source: trunk/admin/cat_perm.php @ 11803

Last change on this file since 11803 was 11729, checked in by plg, 13 years ago

simplify code by using new function add_permission_on_category()

  • Property svn:eol-style set to LF
File size: 9.3 KB
Line 
1<?php
2// +-----------------------------------------------------------------------+
3// | Piwigo - a PHP based photo gallery                                    |
4// +-----------------------------------------------------------------------+
5// | Copyright(C) 2008-2011 Piwigo Team                  http://piwigo.org |
6// | Copyright(C) 2003-2008 PhpWebGallery Team    http://phpwebgallery.net |
7// | Copyright(C) 2002-2003 Pierrick LE GALL   http://le-gall.net/pierrick |
8// +-----------------------------------------------------------------------+
9// | This program is free software; you can redistribute it and/or modify  |
10// | it under the terms of the GNU General Public License as published by  |
11// | the Free Software Foundation                                          |
12// |                                                                       |
13// | This program is distributed in the hope that it will be useful, but   |
14// | WITHOUT ANY WARRANTY; without even the implied warranty of            |
15// | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU      |
16// | General Public License for more details.                              |
17// |                                                                       |
18// | You should have received a copy of the GNU General Public License     |
19// | along with this program; if not, write to the Free Software           |
20// | Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, |
21// | USA.                                                                  |
22// +-----------------------------------------------------------------------+
23
24if (!defined('PHPWG_ROOT_PATH'))
25{
26  die ("Hacking attempt!");
27}
28
29include_once(PHPWG_ROOT_PATH.'admin/include/functions.php');
30
31// +-----------------------------------------------------------------------+
32// | Check Access and exit when user status is not ok                      |
33// +-----------------------------------------------------------------------+
34check_status(ACCESS_ADMINISTRATOR);
35
36// +-----------------------------------------------------------------------+
37// |                       variable initialization                         |
38// +-----------------------------------------------------------------------+
39
40// if the category is not correct (not numeric, not private)
41if (isset($_GET['cat']) and is_numeric($_GET['cat']))
42{
43  $query = '
44SELECT status
45  FROM '.CATEGORIES_TABLE.'
46  WHERE id = '.$_GET['cat'].'
47;';
48  list($status) = pwg_db_fetch_row(pwg_query($query));
49 
50  if ('private' == $status)
51  {
52    $page['cat'] = $_GET['cat'];
53  }
54}
55
56if (!isset($page['cat']))
57{
58  $query = '
59SELECT id
60  FROM '.CATEGORIES_TABLE.'
61  WHERE status = \'private\'
62  LIMIT 1
63;';
64
65  list($page['cat']) = pwg_db_fetch_row(pwg_query($query));
66}
67
68// +-----------------------------------------------------------------------+
69// |                           form submission                             |
70// +-----------------------------------------------------------------------+
71
72
73if (isset($_POST['deny_groups_submit'])
74         and isset($_POST['deny_groups'])
75         and count($_POST['deny_groups']) > 0)
76{
77  // if you forbid access to a category, all sub-categories become
78  // automatically forbidden
79  $query = '
80DELETE
81  FROM '.GROUP_ACCESS_TABLE.'
82  WHERE group_id IN ('.implode(',', $_POST['deny_groups']).')
83    AND cat_id IN ('.implode(',', get_subcat_ids(array($page['cat']))).')
84;';
85  pwg_query($query);
86}
87else if (isset($_POST['grant_groups_submit'])
88         and isset($_POST['grant_groups'])
89         and count($_POST['grant_groups']) > 0)
90{
91  $query = '
92SELECT id
93  FROM '.CATEGORIES_TABLE.'
94  WHERE id IN ('.implode(',', get_uppercat_ids(array($page['cat']))).')
95  AND status = \'private\'
96;';
97  $private_uppercats = array_from_query($query, 'id');
98
99  // We must not reinsert already existing lines in group_access table
100  $granteds = array();
101  foreach ($private_uppercats as $cat_id)
102  {
103    $granteds[$cat_id] = array();
104  }
105 
106  $query = '
107SELECT group_id, cat_id
108  FROM '.GROUP_ACCESS_TABLE.'
109  WHERE cat_id IN ('.implode(',', $private_uppercats).')
110    AND group_id IN ('.implode(',', $_POST['grant_groups']).')
111;';
112  $result = pwg_query($query);
113  while ($row = pwg_db_fetch_assoc($result))
114  {
115    array_push($granteds[$row['cat_id']], $row['group_id']);
116  }
117
118  $inserts = array();
119 
120  foreach ($private_uppercats as $cat_id)
121  {
122    $group_ids = array_diff($_POST['grant_groups'], $granteds[$cat_id]);
123    foreach ($group_ids as $group_id)
124    {
125      array_push($inserts, array('group_id' => $group_id,
126                                 'cat_id' => $cat_id));
127    }
128  }
129
130  mass_inserts(GROUP_ACCESS_TABLE, array('group_id','cat_id'), $inserts);
131}
132else if (isset($_POST['deny_users_submit'])
133         and isset($_POST['deny_users'])
134         and count($_POST['deny_users']) > 0)
135{
136  // if you forbid access to a category, all sub-categories become
137  // automatically forbidden
138  $query = '
139DELETE
140  FROM '.USER_ACCESS_TABLE.'
141  WHERE user_id IN ('.implode(',', $_POST['deny_users']).')
142    AND cat_id IN ('.implode(',', get_subcat_ids(array($page['cat']))).')
143;';
144  pwg_query($query);
145}
146else if (isset($_POST['grant_users_submit']))
147{
148  add_permission_on_category($page['cat'], $_POST['grant_users']);
149}
150
151// +-----------------------------------------------------------------------+
152// |                       template initialization                         |
153// +-----------------------------------------------------------------------+
154
155$template->set_filename('cat_perm', 'cat_perm.tpl');
156
157$template->assign(
158  array(
159    'CATEGORIES_NAV' =>
160      get_cat_display_name_from_id(
161        $page['cat'],
162        'admin.php?page=cat_modify&amp;cat_id='
163        ),
164    'U_HELP' => get_root_url().'admin/popuphelp.php?page=cat_perm',
165    'F_ACTION' => get_root_url().'admin.php?page=cat_perm&amp;cat='.$page['cat']
166    )
167  );
168
169// +-----------------------------------------------------------------------+
170// |                          form construction                            |
171// +-----------------------------------------------------------------------+
172
173// groups denied are the groups not granted. So we need to find all groups
174// minus groups granted to find groups denied.
175
176$groups = array();
177
178$query = '
179SELECT id, name
180  FROM '.GROUPS_TABLE.'
181  ORDER BY name ASC
182;';
183$groups = simple_hash_from_query($query, 'id', 'name');
184$template->assign('all_groups', $groups);
185
186// groups granted to access the category
187$query = '
188SELECT group_id
189  FROM '.GROUP_ACCESS_TABLE.'
190  WHERE cat_id = '.$page['cat'].'
191;';
192$group_granted_ids = array_from_query($query, 'group_id');
193$group_granted_ids = order_by_name($group_granted_ids, $groups);
194$template->assign('group_granted_ids', $group_granted_ids);
195
196
197// groups denied
198$template->assign('group_denied_ids',
199    order_by_name(array_diff(array_keys($groups), $group_granted_ids), $groups)
200  );
201
202// users...
203$users = array();
204
205$query = '
206SELECT '.$conf['user_fields']['id'].' AS id,
207       '.$conf['user_fields']['username'].' AS username
208  FROM '.USERS_TABLE.'
209;';
210$users = simple_hash_from_query($query, 'id', 'username');
211$template->assign('all_users', $users);
212
213
214$query = '
215SELECT user_id
216  FROM '.USER_ACCESS_TABLE.'
217  WHERE cat_id = '.$page['cat'].'
218;';
219$user_granted_direct_ids = array_from_query($query, 'user_id');
220$user_granted_direct_ids = order_by_name($user_granted_direct_ids, $users);
221$template->assign('user_granted_direct_ids', $user_granted_direct_ids);
222
223
224
225$user_granted_indirect_ids = array();
226if (count($group_granted_ids) > 0)
227{
228  $granted_groups = array();
229
230  $query = '
231SELECT user_id, group_id
232  FROM '.USER_GROUP_TABLE.'
233  WHERE group_id IN ('.implode(',', $group_granted_ids).')
234';
235  $result = pwg_query($query);
236  while ($row = pwg_db_fetch_assoc($result))
237  {
238    if (!isset($granted_groups[$row['group_id']]))
239    {
240      $granted_groups[$row['group_id']] = array();
241    }
242    array_push($granted_groups[$row['group_id']], $row['user_id']);
243  }
244
245  $user_granted_by_group_ids = array();
246
247  foreach ($granted_groups as $group_users)
248  {
249    $user_granted_by_group_ids = array_merge($user_granted_by_group_ids,
250                                             $group_users);
251  }
252  $user_granted_by_group_ids = array_unique($user_granted_by_group_ids);
253 
254 
255  $user_granted_indirect_ids = array_diff($user_granted_by_group_ids,
256                                          $user_granted_direct_ids);
257  $user_granted_indirect_ids = 
258    order_by_name($user_granted_indirect_ids, $users); 
259  foreach ($user_granted_indirect_ids as $user_id)
260  {
261    foreach ($granted_groups as $group_id => $group_users)
262    {
263      if (in_array($user_id, $group_users))
264      {
265        $template->append(
266          'user_granted_indirects',
267          array(
268            'USER'=>$users[$user_id],
269            'GROUP'=>$groups[$group_id]
270            )
271          );
272        break;
273      }
274    }
275  }
276}
277
278$user_denied_ids = array_diff(array_keys($users),
279                              $user_granted_indirect_ids,
280                              $user_granted_direct_ids);
281$user_denied_ids = order_by_name($user_denied_ids, $users);
282$template->assign('user_denied_ids', $user_denied_ids);
283
284
285// +-----------------------------------------------------------------------+
286// |                           sending html code                           |
287// +-----------------------------------------------------------------------+
288$template->assign_var_from_handle('ADMIN_CONTENT', 'cat_perm');
289?>
Note: See TracBrowser for help on using the repository browser.