gosa-core/plugins/admin/users/class_userManagement.inc

   1 <?php
   2 /*
   3  * This code is part of GOsa (http://www.gosa-project.org)
   4  * Copyright (C) 2003-2008 GONICUS GmbH
   5  *
   6  * ID: $$Id$$
   7  *
   8  * This program is free software; you can redistribute it and/or modify
   9  * it under the terms of the GNU General Public License as published by
  10  * the Free Software Foundation; either version 2 of the License, or
  11  * (at your option) any later version.
  12  *
  13  * This program is distributed in the hope that it will be useful,
  14  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  15  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  16  * GNU General Public License for more details.
  17  *
  18  * You should have received a copy of the GNU General Public License
  19  * along with this program; if not, write to the Free Software
  20  * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
  21  */
  22
  23 class userManagement extends plugin
  24 {
  25   /* Plugin definitions */
  26   var $plHeadline     = "Users";
  27   var $plDescription  = "Manage users";
  28   var $plIcon         = "plugins/users/images/user.png";
  29
  30   /* Dialog attributes */
  31   var $usertab              = NULL;
  32   var $ui                   = NULL;
  33   var $templates            = array();
  34   var $got_uid              = false;
  35   var $CopyPasteHandler     = NULL;
  36   var $CPPasswordChange     = ""; // Contains the entry id which should get a new password
  37   var $DivListUsers;
  38
  39   var $pwd_change_queue     = array();
  40
  41   var $start_pasting_copied_objects = FALSE;
  42   var $msg_dialog= NULL;
  43   var $acl_module = array("users");
  44   var $dns    = array();
  45
  46   function userManagement(&$config, $ui)
  47   {
  48     /* Save configuration for internal use */
  49     $this->config= &$config;
  50     $this->ui= &$ui;
  51
  52     /* Copy & Paste handler */
  53     if ($this->config->boolValueIsTrue("main", "copyPaste")){
  54       $this->CopyPasteHandler= new CopyPasteHandler($this->config);
  55     }
  56
  57     /* Creat dialog object */
  58     $this->DivListUsers = new divListUsers($this->config,$this);
  59
  60   }
  61
  62
  63   function execute()
  64   {
  65     /* Call parent execute */
  66     plugin::execute();
  67
  68     /* LOCK MESSAGE Vars */
  69     session::set('LOCK_VARS_TO_USE',array("/^act$/","/^id$/","/^user_edit_/","/^user_del_/","/^item_selected/","/^remove_multiple_users/","/^multiple_edit/","/menu_action/"));
  70
  71     $smarty       = get_smarty();                 // Smarty instance
  72     $s_action     = "";                           // Contains the action to be taken
  73     $s_entry      = "";                           // The value for s_action
  74
  75     /* Edit entry button pressed? */
  76     if( isset($_GET['act']) && $_GET['act'] == "edit_entry" ){
  77       $s_action= "edit";
  78       $s_entry= validate($_GET['id']);
  79     }
  80
  81     /* Test relevant POST values */
  82     foreach($_POST as $key => $val){
  83
  84       /* Get every possible POST combination and set s_action/s_entry accordingly */
  85       foreach(array("del"       => "user_del",
  86                     "edit"      => "user_edit",
  87                     "new"       => "user_new",
  88                     "new_tpl"   => "user_tplnew",
  89                     "del_multiple" => "^remove_multiple_users",
  90                     "create_user_from_tpl"          => "userfrom_tpl",
  91                     "change_pw" => "user_chgpw",
  92                     "editPaste" => "editPaste",
  93                     "copy_multiple" => "multiple_copy_users",
  94                     "multiple_edit" => "multiple_edit",
  95                     "cut_multiple" => "multiple_cut_users",
  96                     "multiple_password_change" => "multiple_password_change",
  97                     "copy"      => "^copy",
  98                     "toggle_lock_status" => "toggle_lock_status",
  99                     "cut"       => "^cut") as $act => $name){
 100
 101         if (preg_match("/".$name.".*/", $key)){
 102           $s_action= $act;
 103           $s_entry= preg_replace("/".$name."_/i", "", $key);
 104           break;
 105         }
 106       }
 107
 108     } /* ...Test POST */
 109
 110     /* Remove coordinate prefix from POST, required by some browsers */
 111     $s_entry= preg_replace("/_.$/", "", $s_entry);
 112
 113     /* Seperate possibly encoded tab and entry, default to tab "user" */
 114     if(preg_match("/.*-.*/", $s_entry)){
 115       $s_tab= preg_replace("/^[^-]*-/i", "" ,$s_entry);
 116       $s_entry= preg_replace("/-[^-]*$/i", "", $s_entry);
 117     }else{
 118       $s_tab= "user";
 119     }
 120
 121     if(!$this->config->search($s_tab, 'class',array('tabs'))){
 122       $s_tab = "user";
 123     }
 124
 125     if (isset($_POST['menu_action'])){
 126
 127             /* handle C&P from layers menu */
 128             if(preg_match("/^multiple_copy_systems/",$_POST['menu_action'])){
 129               $s_action = "copy_multiple";
 130             }
 131             if(preg_match("/^multiple_cut_systems/",$_POST['menu_action'])){
 132               $s_action = "cut_multiple";
 133             }
 134             if(preg_match("/^editPaste/",$_POST['menu_action'])){
 135               $s_action = "editPaste";
 136             }
 137
 138             /* Create options */
 139             if($_POST['menu_action'] == "user_new"){
 140               $s_action = "new";
 141             }
 142             if($_POST['menu_action'] == "user_tplnew"){
 143               $s_action = "new_tpl";
 144             }
 145             if($_POST['menu_action'] == "multiple_edit"){
 146               $s_action = "multiple_edit";
 147             }
 148
 149             /* handle remove from layers menu */
 150             if(preg_match("/^multiple_password_change/",$_POST['menu_action'])){
 151               $s_action = "multiple_password_change";
 152             }
 153
 154             /* handle remove from layers menu */
 155             if(preg_match("/^remove_multiple/",$_POST['menu_action'])){
 156               $s_action = "del_multiple";
 157             }
 158             if(preg_match("/^templatize_multiple/",$_POST['menu_action'])){
 159               $s_action = "templatize_multiple";
 160             }
 161
 162             if(preg_match("/^event/",$_POST['menu_action'])){
 163               $s_action = $_POST['menu_action'];
 164             }
 165     }
 166
 167     /* Use template */
 168     if(isset($_POST['templatize_continue'])){
 169       $s_action = "templatize_continue";
 170     }
 171
 172
 173     /********************
 174       Create notification event
 175      ********************/
 176
 177     if(preg_match("/^event_/",$s_action) && class_available("DaemonEvent")){
 178       $ids = $this->list_get_selected_items();
 179       $uids = array();
 180       foreach($ids as $id){
 181         $uids[] = $this->list[$id]['uid'][0];
 182       }
 183       if(count($uids)){
 184         $events = DaemonEvent::get_event_types(USER_EVENT);
 185         $event = preg_replace("/^event_/","",$s_action);
 186         if(isset($events['BY_CLASS'][$event])){
 187           $type = $events['BY_CLASS'][$event];
 188           $this->usertab = new $type['CLASS_NAME']($this->config);
 189           $this->usertab->add_users($uids);
 190           $this->usertab->set_type(SCHEDULED_EVENT);
 191         }
 192       }
 193     }
 194
 195     /* Abort event dialog */
 196     if(isset($_POST['abort_event_dialog'])){
 197       $this->usertab = FALSE;
 198     }
 199
 200     /* Save event */
 201     if(isset($_POST['save_event_dialog'])){
 202       $this->usertab->save_object();
 203       $msgs = $this->usertab->check();
 204       if(count($msgs)){
 205         msg_dialog::displayChecks($msgs);
 206       }else{
 207
 208         $o_queue = new gosaSupportDaemon();
 209         $o_queue->append($this->usertab);
 210         if($o_queue->is_error()){
 211           msg_dialog::display(_("Infrastructure error"), msgPool::siError($o_queue->get_error()),ERROR_DIALOG);
 212         }else{
 213           $this->usertab = FALSE;
 214         }
 215       }
 216     }
 217
 218     /* Display event */
 219     if($this->usertab instanceof DaemonEvent){
 220       $this->usertab->save_object();
 221       return($this->usertab->execute());
 222     }
 223
 224
 225     /********************
 226       Copy & Paste
 227      ********************/
 228
 229     /* Display the copy & paste dialog, if it is currently open */
 230     if($this->CPPasswordChange == ""){
 231       $ret = $this->copyPasteHandling_from_queue($s_action,$s_entry);
 232       if($ret){
 233         return($ret);
 234       }
 235     }
 236
 237
 238     /********************
 239       Change password confirmed
 240      ********************/
 241
 242     /* Perform password change */
 243     if (isset($_POST['password_finish'])){
 244
 245       /* For security reasons, check if user is allowed to set password again */
 246       $dn  = $this->dn;
 247       $acl = $this->ui->get_permissions($dn, "users/password");
 248       $cacl= $this->ui->get_permissions($dn, "users/user");
 249
 250       /* Are we allowed to create a new user or to set the password attribute? */
 251       if (preg_match('/w/', $acl) || preg_match('/c/', $cacl)){
 252
 253         /* Check input and feed errors into 'message' */
 254         $message= array();
 255
 256         /* Sanity checks... */
 257         if ($_POST['new_password'] != $_POST['repeated_password']){
 258
 259           /* Matching passwords in new and repeated? */
 260           $message[]= _("The passwords you've entered as 'New password' and 'Repeated new password' do not match.");
 261         } else {
 262
 263           /* Empty password is not permitted by default. */
 264           if ($_POST['new_password'] == ""){
 265             msgPool::required(_("New password"));
 266           }
 267         }
 268
 269         /* Errors, or password change? */
 270         if (count($message) != 0){
 271
 272           /* Show error message and continue editing */
 273           msg_dialog::displayChecks($message);
 274           return($smarty->fetch(get_template_path('password.tpl', TRUE)));
 275         }
 276
 277         $config= $this->config;
 278         $ldap_ui= $this->config->get_ldap_link();
 279         if(isset($this->usertab->dn)){
 280           $ldap_ui->cat($this->usertab->dn,array("uid"));
 281           $user = $ldap_ui->fetch();
 282         }else{
 283           $ldap_ui->cat($this->dn,array("uid"));
 284           $user = $ldap_ui->fetch();
 285         }
 286         if((is_array($user))&&(isset($user['uid']))){
 287           $username= $user['uid'][0];
 288         }
 289
 290         /* Set password, perform required steps */
 291         if ($this->usertab){
 292           if ($this->usertab->password_change_needed()){
 293             $obj= $this->usertab->by_object['user'];
 294             if(!change_password ($this->usertab->dn, $_POST['new_password'],0, $obj->pw_storage)){
 295               return($smarty->fetch(get_template_path('password.tpl', TRUE)));
 296             }
 297             if ($config->get_cfg_value("passwordHook") != ""){
 298               exec($config->get_cfg_value("passwordHook")." ".$username." ".$_POST['new_password'], $resarr);
 299             }
 300             new log("modify","users/".get_class($this),$this->usertab->dn,array(),"Password has been changed");
 301             unset($this->usertab);
 302             $this->usertab= NULL;
 303           }
 304         } else {
 305           if(!change_password ($this->dn, $_POST['new_password'])){
 306             return($smarty->fetch(get_template_path('password.tpl', TRUE)));
 307           }
 308           if ($config->get_cfg_value("passwordHook") != ""){
 309             exec($config->get_cfg_value("passwordHook")." ".$username." ".$_POST['new_password'], $resarr);
 310           }
 311           new log("modify","users/".get_class($this),$this->dn,array(),"Password has been changed");
 312         }
 313       } else {
 314
 315         /* Missing permissions, show message */
 316         msg_dialog::display(_("Password change"),_("You have no permission to change this users password!"),WARNING_DIALOG);
 317       }
 318       /* Clean session, delete lock */
 319       $this->remove_lock();
 320       unset ($this->usertab);
 321       $this->usertab= NULL;
 322       $this->lognames= array();;
 323       $this->sn= "";
 324       $this->givenName= "";
 325       $this->uid= "";
 326       set_object_info();
 327     }
 328
 329
 330     /********************
 331      Change multiple passwords requested
 332      ********************/
 333
 334     if($s_action == "multiple_password_change"){
 335       $this->pwd_change_queue = $this->list_get_selected_items();
 336       $disallowed = array();
 337       foreach($this->pwd_change_queue as $key => $id){
 338         if(!preg_match("/w/",$this->ui->get_permissions($this->list[trim($id)]['dn'],"users/password"))){
 339           unset($this->pwd_change_queue[$key]);
 340           $disallowed[] = $this->list[trim($id)]['dn'];
 341         }
 342       }
 343       if(count($disallowed)){
 344         msg_dialog::display(_("Permission"),msgPool::permModify($disallowed),INFO_DIALOG);
 345       }
 346     }
 347
 348
 349     /********************
 350       Change password requested
 351      ********************/
 352
 353     /* Password change requested */
 354     if (($s_action == "change_pw") || (!empty($this->CPPasswordChange)) || count($this->pwd_change_queue)){
 355
 356       /* Get users whose passwords should be changed. */
 357       if(count($this->pwd_change_queue)){
 358         $s_entry= array_pop($this->pwd_change_queue);
 359       }
 360
 361       if(!empty($this->CPPasswordChange)){
 362         $s_entry = $this->CPPasswordChange;
 363         $this->CPPasswordChange = "";
 364       }
 365
 366       /* Get 'dn' from posted 'uid' */
 367       $this->dn= $this->list[trim($s_entry)]['dn'];
 368
 369       /* Load permissions for selected 'dn' and check if
 370          we're allowed to remove this 'dn' */
 371       if (preg_match("/w/",$this->ui->get_permissions($this->dn,"users/password"))){
 372
 373         /* User is allowed to change passwords, save 'dn' and 'acl' for next
 374            dialog. */
 375         set_object_info($this->dn);
 376         return ($smarty->fetch(get_template_path('password.tpl', TRUE)));
 377       } else {
 378         /* User is not allowed. Show message and cancel. */
 379         msg_dialog::display(_("Password change"),_("You have no permission to change this users password!"),WARNING_DIALOG);
 380       }
 381     }
 382
 383
 384
 385      /********************
 386       Edit existing entry
 387      ********************/
 388
 389
 390     /* User wants to edit data? */
 391     if (($s_action=="edit") && (!isset($this->usertab->config))){
 392
 393       /* Get 'dn' from posted 'uid', must be unique */
 394       $this->dn= $this->list[trim($s_entry)]['dn'];
 395
 396       /* Check locking, save current plugin in 'back_plugin', so
 397          the dialog knows where to return. */
 398
 399       if (($user= get_lock($this->dn)) != ""){
 400         return(gen_locked_message ($user, $this->dn,TRUE));
 401       }
 402
 403       /* Lock the current entry, so everyone will get the
 404          above dialog */
 405       add_lock ($this->dn, $this->ui->dn);
 406
 407       /* Register usertab to trigger edit dialog */
 408       $this->usertab= new usertabs($this->config,
 409           $this->config->data['TABS']['USERTABS'], $this->dn);
 410
 411       /* Switch tab, if it was requested by the user */
 412       $this->usertab->current = $s_tab;
 413
 414       /* Set ACL and move DN to the headline */
 415       $this->usertab->set_acl_base($this->dn);
 416       set_object_info($this->dn);
 417     }
 418
 419
 420     /********************
 421       Edit multiple entries
 422      ********************/
 423
 424     /* User wants to edit data? */
 425     if ($s_action == "multiple_edit" && !isset($this->usertab->config)){
 426
 427       $this->dn = array();
 428       foreach($this->list_get_selected_items() as $id){
 429         $this->dn[] = $this->list[$id]['dn'];;
 430       }
 431       $tmp = new multi_plug($this->config,"usertabs",$this->config->data['TABS']['USERTABS'],
 432             $this->dn,$this->DivListUsers->selectedBase,"user");
 433       if ($tmp->entries_locked()){
 434         return($tmp->display_lock_message());
 435       }
 436       $tmp->lock_entries($this->ui->dn);
 437       if($tmp->multiple_available()){
 438         $this->usertab = $tmp;
 439         $this->usertab->set_active_tab($s_tab);
 440         set_object_info($this->usertab->get_object_info());
 441       }
 442     }
 443
 444
 445     /********************
 446       Edit canceled
 447      ********************/
 448
 449     /* Reset all relevant data, if we get a _cancel request */
 450     if (isset($_POST['edit_cancel']) || isset($_POST['password_cancel'])){
 451       if (isset($this->usertab)){
 452         $this->remove_lock();
 453       }
 454       $this->usertab= NULL;
 455       $this->lognames= array();;
 456       $this->sn= "";
 457       $this->givenName= "";
 458       $this->uid= "";
 459       set_object_info();
 460     }
 461
 462
 463     /********************
 464       We want to create a new user, so fetch all available user templates
 465      ********************/
 466
 467     /* Generate template list */
 468     if ($s_action == "new" || $s_action == "create_user_from_tpl" || $s_action == "templatize_multiple"){
 469
 470       $this->templates= array();
 471       $ldap= $this->config->get_ldap_link();
 472
 473       /* Create list of templates */
 474       foreach ($this->config->departments as $key => $value){
 475
 476         /* Get acls from different ou's */
 477         $acl = $this->ui->get_permissions($value,"users/user")       ;
 478
 479         /* If creation of a new user is allowed, append this template */
 480         if (preg_match("/c/",$acl)){
 481
 482           /* Search all templates from the current dn */
 483           $ldap->cd (get_people_ou().$value);
 484           $ldap->search ("(objectClass=gosaUserTemplate)", array("uid"));
 485
 486           /* Append */
 487           if ($ldap->count() != 0){
 488             while ($attrs= $ldap->fetch()){
 489               $this->templates[$ldap->getDN()]=
 490                 $attrs['uid'][0]." - ".LDAP::fix($key);
 491             }
 492             if ($s_action != "templatize_multiple"){
 493               $this->templates['none']= _("none");
 494             }
 495           }
 496         }
 497       }
 498
 499       /* Sort templates */
 500       natcasesort ($this->templates);
 501       reset ($this->templates);
 502     }
 503
 504
 505     /********************
 506       Apply template to multiple entries requested, display confirm dialog
 507      ********************/
 508
 509     if ($s_action=="templatize_multiple"){
 510       $ids = $this->list_get_selected_items();
 511       $this->dns = array();
 512       if(count($ids)){
 513
 514         foreach($ids as $id){
 515           $dn = $this->list[$id]['dn'];
 516           if (($user= get_lock($dn)) != ""){
 517             return(gen_locked_message ($user, $dn));
 518           }
 519           $this->dns[$id] = $dn;
 520         }
 521       }
 522
 523       $smarty->assign("templates", $this->templates);
 524
 525       return($smarty->fetch(get_template_path('templatize.tpl', TRUE)));
 526     }
 527
 528     /* Perform templatizing after the button has been pressed */
 529     if ($s_action == "templatize_continue"){
 530
 531       $acl = $this->ui->get_permissions($_POST['template'], "users/user");
 532
 533       /* Template readable? */
 534       if (preg_match('/r/', $acl)){
 535         $template_dn= $_POST['template'];
 536
 537         foreach ($this->dns as $dn){
 538           $acl = $this->ui->get_permissions($_POST['template'], "users/user");
 539           if (preg_match('/w/', $acl)){
 540             $usertab= new usertabs($this->config, $this->config->data['TABS']['USERTABS'], $dn);
 541             $usertab->adapt_from_template($template_dn, array("sn", "givenName", "uid"));
 542             $usertab->save();
 543             unset ($usertab);
 544             $usertab= NULL;
 545           } else {
 546             msg_dialog::display(_("Permission error"), sprintf(_("You have no permission to modify object '%s'!"), $dn), ERROR_DIALOG);
 547           }
 548         }
 549       } else {
 550         msg_dialog::display(_("Permission error"), _("You have no permission to use this template!"), ERROR_DIALOG);
 551       }
 552
 553     }
 554
 555
 556     /********************
 557       Delete MULTIPLE entries requested, display confirm dialog
 558      ********************/
 559
 560     if ($s_action=="del_multiple" || $s_action == "del"){
 561
 562       if($s_action == "del"){
 563
 564         /* Get 'dn' from posted 'uid' */
 565         $ids = array($s_entry);
 566       }else{
 567         $ids = $this->list_get_selected_items();
 568       }
 569
 570       $this->dns = array();
 571       if(count($ids)){
 572         $disallowed = array();
 573         foreach($ids as $id){
 574           $dn = $this->list[$id]['dn'];
 575           $acl = $this->ui->get_permissions($dn, "users/user");
 576           if(preg_match("/d/",$acl)){
 577             $this->dns[$id] = $dn;
 578           }else{
 579             $disallowed[] = $dn;
 580           }
 581         }
 582
 583         if(count($disallowed)){
 584           msg_dialog::display(_("Permission"),msgPool::permDelete($disallowed),INFO_DIALOG);
 585         }
 586
 587         if(count($this->dns)){
 588
 589           /* Check locks */
 590           if ($user= get_multiple_locks($this->dns)){
 591             return(gen_locked_message($user,$this->dns));
 592           }
 593
 594           $dns_names = array();
 595           foreach($this->dns as $dn){
 596             $dns_names[] = LDAP::fix($dn);
 597           }
 598
 599           add_lock($this->dns, $this->ui->dn);
 600
 601           /* Lock the current entry, so nobody will edit it during deletion */
 602           $info = sprintf(msgPool::deleteInfo($dns_names,_("user")));
 603
 604           /* Lock the current entry, so nobody will edit it during deletion */
 605           $smarty->assign("info", msgPool::deleteInfo($dns_names));
 606           return($smarty->fetch(get_template_path('remove.tpl', TRUE)));
 607         }
 608       }
 609     }
 610
 611
 612     /********************
 613       Delete MULTIPLE entries confirmed
 614      ********************/
 615
 616     if(isset($_POST['delete_user_confirm'])){
 617
 618       /* Remove user by user and check acls before removeing them */
 619       foreach($this->dns as $key => $dn){
 620
 621         $acl = $this->ui->get_permissions($dn, "users/user");
 622         if (preg_match('/d/', $acl)){
 623
 624           /* Delete request is permitted, perform LDAP action */
 625           $this->usertab= new usertabs($this->config, $this->config->data['TABS']['USERTABS'],$dn);
 626           $this->usertab->set_acl_base();
 627           $this->usertab->delete ();
 628           unset ($this->usertab);
 629           $this->usertab= NULL;
 630         } else {
 631           msg_dialog::display(_("Warning"),msgPool::permDelete($dn),WARNING_DIALOG);
 632           if(isset($this->ui->uid)){
 633             new log("security","users/".get_class($this),$dn,array(),"Tried to trick deletion.");
 634           }
 635         }
 636       }
 637       /* Remove lock file after successfull deletion */
 638       $this->remove_lock();
 639       $this->dns = array();
 640     }
 641
 642
 643     /********************
 644       Toggle lock status for user
 645      ********************/
 646
 647     if($s_action == "toggle_lock_status" && isset($this->list[$s_entry])){
 648
 649       /* Get entry check current status */
 650       $val = $this->list[$s_entry];
 651       if (!preg_match("/w/",$this->ui->get_permissions($val['dn'],"users/password"))){
 652         msg_dialog::display(_("Account locking"),
 653             _("You have no permission to change the lock status for this user!"),WARNING_DIALOG);
 654       }else{
 655         $pwd = $val['userPassword'][0];
 656         $method = passwordMethod::get_method($pwd,$val['dn']);
 657         $success= false;
 658         if($method instanceOf passwordMethod){
 659           if($method->is_locked($this->config,$val['dn'])){
 660             $success= $method->unlock_account($this->config,$val['dn']);
 661           }else{
 662             $success= $method->lock_account($this->config,$val['dn']);
 663           }
 664
 665           /* Check for success */
 666           if (!$success){
 667             $hn= $method->get_hash_name();
 668             if (is_array($hn)){
 669               $hn= $hn[0];
 670             }
 671             msg_dialog::display(_("Account locking"),
 672               sprintf(_("Password method '%s' does not support locking. Account has not been locked!"), $hn),WARNING_DIALOG);
 673           }
 674         }else{
 675           // Can't lock unknown methods.
 676         }
 677
 678       }
 679     }
 680
 681     /********************
 682       Delete entry Canceled
 683      ********************/
 684
 685     /* Delete user canceled? */
 686     if (isset($_POST['delete_cancel'])){
 687
 688       /* Remove lock file after successfull deletion */
 689       $this->remove_lock();
 690       $this->dns = array();
 691     }
 692
 693
 694     /********************
 695       Edit entry finished (Save)
 696      ********************/
 697
 698     /* Finish user edit is triggered by the tabulator dialog, so
 699        the user wants to save edited data. Check and save at this
 700        point. */
 701     if ((isset($_POST['edit_finish']) || isset($_POST['edit_apply'])) && (isset($this->usertab->config))){
 702
 703       /* Check tabs, will feed message array */
 704       $this->usertab->last= $this->usertab->current;
 705       $this->usertab->save_object();
 706       $message= $this->usertab->check();
 707
 708       /* Save, or display error message? */
 709       if (count($message) == 0){
 710
 711         /* No errors. Go ahead and prepare to ask for a password
 712            in case we're creating a new user. 'dn' will be 'new'
 713            in this case. It is set to the correct value later. */
 714         if ($this->dn == "new"){
 715           $set_pass= 1;
 716         } else {
 717           $set_pass= 0;
 718         }
 719
 720         /* Save user data to ldap */
 721         if($this->usertab->save() == 1){
 722           return;
 723         }
 724
 725         if (!isset($_POST['edit_apply'])){
 726           /* User has been saved successfully, remove lock from LDAP. */
 727           if ($this->dn != "new"){
 728             $this->remove_lock();
 729           }
 730
 731           /* In case of new users, ask for a password, skip this for templates */
 732           if (($set_pass || $this->usertab->password_change_needed()) && !$this->is_template){
 733             $this->dn = $this->usertab->dn;
 734             return($smarty->fetch(get_template_path('password.tpl', TRUE)));
 735           }
 736
 737           unset ($this->usertab);
 738           $this->usertab= NULL;
 739           set_object_info();
 740         }else{
 741
 742           /* Reinitialize tab */
 743           if($this->usertab instanceof tabs){
 744             $this->usertab->re_init();
 745           }
 746         }
 747       } else {
 748         /* Ok. There seem to be errors regarding to the tab data,
 749            show message and continue as usual. */
 750         msg_dialog::displayChecks($message);
 751       }
 752     }
 753
 754
 755
 756     /********************
 757       Create a new user,template, user from template
 758      ********************/
 759
 760     /* Check selected options for template */
 761     if (isset($_POST['template_continue'])){
 762       $message = array();
 763       if(!isset($_POST['template']) || (empty($_POST['template']))){
 764         $message[]= msgPool::invalid(_("Template"));
 765       }
 766       if(!isset($_POST['sn']) || (empty($_POST['sn']))){
 767         $message[]= msgPool::required(_("Name"));
 768       }
 769       if(!isset($_POST['givenName']) || (empty($_POST['givenName']))){
 770         $message[]= msgPool::required(_("Given name"));
 771       }
 772
 773       /* Show error message / continue editing */
 774       if (count($message) > 0){
 775         msg_dialog::displayChecks($message);
 776
 777         foreach(array("sn", "givenName", "uid", "template") as $attr){
 778           if(isset($_POST[$attr])){
 779             $smarty->assign("$attr", $_POST[$attr]);
 780           }else{
 781             $smarty->assign("$attr", "");
 782           }
 783         }
 784         $smarty->assign("templates",$this->templates);
 785         $smarty->assign("got_uid",$this->got_uid);
 786         $smarty->assign("edit_uid",false);
 787         return($smarty->fetch(get_template_path('template.tpl', TRUE)));
 788
 789       }
 790     }
 791
 792     /* New user/template request */
 793     if (($s_action=="create_user_from_tpl")||($s_action=="new") || ($s_action=="new_tpl")){
 794       /* By default we set 'dn' to 'new', all relevant plugins will
 795          react on this. */
 796       $this->dn= "new";
 797
 798        $this->got_uid= ($this->config->get_cfg_value("idGenerator") == "");
 799
 800       /* Create new usertab object */
 801       $this->usertab= new usertabs($this->config,$this->config->data['TABS']['USERTABS'], $this->dn);
 802       $this->usertab->by_object['user']->base= $this->DivListUsers->selectedBase;
 803       $this->usertab->set_acl_base($this->DivListUsers->selectedBase);
 804
 805       /* Take care about templates */
 806       if ($s_action=="new_tpl"){
 807         $this->is_template= TRUE;
 808         $this->usertab->set_template_mode ();
 809       } else {
 810         $this->is_template= FALSE;
 811       }
 812
 813       /* Use template if there are any of them */
 814       if ((count($this->templates) && ($s_action!='new_tpl'))||($s_action=="create_user_from_tpl")){
 815         foreach(array("sn", "givenName", "uid", "got_uid", "templates") as $attr){
 816           $smarty->assign("$attr", $this->$attr);
 817         }
 818         if ($s_action=="create_user_from_tpl"){
 819           $smarty->assign("template", $this->dn= $this->list[trim($s_entry)]['dn']);
 820         } else {
 821           $smarty->assign("template", "none");
 822         }
 823         $smarty->assign("edit_uid", "");
 824         return($smarty->fetch(get_template_path('template.tpl', TRUE)));
 825       }
 826     }
 827
 828     /********************
 829       Template selected continue edit
 830      ********************/
 831
 832     /* Continue template editing */
 833     if ((isset($_POST['template_continue'])) && ($_POST['template'] != 'none') && (!isset($_POST['uid']))){
 834
 835       $this->sn             = $_POST['sn'];
 836       $this->givenName      = $_POST['givenName'];
 837
 838       /* Check for requred values */
 839       $message= array();
 840       if ($this->sn == "") {
 841         $message[]= msgPool::required(_("Name"));
 842       }
 843       if ($this->givenName == "") {
 844         $message[]= msgPool::required(_("Given name"));
 845       }
 846
 847       /* Check if dn is used */
 848       $dn= preg_replace("/^[^,]+,/i", "", $_POST['template']);
 849       $ldap= $this->config->get_ldap_link();
 850       $ldap->cd ($dn);
 851       $ldap->search ("(&(sn=".normalizeLdap($this->sn).")(givenName=".normalizeLdap($this->givenName)."))", array("givenName"));
 852       if ($ldap->count () != 0){
 853         msgPool::duplicated(_("Name"));
 854       }
 855
 856       /* Show error message / continue editing */
 857       if (count($message) > 0){
 858         msg_dialog::displayChecks($message);
 859       } else {
 860         $attributes= array('sn' => $this->sn, 'givenName' => $this->givenName);
 861         if ($this->config->get_cfg_value("idGenerator") != ""){
 862           $uids= gen_uids ($this->config->get_cfg_value("idGenerator"), $attributes);
 863           if (count($uids)){
 864             $smarty->assign("edit_uid", "false");
 865             $smarty->assign("uids", $uids);
 866             $this->uid= current($uids);
 867           }
 868         } else {
 869           $smarty->assign("edit_uid", "");
 870           $this->uid= "";
 871         }
 872         $this->got_uid= true;
 873       }
 874
 875       foreach(array("sn", "givenName", "uid", "got_uid", "templates") as $attr){
 876         $smarty->assign("$attr", $this->$attr);
 877       }
 878       if (isset($_POST['template'])){
 879         $smarty->assign("template", $_POST['template']);
 880       }
 881       return($smarty->fetch(get_template_path('template.tpl', TRUE)));
 882     }
 883
 884     /********************
 885       No template selected continue edit
 886      ********************/
 887
 888     /* No template. Ok. Lets fill data into the normal user dialog */
 889     if (isset($_POST['template_continue']) && $_POST['template'] == 'none'){
 890       foreach(array("sn", "givenName", "uid") as $attr){
 891         if (isset($_POST[$attr])){
 892           $this->usertab->by_object['user']->$attr= $_POST[$attr];
 893         }
 894       }
 895     }
 896
 897
 898     /********************
 899       Template selected continue edit
 900      ********************/
 901
 902     /* Finish template preamble */
 903     if (isset($_POST['template_continue']) && $_POST['template'] != 'none' && (isset($_POST['uid']))){
 904
 905       /* Move user supplied data to sub plugins */
 906       foreach(array("uid","sn","givenName") as $attr){
 907         $this->$attr = $_POST[$attr];
 908         $this->usertab->$attr       = $this->$attr;
 909         $this->usertab->by_object['user']->$attr = $this->$attr;
 910       }
 911
 912       $template_dn              = $_POST['template'];
 913       $this->usertab->adapt_from_template($template_dn, array("uid","cn","givenName","sn"));
 914       $template_base            = preg_replace("/^[^,]+,".preg_quote(get_people_ou(), '/')."/", '', $template_dn);
 915       $this->usertab->by_object['user']->base= $template_base;
 916     }
 917
 918
 919     /********************
 920       If no template was selected set base
 921      ********************/
 922
 923     if (isset($_POST['template_continue']) && ($_POST['template'] == 'none')){
 924       $this->usertab->by_object['user']->base= $this->DivListUsers->selectedBase;
 925     }
 926
 927
 928     /********************
 929       Display subdialog
 930      ********************/
 931
 932     /* Show tab dialog if object is present */
 933     if(isset($this->usertab->config)){
 934
 935       $display= $this->usertab->execute();
 936
 937       /* Don't show buttons if tab dialog requests this */
 938
 939         $dia = FALSE;
 940         if(isset($this->usertab->by_object[$this->usertab->current]->dialog)){
 941           $dia = $this->usertab->by_object[$this->usertab->current]->dialog;
 942         }
 943
 944         if(!is_object($dia) && $dia != TRUE){
 945           if(($this->usertab instanceOf tabs || $this->usertab instanceOf plugin) && $this->usertab->read_only == TRUE){
 946             $display.= "<p style=\"text-align:right\">
 947                           <input type=submit name=\"edit_cancel\" value=\"".msgPool::cancelButton()."\">
 948                         </p>";
 949           }else{
 950             $display.= "<p style=\"text-align:right\">\n";
 951             $display.= "<input type=submit name=\"edit_finish\" style=\"width:80px\" value=\"".msgPool::okButton()."\">\n";
 952             $display.= "&nbsp;\n";
 953             if ($this->dn != "new"){
 954               $display.= "<input type=submit name=\"edit_apply\" value=\"".msgPool::applyButton()."\">\n";
 955               $display.= "&nbsp;\n";
 956             }
 957             $display.= "<input type=submit name=\"edit_cancel\" value=\"".msgPool::cancelButton()."\">\n";
 958             $display.= "</p>";
 959           }
 960         }
 961       return ($display);
 962     }
 963
 964     /* Check if there is a snapshot dialog open */
 965     $base = $this->DivListUsers->selectedBase;
 966     if($str = $this->showSnapshotDialog($base,$this->get_used_snapshot_bases(),$this)){
 967       return($str);
 968     }
 969
 970     /* Return rendered main page */
 971     $this->DivListUsers->parent = $this;
 972     $this->DivListUsers->execute();
 973
 974     /* Add departments if subsearch is disabled */
 975     if(!$this->DivListUsers->SubSearch){
 976       $this->DivListUsers->AddDepartments($this->DivListUsers->selectedBase,4,1);
 977     }
 978     $this->reload();
 979     $this->DivListUsers->setEntries($this->list);
 980
 981     # FILTER Test #################################################
 982     #$filter = new filter(get_template_path("user-filter.xml", true));
 983     #$filter->setObjectStorage(get_people_ou());
 984     #$filter->setCategory("users");
 985     #$filter->setCurrentBase($this->DivListUsers->selectedBase);
 986     #$filter->update();
 987     #session::set('autocomplete', $filter);
 988     #if (!$filter->isValid()){
 989     #  msg_dialog::display(_("Filter error"), _("The filter is uncomplete!"), ERROR_DIALOG);
 990     #} else {
 991     #  print "Filter results:";
 992     #  print_a($filter->query());
 993     #}
 994     #return($filter->renderFilter().$this->DivListUsers->Draw());
 995     ################################################### FILTER Test
 996
 997     return($this->DivListUsers->Draw());
 998   }
 999
1000
1001   /* Return departments, that will be included within snapshot detection */
1002   function get_used_snapshot_bases()
1003   {
1004     return(array(get_people_ou().$this->DivListUsers->selectedBase));
1005   }
1006
1007
1008   function reload()
1009   {
1010     /* Set base for all searches */
1011     $base= $this->DivListUsers->selectedBase;
1012     $this->list =array();
1013
1014     /* Get filter configuration */
1015     $Regex                = $this->DivListUsers->Regex;
1016     $SubSearch            = $this->DivListUsers->SubSearch;
1017     $ShowTemplates        = $this->DivListUsers->ShowTemplates;
1018     $ShowFunctionalUsers  = $this->DivListUsers->ShowFunctionalUsers;
1019     $ShowUnixUsers        = $this->DivListUsers->ShowUnixUsers;
1020     $ShowMailUsers        = $this->DivListUsers->ShowMailUsers;
1021     $ShowSambaUsers       = $this->DivListUsers->ShowSambaUsers;
1022     $ShowProxyUsers       = $this->DivListUsers->ShowProxyUsers;
1023
1024     /* Setup filter depending on selection */
1025     $filter="";
1026     if ($this->config->get_cfg_value("sambaversion") == 3){
1027       $samba= "sambaSamAccount";
1028     } else {
1029       $samba= "sambaAccount";
1030     }
1031
1032     if ($ShowFunctionalUsers){
1033       $filter.= "(&(objectClass=gosaAccount)(!(|(objectClass=posixAccount)".
1034                 "(objectClass=gosaMailAccount)(objectClass=$samba)".
1035                 "(objectClass=gosaProxyAccount))))";
1036     }
1037     if ($ShowUnixUsers){
1038       $filter.= "(objectClass=posixAccount)";
1039     }
1040     if ($ShowMailUsers){
1041       $filter.= "(objectClass=gosaMailAccount)";
1042     }
1043     if ($ShowSambaUsers){
1044       $filter.= "(objectClass=$samba)";
1045     }
1046     if ($ShowProxyUsers){
1047       $filter.= "(objectClass=gosaProxyAccount)";
1048     }
1049     if ($ShowTemplates){
1050       $filter= "(|(objectClass=gosaUserTemplate)(&(objectClass=gosaAccount)(|$filter)))";
1051     } else {
1052       $filter= "(&(objectClass=gosaAccount)(objectClass=person)".
1053         "(objectClass=inetOrgPerson)(objectClass=organizationalPerson)".
1054         "(!(objectClass=gosaUserTemplate))(|$filter))";
1055     }
1056     $filter= "(&(|(uid=".normalizeLdap($Regex).")(sn=".normalizeLdap($Regex).")(givenName=".normalizeLdap($Regex)."))$filter)";
1057
1058     /* Generate userlist */
1059     $ldap= $this->config->get_ldap_link(TRUE);
1060
1061     if ($SubSearch){
1062       $ListTemp =  get_sub_list($filter, "users", get_people_ou(),$base,
1063                             array("uid", "givenName", "sn", "objectClass","userPassword"), GL_SUBSEARCH | GL_SIZELIMIT);
1064     } else {
1065       $base= get_people_ou().$base;
1066       $ListTemp = get_sub_list($filter, "users", get_people_ou(),$base,
1067                             array("uid", "givenName", "sn", "objectClass","userPassword"), GL_SIZELIMIT);
1068     }
1069     $SortTemp = array();
1070     $List = array();
1071
1072     foreach($ListTemp as $Key => $Entry){
1073
1074       /* Due to the fact that "inetOrgPerson" is derived from "organizationalPerson" and that openldap
1075           doesn't differentiate both classes in search filters, we have to skip entries that do not provide
1076           both classes. (Both classes are required for a valid GOsa user Account.)
1077        */
1078       if(!in_array("inetOrgPerson",$Entry['objectClass'])|| !in_array("organizationalPerson",$Entry['objectClass'])){
1079         continue;
1080       }
1081
1082       /* Skip entries that are not located under the people ou (normaly 'ou=people,')
1083        * Else winstations will be listed too, if you use the subtree flag.
1084        */
1085       if(!preg_match("/".preg_quote(get_people_ou(), '/')."/i",$Entry['dn'])){
1086         continue;
1087       }else{
1088
1089         // Generate caption for rows
1090         if (isset($Entry["sn"]) && isset($Entry["givenName"])){
1091           $display= $Entry["sn"][0].", ".$Entry["givenName"][0]." [".$Entry["uid"][0]."]";
1092         } else {
1093           $display= "[".$Entry["uid"][0]."]";
1094         }
1095
1096         $display = strtolower($display);
1097         $List[$display] = $Entry;
1098         $SortTemp[$display] = $display;
1099       }
1100     }
1101     natcasesort($SortTemp);
1102     reset($SortTemp);
1103
1104     $this->list = array();
1105     foreach($SortTemp as $Key){
1106       $this->list[] = $List[$Key];
1107     }
1108   }
1109
1110
1111   function remove_lock()
1112   {
1113     /* Remove user lock if a DN is marked as "currently edited" */
1114     if (isset($this->usertab->dn)){
1115       del_lock ($this->usertab->dn);
1116     }elseif(isset($this->dn) && !empty($this->dn) && $this->dn != "new"){
1117       del_lock($this->dn);
1118     }
1119     if(isset($this->dns) && is_array($this->dns) && count($this->dns)){
1120       del_lock($this->dns);
1121     }
1122   }
1123
1124
1125   function copyPasteHandling_from_queue($s_action,$s_entry)
1126   {
1127     /* Check if Copy & Paste is disabled */
1128     if(!is_object($this->CopyPasteHandler)){
1129       return("");
1130     }
1131
1132     $ui = get_userinfo();
1133
1134     /* Add a single entry to queue */
1135     if($s_action == "cut" || $s_action == "copy"){
1136
1137       /* Cleanup object queue */
1138       $this->CopyPasteHandler->cleanup_queue();
1139       $dn = $this->list[$s_entry]['dn'];
1140       if($s_action == "copy" && $ui->is_copyable($dn,"users","user")){
1141         $this->CopyPasteHandler->add_to_queue($dn,$s_action,"usertabs","USERTABS","users");
1142       }
1143       if($s_action == "cut" && $ui->is_cutable($dn,"users","user")){
1144         $this->CopyPasteHandler->add_to_queue($dn,$s_action,"usertabs","USERTABS","users");
1145       }
1146     }
1147
1148     /* Add entries to queue */
1149     if($s_action == "copy_multiple" || $s_action == "cut_multiple"){
1150
1151       /* Cleanup object queue */
1152       $this->CopyPasteHandler->cleanup_queue();
1153
1154       /* Add new entries to CP queue */
1155       foreach($this->list_get_selected_items() as $id){
1156         $dn = $this->list[$id]['dn'];
1157
1158         if($s_action == "copy_multiple" && $ui->is_copyable($dn,"users","user")){
1159           $this->CopyPasteHandler->add_to_queue($dn,"copy","usertabs","USERTABS","users");
1160         }
1161         if($s_action == "cut_multiple" && $ui->is_cutable($dn,"users","user")){
1162           $this->CopyPasteHandler->add_to_queue($dn,"cut","usertabs","USERTABS","users");
1163         }
1164       }
1165     }
1166
1167     /* Start pasting entries */
1168     if($s_action == "editPaste"){
1169       $this->start_pasting_copied_objects = TRUE;
1170     }
1171
1172     /* Return C&P dialog */
1173     if($this->start_pasting_copied_objects && $this->CopyPasteHandler->entries_queued()){
1174
1175       /* Get dialog */
1176       $this->CopyPasteHandler->SetVar("base",$this->DivListUsers->selectedBase);
1177       $data = $this->CopyPasteHandler->execute();
1178
1179       /* Set CPPasswordChange to s_entry which indicates that this entry requires a new password. */
1180       if(isset($_POST['passwordTodo']) && ($_POST['passwordTodo'] == "new")){
1181         $s_entry = $this->CopyPasteHandler->last_entry();
1182         $this->reload();
1183         foreach($this->list as $key => $entry){
1184           if($entry['dn'] == $s_entry){
1185             $this->CPPasswordChange = $key;
1186           }
1187         }
1188       }
1189
1190       /* Return dialog data */
1191       if(!empty($data) && $this->CPPasswordChange == ""){
1192         return($data);
1193       }
1194     }
1195
1196     /* Automatically disable status for pasting */
1197     if(!$this->CopyPasteHandler->entries_queued()){
1198       $this->start_pasting_copied_objects = FALSE;
1199     }
1200     return("");
1201   }
1202
1203
1204   function save_object()
1205   {
1206     /* Handle divlist filter && department selection*/
1207     if(!is_object($this->usertab)){
1208       $this->DivListUsers->save_object();
1209     }
1210     if(is_object($this->CopyPasteHandler)){
1211       $this->CopyPasteHandler->save_object();
1212     }
1213   }
1214
1215
1216   function list_get_selected_items()
1217   {
1218     $ids = array();
1219     foreach($_POST as $name => $value){
1220       if(preg_match("/^item_selected_[0-9]*$/",$name)){
1221         $id   = preg_replace("/^item_selected_/","",$name);
1222         $ids[$id] = $id;
1223       }
1224     }
1225     return($ids);
1226   }
1227
1228
1229   /* A set of disabled and therefore overloaded functions. They are
1230      not needed in this class. */
1231   function remove_from_parent() { }
1232   function check() { }
1233   function save() { }
1234   function adapt_from_template($dn, $skip= array()) { }
1235   function password_change_needed() { }
1236
1237 } /* ... class userManagement */
1238 // vim:tabstop=2:expandtab:shiftwidth=2:filetype=php:syntax:ruler:
1239 ?>