Code

Centralized copy & paste ACL checks.
[gosa.git] / gosa-plugins / fai / admin / fai / class_faiManagement.inc
1 <?php
2 /*
3    This code is part of GOsa (https://gosa.gonicus.de)
4    Copyright (C) 2003  Cajus Pollmeier
6    This program is free software; you can redistribute it and/or modify
7    it under the terms of the GNU General Public License as published by
8    the Free Software Foundation; either version 2 of the License, or
9    (at your option) any later version.
11    This program is distributed in the hope that it will be useful,
12    but WITHOUT ANY WARRANTY; without even the implied warranty of
13    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
14    GNU General Public License for more details.
16    You should have received a copy of the GNU General Public License
17    along with this program; if not, write to the Free Software
18    Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
19  */
22 class faiManagement extends plugin
23 {
24         /* Definitions */
25   var $plHeadline     = "Software deployment";
26   var $plDescription    = "Manage software packages and deployment reciepes";
28         /* Headpage attributes */
29   var $lock_type    = "";    // should be branch/freeze
30   var $lock_name    = "";
31   var $lock_dn      = "";  
33         /* attribute list for save action */
34         var $attributes         = array("lock_type","lock_name","lock_dn");     //      Attributes Managed by this plugin 
35         var $objectclasses= array();    //      ObjectClasses which the attributes are related to
36         var $dialog                             = array();      //      This object contains every dialog we have currently opened
38         var $objects                    = array();      //      This array contains all available objects shown in divlist
39         var $is_dialog          = false;
41   var $dispNewBranch= false;
42   var $dispNewFreeze= false;
44   var $DivListFai;
45   var $start_pasting_copied_objects = FALSE;
46   var $CopyPasteHandler = FALSE;
48   /* Allow inserting of new elements if freezed releases 
49   */
50   var $allow_freeze_object_attach = TRUE;
52   var $no_save;
53   var $fai_base     ="";
54   var $fai_release  ="";
56         /* construction/reconstruction 
57          */
58         function faiManagement (&$config, $ui)
59         {
60                 /* Set defaults */
61                 $this->dn                       = "";
62                 $this->config   = $config;
63                 $this->ui                       = $ui;  
64     
65     /* Creat dialog object */
66     $this->DivListFai = new divListFai($this->config,$this);
68     /* Copy & Paste handler */
69     if ($this->config->boolValueIsTrue("main", "enableCopyPaste")){
70       $this->CopyPasteHandler= new CopyPasteHandler($this->config);
71     }
73     /* Set default release */
74     $this->fai_base = get_ou("faiou").$this->config->current['BASE'];
75     if(!session::is_set("fai_filter")){
76       session::set("fai_filter",array("fai_release" => $this->fai_base));
77     }
79     $fai_filter = session::get("fai_filter");
80     $this->fai_release = $fai_filter['fai_release'];
81         }
83         function execute()
84         {
85     /* Call parent execute */
86     plugin::execute();
88     /* Initialise vars and smarty */
89                 $smarty         = get_smarty();
90                 $smarty->assign("BranchName","");
91     
92                 $display        = "";
93     $s_action   = "";
94                 $s_entry        = "";
95     $no_save = FALSE;   // hide Apply / Save buttons
96     
97     /* If an entry was locked, these vars will be stored in a session to allow direct edit */
98     session::set('LOCK_VARS_TO_USE',array("/^edit_freeze_entry$/","/^edit_entry$/","/^id$/","/^entry_edit_/","/^entry_delete_/","/^item_selected/","/^remove_multiple_fai_objects/","/^menu_action/"));
101     /****************
102       Handle posts 
103      ****************/
105                 /* Check ImageButton posts
106                  * Create new tab ich new_xx is posted
107                  */
108     $posts = array( "/remove_branch/"=>"remove_branch",    "/branch_branch/"=>"branch_branch",
109                     "/freeze_branch/"=>"freeze_branch",    "/create_partition/i"=>"new_partition",
110                     "/create_script/i"=>"new_script",      "/create_hook/i"=>"new_hook",
111                     "/create_variable/i"=>"new_variable",  "/create_template/i"=>"new_template",
112                     "/create_package/i"=>"new_package",    "/create_profile/i"=>"new_profile",
113                     "/edit_continue/"=>"select_class_name_finished",
114                     "/^multiple_copy_fai/" => "copy_multiple", 
115                     "/^multiple_cut_fai/" => "cut_multiple", 
116                     "/^copy/" => "copy",
117                     "/^remove_multiple_fai_objects/" => "del_multiple");
119                 foreach($_POST as $name => $value){
120       foreach($posts as $reg => $act ){
121         if(preg_match($reg,$name)){
122           $s_action = $act;
123           $s_entry = ltrim(preg_replace($reg,"",$name),"_");
124           $s_entry = preg_replace("/_.*$/","",$s_entry);
125         }
126       }
127                         if(preg_match("/^entry_edit_.*/",$name)){
128                                 $s_entry = preg_replace("/^entry_edit_/","",$name);
129                                 $s_entry = preg_replace("/_.*$/","",$s_entry);
130                                 $s_action = "edit";
131                         }elseif(preg_match("/^entry_freeze_edit_.*/",$name)){
132                                 $s_entry = preg_replace("/^entry_freeze_edit_/","",$name);
133                                 $s_entry = preg_replace("/_.*$/","",$s_entry);
134                                 $s_action = "edit";
135         $no_save = TRUE;
136                         }elseif(preg_match("/^entry_delete_.*/",$name)){
137                                 $s_entry = preg_replace("/^entry_delete_/","",$name);
138                                 $s_entry = preg_replace("/_.*$/","",$s_entry);
139         $s_action = "delete";
140       }
141     }
143                 if(isset($_GET['edit_entry'])){
144                         $s_entry = $_GET['edit_entry'];
145                         $s_action = "edit";
146                 }
148                 if(isset($_GET['edit_freeze_entry'])){
149                         $s_entry = $_GET['edit_freeze_entry'];
150                         $s_action = "edit";
151       $no_save = TRUE;
152                 }
154     if(isset($_GET['act']) && $_GET['act'] == "freeze_branch"){
155       $s_action = "freeze_branch";
156     }
157     if(isset($_GET['act']) && $_GET['act'] == "branch_branch"){
158       $s_action = "branch_branch";
159     }
160     if(isset($_GET['act']) && $_GET['act'] == "remove_branch"){
161       $s_action = "remove_branch";
162     }
163     
164     if((isset($_POST['CancelBranchName'])) || (isset($_POST['CloseIFrame']))){
165       $this->dispNewBranch = false;
166       $this->dispNewFreeze = false;
167     }
170     $type_acl_mapping = array(
171         "FAIpartitionTable"  => "faiPartitionTable", 
172         "FAIpackageList"     => "faiPackage",
173         "FAIscript"          => "faiScript",
174         "FAIvariable"        => "faiVariable",
175         "FAIhook"            => "faiHook",
176         "FAIprofile"         => "faiProfile",
177         "FAItemplate"        => "faiTemplate");
180     /* handle C&P from layers menu */
181     if(isset($_POST['menu_action']) && preg_match("/^multiple_copy_systems/",$_POST['menu_action'])){
182       $s_action = "copy_multiple";
183     }
184     if(isset($_POST['menu_action']) && preg_match("/^multiple_cut_systems/",$_POST['menu_action'])){
185       $s_action = "cut_multiple";
186     }
187     if(isset($_POST['menu_action']) && preg_match("/^editPaste/",$_POST['menu_action'])){
188       $s_action = "editPaste";
189     }
191     /* Create options */
192     if(isset($_POST['menu_action']) && preg_match("/^Create_/",$_POST['menu_action'])){
193       $s_action = "new_".preg_replace("/^Create_/","",$_POST['menu_action']);;
194       $s_entry  = preg_replace("/^Create_/","",$_POST['menu_action']);
195     }
197     /* handle remove from layers menu */
198     if(isset($_POST['menu_action']) && preg_match("/^remove_multiple/",$_POST['menu_action'])){
199       $s_action = "del_multiple";
200     }
203     if(!empty($s_action)){
204       $this->no_save = $no_save;
205     }
207     /********************
208       Copy & Paste
209      ********************/
211     /* Display the copy & paste dialog, if it is currently open */
212     $ret = $this->copyPasteHandling_from_queue($s_action,$s_entry);
213     if($ret){
214       return($ret);
215     }
218     /****************
219       Delete confirme dialog 
220      ****************/
222                 if ($s_action=="delete"){
224       /* Get 'dn' from posted termlinst */
225       $this->dn= $this->objects[$s_entry]['dn'];
227                         /* Load permissions for selected 'dn' and check if
228                            we're allowed to remove this 'dn' */
229       $acl  = $this->ui->get_permissions($this->dn,"fai/".$type_acl_mapping[$this->objects[$s_entry]['type']]);
230       if(preg_match("/d/",$acl)){
232                                 /* Check locking, save current plugin in 'back_plugin', so the dialog knows where to return. */
233                                 if (($user= get_lock($this->dn)) != ""){
234                                         return(gen_locked_message ($user, $this->dn));
235                                 }
237                                 /* Lock the current entry, so nobody will edit it during deletion */
238                                 add_lock ($this->dn, $this->ui->dn);
239                                 $smarty->assign("warning",msgPool::deleteInfo(@LDAP::fix($this->dn),_("FAI object")));
240         $smarty->assign("multiple", false);
241                                 return($smarty->fetch(get_template_path('remove.tpl', TRUE)));
242                         } else {
244                                 /* Obviously the user isn't allowed to delete. Show message and clean session. */
245         msg_dialog::display(_("Permission error"), msgPool::permDelete(),ERROR_DIALOG);
246                         }
247                 }
250     /********************
251       Delete MULTIPLE entries requested, display confirm dialog
252      ********************/
254     if ($s_action=="del_multiple"){
255       $this->dns = array();
256       $ids = $this->list_get_selected_items();
258       if(count($ids)){
260         $errors = "";
261         foreach($ids as $id){
262           $dn = $this->objects[$id]['dn'];
263           $cn = $this->objects[$id]['cn'];
264           if(!preg_match('/^freeze/', $this->objects[$id]['FAIstate'])){
265             $this->dns[$id] = $dn;
266           }else{
267             $errors .= $cn.", ";
268           }
269         }
270         if ($user= get_multiple_locks($this->dns)){
271           return(gen_locked_message($user,$this->dns));
272         }
274         if($errors != ""){
275           msg_dialog::display(_("Branch locked"),sprintf(_("The following entries are locked, you can't remove them %s."),
276             "<br><br>".trim($errors,", ")),INFO_DIALOG);
277         }
279         if(count($this->dns)){
281           $dns_names = array();
282           foreach($this->dns as $dn){
283             add_lock ($dn, $this->ui->dn);
284             $dns_names[] = @LDAP::fix($dn);
285           }
287           /* Lock the current entry, so nobody will edit it during deletion */
288                                   $smarty->assign("warning",msgPool::deleteInfo($dns_names,_("FAI object")));
289           $smarty->assign("multiple", true);
290           return($smarty->fetch(get_template_path('remove.tpl', TRUE)));
291         }
292       }
293     }
296     /********************
297       Delete MULTIPLE entries confirmed
298      ********************/
300     /* Confirmation for deletion has been passed. Users should be deleted. */
301     if (isset($_POST['delete_multiple_fai_object_confirm'])){
303       /* Find out more about the object type */
304       $ldap   = $this->config->get_ldap_link();
306       /* Remove user by user and check acls before removeing them */
307       foreach($this->dns as $key => $dn){
309         $ldap->cat($dn, array('objectClass'));
310         $attrs  = $ldap->fetch();
311         $type   = $this->get_type($attrs);
313         $acl  = $this->ui->get_permissions($dn,"fai/".$type[1]);
314         if(preg_match("/d/",$acl)){
316           $this->dialog = new $type[0]($this->config, $this->config->data['TABS'][$type[2]], $dn,"fai");
317           $this->dialog->parent = &$this;
318           $this->dialog->set_acl_base($dn);
319           $this->dialog->by_object[$type[1]]->remove_from_parent ();
320           unset ($this->dialog);
321           $this->dialog= FALSE;
322           $to_del = FAI::clean_up_releases($dn);
323           FAI::save_release_changes_now();
325           foreach($to_del as $dn){
326             $ldap->rmdir_recursive($dn);
327           }
329         } else {
331           /* Normally this shouldn't be reached, send some extra
332              logs to notify the administrator */
333           msg_dialog::display(_("Permission error"), msgPool::permDelete(), ERROR_DIALOG);
334           new log("security","fai/".get_class($this),$dn,array(),"Tried to trick deletion.");
335         }
336       }
338       /* Remove lock file after successfull deletion */
339       $this->remove_lock();
340       $this->dns = array();
341     }
344     /********************
345       Delete MULTIPLE entries Canceled
346      ********************/
348     /* Remove lock */
349     if(isset($_POST['delete_multiple_fai_object_cancel'])){
350       $this->dns = array();
351       $this->remove_lock();
352     }
355     /****************
356       Delete aborted  
357      ****************/
359                 /* Delete canceled? */
360                 if (isset($_POST['delete_cancel'])){
361       $this->remove_lock();
362                 }
365     /****************
366       Delete confirmed 
367      ****************/
369                 /* Deltetion was confirmed, so delete this entry
370      */
371     if (isset($_POST['delete_terminal_confirm'])){
373       /* Some nice guy may send this as POST, so we've to check
374          for the permissions again. */
376       /* Find out more about the object type */
377       $ldap       = $this->config->get_ldap_link();
378       $ldap->cat($this->dn, array('objectClass'));
379       if($ldap->count()){
380         $attrs  = $ldap->fetch();
381         $type     = $this->get_type($attrs);                    
383         $acl  = $this->ui->get_permissions($this->dn,"fai/".$type[1]);
384         if(preg_match("/d/",$acl)){
386           $this->dialog = new $type[0]($this->config,   $this->config->data['TABS'][$type[2]], $this->dn,"fai");
387           $this->dialog->set_acl_base($this->dn);
388           $this->dialog->parent = &$this;
389           $this->dialog->by_object[$type[1]]->remove_from_parent ();
390           unset ($this->dialog);
391           $this->dialog= FALSE;
392           $to_del = FAI::clean_up_releases($this->dn);
393           FAI::save_release_changes_now();
395           foreach($to_del as $dn){
396             $ldap->rmdir_recursive($dn);
397           }
399         } else {
401           /* Normally this shouldn't be reached, send some extra
402              logs to notify the administrator */
403           msg_dialog::display(_("Permission error"), msgPool::permDelete(), ERROR_DIALOG);
404           new log("security","fai/".get_class($this),$dn,array(),"Tried to trick deletion.");
405         }
407       }else{
408         msg_dialog::display(_("Error"), sprintf(_("Cannot delete '%s': object does not exist!"), $this->dn) , ERROR_DIALOG);
409       }
411       /* Remove lock file after successfull deletion */
412       $this->remove_lock();
413     }
416     /****************
417       Edit entry 
418      ****************/
420                 if(($s_action == "edit") && (!isset($this->dialog->config))){
421                         $entry    = $this->objects[$s_entry];
422                         $a_setup  = $this->get_type($entry);
423                         $this->dn = $entry['dn'];
425                         /* Check locking, save current plugin in 'back_plugin', so the dialog knows where to return. */
426                         if (($user= get_lock($this->dn)) != ""){
427                                 return(gen_locked_message ($user, $this->dn));
428                         }
429                         add_lock ($this->dn, $this->ui->dn);
431                         $this->dialog     = new $a_setup[0]($this->config,$this->config->data['TABS'][$a_setup[2]],$this->dn,"fai");
432       $this->dialog->parent = &$this;
433       $this->dialog->set_acl_base($this->dn);
434                         $this->is_dialog  = true;
436       if(preg_match("/^freeze/", $entry['FAIstate']) || $this->no_save){
437 #        $this->dialog->set_acl_base("freezed")  ;    
438       }
439                         session::set('objectinfo',$this->dn);
440                 }
443     /*  Branch handling 
444         09.01.2006
445     */
447     /****************
448       Remove branch
449      ****************/
451     /* Remove branch 
452      */
453     if($s_action == "remove_branch"){
454       $base= $this->fai_release;
456       /* Check if we have a post remove method configured
457        *  else skip this operation. (Skip:Button in the ui should be disabled in this case too)
458        */
459       if("" != $this->config->search("faiManagement", "POSTREMOVE",array('menu','tabs'))){
460         /* Load permissions for selected 'dn' and check if
461            we're allowed to remove this 'dn' */
462         if($this->acl_is_removeable()){
463           $smarty->assign("release_hidden",base64_encode($this->fai_release));
464           $smarty->assign("info", msgPool::deleteInfo(@LDAP::fix($this->fai_release),_("FAI branch/freeze")));
465           return($smarty->fetch(get_template_path('remove_branch.tpl',TRUE)));
466         } else {
467           msg_dialog::display(_("Permission error"), _("You have no permission to delete this release!"), ERROR_DIALOG);
468         }
469       }
470     }
472     
473     /****************
474       Remove branch confirmed
475      ****************/
477     if(isset($_POST['delete_branch_confirm'])){
479       /* Check if we have a post remove method configured
480        *  else skip this operation. (Skip:Button in the ui should be disabled in this case too)
481        */
482       if("" != $this->config->search("faiManagement", "POSTREMOVE",array('menu','tabs'))){
484         if(!isset($_POST['release_hidden']) || base64_decode($_POST['release_hidden']) != $this->fai_release){
485           msg_dialog::display(_("Warning"),_("Release remove aborted, release name check failed."));
486         }else{
488           $bb =  $this->fai_release;
489           if(!isset($ldap)){
490             $ldap = $this->config->get_ldap_link();
491           }
493           $br = $this->getBranches();
495           if(isset($br[$bb]) && $this->acl_is_removeable()){
496             $name = $br[$bb];
498             $ldap->cd($bb);
499             $ldap->recursive_remove();
500             $ldap->cd(preg_replace('/,'.normalizePreg(get_ou('faiou')).'/', ','.get_ou('applicationou'), $bb));
501             $ldap->recursive_remove();
502             $ldap->cd(preg_replace('/,'.normalizePreg(get_ou('faiou')).'/', ','.get_ou('mimetypeou'), $bb));
503             $ldap->recursive_remove();
505             /* Search for all groups with configured application menus.
506               - First search all groups, to ensure that we only remove entries form whithin groups. 
507               - The search für menu configuration for the specified release and collect all those dns.
508               - Remove entries
509              */
510             $release_ou = preg_replace("/".normalizePreg(get_ou("faiou")).".*$/","",$bb);
511             $ldap->cd($this->config->current['BASE']);
512             $ldap->search("(objectClass=posixGroup)",array("dn"));
513           
514             /* Collect all group dns 
515              */
516             $groups = array();
517             while($attrs = $ldap->fetch()){
518               $groups[] = $attrs['dn'];
519             }
521             /* Collect all group menu release dns that match the release we have removed 
522              */
523             $dns = array();
524             foreach($groups as $dn){
525               $ldap->cd($dn);
526               $ldap->search("(objectClass=FAIbranch)",array("dn"));
527               while($attrs = $ldap->fetch()){
528                 if(preg_match("/^".normalizePreg($release_ou)."/",$attrs['dn'])){
529                   $dns[] = $attrs['dn'];
530                 }
531               }
532             }
533             
534             /* Finally remove collected release dns 
535              */
536             foreach($dns as $dn){
537               $ldap->cd($dn);
538               $ldap->recursive_remove();
539             }
541             /* Post remove */
542             $this->fai_release = $this->fai_base;
543             $this->lock_name   = $name;
544             $this->lock_dn     = $bb;
545             $this->postremove();
547             $fai_filter = session::get("fai_filter");
548             $fai_filter['fai_release'] = $this->fai_release;
549             session::set("fai_filter",$fai_filter);
551             new log("remove","fai/".get_class($this),$br[$bb],array(),"Release removed");
552           }
553         }
554       }
555     }
558     /****************
559       Create a new branch "insert Name"
560      ****************/
562     if((isset($_POST['UseBranchName']))&&(($this->dispNewBranch)||($this->dispNewFreeze))){
563       session::set('LASTPOST',$_POST);
565       if($this->dispNewBranch){
566         $type = "branch";
567       }else{
568         $type = "freeze";
569       }
571       /* Check branch name */
572       $name = $_POST['BranchName'];
573       $is_ok = true;
574       $smarty->assign("BranchName",$name);
575       $base= $this->fai_base;
577       /* Check used characters */
578       if(!preg_match("/^[0-9a-z \ö\ä\ü\.\-_:,]*$/i",$name)){
579         msg_dialog::display(_("Error"), msgPool::invalid(_("Name"),$name,"/[0-9a-z \ö\ä\ü\.\-_:,]/i"), ERROR_DIALOG);
580         $is_ok = false;
581       }
583       /* Check if this name is already in use */
584       if(!$this->CheckNewBranchName($_POST['BranchName'],$this->fai_release)){
585         msg_dialog::display(_("Error"), msgPool::duplicated(_("Name")), ERROR_DIALOG);
586         $is_ok = false;
587       }
589       if($is_ok){
591         if(session::is_set('LASTPOST')){
592           $LASTPOST = session::get('LASTPOST');
593         }else{
594           $LASTPOST = array();
595         }
596         $LASTPOST['base'] = $base;
597         $LASTPOST['type'] = $type;
598         session::set('LASTPOST',$LASTPOST);
599         $smarty->assign("iframe", true);
600         $smarty->assign("plugID", $_GET['plug']);
601         $display        = $smarty->fetch(get_template_path('faiNewBranch.tpl', TRUE, dirname(__FILE__)));
602         return($display);
603       }
604     }
607     /****************
608       Create a new branch 
609      ****************/
611     if(isset($_GET['PerformBranch'])){
612     
613       if(!$this->acl_is_createable()){
614         msg_dialog::display(_("Permission error"), msgPool::permCreate(_("Branch")), ERROR_DIALOG);
615       }else{
617         /* Create it know */
618         $this->dispNewBranch = false;
619         $this->dispNewFreeze = false;
621         $LASTPOST = session::get('LASTPOST');
622         $base = $LASTPOST['base'];
623         $_POST  = session::get('LASTPOST');      
624         $name = $_POST['BranchName'];
626         $type = $LASTPOST['type'];
627         $ldap = $this->config->get_ldap_link();
629         $baseToUse = $base;
630         if($this->fai_release !=  $this->fai_base){
631           $baseToUse = $this->fai_release;
632         }
634         /* Create new Release name to be able to set faidebianRelease for FAIpackageList */
636         $CurrentReleases  = $this->getBranches();
637         $NewReleaseName   = $name;
638         if(isset($CurrentReleases[$this->fai_release])) {
639           if($this->fai_release != $this->fai_base){
640             $NewReleaseName = $CurrentReleases[$this->fai_release]."/".$name;
641             $NewReleaseName = preg_replace("#\/#","/",$NewReleaseName); 
642           }else{
643             $NewReleaseName   = $name;
644           }
645         }
647         $appsrc = preg_replace("/".normalizePreg(get_ou('faiou'))."/",get_ou('applicationou'),$baseToUse); 
648         $appdst = preg_replace("/".normalizePreg(get_ou('faiou'))."/",get_ou('applicationou'),"ou=".$name.",".$baseToUse) ; 
650         $mimesrc = preg_replace("/".normalizePreg(get_ou('faiou'))."/",get_ou('mimetypeou'),$baseToUse); 
651         $mimedst = preg_replace("/".normalizePreg(get_ou('faiou'))."/",get_ou('mimetypeou'),"ou=".$name.",".$baseToUse) ; 
653         /* Check if source depeartments exist */
654         foreach(array($baseToUse,$appsrc,$mimesrc) as $dep){
655           $ldap->cd($this->config->current['BASE']);
656           $ldap->cat($dep);
657           if(!$ldap->count()){
658             $ldap->create_missing_trees($dep);
659           }
660         }
662         /* Print header to have styles included */
663         echo '  <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
664           <html>
665           <head>
666           <title></title>
667           <style type="text/css">@import url("themes/default/style.css");</style>
668           <script language="javascript" src="include/focus.js" type="text/javascript"></script>
669           </head>
670           <body style="background: none;margin:3px;color:black">
671           ';
673         new log("create","fai/".get_class($this),$NewReleaseName,array(),"New $type created");
675         /* Duplicate group application releases 
676          */
677         FAI::copy_FAI_group_releases($CurrentReleases[$this->fai_release],$name,$type);
679         /* Duplicate applications 
680          */
681         $ldap->cat($appsrc,array("dn")) ;
682         if($ldap->count()){
683           $ldap->cd ($appdst);
684           $ldap->recursive_remove();
685           FAI::copy_FAI_resource_recursive($appsrc,$appdst,$NewReleaseName,$type,true);
686         }
688         /* Duplicate mime types 
689          */
690         $ldap->cat($mimesrc,array("dn")) ;
691         if($ldap->count()){
692           $ldap->cd ($mimedst);
693           $ldap->recursive_remove();
694           FAI::copy_FAI_resource_recursive($mimesrc,$mimedst,$NewReleaseName,$type,true);
695         }
697         $attr = array();
698         $attr['objectClass'] = array("organizationalUnit","FAIbranch");
699         $attr['ou']       = $name;
700         $attr['FAIstate'] = $type;
701         $ldap->cd($this->config->current['BASE']);
702         $ldap->cd("ou=".$name.",".$baseToUse);
703         $ldap->cat("ou=".$name.",".$baseToUse);
704         if($ldap->count()){
705           $ldap->modify($attr);
706         }else{
707           $ldap->add($attr);
708         }
710         /* Duplicate fai objects 
711          */
712         //      $ldap->cd ("ou=".$name.",".$baseToUse);
713         //      $ldap->recursive_remove();
714         //      FAI::copy_FAI_resource_recursive($baseToUse,"ou=".$name.",".$baseToUse,$NewReleaseName,$type,true);
716         echo "<div style='width:100%;text-align:right;'><form name='form' method='post' action='?plug=".$_GET['plug']."' target='_parent'>
717           <br><input type='submit' name='CloseIFrame' value='"._("Continue")."'>
718           </form></div>";
720         echo "<script language=\"javascript\" type=\"text/javascript\">scrollDown2();</script>" ;
722         /* Print footer to have valid html */
723         echo "</body></html>";
725         $this->dispNewFreeze = false; 
727         /* Postcreate */ 
729         /* Assign possible attributes */
730         $this->lock_type  = $type; 
731         $this->lock_name  = $name; 
732         $this->lock_dn    = $baseToUse;
733         $this->postcreate();
734         exit();
735       }
736     }
738     /****************
739       Display dialog to enter new Branch name
740      ****************/
742     /* Check if we have a post create method configured
743      *  else skip this operation. (Skip:Button in the ui should be disabled in this case too)
744      */
745     if("" != $this->config->search("faiManagement", "POSTCREATE",array('menu','tabs'))){
746       if(($s_action == "branch_branch")||($this->dispNewBranch)){
747         if(!$this->acl_is_createable()){
748         msg_dialog::display(_("Permission error"), msgPool::permCreate(_("Branch")), ERROR_DIALOG);
749         }else{
750           $this->dispNewBranch=true;
751           $smarty->assign("iframe",false);
752           $display      .= $smarty->fetch(get_template_path('faiNewBranch.tpl', TRUE, dirname(__FILE__)));
753           return($display);
754         }
755       } 
756     }
758  
759     /****************
760       Display dialog to enter new Freeze name
761      ****************/
763     /* Check if we have a post create method configured
764      *  else skip this operation. (Skip:Button in the ui should be disabled in this case too)
765      */
766     if("" != $this->config->search("faiManagement", "POSTCREATE",array('menu','tabs'))){
767       if(($s_action == "freeze_branch")||($this->dispNewFreeze)){
768         if(!$this->acl_is_createable()){
769           msg_dialog::display(_("Permission error"), msgPool::permCreate(_("Branch")), ERROR_DIALOG);
770         }else{
771           $this->dispNewFreeze = true;
772           $smarty->assign("iframe",false);
773           $display      .= $smarty->fetch(get_template_path('faiNewBranch.tpl', TRUE, dirname(__FILE__)));
774           return($display);
775         }
776       }
777     }
780     /****************
781       Create a new object 
782      ****************/
784     $types = array( "new_partition"     =>  "FAIpartitionTable",
785                     "new_script"        =>  "FAIscript",
786                     "new_hook"          =>  "FAIhook",
787                     "new_variable"      =>  "FAIvariable",
788                     "new_template"      =>  "FAItemplate",
789                     "new_package"       =>  "FAIpackageList");
790     $types_i18n = array( "new_partition"     =>  _("partition table"),
791                     "new_script"        =>  _("script"),
792                     "new_hook"          =>  _("hook"),
793                     "new_variable"      =>  _("variable"),
794                     "new_template"      =>  _("template"),
795                     "new_package"       =>  _("package list"));
797     if(isset($types[$s_action])){
798       $acl = $this->ui->get_permissions($this->fai_base,"fai/".$type_acl_mapping[$types[$s_action]]);
799       if(preg_match("/c/",$acl)){
800         $this->dialog = new askClassName($this->config,$this->dn,$this->ui,$types[$s_action]);
801         $this->dialog->parent = &$this;
802       }else{
803         msg_dialog::display(_("Permission error"), sprintf(_("You have no permission to create a new %s!"), $types_i18n[$s_action]), ERROR_DIALOG);
804       }
805     }
807     /* New Profile */
808     if($s_action == "new_profile"){
809       $this->dn = "new" ;
811       $acl = $this->ui->get_permissions($this->fai_base,"fai/faiProfile");
812       if(preg_match("/c/",$acl)){
813         $a_setup= $this->get_type(array("objectClass"=>array("FAIprofile")));
814         $this->dialog = new $a_setup[0]($this->config,$this->config->data['TABS'][$a_setup[2]],$this->dn,"fai");
815         $this->dialog->set_acl_base($this->base);
816         $this->dialog->parent = &$this;
818         $this->is_dialog = false;
819       }else{
820         msg_dialog::display(_("Permission error"), sprintf(_("You have no permission to create a new %s!"), _("profile")), ERROR_DIALOG);
821       }
822     }
825     /****************
826       Get from ask class name dialog 
827      ****************/
829     if($s_action == "select_class_name_finished"){
830       $this->dialog->save_object();
831       if(count($this->dialog->check())!=0){
832         foreach($this->dialog->check() as $msg){
833           msg_dialog::display(_("Error"), $msg, ERROR_DIALOG);
834         }               
835       }elseif(isset($this->dialog->objectClass)){
836         $this->dn = "new" ;
837         $a_setup= $this->get_type(array("objectClass"=>array($this->dialog->objectClass)));
838         $name = $this->dialog->save();
840         if(class_exists($a_setup[0])){
841           $this->dialog = new $a_setup[0]($this->config,$this->config->data['TABS'][$a_setup[2]],$this->dn,"fai");
842           $this->dialog->set_acl_base($this->base);
843           $this->dialog->by_object[$a_setup[1]]->cn = $name;
844           $this->dialog->parent = &$this;
845           $this->is_dialog = true;
846         }
847       }         
848     }   
851     /****************
852      Cancel dialogs 
853      ****************/
855                 if(isset($_POST['edit_cancel'])){
856                         $this->dialog=FALSE;
857                         $this->is_dialog = false;
858                         session::un_set('objectinfo');
859       $this->remove_lock();
860                 }
863     /****************
864       Save sub dialogs 
865      ****************/
867                 /* This check if the given tab could be saved 
868                  * If it was possible to save it, remove dialog object. 
869                  * If it wasn't possible, show errors and keep dialog.
870                  */
871                 if((isset($_POST['edit_finish']) || isset($_POST['edit_apply'])) && (isset($this->dialog->config))){
872                         $this->dialog->save_object();
873       $msgs= $this->dialog->check();
874                         if(count($msgs)!=0){
875                                 foreach($msgs as $msg){
876           msg_dialog::display(_("Error"), $msg, ERROR_DIALOG);
877                                 }
878                         }else{
879                                 $this->dialog->save();
880         FAI::save_release_changes_now();
881         if (!isset($_POST['edit_apply'])){
882           $this->remove_lock();
883           $this->dialog=FALSE;
884           $this->is_dialog=false;
885           session::un_set('objectinfo');
886         }else{
888           /* Reinitialize tab */
889           if($this->dialog instanceof tabs){
890             $this->dialog->re_init();
891           }
892         }
893                         }
894                 }
897     /****************
898       Display currently open dialog 
899      ****************/
901                 /* If dialog is set, but $this->is_dialog==false, then 
902                  *  only the "abort" button is shown, this are dialogs that must not be saved.  
903                  * If is_dialog == true, we are currently editing tab objects.
904                  *  Here we need both, save and cancel
905                  */ 
907                 if(is_object($this->dialog)){
908                         $display .= $this->dialog->execute();
909                         /* Don't show buttons if tab dialog requests this */
911       if(isset($this->dialog->current)){
913         $obj = $this->dialog->by_object[$this->dialog->current];
915         if((isset($obj->is_dialog) && (!$obj->is_dialog)) || (isset($obj->dialog) && (!$obj->dialog))){
917           $display.= "<p style=\"text-align:right\">\n";
918           if(!$this->no_save){
919             $display.= "<input type=\"submit\" name=\"edit_finish\" style=\"width:80px\" value=\"".msgPool::okButton()."\">\n";
920             $display.= "&nbsp;\n";
921             if ($this->dn != "new"){
922               $display.= "<input type=submit name=\"edit_apply\" value=\"".msgPool::applyButton()."\">\n";
923               $display.= "&nbsp;\n";
924             }
925           }
926           $display.= "<input type=\"submit\" name=\"edit_cancel\" value=\"".msgPool::cancelButton()."\">\n";
927           $display.= "</p>";
928         }elseif(!isset($this->dialog->current)){
929           $display.= "<p style=\"text-align:right\">\n";
930           $display.= "<input type=\"submit\" name=\"edit_continue\" value=\""._("Continue")."\">&nbsp;";
931           $display.= "<input type=\"submit\" name=\"edit_cancel\" value=\"".msgPool::cancelButton()."\">\n";
932           $display.= "</p>";
933         }
934       }else{
935         $display.= "<p style=\"text-align:right\">\n";
936         $display.= "<input type=\"submit\" name=\"edit_continue\" value=\""._("Continue")."\">&nbsp;";
937         $display.= "<input type=\"submit\" name=\"edit_cancel\" value=\"".msgPool::cancelButton()."\">\n";
938         $display.= "</p>";
940       }
941       return($display);
942                 }
943                 
945     /****************
946       Dialog display
947      ****************/
949     /* Check if there is a snapshot dialog open */
950     $base = $this->fai_base;
951     if($str = $this->showSnapshotDialog($base,$this->get_used_snapshot_bases())){
952       return($str);
953     }
955     /* Display dialog with system list */
956     $this->reload();
957     $this->DivListFai->parent = &$this;
958     $this->DivListFai->execute();
959     $this->DivListFai->setEntries($this->objects);
960     return($this->DivListFai->Draw());
961         }
964   /* Return departments, that will be included within snapshot detection */
965   function get_used_snapshot_bases()
966   {
967     $tmp = array();
968     $types = array("faipartitionou","faiscriptou","faitemplateou","faihookou","faiprofileou","faivariableou","faipackageou");
969     foreach($types as $type){
970       $tmp[] = get_ou($type).$this->fai_release;
971     }
972     return($tmp);
973   }
976   /* Get available branches for current base */
977   function getBranches($base = false,$prefix = "")
978   {
979     $ret = array("/"=>$this->fai_base);
980     $ldap = $this->config->get_ldap_link();
981     if(!$base){
982       $base = $this->fai_base;
983     }
984     $tmp = FAI::get_all_releases_from_base($base,true);
985     foreach($tmp as $dn => $name){
986       $ret[$name]=$dn;
987     }
988     ksort($ret);
989     $ret = array_flip($ret);
991     return ($ret);
992   }
993   
995   function list_get_selected_items()
996   {
997     $ids = array();
998     foreach($_POST as $name => $value){
999       if(preg_match("/^item_selected_[0-9]*$/",$name)){
1000         $id   = preg_replace("/^item_selected_/","",$name);
1001         $ids[$id] = $id;
1002       }
1003     }
1004     return($ids);
1005   }
1008   /* reload list of objects */
1009   function reload()
1010   {
1011     /* Variable initialisation */
1012     $str            = "";
1013     $Regex          = $this->DivListFai->Regex;
1014     $this->objects  = array();
1016     /* Get base */
1017     $base = $this->fai_base;
1018     if($this->fai_release != $this->fai_base){
1019       $br = $this->getBranches();
1020       if(isset($br[$this->fai_release])){
1021         $base = $this->fai_release;
1022       }else{
1023         $base = $this->fai_base;
1024       }
1025     }
1026     $this->base = $base;
1027     $this->set_acl_base($this->base);
1029     $this->lock_type = FAI::get_release_tag(FAI::get_release_dn($base));
1031     /* Create a new list of FAI object 
1032      * Generate List of Partitions,Hooks,Scripts,Templates,Profiles ... 
1033      */
1034     $ObjectTypes = array(
1035         "FAIpartitionTable"  => array("OU"=> get_ou('faipartitionou') , "CHKBOX"=>"ShowPartitions"  ,"ACL" => "faiPartitionTable"),
1036         "FAIpackageList"     => array("OU"=> get_ou('faipackageou')   , "CHKBOX"=>"ShowPackages"    ,"ACL" => "faiPackage"),
1037         "FAIscript"          => array("OU"=> get_ou('faiscriptou')    , "CHKBOX"=>"ShowScripts"     ,"ACL" => "faiScript"),
1038         "FAIvariable"        => array("OU"=> get_ou('faivariableou')  , "CHKBOX"=>"ShowVariables"   ,"ACL" => "faiVariable"),
1039         "FAIhook"            => array("OU"=> get_ou('faihookou')      , "CHKBOX"=>"ShowHooks"       ,"ACL" => "faiHook"),
1040         "FAIprofile"         => array("OU"=> get_ou('faiprofileou')   , "CHKBOX"=>"ShowProfiles"    ,"ACL" => "faiProfile"),
1041         "FAItemplate"        => array("OU"=> get_ou('faitemplateou')  , "CHKBOX"=>"ShowTemplates"   ,"ACL" => "faiTemplate"));
1043     $filter = "";
1044     foreach($ObjectTypes as $key => $data){
1045       if($this->DivListFai->$data['CHKBOX']){
1046         $filter.= "(objectClass=".$key.")";
1047       }
1048     }
1049     $filter = "(&(|".$filter.")(cn=$Regex))";
1050     
1051     /* Get resolved release dependencies */
1052     $tmp = FAI::get_all_objects_for_given_base($base,$filter);
1054     /* Ge listed ldap objects */
1055     $ldap = $this->config->get_ldap_link();
1056     $ldap->cd($this->config->current['BASE']);
1058     /* Get release tag 
1059        If current release is freezed, all objects are freezed to.
1060      */
1061     $ldap->cat($base);
1062     $release_attrs = $ldap->fetch();
1063     $force_freezed = FALSE;
1064     if(isset($release_attrs['FAIstate'][0]) && preg_match("/freeze/i",$release_attrs['FAIstate'][0])){
1065       $force_freezed = TRUE;
1066     }
1068     foreach($tmp as $entry){
1070       /* Get some more informations about the object */ 
1071       $ldap->cat($entry['dn'], array("cn","description","objectClass","FAIclass","FAIstate","objectClass"));
1072       $object  = $ldap->fetch();
1074       /* Walk through possible types */
1075       foreach($ObjectTypes as $type => $rest){  
1077         $acl = $this->ui->get_permissions($object['dn'],"fai/".$rest ['ACL']);
1079         if(in_array($type,$object['objectClass']) && preg_match("/r/",$acl)){
1081           /* Prepare object */
1082           unset($object['objectClass']['count']);
1083           if(!isset($object['description'][0])){
1084             $object['description'][0]="";
1085           }
1087           /* Clean up object informations */
1088           $obj                  = array();
1089           $obj['cn']                          = $object['cn'][0];
1090           $obj['dn']                          = $object['dn'];
1091           $obj['acl']                       = $acl;
1092           $obj['class']                           = $rest ['ACL'];
1093           $obj['description']   = $object['description'][0];
1094           $obj['objectClass']   = $object['objectClass'];
1096           /* Append type to this string, to be able to check if the selected 
1097            * entry is of type 'freeze' or 'branch'
1098            */
1099           if(!isset($object['FAIstate'])){
1100             
1101             /* Is this entry inherited from an earlier release? 
1102                In this case inherit the FAIstate from the release container.
1103                If this is a newly created entry (allow_freeze_object_attach == TRUE) 
1104                 then allow to edit this entry by setting its FAIstate manually to branch. 
1105              */
1106             if($this->allow_freeze_object_attach && preg_match("/".normalizePreg($this->fai_release)."$/i",$object['dn'])){
1107               $obj['FAIstate'] = "branch|overridden_by_management_reload";
1108             }else{
1109               $obj['FAIstate'] = $this->lock_type;
1110             }
1111   
1112           }else{
1113             $obj['FAIstate'] = $object['FAIstate'][0]; 
1114           }
1116           if($force_freezed && !$this->allow_freeze_object_attach){
1117             $obj['FAIstate'] = "freeze";
1118           }
1120           $this->objects[strtolower($obj['cn']).$obj['cn'].$type] = $obj;
1121           $this->objects[strtolower($obj['cn']).$obj['cn'].$type]['type']=$type;
1122         }
1123                         }
1124                 }
1126                 ksort($this->objects);
1127                 reset ($this->objects);
1128         
1129                 /* use numeric index, thats a bit more secure */        
1130                 $tmp0 = array();
1131                 foreach($this->objects as $obj){
1132                         $tmp0[]= $obj;
1133                 }
1134                 $this->objects = array();
1135                 $this->objects = $tmp0;
1136         }
1138         function remove_lock()
1139         {
1140                 if (isset($this->dn)){
1141                         del_lock ($this->dn);
1142                 }
1143     if(isset($this->dns) && is_array($this->dns) && count($this->dns)){
1144       del_lock ($this->dns);
1145     }
1146         }
1148         function get_type($array){
1149                 if(in_array("FAIpartitionTable",$array['objectClass'])){
1150                         return(array("tabsPartition","faiPartitionTable","FAIPARTITIONTABS"));
1151                 }
1152                 if(in_array("FAIscript",$array['objectClass'])){
1153                         return(array("tabsScript","faiScript","FAISCRIPTTABS"));
1154                 }
1155                 if(in_array("FAItemplate",$array['objectClass'])){
1156                         return(array("tabsTemplate","faiTemplate","FAITEMPLATETABS"));
1157                 }
1158                 if(in_array("FAIhook",$array['objectClass'])){
1159                         return(array("tabsHook","faiHook","FAIHOOKTABS"));
1160                 }
1161                 if(in_array("FAIvariable",$array['objectClass'])){
1162                         return(array("tabsVariable","faiVariable","FAIVARIABLETABS"));
1163                 }
1164                 if(in_array("FAIprofile",$array['objectClass'])){
1165                         return(array("tabsProfile","faiProfile","FAIPROFILETABS"));
1166                 }
1167                 
1168                 if(in_array("FAIpackageList",$array['objectClass'])){
1169                         return(array("tabsPackage","faiPackage","FAIPACKAGETABS"));
1170                 }
1171         }
1173   function CheckNewBranchName($name,$base)
1174   {
1175     $f = $this->fai_release;
1176     if($name == ""){
1177       return(false);
1178     }elseif(in_array($name,$this->getBranches($f))) {
1179       return(false);
1180     }elseif(tests::is_department_name_reserved($name,$base)){
1181       return(false);
1182     }
1183     return(true);
1184   }
1186   function save_object()
1187   {
1188     $this->DivListFai->save_object();
1190     /* Get posted release */
1191     $r_releases = array_flip($this->getBranches());
1192     if(isset($_POST['fai_release']) && isset($r_releases[get_post('fai_release')])){
1194       /* Ensure that we have a valid release selected */
1195       if(!isset($r_releases[get_post('fai_release')])){
1196         msg_dialog::display(_("Warning"),_("The selected release is not available anymore. All triggered actions are skipped."));
1197         $_POST = array();
1198         $plug =$_GET['plug'];
1199         $_GET  = array("plug" => $plug);
1200         $this->fai_release = $this->fai_base;
1201       }else{
1202         $this->fai_release = $r_releases[get_post('fai_release')];
1203       }
1205       $fai_filter = session::get("fai_filter");
1206       $fai_filter['fai_release'] = $this->fai_release;
1207       session::set("fai_filter",$fai_filter);
1208     }
1210     if(is_object($this->CopyPasteHandler)){
1211       $this->CopyPasteHandler->save_object();
1212     }
1213   }
1216   function copyPasteHandling_from_queue($s_action,$s_entry)
1217   {
1218     /* Check if Copy & Paste is disabled */
1219     if(!is_object($this->CopyPasteHandler)){
1220       return("");
1221     }
1223     $ui = get_userinfo();
1225     /* Add a single entry to queue */
1226     if($s_action == "copy"){
1228       /* Cleanup object queue */
1229       $this->CopyPasteHandler->cleanup_queue();
1230       $entry    = $this->objects[$s_entry];
1231       $a_setup  = $this->get_type($entry);
1232       $dn = $entry['dn'];
1234       if($ui->is_copyable($dn,"fai",$a_setup[1])){
1235         $this->CopyPasteHandler->add_to_queue($dn,$s_action,$a_setup[0],$a_setup[2],"fai");//$a_setup[1]);
1236       }
1237     }
1239     /* Add entries to queue */
1240     if($s_action == "copy_multiple"){
1242       /* Cleanup object queue */
1243       $this->CopyPasteHandler->cleanup_queue();
1245       /* Add new entries to CP queue */
1246       foreach($this->list_get_selected_items() as $id){
1248         /* Cleanup object queue */
1249         $entry    = $this->objects[$id];
1250         $a_setup  = $this->get_type($entry);
1251         $dn = $entry['dn'];
1253         if($s_action == "copy_multiple" && $ui->is_copyable($dn,"fai",$a_setup[1])){
1254           $this->CopyPasteHandler->add_to_queue($dn,"copy",$a_setup[0],$a_setup[2],"fai");//$a_setup[1]);
1255         }
1256       }
1257     }
1259     /* Start pasting entries */
1260     if($s_action == "editPaste" && !($this->lock_type == "freeze" && !$this->allow_freeze_object_attach)){
1261       $this->start_pasting_copied_objects = TRUE;
1262     }
1264     /* Return C&P dialog */
1265     if($this->start_pasting_copied_objects && $this->CopyPasteHandler->entries_queued()){
1267       /* Get dialog */
1268       $this->CopyPasteHandler->SetVar("parent",$this);
1269       $data = $this->CopyPasteHandler->execute();
1271       FAI::save_release_changes_now();
1273       /* Return dialog data */
1274       if(!empty($data)){
1275         return($data);
1276       }
1277     }
1279     /* Automatically disable status for pasting */
1280     if(!$this->CopyPasteHandler->entries_queued()){
1281       $this->start_pasting_copied_objects = FALSE;
1282     }
1283     return("");
1284   }
1287   /* Check if the given FAI class is used in this release 
1288    */
1289   static function check_class_name($oc,$name,$dn)
1290   {
1291     $base = FAI::get_release_dn($dn);
1292     $res  = FAI::get_all_objects_for_given_base($base,"(objectClass=".$oc.")",TRUE);
1293     $delete = array();
1294     $used   = array();
1295     foreach($res as $object){
1296       $used[$object['cn'][0]]= $object['cn'][0];
1297     }
1298     return($used);
1299   }
1302   /* Return plugin informations for acl handling */ 
1303   static function plInfo()
1304   {
1305     return (array( 
1306           "plShortName"   => _("FAI releases"),
1307           "plDescription" => _("FAI release management"),
1308           "plSelfModify"  => FALSE,
1309           "plDepends"     => array(),
1310           "plPriority"    => 0,
1311           "plSection"     => array("administration"),           
1312           "plCategory"    => array("fai"=> array("description" => _("FAI"),
1313                                                  "objectClass" => "FAIclass")),
1314           "plProvidedAcls"=> array()));
1315   }
1317 // vim:tabstop=2:expandtab:shiftwidth=2:filetype=php:syntax:ruler:
1318 ?>