gosa-core/plugins/admin/users/class_userManagement.inc

   1 <?php
   2 /*
   3  * This code is part of GOsa (http://www.gosa-project.org)
   4  * Copyright (C) 2003-2008 GONICUS GmbH
   5  *
   6  * ID: $$Id$$
   7  *
   8  * This program is free software; you can redistribute it and/or modify
   9  * it under the terms of the GNU General Public License as published by
  10  * the Free Software Foundation; either version 2 of the License, or
  11  * (at your option) any later version.
  12  *
  13  * This program is distributed in the hope that it will be useful,
  14  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  15  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  16  * GNU General Public License for more details.
  17  *
  18  * You should have received a copy of the GNU General Public License
  19  * along with this program; if not, write to the Free Software
  20  * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
  21  */
  22
  23 class userManagement extends plugin
  24 {
  25   /* Plugin definitions */
  26   var $plHeadline     = "Users";
  27   var $plDescription  = "Manage users";
  28   var $plIcon         = "plugins/users/images/user.png";
  29
  30   /* Dialog attributes */
  31   var $usertab              = NULL;
  32   var $ui                   = NULL;
  33   var $templates            = array();
  34   var $got_uid              = false;
  35   var $CopyPasteHandler     = NULL;
  36   var $CPPasswordChange     = ""; // Contains the entry id which should get a new password
  37   var $DivListUsers;
  38
  39   var $pwd_change_queue     = array();
  40
  41   var $start_pasting_copied_objects = FALSE;
  42   var $msg_dialog= NULL;
  43   var $acl_module = array("users");
  44   var $dns    = array();
  45
  46   function userManagement(&$config, $ui)
  47   {
  48     /* Save configuration for internal use */
  49     $this->config= &$config;
  50     $this->ui= &$ui;
  51
  52     /* Copy & Paste handler */
  53     if ($this->config->boolValueIsTrue("main", "copyPaste")){
  54       $this->CopyPasteHandler= new CopyPasteHandler($this->config);
  55     }
  56
  57     /* Creat dialog object */
  58     $this->DivListUsers = new divListUsers($this->config,$this);
  59
  60   }
  61
  62
  63   function execute()
  64   {
  65     /* Call parent execute */
  66     plugin::execute();
  67
  68     /* LOCK MESSAGE Vars */
  69     session::set('LOCK_VARS_TO_USE',array("/^act$/","/^id$/","/^user_edit_/","/^user_del_/","/^item_selected/","/^remove_multiple_users/","/^multiple_edit/","/menu_action/"));
  70
  71     $smarty       = get_smarty();                 // Smarty instance
  72     $s_action     = "";                           // Contains the action to be taken
  73     $s_entry      = "";                           // The value for s_action
  74
  75     /* Edit entry button pressed? */
  76     if( isset($_GET['act']) && $_GET['act'] == "edit_entry" ){
  77       $s_action= "edit";
  78       $s_entry= validate($_GET['id']);
  79     }
  80
  81     /* Test relevant POST values */
  82     foreach($_POST as $key => $val){
  83
  84       /* Get every possible POST combination and set s_action/s_entry accordingly */
  85       foreach(array("del"       => "user_del",
  86                     "edit"      => "user_edit",
  87                     "new"       => "user_new",
  88                     "new_tpl"   => "user_tplnew",
  89                     "del_multiple" => "^remove_multiple_users",
  90                     "create_user_from_tpl"          => "userfrom_tpl",
  91                     "change_pw" => "user_chgpw",
  92                     "editPaste" => "editPaste",
  93                     "copy_multiple" => "multiple_copy_users",
  94                     "multiple_edit" => "multiple_edit",
  95                     "cut_multiple" => "multiple_cut_users",
  96                     "multiple_password_change" => "multiple_password_change",
  97                     "copy"      => "^copy",
  98                     "toggle_lock_status" => "toggle_lock_status",
  99                     "cut"       => "^cut") as $act => $name){
 100
 101         if (preg_match("/".$name.".*/", $key)){
 102           $s_action= $act;
 103           $s_entry= preg_replace("/".$name."_/i", "", $key);
 104           break;
 105         }
 106       }
 107
 108     } /* ...Test POST */
 109
 110     /* Remove coordinate prefix from POST, required by some browsers */
 111     $s_entry= preg_replace("/_.$/", "", $s_entry);
 112
 113     /* Seperate possibly encoded tab and entry, default to tab "user" */
 114     if(preg_match("/.*-.*/", $s_entry)){
 115       $s_tab= preg_replace("/^[^-]*-/i", "" ,$s_entry);
 116       $s_entry= preg_replace("/-[^-]*$/i", "", $s_entry);
 117     }else{
 118       $s_tab= "user";
 119     }
 120
 121     if(!$this->config->search($s_tab, 'class',array('tabs'))){
 122       $s_tab = "user";
 123     }
 124
 125     if (isset($_POST['menu_action'])){
 126
 127             /* handle C&P from layers menu */
 128             if(preg_match("/^multiple_copy_systems/",$_POST['menu_action'])){
 129               $s_action = "copy_multiple";
 130             }
 131             if(preg_match("/^multiple_cut_systems/",$_POST['menu_action'])){
 132               $s_action = "cut_multiple";
 133             }
 134             if(preg_match("/^editPaste/",$_POST['menu_action'])){
 135               $s_action = "editPaste";
 136             }
 137
 138             /* Create options */
 139             if($_POST['menu_action'] == "user_new"){
 140               $s_action = "new";
 141             }
 142             if($_POST['menu_action'] == "user_tplnew"){
 143               $s_action = "new_tpl";
 144             }
 145             if($_POST['menu_action'] == "multiple_edit"){
 146               $s_action = "multiple_edit";
 147             }
 148
 149             /* handle remove from layers menu */
 150             if(preg_match("/^multiple_password_change/",$_POST['menu_action'])){
 151               $s_action = "multiple_password_change";
 152             }
 153
 154             /* handle remove from layers menu */
 155             if(preg_match("/^remove_multiple/",$_POST['menu_action'])){
 156               $s_action = "del_multiple";
 157             }
 158             if(preg_match("/^templatize_multiple/",$_POST['menu_action'])){
 159               $s_action = "templatize_multiple";
 160             }
 161
 162             if(preg_match("/^event/",$_POST['menu_action'])){
 163               $s_action = $_POST['menu_action'];
 164             }
 165     }
 166
 167     /* Use template */
 168     if(isset($_POST['templatize_continue'])){
 169       $s_action = "templatize_continue";
 170     }
 171
 172
 173     /********************
 174       Create notification event
 175      ********************/
 176
 177     if(preg_match("/^event_/",$s_action) && class_available("DaemonEvent")){
 178       $ids = $this->list_get_selected_items();
 179       $uids = array();
 180       foreach($ids as $id){
 181         $uids[] = $this->list[$id]['uid'][0];
 182       }
 183       if(count($uids)){
 184         $events = DaemonEvent::get_event_types(USER_EVENT);
 185         $event = preg_replace("/^event_/","",$s_action);
 186         if(isset($events['BY_CLASS'][$event])){
 187           $type = $events['BY_CLASS'][$event];
 188           $this->usertab = new $type['CLASS_NAME']($this->config);
 189           $this->usertab->add_users($uids);
 190           $this->usertab->set_type(SCHEDULED_EVENT);
 191         }
 192       }
 193     }
 194
 195     /* Abort event dialog */
 196     if(isset($_POST['abort_event_dialog'])){
 197       $this->usertab = FALSE;
 198     }
 199
 200     /* Save event */
 201     if(isset($_POST['save_event_dialog'])){
 202       $this->usertab->save_object();
 203       $msgs = $this->usertab->check();
 204       if(count($msgs)){
 205         msg_dialog::displayChecks($msgs);
 206       }else{
 207
 208         $o_queue = new gosaSupportDaemon();
 209         $o_queue->append($this->usertab);
 210         if($o_queue->is_error()){
 211           msg_dialog::display(_("Infrastructure error"), msgPool::siError($o_queue->get_error()),ERROR_DIALOG);
 212         }else{
 213           $this->usertab = FALSE;
 214         }
 215       }
 216     }
 217
 218     /* Display event */
 219     if($this->usertab instanceof DaemonEvent){
 220       $this->usertab->save_object();
 221       return($this->usertab->execute());
 222     }
 223
 224
 225     /********************
 226       Copy & Paste
 227      ********************/
 228
 229     /* Display the copy & paste dialog, if it is currently open */
 230     if($this->CPPasswordChange == ""){
 231       $ret = $this->copyPasteHandling_from_queue($s_action,$s_entry);
 232       if($ret){
 233         return($ret);
 234       }
 235     }
 236
 237
 238     /********************
 239       Change password confirmed
 240      ********************/
 241
 242     /* Perform password change */
 243     if (isset($_POST['password_finish'])){
 244
 245       /* For security reasons, check if user is allowed to set password again */
 246       $dn  = $this->dn;
 247       $acl = $this->ui->get_permissions($dn, "users/password");
 248       $cacl= $this->ui->get_permissions($dn, "users/user");
 249
 250       /* Are we allowed to create a new user or to set the password attribute? */
 251       if (preg_match('/w/', $acl) || preg_match('/c/', $cacl)){
 252
 253         /* Check input and feed errors into 'message' */
 254         $message= array();
 255
 256         /* Sanity checks... */
 257         if ($_POST['new_password'] != $_POST['repeated_password']){
 258
 259           /* Matching passwords in new and repeated? */
 260           $message[]= _("The passwords you've entered as 'New password' and 'Repeated new password' do not match.");
 261         } else {
 262
 263           /* Empty password is not permitted by default. */
 264           if ($_POST['new_password'] == ""){
 265             msgPool::required(_("New password"));
 266           }
 267         }
 268
 269         /* Errors, or password change? */
 270         if (count($message) != 0){
 271
 272           /* Show error message and continue editing */
 273           msg_dialog::displayChecks($message);
 274           return($smarty->fetch(get_template_path('password.tpl', TRUE)));
 275         }
 276
 277         $config= $this->config;
 278         $ldap_ui= $this->config->get_ldap_link();
 279         if(isset($this->usertab->dn)){
 280           $ldap_ui->cat($this->usertab->dn,array("uid"));
 281           $user = $ldap_ui->fetch();
 282         }else{
 283           $ldap_ui->cat($this->dn,array("uid"));
 284           $user = $ldap_ui->fetch();
 285         }
 286         if((is_array($user))&&(isset($user['uid']))){
 287           $username= $user['uid'][0];
 288         }
 289
 290         /* Set password, perform required steps */
 291         if ($this->usertab){
 292           if ($this->usertab->password_change_needed()){
 293             $obj= $this->usertab->by_object['user'];
 294             if(!change_password ($this->usertab->dn, $_POST['new_password'],0, $obj->pw_storage)){
 295               return($smarty->fetch(get_template_path('password.tpl', TRUE)));
 296             }
 297             if ($config->get_cfg_value("passwordHook") != ""){
 298               exec($config->get_cfg_value("passwordHook")." ".$username." ".$_POST['new_password'], $resarr);
 299             }
 300             new log("modify","users/".get_class($this),$this->usertab->dn,array(),"Password has been changed");
 301             unset($this->usertab);
 302             $this->usertab= NULL;
 303           }
 304         } else {
 305           if(!change_password ($this->dn, $_POST['new_password'])){
 306             return($smarty->fetch(get_template_path('password.tpl', TRUE)));
 307           }
 308           if ($config->get_cfg_value("passwordHook") != ""){
 309             exec($config->get_cfg_value("passwordHook")." ".$username." ".$_POST['new_password'], $resarr);
 310           }
 311           new log("modify","users/".get_class($this),$this->dn,array(),"Password has been changed");
 312         }
 313       } else {
 314
 315         /* Missing permissions, show message */
 316         msg_dialog::display(_("Password change"),_("You have no permission to change this users password!"),WARNING_DIALOG);
 317       }
 318       /* Clean session, delete lock */
 319       $this->remove_lock();
 320       unset ($this->usertab);
 321       $this->usertab= NULL;
 322       $this->lognames= array();;
 323       $this->sn= "";
 324       $this->givenName= "";
 325       $this->uid= "";
 326       set_object_info();
 327     }
 328
 329
 330     /********************
 331      Change multiple passwords requested
 332      ********************/
 333
 334     if($s_action == "multiple_password_change"){
 335       $this->pwd_change_queue = $this->list_get_selected_items();
 336       $disallowed = array();
 337       foreach($this->pwd_change_queue as $key => $id){
 338         if(!preg_match("/w/",$this->ui->get_permissions($this->list[trim($id)]['dn'],"users/password"))){
 339           unset($this->pwd_change_queue[$key]);
 340           $disallowed[] = $this->list[trim($id)]['dn'];
 341         }
 342       }
 343       if(count($disallowed)){
 344         msg_dialog::display(_("Permission"),msgPool::permModify($disallowed),INFO_DIALOG);
 345       }
 346     }
 347
 348
 349     /********************
 350       Change password requested
 351      ********************/
 352
 353     /* Password change requested */
 354     if (($s_action == "change_pw") || (!empty($this->CPPasswordChange)) || count($this->pwd_change_queue)){
 355
 356       /* Get users whose passwords should be changed. */
 357       if(count($this->pwd_change_queue)){
 358         $s_entry= array_pop($this->pwd_change_queue);
 359       }
 360
 361       if(!empty($this->CPPasswordChange)){
 362         $s_entry = $this->CPPasswordChange;
 363         $this->CPPasswordChange = "";
 364       }
 365
 366       /* Get 'dn' from posted 'uid' */
 367       $this->dn= $this->list[trim($s_entry)]['dn'];
 368
 369       /* Load permissions for selected 'dn' and check if
 370          we're allowed to remove this 'dn' */
 371       if (preg_match("/w/",$this->ui->get_permissions($this->dn,"users/password"))){
 372
 373         /* User is allowed to change passwords, save 'dn' and 'acl' for next
 374            dialog. */
 375         set_object_info($this->dn);
 376         return ($smarty->fetch(get_template_path('password.tpl', TRUE)));
 377       } else {
 378         /* User is not allowed. Show message and cancel. */
 379         msg_dialog::display(_("Password change"),_("You have no permission to change this users password!"),WARNING_DIALOG);
 380       }
 381     }
 382
 383
 384
 385      /********************
 386       Edit existing entry
 387      ********************/
 388
 389
 390     /* User wants to edit data? */
 391     if (($s_action=="edit") && (!isset($this->usertab->config))){
 392
 393       /* Get 'dn' from posted 'uid', must be unique */
 394       $this->dn= $this->list[trim($s_entry)]['dn'];
 395
 396       /* Check locking, save current plugin in 'back_plugin', so
 397          the dialog knows where to return. */
 398
 399       if (($user= get_lock($this->dn)) != ""){
 400         return(gen_locked_message ($user, $this->dn,TRUE));
 401       }
 402
 403       /* Lock the current entry, so everyone will get the
 404          above dialog */
 405       add_lock ($this->dn, $this->ui->dn);
 406
 407       /* Register usertab to trigger edit dialog */
 408       $this->usertab= new usertabs($this->config,
 409           $this->config->data['TABS']['USERTABS'], $this->dn);
 410
 411       /* Switch tab, if it was requested by the user */
 412       $this->usertab->current = $s_tab;
 413
 414       /* Set ACL and move DN to the headline */
 415       $this->usertab->set_acl_base($this->dn);
 416       set_object_info($this->dn);
 417     }
 418
 419
 420     /********************
 421       Edit multiple entries
 422      ********************/
 423
 424     /* User wants to edit data? */
 425     if ($s_action == "multiple_edit" && !isset($this->usertab->config)){
 426
 427       $this->dn = array();
 428       foreach($this->list_get_selected_items() as $id){
 429         $this->dn[] = $this->list[$id]['dn'];;
 430       }
 431       $tmp = new multi_plug($this->config,"usertabs",$this->config->data['TABS']['USERTABS'],
 432             $this->dn,$this->DivListUsers->selectedBase,"user");
 433       if ($tmp->entries_locked()){
 434         return($tmp->display_lock_message());
 435       }
 436       $tmp->lock_entries($this->ui->dn);
 437       if($tmp->multiple_available()){
 438         $this->usertab = $tmp;
 439         $this->usertab->set_active_tab($s_tab);
 440         set_object_info($this->usertab->get_object_info());
 441       }
 442     }
 443
 444
 445     /********************
 446       Edit canceled
 447      ********************/
 448
 449     /* Reset all relevant data, if we get a _cancel request */
 450     if (isset($_POST['edit_cancel']) || isset($_POST['password_cancel'])){
 451       if (isset($this->usertab)){
 452         $this->remove_lock();
 453       }
 454       $this->usertab= NULL;
 455       $this->lognames= array();;
 456       $this->sn= "";
 457       $this->givenName= "";
 458       $this->uid= "";
 459       set_object_info();
 460     }
 461
 462
 463     /********************
 464       We want to create a new user, so fetch all available user templates
 465      ********************/
 466
 467     /* Generate template list */
 468     if ($s_action == "new" || $s_action == "create_user_from_tpl" || $s_action == "templatize_multiple"){
 469
 470       $this->templates= array();
 471       $ldap= $this->config->get_ldap_link();
 472
 473       /* Create list of templates */
 474       foreach ($this->config->departments as $key => $value){
 475
 476         /* Get acls from different ou's */
 477         $acl = $this->ui->get_permissions($value,"users/user")       ;
 478
 479         /* If creation of a new user is allowed, append this template */
 480         if (preg_match("/c/",$acl)){
 481
 482           /* Search all templates from the current dn */
 483           $ldap->cd (get_people_ou().$value);
 484           $ldap->search ("(objectClass=gosaUserTemplate)", array("uid"));
 485
 486           /* Append */
 487           if ($ldap->count() != 0){
 488             while ($attrs= $ldap->fetch()){
 489               $this->templates[$ldap->getDN()]=
 490                 $attrs['uid'][0]." - ".LDAP::fix($key);
 491             }
 492             if ($s_action != "templatize_multiple"){
 493               $this->templates['none']= _("none");
 494             }
 495           }
 496         }
 497       }
 498
 499       /* Sort templates */
 500       natcasesort ($this->templates);
 501       reset ($this->templates);
 502     }
 503
 504
 505     /********************
 506       Apply template to multiple entries requested, display confirm dialog
 507      ********************/
 508
 509     if ($s_action=="templatize_multiple"){
 510       $ids = $this->list_get_selected_items();
 511       $this->dns = array();
 512       if(count($ids)){
 513
 514         foreach($ids as $id){
 515           $dn = $this->list[$id]['dn'];
 516           if (($user= get_lock($dn)) != ""){
 517             return(gen_locked_message ($user, $dn));
 518           }
 519           $this->dns[$id] = $dn;
 520         }
 521       }
 522
 523       $smarty->assign("templates", $this->templates);
 524
 525       return($smarty->fetch(get_template_path('templatize.tpl', TRUE)));
 526     }
 527
 528     /* Perform templatizing after the button has been pressed */
 529     if ($s_action == "templatize_continue"){
 530
 531       $acl = $this->ui->get_permissions($_POST['template'], "users/user");
 532
 533       /* Template readable? */
 534       if (preg_match('/r/', $acl)){
 535         $template_dn= $_POST['template'];
 536
 537         foreach ($this->dns as $dn){
 538           $acl = $this->ui->get_permissions($_POST['template'], "users/user");
 539           if (preg_match('/w/', $acl)){
 540             $usertab= new usertabs($this->config, $this->config->data['TABS']['USERTABS'], $dn);
 541             $usertab->adapt_from_template($template_dn, array("sn", "givenName", "uid"));
 542             $usertab->save();
 543             unset ($usertab);
 544             $usertab= NULL;
 545           } else {
 546             msg_dialog::display(_("Permission error"), sprintf(_("You have no permission to modify object '%s'!"), $dn), ERROR_DIALOG);
 547           }
 548         }
 549       } else {
 550         msg_dialog::display(_("Permission error"), _("You have no permission to use this template!"), ERROR_DIALOG);
 551       }
 552
 553     }
 554
 555
 556     /********************
 557       Delete MULTIPLE entries requested, display confirm dialog
 558      ********************/
 559
 560     if ($s_action=="del_multiple" || $s_action == "del"){
 561
 562       if($s_action == "del"){
 563
 564         /* Get 'dn' from posted 'uid' */
 565         $ids = array($s_entry);
 566       }else{
 567         $ids = $this->list_get_selected_items();
 568       }
 569
 570       $this->dns = array();
 571       if(count($ids)){
 572         $disallowed = array();
 573         foreach($ids as $id){
 574           $dn = $this->list[$id]['dn'];
 575           $acl = $this->ui->get_permissions($dn, "users/user");
 576           if(preg_match("/d/",$acl)){
 577             $this->dns[$id] = $dn;
 578           }else{
 579             $disallowed[] = $dn;
 580           }
 581         }
 582
 583         if(count($disallowed)){
 584           msg_dialog::display(_("Permission"),msgPool::permDelete($disallowed),INFO_DIALOG);
 585         }
 586
 587         if(count($this->dns)){
 588
 589           /* Check locks */
 590           if ($user= get_multiple_locks($this->dns)){
 591             return(gen_locked_message($user,$this->dns));
 592           }
 593
 594           $dns_names = array();
 595           foreach($this->dns as $dn){
 596             $dns_names[] = LDAP::fix($dn);
 597           }
 598
 599           add_lock($this->dns, $this->ui->dn);
 600
 601           /* Lock the current entry, so nobody will edit it during deletion */
 602           $info = sprintf(msgPool::deleteInfo($dns_names,_("user")));
 603
 604           /* Lock the current entry, so nobody will edit it during deletion */
 605           $smarty->assign("info", msgPool::deleteInfo($dns_names));
 606           return($smarty->fetch(get_template_path('remove.tpl', TRUE)));
 607         }
 608       }
 609     }
 610
 611
 612     /********************
 613       Delete MULTIPLE entries confirmed
 614      ********************/
 615
 616     if(isset($_POST['delete_user_confirm'])){
 617
 618       /* Remove user by user and check acls before removeing them */
 619       foreach($this->dns as $key => $dn){
 620
 621         $acl = $this->ui->get_permissions($dn, "users/user");
 622         if (preg_match('/d/', $acl)){
 623
 624           /* Delete request is permitted, perform LDAP action */
 625           $this->usertab= new usertabs($this->config, $this->config->data['TABS']['USERTABS'],$dn);
 626           $this->usertab->set_acl_base();
 627           $this->usertab->delete ();
 628           unset ($this->usertab);
 629           $this->usertab= NULL;
 630         } else {
 631           msg_dialog::display(_("Warning"),msgPool::permDelete($dn),WARNING_DIALOG);
 632           if(isset($this->ui->uid)){
 633             new log("security","users/".get_class($this),$dn,array(),"Tried to trick deletion.");
 634           }
 635         }
 636       }
 637       /* Remove lock file after successfull deletion */
 638       $this->remove_lock();
 639       $this->dns = array();
 640     }
 641
 642
 643     /********************
 644       Toggle lock status for user
 645      ********************/
 646
 647     if($s_action == "toggle_lock_status" && isset($this->list[$s_entry])){
 648
 649       /* Get entry check current status */
 650       $val = $this->list[$s_entry];
 651       if (!preg_match("/w/",$this->ui->get_permissions($val['dn'],"users/password"))){
 652         msg_dialog::display(_("Account locking"),
 653             _("You have no permission to change the lock status for this user!"),WARNING_DIALOG);
 654       }else{
 655         $pwd = $val['userPassword'][0];
 656         $method = passwordMethod::get_method($pwd,$val['dn']);
 657         $success= false;
 658         if($method instanceOf passwordMethod){
 659           if($method->is_locked($this->config,$val['dn'])){
 660             $success= $method->unlock_account($this->config,$val['dn']);
 661           }else{
 662             $success= $method->lock_account($this->config,$val['dn']);
 663           }
 664
 665           /* Check for success */
 666           if (!$success){
 667             $hn= $method->get_hash_name();
 668             if (is_array($hn)){
 669               $hn= $hn[0];
 670             }
 671             msg_dialog::display(_("Account locking"),
 672               sprintf(_("Password method '%s' does not support locking. Account has not been locked!"), $hn),WARNING_DIALOG);
 673           }
 674         }else{
 675           // Can't lock unknown methods.
 676         }
 677
 678       }
 679     }
 680
 681     /********************
 682       Delete entry Canceled
 683      ********************/
 684
 685     /* Delete user canceled? */
 686     if (isset($_POST['delete_cancel'])){
 687
 688       /* Remove lock file after successfull deletion */
 689       $this->remove_lock();
 690       $this->dns = array();
 691     }
 692
 693
 694     /********************
 695       Edit entry finished (Save)
 696      ********************/
 697
 698     /* Finish user edit is triggered by the tabulator dialog, so
 699        the user wants to save edited data. Check and save at this
 700        point. */
 701     if ((isset($_POST['edit_finish']) || isset($_POST['edit_apply'])) && (isset($this->usertab->config))){
 702
 703       /* Check tabs, will feed message array */
 704       $this->usertab->last= $this->usertab->current;
 705       $this->usertab->save_object();
 706       $message= $this->usertab->check();
 707
 708       /* Save, or display error message? */
 709       if (count($message) == 0){
 710
 711         /* No errors. Go ahead and prepare to ask for a password
 712            in case we're creating a new user. 'dn' will be 'new'
 713            in this case. It is set to the correct value later. */
 714         if ($this->dn == "new"){
 715           $set_pass= 1;
 716         } else {
 717           $set_pass= 0;
 718         }
 719
 720         /* Save user data to ldap */
 721         if($this->usertab->save() == 1){
 722           return;
 723         }
 724
 725         if (!isset($_POST['edit_apply'])){
 726           /* User has been saved successfully, remove lock from LDAP. */
 727           if ($this->dn != "new"){
 728             $this->remove_lock();
 729           }
 730
 731           /* In case of new users, ask for a password, skip this for templates */
 732           if (($set_pass || $this->usertab->password_change_needed()) && !$this->is_template){
 733             $this->dn = $this->usertab->dn;
 734             return($smarty->fetch(get_template_path('password.tpl', TRUE)));
 735           }
 736
 737           unset ($this->usertab);
 738           $this->usertab= NULL;
 739           set_object_info();
 740         }else{
 741
 742           /* Reinitialize tab */
 743           if($this->usertab instanceof tabs){
 744             $this->usertab->re_init();
 745           }
 746         }
 747       } else {
 748         /* Ok. There seem to be errors regarding to the tab data,
 749            show message and continue as usual. */
 750         msg_dialog::displayChecks($message);
 751       }
 752     }
 753
 754
 755
 756     /********************
 757       Create a new user,template, user from template
 758      ********************/
 759
 760     /* Check selected options for template */
 761     if (isset($_POST['template_continue'])){
 762       $message = array();
 763       if(!isset($_POST['template']) || (empty($_POST['template']))){
 764         $message[]= msgPool::invalid(_("Template"));
 765       }
 766       if(!isset($_POST['sn']) || (empty($_POST['sn']))){
 767         $message[]= msgPool::required(_("Name"));
 768       }
 769       if(!isset($_POST['givenName']) || (empty($_POST['givenName']))){
 770         $message[]= msgPool::required(_("Given name"));
 771       }
 772
 773       /* Show error message / continue editing */
 774       if (count($message) > 0){
 775         msg_dialog::displayChecks($message);
 776
 777         foreach(array("sn", "givenName", "uid", "template") as $attr){
 778           if(isset($_POST[$attr])){
 779             $smarty->assign("$attr", $_POST[$attr]);
 780           }else{
 781             $smarty->assign("$attr", "");
 782           }
 783         }
 784         $smarty->assign("templates",$this->templates);
 785         $smarty->assign("got_uid",$this->got_uid);
 786         $smarty->assign("edit_uid",false);
 787         return($smarty->fetch(get_template_path('template.tpl', TRUE)));
 788
 789       }
 790     }
 791
 792     /* New user/template request */
 793     if (($s_action=="create_user_from_tpl")||($s_action=="new") || ($s_action=="new_tpl")){
 794       /* By default we set 'dn' to 'new', all relevant plugins will
 795          react on this. */
 796       $this->dn= "new";
 797
 798        $this->got_uid= ($this->config->get_cfg_value("idGenerator") == "");
 799
 800       /* Create new usertab object */
 801       $this->usertab= new usertabs($this->config,$this->config->data['TABS']['USERTABS'], $this->dn);
 802       $this->usertab->by_object['user']->base= $this->DivListUsers->selectedBase;
 803       $this->usertab->set_acl_base($this->DivListUsers->selectedBase);
 804
 805       /* Take care about templates */
 806       if ($s_action=="new_tpl"){
 807         $this->is_template= TRUE;
 808         $this->usertab->set_template_mode ();
 809       } else {
 810         $this->is_template= FALSE;
 811       }
 812
 813       /* Use template if there are any of them */
 814       if ((count($this->templates) && ($s_action!='new_tpl'))||($s_action=="create_user_from_tpl")){
 815         foreach(array("sn", "givenName", "uid", "got_uid", "templates") as $attr){
 816           $smarty->assign("$attr", $this->$attr);
 817         }
 818         if ($s_action=="create_user_from_tpl"){
 819           $smarty->assign("template", $this->dn= $this->list[trim($s_entry)]['dn']);
 820         } else {
 821           $smarty->assign("template", "none");
 822         }
 823         $smarty->assign("edit_uid", "");
 824         return($smarty->fetch(get_template_path('template.tpl', TRUE)));
 825       }
 826     }
 827
 828     /********************
 829       Template selected continue edit
 830      ********************/
 831
 832     /* Continue template editing */
 833     if ((isset($_POST['template_continue'])) && ($_POST['template'] != 'none') && (!isset($_POST['uid']))){
 834
 835       $this->sn             = $_POST['sn'];
 836       $this->givenName      = $_POST['givenName'];
 837
 838       /* Check for requred values */
 839       $message= array();
 840       if ($this->sn == "") {
 841         $message[]= msgPool::required(_("Name"));
 842       }
 843       if ($this->givenName == "") {
 844         $message[]= msgPool::required(_("Given name"));
 845       }
 846
 847       /* Check if dn is used */
 848       $dn= preg_replace("/^[^,]+,/i", "", $_POST['template']);
 849       $ldap= $this->config->get_ldap_link();
 850       $ldap->cd ($dn);
 851       $ldap->search ("(&(sn=".normalizeLdap($this->sn).")(givenName=".normalizeLdap($this->givenName)."))", array("givenName"));
 852       if ($ldap->count () != 0){
 853         msgPool::duplicated(_("Name"));
 854       }
 855
 856       /* Show error message / continue editing */
 857       if (count($message) > 0){
 858         msg_dialog::displayChecks($message);
 859       } else {
 860         $attributes= array('sn' => $this->sn, 'givenName' => $this->givenName);
 861         if ($this->config->get_cfg_value("idGenerator") != ""){
 862           $uids= gen_uids ($this->config->get_cfg_value("idGenerator"), $attributes);
 863           if (count($uids)){
 864             $smarty->assign("edit_uid", "false");
 865             $smarty->assign("uids", $uids);
 866             $this->uid= current($uids);
 867           }
 868         } else {
 869           $smarty->assign("edit_uid", "");
 870           $this->uid= "";
 871         }
 872         $this->got_uid= true;
 873       }
 874
 875       foreach(array("sn", "givenName", "uid", "got_uid", "templates") as $attr){
 876         $smarty->assign("$attr", $this->$attr);
 877       }
 878       if (isset($_POST['template'])){
 879         $smarty->assign("template", $_POST['template']);
 880       }
 881       return($smarty->fetch(get_template_path('template.tpl', TRUE)));
 882     }
 883
 884     /********************
 885       No template selected continue edit
 886      ********************/
 887
 888     /* No template. Ok. Lets fill data into the normal user dialog */
 889     if (isset($_POST['template_continue']) && $_POST['template'] == 'none'){
 890       foreach(array("sn", "givenName", "uid") as $attr){
 891         if (isset($_POST[$attr])){
 892           $this->usertab->by_object['user']->$attr= $_POST[$attr];
 893         }
 894       }
 895     }
 896
 897
 898     /********************
 899       Template selected continue edit
 900      ********************/
 901
 902     /* Finish template preamble */
 903     if (isset($_POST['template_continue']) && $_POST['template'] != 'none' && (isset($_POST['uid']))){
 904
 905       /* Move user supplied data to sub plugins */
 906       foreach(array("uid","sn","givenName") as $attr){
 907         $this->$attr = $_POST[$attr];
 908         $this->usertab->$attr       = $this->$attr;
 909         $this->usertab->by_object['user']->$attr = $this->$attr;
 910       }
 911
 912       $template_dn              = $_POST['template'];
 913       $this->usertab->adapt_from_template($template_dn, array("uid","cn","givenName","sn"));
 914       $template_base            = preg_replace("/^[^,]+,".preg_quote(get_people_ou(), '/')."/", '', $template_dn);
 915       $this->usertab->by_object['user']->base= $template_base;
 916     }
 917
 918
 919     /********************
 920       If no template was selected set base
 921      ********************/
 922
 923     if (isset($_POST['template_continue']) && ($_POST['template'] == 'none')){
 924       $this->usertab->by_object['user']->base= $this->DivListUsers->selectedBase;
 925     }
 926
 927
 928     /********************
 929       Display subdialog
 930      ********************/
 931
 932     /* Show tab dialog if object is present */
 933     if(isset($this->usertab->config)){
 934
 935       $display= $this->usertab->execute();
 936
 937       /* Don't show buttons if tab dialog requests this */
 938
 939         $dia = FALSE;
 940         if(isset($this->usertab->by_object[$this->usertab->current]->dialog)){
 941           $dia = $this->usertab->by_object[$this->usertab->current]->dialog;
 942         }
 943
 944         if(!is_object($dia) && $dia != TRUE){
 945           if(($this->usertab instanceOf tabs || $this->usertab instanceOf plugin) && $this->usertab->read_only == TRUE){
 946             $display.= "<p style=\"text-align:right\">
 947                           <input type=submit name=\"edit_cancel\" value=\"".msgPool::cancelButton()."\">
 948                         </p>";
 949           }else{
 950             $display.= "<p style=\"text-align:right\">\n";
 951             $display.= "<input type=submit name=\"edit_finish\" style=\"width:80px\" value=\"".msgPool::okButton()."\">\n";
 952             $display.= "&nbsp;\n";
 953             if ($this->dn != "new"){
 954               $display.= "<input type=submit name=\"edit_apply\" value=\"".msgPool::applyButton()."\">\n";
 955               $display.= "&nbsp;\n";
 956             }
 957             $display.= "<input type=submit name=\"edit_cancel\" value=\"".msgPool::cancelButton()."\">\n";
 958             $display.= "</p>";
 959           }
 960         }
 961       return ($display);
 962     }
 963
 964     /* Check if there is a snapshot dialog open */
 965     $base = $this->DivListUsers->selectedBase;
 966     if($str = $this->showSnapshotDialog($base,$this->get_used_snapshot_bases(),$this)){
 967       return($str);
 968     }
 969
 970     /* Return rendered main page */
 971     $this->DivListUsers->parent = $this;
 972     $this->DivListUsers->execute();
 973
 974     /* Add departments if subsearch is disabled */
 975     if(!$this->DivListUsers->SubSearch){
 976       $this->DivListUsers->AddDepartments($this->DivListUsers->selectedBase,4,1);
 977     }
 978     $this->reload();
 979     $this->DivListUsers->setEntries($this->list);
 980
 981     # FILTER Test #################################################
 982
 983     ## Build filter
 984     #$filter = new filter(get_template_path("user-filter.xml", true));
 985     #$filter->setObjectStorage(get_people_ou());
 986     #$filter->setCurrentBase($this->DivListUsers->selectedBase);
 987     #$filter->update();
 988     #session::set('autocomplete', $filter);
 989     #if (!$filter->isValid()){
 990     #  msg_dialog::display(_("Filter error"), _("The filter is uncomplete!"), ERROR_DIALOG);
 991     #}
 992
 993     ## Build headpage
 994     #$headpage = new listing(get_template_path("user-list.xml", true));
 995     #$headpage->registerElementFilter("accountProperties", "userManagement::filterProperties");
 996     #$headpage->setFilter($filter);
 997
 998     ## Needs to be called before update!
 999     #print_a($headpage->getAction());
1000
1001     ## Refresh for filter
1002     #$headpage->update();
1003     #
1004     #return($headpage->render());
1005     ################################################### FILTER Test
1006
1007     return($this->DivListUsers->Draw());
1008   }
1009
1010
1011   static function filterProperties($dn, $row, $class)
1012   {
1013     $result= "";
1014
1015     $map= array( "gosaAccount" => array( "image" => "plugins/users/images/select_user.png",
1016                                          "plugin" => "user",
1017                                          "alt" => _("Generic"),
1018                                          "title" => _("Edit generic properties")),
1019                  "posixAccount" => array("image" => "images/penguin.png",
1020                                          "plugin" => "posixAccount",
1021                                          "alt" => _("POSIX"),
1022                                          "title" => _("Edit POSIX properties")),
1023                  "gosaMailAccount" => array("image" => "images/mailto.png",
1024                                          "alt" => _("Mail"),
1025                                          "plugin" => "mailAccount",
1026                                          "title" => _("Edit mail properties")),
1027                  "sambaSamAccount" => array("image" => "plugins/systems/images/select_winstation.png",
1028                                          "plugin" => "sambaAccount",
1029                                          "alt" => _("Samba"),
1030                                          "title" => _("Edit samba properties")),
1031                  "apple-user" => array("image" => "plugins/netatalk/images/select_netatalk.png",
1032                                          "plugin" => "sambaAccount",
1033                                          "alt" => _("Netatalk"),
1034                                          "title" => _("Edit netatalk properties")),
1035                  "gotoEnvironment" => array("image" => "plugins/users/images/small_environment.png",
1036                                          "plugin" => "gotoEnvironment",
1037                                          "alt" => _("Environment"),
1038                                          "title" => _("Edit environment properties")),
1039                  "goFaxAccount" => array("image" => "plugins/users/images/fax_small.png",
1040                                          "plugin" => "goFaxAccount",
1041                                          "alt" => _("FAX"),
1042                                          "title" => _("Edit FAX properties")),
1043                  "goFonAccount" => array("image" => "plugins/gofon/images/select_phone.png",
1044                                          "plugin" => "goFonAccount",
1045                                          "alt" => _("Phone"),
1046                                          "title" => _("Edit phone properties")));
1047
1048     // Walk thru map
1049     foreach ($map as $oc => $properties) {
1050       if (in_array($oc, $class)) {
1051         $result.="<input class='center' type='image' src='".$properties['image']."' ".
1052                  "alt='".$properties['alt']."' title='".$properties['title'].
1053                  "' name='listing_edit_".$properties['plugin']."_$row' style='padding:1px'>";
1054       } else {
1055         $result.="<img src='images/empty.png' alt=' ' class='center' style='padding:1px'>";
1056       }
1057     }
1058
1059     return $result;
1060   }
1061
1062
1063
1064   /* Return departments, that will be included within snapshot detection */
1065   function get_used_snapshot_bases()
1066   {
1067     return(array(get_people_ou().$this->DivListUsers->selectedBase));
1068   }
1069
1070
1071   function reload()
1072   {
1073     /* Set base for all searches */
1074     $base= $this->DivListUsers->selectedBase;
1075     $this->list =array();
1076
1077     /* Get filter configuration */
1078     $Regex                = $this->DivListUsers->Regex;
1079     $SubSearch            = $this->DivListUsers->SubSearch;
1080     $ShowTemplates        = $this->DivListUsers->ShowTemplates;
1081     $ShowFunctionalUsers  = $this->DivListUsers->ShowFunctionalUsers;
1082     $ShowUnixUsers        = $this->DivListUsers->ShowUnixUsers;
1083     $ShowMailUsers        = $this->DivListUsers->ShowMailUsers;
1084     $ShowSambaUsers       = $this->DivListUsers->ShowSambaUsers;
1085     $ShowProxyUsers       = $this->DivListUsers->ShowProxyUsers;
1086
1087     /* Setup filter depending on selection */
1088     $filter="";
1089     if ($this->config->get_cfg_value("sambaversion") == 3){
1090       $samba= "sambaSamAccount";
1091     } else {
1092       $samba= "sambaAccount";
1093     }
1094
1095     if ($ShowFunctionalUsers){
1096       $filter.= "(&(objectClass=gosaAccount)(!(|(objectClass=posixAccount)".
1097                 "(objectClass=gosaMailAccount)(objectClass=$samba)".
1098                 "(objectClass=gosaProxyAccount))))";
1099     }
1100     if ($ShowUnixUsers){
1101       $filter.= "(objectClass=posixAccount)";
1102     }
1103     if ($ShowMailUsers){
1104       $filter.= "(objectClass=gosaMailAccount)";
1105     }
1106     if ($ShowSambaUsers){
1107       $filter.= "(objectClass=$samba)";
1108     }
1109     if ($ShowProxyUsers){
1110       $filter.= "(objectClass=gosaProxyAccount)";
1111     }
1112     if ($ShowTemplates){
1113       $filter= "(|(objectClass=gosaUserTemplate)(&(objectClass=gosaAccount)(|$filter)))";
1114     } else {
1115       $filter= "(&(objectClass=gosaAccount)(objectClass=person)".
1116         "(objectClass=inetOrgPerson)(objectClass=organizationalPerson)".
1117         "(!(objectClass=gosaUserTemplate))(|$filter))";
1118     }
1119     $filter= "(&(|(uid=".normalizeLdap($Regex).")(sn=".normalizeLdap($Regex).")(givenName=".normalizeLdap($Regex)."))$filter)";
1120
1121     /* Generate userlist */
1122     $ldap= $this->config->get_ldap_link(TRUE);
1123
1124     if ($SubSearch){
1125       $ListTemp =  get_sub_list($filter, "users", get_people_ou(),$base,
1126                             array("uid", "givenName", "sn", "objectClass","userPassword"), GL_SUBSEARCH | GL_SIZELIMIT);
1127     } else {
1128       $base= get_people_ou().$base;
1129       $ListTemp = get_sub_list($filter, "users", get_people_ou(),$base,
1130                             array("uid", "givenName", "sn", "objectClass","userPassword"), GL_SIZELIMIT);
1131     }
1132     $SortTemp = array();
1133     $List = array();
1134
1135     foreach($ListTemp as $Key => $Entry){
1136
1137       /* Due to the fact that "inetOrgPerson" is derived from "organizationalPerson" and that openldap
1138           doesn't differentiate both classes in search filters, we have to skip entries that do not provide
1139           both classes. (Both classes are required for a valid GOsa user Account.)
1140        */
1141       if(!in_array("inetOrgPerson",$Entry['objectClass'])|| !in_array("organizationalPerson",$Entry['objectClass'])){
1142         continue;
1143       }
1144
1145       /* Skip entries that are not located under the people ou (normaly 'ou=people,')
1146        * Else winstations will be listed too, if you use the subtree flag.
1147        */
1148       if(!preg_match("/".preg_quote(get_people_ou(), '/')."/i",$Entry['dn'])){
1149         continue;
1150       }else{
1151
1152         // Generate caption for rows
1153         if (isset($Entry["sn"]) && isset($Entry["givenName"])){
1154           $display= $Entry["sn"][0].", ".$Entry["givenName"][0]." [".$Entry["uid"][0]."]";
1155         } else {
1156           $display= "[".$Entry["uid"][0]."]";
1157         }
1158
1159         $display = strtolower($display);
1160         $List[$display] = $Entry;
1161         $SortTemp[$display] = $display;
1162       }
1163     }
1164     natcasesort($SortTemp);
1165     reset($SortTemp);
1166
1167     $this->list = array();
1168     foreach($SortTemp as $Key){
1169       $this->list[] = $List[$Key];
1170     }
1171   }
1172
1173
1174   function remove_lock()
1175   {
1176     /* Remove user lock if a DN is marked as "currently edited" */
1177     if (isset($this->usertab->dn)){
1178       del_lock ($this->usertab->dn);
1179     }elseif(isset($this->dn) && !empty($this->dn) && $this->dn != "new"){
1180       del_lock($this->dn);
1181     }
1182     if(isset($this->dns) && is_array($this->dns) && count($this->dns)){
1183       del_lock($this->dns);
1184     }
1185   }
1186
1187
1188   function copyPasteHandling_from_queue($s_action,$s_entry)
1189   {
1190     /* Check if Copy & Paste is disabled */
1191     if(!is_object($this->CopyPasteHandler)){
1192       return("");
1193     }
1194
1195     $ui = get_userinfo();
1196
1197     /* Add a single entry to queue */
1198     if($s_action == "cut" || $s_action == "copy"){
1199
1200       /* Cleanup object queue */
1201       $this->CopyPasteHandler->cleanup_queue();
1202       $dn = $this->list[$s_entry]['dn'];
1203       if($s_action == "copy" && $ui->is_copyable($dn,"users","user")){
1204         $this->CopyPasteHandler->add_to_queue($dn,$s_action,"usertabs","USERTABS","users");
1205       }
1206       if($s_action == "cut" && $ui->is_cutable($dn,"users","user")){
1207         $this->CopyPasteHandler->add_to_queue($dn,$s_action,"usertabs","USERTABS","users");
1208       }
1209     }
1210
1211     /* Add entries to queue */
1212     if($s_action == "copy_multiple" || $s_action == "cut_multiple"){
1213
1214       /* Cleanup object queue */
1215       $this->CopyPasteHandler->cleanup_queue();
1216
1217       /* Add new entries to CP queue */
1218       foreach($this->list_get_selected_items() as $id){
1219         $dn = $this->list[$id]['dn'];
1220
1221         if($s_action == "copy_multiple" && $ui->is_copyable($dn,"users","user")){
1222           $this->CopyPasteHandler->add_to_queue($dn,"copy","usertabs","USERTABS","users");
1223         }
1224         if($s_action == "cut_multiple" && $ui->is_cutable($dn,"users","user")){
1225           $this->CopyPasteHandler->add_to_queue($dn,"cut","usertabs","USERTABS","users");
1226         }
1227       }
1228     }
1229
1230     /* Start pasting entries */
1231     if($s_action == "editPaste"){
1232       $this->start_pasting_copied_objects = TRUE;
1233     }
1234
1235     /* Return C&P dialog */
1236     if($this->start_pasting_copied_objects && $this->CopyPasteHandler->entries_queued()){
1237
1238       /* Get dialog */
1239       $this->CopyPasteHandler->SetVar("base",$this->DivListUsers->selectedBase);
1240       $data = $this->CopyPasteHandler->execute();
1241
1242       /* Set CPPasswordChange to s_entry which indicates that this entry requires a new password. */
1243       if(isset($_POST['passwordTodo']) && ($_POST['passwordTodo'] == "new")){
1244         $s_entry = $this->CopyPasteHandler->last_entry();
1245         $this->reload();
1246         foreach($this->list as $key => $entry){
1247           if($entry['dn'] == $s_entry){
1248             $this->CPPasswordChange = $key;
1249           }
1250         }
1251       }
1252
1253       /* Return dialog data */
1254       if(!empty($data) && $this->CPPasswordChange == ""){
1255         return($data);
1256       }
1257     }
1258
1259     /* Automatically disable status for pasting */
1260     if(!$this->CopyPasteHandler->entries_queued()){
1261       $this->start_pasting_copied_objects = FALSE;
1262     }
1263     return("");
1264   }
1265
1266
1267   function save_object()
1268   {
1269     /* Handle divlist filter && department selection*/
1270     if(!is_object($this->usertab)){
1271       $this->DivListUsers->save_object();
1272     }
1273     if(is_object($this->CopyPasteHandler)){
1274       $this->CopyPasteHandler->save_object();
1275     }
1276   }
1277
1278
1279   function list_get_selected_items()
1280   {
1281     $ids = array();
1282     foreach($_POST as $name => $value){
1283       if(preg_match("/^item_selected_[0-9]*$/",$name)){
1284         $id   = preg_replace("/^item_selected_/","",$name);
1285         $ids[$id] = $id;
1286       }
1287     }
1288     return($ids);
1289   }
1290
1291
1292   /* A set of disabled and therefore overloaded functions. They are
1293      not needed in this class. */
1294   function remove_from_parent() { }
1295   function check() { }
1296   function save() { }
1297   function adapt_from_template($dn, $skip= array()) { }
1298   function password_change_needed() { }
1299
1300 } /* ... class userManagement */
1301 // vim:tabstop=2:expandtab:shiftwidth=2:filetype=php:syntax:ruler:
1302 ?>