Changeset 6806 for extensions/user_tags/include/t4u_content.class.php

Timestamp:

Aug 26, 2010, 7:57:55 PM (14 years ago)

Author:

nikrou

Message:

Add permissions on add tags widget
Use default theme jquery library
Add help

File:

• extensions/user_tags/include/t4u_content.class.php (modified) (5 diffs)

extensions/user_tags/include/t4u_content.class.php

@@ -25 +25 @@
     $this->plugin_config = $config;
 
-    if (preg_match('!/t4u_addtags.*!', $_SERVER['QUERY_STRING']) && !empty($_POST['tags'])) {
+    if (preg_match('!/t4u_addtags.*!', $_SERVER['QUERY_STRING']) 
+        && !empty($_POST['tags'])
+        && hasPermission('add')) {
       include_once(PHPWG_ROOT_PATH.'admin/include/functions.php');
 
-      /* TODO: add permissions */
       $tag_ids = get_fckb_tag_ids($_POST['tags']);
       set_tags($tag_ids, $_POST['image_id']);
@@ -34 +35 @@
     }
 
-    if (preg_match('!/t4u_gettags.*!', $_SERVER['QUERY_STRING'])) {
+    if (preg_match('!/t4u_gettags.*!', $_SERVER['QUERY_STRING'])
+        && hasPermission('add')) {
       include_once(PHPWG_ROOT_PATH.'admin/include/functions.php');
 
-      /* TODO: add permissions */
       $query = '
 SELECT
@@ -52 +53 @@
     global $template;
 
-    /* TODO: add permissions */
-    if (!is_autorize_status(ACCESS_CLASSIC)) { return;}
+    if (!$this->hasPermission('add')) {
+      return false;
+    }
 
     $template->func_known_script(array('id' => 'jquery',
-                                       'src' => get_root_url().T4U_JS. '/jquery-1.4.2.js'
+                                       'src' => get_root_url().'themes/default/js/jquery.packed.js'
                                        ),
                                  $template->smarty
@@ -68 +70 @@
     $template->assign('T4U_IMAGE_ID', $picture['id']);
     $template->assign('T4U_REFERER', htmlentities($picture['url']));
+    $template->assign('T4U_PERMISSION_DELETE', $this->hasPermission('delete'));
+
     $related_tags = array();
     if (!empty($template->smarty->_tpl_vars['related_tags'])) {
@@ -103 +107 @@
     return $url;
   }
+
+  private function hasPermission($permission='add') {
+    return 
+      (($this->plugin_config->getPermission($permission)!='')
+       and is_autorize_status(get_access_type_status($this->plugin_config->getPermission($permission))));
+  }
 }
 ?>