;
	this.LastResponceTime = $now;

	var $display_progress = parseInt(this.ProgressPercent);
	this.GetWindow().document.title = $display_progress + '% - ' + this.WindowTitle;
	document.getElementById('progress_display[percents_completed]').innerHTML = $display_progress + '%';
	document.getElementById('progress_display[elapsed_time]').innerHTML = this.FormatTime( Math.sum(this.ProgressTime) );
	document.getElementById('progress_display[Estimated_time]').innerHTML = this.FormatTime( this.GetEstimatedTime() );

	document.getElementById('progress_bar[done]').style.width = $display_progress + '%';
	document.getElementById('progress_bar[left]').style.width = (100 - $display_progress) + '%';
	return $percent < 100 ? true : false;
	}

	// AJAX PopupManager class
	function AjaxPopupManager($url) {
	this.URL = $url;
	this.ResponceFunction = null;
	this.PopupSizes = new Array();
	}

	AjaxPopupManager.prototype.GetSize = function ($template) {
	if (this.ResponceFunction == null) {
	alert ('Please define responce function first (type: '+typeof(this.ResponceFunction)+')');
	}

	if (!isset(this.PopupSizes[$template])) {
	var $url = this.URL + '&type=GetPopupSize&template_name=' + $template;
	// alert('from ajax: '+$url);
	Request.makeRequest($url, this.BusyRequest, '', this.successCallback, this.errorCallback, ['GetSize', $template], this);
	}
	else {
	// alert('from cache');
	this.ResponceFunction(this.PopupSizes[$template]);
	}
	}

	AjaxPopupManager.prototype.successCallback = function($request, $params, $object) {
	var $responce = $request.responseText;
	- var $match_redirect = new RegExp('^#redirect#(.*)').exec($responce);
	+ /var $match_redirect = new RegExp('^#redirect#(.)').exec($responce);
	if ($match_redirect != null) {
	+ alert('AJAX REDIRECT!!!')
	// redirect to external template requested
	window.location.href = $match_redirect[1];
	return false;
	- }
	+ }*/

	switch ($params[0]) {
	case 'GetSize':
	// store responce to cache for future use
	$object.PopupSizes[ $params[1] ] = $responce;
	break;
	}

	$object.ResponceFunction($responce);
	$object.ResponceFunction = null; // reset responce function
	}

	AjaxPopupManager.prototype.errorCallback = function($request, $params, $object) {
	alert('AJAX Error; class: AjaxPopupManager; ' + Request.getErrorHtml($request));
	}

	// AJAX DropdownPreloader class
	function AjaxDropdownPreloader($url, $input_mask, $filter_field, $dependend_field, value) {
	this.URL = $url;
	this.InputMask = $input_mask;
	this.FilterField = $filter_field;
	this.DependendField = $dependend_field;
	this.Titles = this.prepareTitles();
	this.Value = value;
	this.BusyRequest = false;
	}

	AjaxDropdownPreloader.prototype.prepareURL = function()
	{
	return this.URL.replace('#DEPENDEND#', this.Dependend).replace('#FILTER_VALUE#', this.getValue(this.FilterField));
	}

	AjaxDropdownPreloader.prototype.prepareTitles = function() {
	var $control = this.getControl(this.DependendField);
	var $i = 0;
	var $ret = new Array ();
	while ($i < $control.options.length) {
	$ret[$control.options[$i].value] = $control.options[$i].innerHTML;
	$i++;
	}
	return $ret;
	}

	AjaxDropdownPreloader.prototype.getValue = function($field_name) {
	var $control = this.getControl($field_name);
	if ($control.tagName == 'INPUT') return $control.value;
	return $control.selectedIndex > 0 ? $control.options[$control.selectedIndex].value : '';
	}

	AjaxDropdownPreloader.prototype.Query = function () {
	var $url = this.prepareURL();
	var $selected_value = this.Value \|\| this.getValue(this.DependendField);
	// remove all existing options
	this.removeOptions();
	Request.makeRequest($url, this.BusyRequest, '', this.successCallback, this.errorCallback, $selected_value, this);
	}

	AjaxDropdownPreloader.prototype.getControl = function($field) {
	var $id = this.InputMask.replace('#FIELD#', $field);
	return document.getElementById($id);
	}

	AjaxDropdownPreloader.prototype.successCallback = function($request, $params, $object) {
	if (Request.processRedirect($request) === true) {
	return ;
	}
	var control = $object.getControl($object.DependendField)
	$object.ProcessXMLNode($request.responseXML, control, $params);
	runOnChange(control);
	$object.AfterProcess();
	}

	AjaxDropdownPreloader.prototype.ProcessXMLNode = function($node, $dst_field, $selected_value) {
	for (var i = 0; i < $node.childNodes.length; i++) {
	var $child = $node.childNodes.item(i);
	switch ($child.tagName) {
	case 'option':
	var opt_value = $child.getAttribute('value');
	var title;
	if (opt_value) { // value is passed explicically
	title = $child.firstChild.nodeValue
	}
	else {
	opt_value = $child.firstChild.nodeValue;
	title = this.Titles[$child.firstChild.nodeValue];
	}
	this.addOption($dst_field, opt_value, title, $child.attributes);
	if (opt_value == $selected_value) {
	$dst_field.options[$dst_field.options.length - 1].selected = true;
	}
	break;
	case 'field_options':
	this.addOption($dst_field, '', '');
	// add new states
	this.ProcessXMLNode($child, $dst_field, $selected_value);
	if ($dst_field.options.length == 0 \|\| $dst_field.options.length == 2) {
	$dst_field.value = $dst_field.options[$dst_field.options.length - 1].value;
	}
	break;
	}
	}
	}

	AjaxDropdownPreloader.prototype.AfterProcess = function() {

	}

	AjaxDropdownPreloader.prototype.removeOptions = function($object) {
	if (!$object) $object = this.getControl(this.DependendField);
	if ($object.options.length > 0) {
	while ($object.options.length > 0) {
	$object.remove(0);
	}
	}
	}

	AjaxDropdownPreloader.prototype.addOption = function($object, $value, $title, attributes) {
	var $option = document.createElement('OPTION');
	$object.options.add($option, $object.options.length);
	$option.innerText = $title;
	$option.innerHTML = $title;
	$option.value = $value;
	if (attributes) {
	for (var i=0; i<attributes.length; i++) {
	if (attributes[i].nodeName == 'value') continue;
	$option.setAttribute(attributes[i].nodeName, attributes[i].nodeValue);
	}
	}
	}

	AjaxDropdownPreloader.prototype.errorCallback = function($request, $params, $object) {
	alert('AJAX Error; class: AjaxDropdownPreloader; ' + Request.getErrorHtml($request));
	}
	\ No newline at end of file

	Property changes on: branches/RC/core/admin_templates/js/ajax.js
	___________________________________________________________________
	Modified: cvs2svn:cvs-rev
	## -1 +1 ##
	-1.6.2.4
	\ No newline at end of property
	+1.6.2.5
	\ No newline at end of property
	Index: branches/RC/core/admin_templates/incs/close_popup.tpl
	===================================================================
	--- branches/RC/core/admin_templates/incs/close_popup.tpl (revision 10030)
	+++ branches/RC/core/admin_templates/incs/close_popup.tpl (revision 10031)
	@@ -1,48 +1,48 @@
	<html>
	<head>
	<title></title>
	<script type="text/javascript">
	var $is_debug = <inp2:m_if check="m_ConstOn" name="DBG_REDIRECT">true<inp2:m_else/>false</inp2:m_if>;
	var $use_popups = <inp2:m_if check="adm_UsePopups">true<inp2:m_else/>false</inp2:m_if>;
	var $redirect_url = '<inp2:m_t t="dummy" opener="u" m_opener="u" escape="escape"/>';

	if ($is_debug) {
	document.write('<a href="#" onclick="proceed_redirect()">' + $redirect_url.replace('%5C', '\\') + '</a>');
	}
	else {
	proceed_redirect();
	}

	function isset(variable)
	{
	if(variable == null) return false;
	return (typeof(variable) == 'undefined') ? false : true;
	}

	function proceed_redirect() {
	if (window.opener) {
	// using popups & close_popup called (from anywhere)
	try {
	// parent window is ours
	var $skip_refresh = isset(window.opener.$skip_refresh) && window.opener.$skip_refresh ? true : false;
	if (!$skip_refresh) {
	window.opener.location.href = $redirect_url.replace('%5C', '\\');
	}
	window.close();
	window.opener.focus();
	}
	catch (err) {
	// another website is opened in parent window
	- alert('proceed_redirect.Error: [' + err.description + ']');
	+ alert('Error while trying to process redirect in window opener, you should probably close this window. Error message: [' + err.description + ']');
	}
	}
	else if (!$use_popups) {
	// not using popups (for editing), but close_popup called (e.g. from selector)
	window.location.href = $redirect_url.replace('%5C', '\\');
	}
	}
	</script>
	</head>
	<body>
	</body>
	</html>
	\ No newline at end of file

	Property changes on: branches/RC/core/admin_templates/incs/close_popup.tpl
	___________________________________________________________________
	Modified: cvs2svn:cvs-rev
	## -1 +1 ##
	-1.2
	\ No newline at end of property
	+1.2.2.1
	\ No newline at end of property

in-portalNo OneTemporaryActions

File Metadata

in-portalView Options

Event Timeline

in-portal
No OneTemporary
Actions

in-portal
View Options