";
} else if (isset($_SERVER['HTTP_USER_AGENT']) && preg_match("/ie/i",$_SERVER['HTTP_USER_AGENT'])) {
$display.= "";
}
}
foreach($splist as $attr => $dsc){
/* Skip pl* attributes, they are internal... */
if (preg_match('/^pl[A-Z]+.*$/', $attr)){
continue;
}
/* Open table row */
if ($cnt == 1){
$display.= "";
}
/* Close table row */
if ($cnt == $cols){
$cnt= 1;
$rb= "";
$end= " ";
} else {
$cnt++;
$rb= "border-right:1px solid #A0A0A0;";
$end= "";
}
/* Collect list of attributes */
$state= "";
if (isset($currentAcl[$attr])){
$state= $currentAcl[$attr];
}
$display.= "$dsc ($attr) ", $cols-$cnt);
}
if($_SESSION['js']) {
if(isset($_SERVER['HTTP_USER_AGENT']) && (preg_match("/gecko/i",$_SERVER['HTTP_USER_AGENT'])) || (preg_match("/ie/i",$_SERVER['HTTP_USER_AGENT']))) {
$display.= "
";
}
return ($display);
}
function mkchkbx($name, $text, $state= FALSE)
{
$state= $state?"checked":"";
return "
$text ";
}
function mkrwbx($name, $state= "")
{
$rstate= preg_match('/r/', $state)?'checked':'';
$wstate= preg_match('/w/', $state)?'checked':'';
return ("
"._("read")." ".
"
"._("write")." ");
}
function explodeACL($acl)
{
list($index, $type)= split(':', $acl);
$a= array( $index => array("type" => $type,
"members" => acl::extractMembers($acl)));
/* Handle different types */
switch ($type){
case 'psub':
case 'sub':
case 'one':
case 'base':
$a[$index]['acl']= acl::extractACL($acl);
break;
case 'role':
echo "Role";
break;
case 'reset':
break;
default:
print_red(sprintf(_("Unkown ACL type '%s'. Don't know how to handle it."), $type));
$a= array();
}
return ($a);
}
function extractMembers($acl)
{
global $config;
$a= array();
/* Rip acl off the string, seperate by ',' and place it in an array */
$ms= preg_replace('/^[^:]+:[^:]+:([^:]+).*$/', '\1', $acl);
if ($ms == $acl){
return $a;
}
$ma= split(',', $ms);
/* Decode dn's, fill with informations from LDAP */
$ldap= $config->get_ldap_link();
foreach ($ma as $memberdn){
$dn= base64_decode($memberdn);
$ldap->cat($dn, array('cn', 'objectClass', 'description', 'uid'));
/* Found entry... */
if ($ldap->count()){
$attrs= $ldap->fetch();
if (in_array_ics('gosaAccount', $attrs['objectClass'])){
$a['U:'.$dn]= $attrs['cn'][0]." [".$attrs['uid'][0]."]";
} else {
$a['G:'.$dn]= $attrs['cn'][0];
if (isset($attrs['description'][0])){
$a['G:'.$dn].= " [".$attrs['description'][0]."]";
}
}
/* ... or not */
} else {
$a['U:'.$dn]= sprintf(_("Unknown entry '%s'!"), $dn);
}
}
return ($a);
}
function extractACL($acl)
{
/* Rip acl off the string, seperate by ',' and place it in an array */
$as= preg_replace('/^[^:]+:[^:]+:[^:]*:(.*)$/', '\1', $acl);
$aa= split(',', $as);
$a= array();
/* Dis-assemble single ACLs */
foreach($aa as $sacl){
/* Dis-assemble field ACLs */
$ao= split('#', $sacl);
$gobject= "";
foreach($ao as $idx => $ssacl){
/* First is department with global acl */
$object= preg_replace('/^([^;]+);.*$/', '\1', $ssacl);
$gacl= preg_replace('/^[^;]+;(.*)$/', '\1', $ssacl);
if ($idx == 0){
/* Create hash for this object */
$gobject= $object;
$a[$gobject]= array();
/* Append ACL if set */
if ($gacl != ""){
$a[$gobject]= array($gacl);
}
} else {
/* All other entries get appended... */
list($field, $facl)= split(';', $ssacl);
$a[$gobject][$field]= $facl;
}
}
}
return ($a);
}
function assembleAclSummary($entry)
{
$summary= "";
/* Summarize ACL */
if (isset($entry['acl'])){
$acl= "";
foreach ($entry['acl'] as $name => $object){
if (count($object)){
$acl.= "$name, ";
}
}
$summary.= sprintf(_("Contains settings for these objects: %s"), preg_replace('/, $/', '', $acl));
}
/* Summarize members */
if ($summary != ""){
$summary.= ", ";
}
if (count($entry['members'])){
$summary.= _("Members:")." ";
foreach ($entry['members'] as $cn){
$cn= preg_replace('/ \[.*$/', '', $cn);
$summary.= $cn.", ";
}
} else {
$summary.= _("ACL is valid for all users");
}
return (preg_replace('/, $/', '', $summary));
}
function loadAclEntry($new= FALSE)
{
/* New entry gets presets... */
if ($new){
$this->aclType= 'base';
$this->recipients= array();
$this->aclContents= array();
} else {
$acl= $this->gosaAclEntry[$this->currentIndex];
$this->aclType= $acl['type'];
$this->recipients= $acl['members'];
$this->aclContents= $acl['acl'];
}
$this->wasNewEntry= $new;
}
function aclPostHandler()
{
if (isset($_POST['save_acl'])){
$this->save();
return TRUE;
}
return FALSE;
}
function save()
{
/* Assemble ACL's */
$tmp_acl= array();
foreach ($this->gosaAclEntry as $prio => $entry){
$final= "";
$members= "";
if (isset($entry['members'])){
foreach ($entry['members'] as $key => $dummy){
$members.= base64_encode(preg_replace('/^.:/', '', $key)).',';
}
}
$final= $prio.":".$entry['type'].":".preg_replace('/,$/', '', $members);
/* ACL's if needed */
if ($entry['type'] != "reset" && $entry['type'] != "role"){
$acl= ":";
if (isset($entry['acl'])){
foreach ($entry['acl'] as $object => $contents){
/* Only save, if we've some contents in there... */
if (count($contents)){
$acl.= $object.";";
foreach($contents as $attr => $permission){
/* First entry? Its the one for global settings... */
if ($attr == '0'){
$acl.= $permission;
} else {
$acl.= '#'.$attr.';'.$permission;
}
}
$acl.= ',';
}
}
}
$final.= preg_replace('/,$/', '', $acl);
}
$tmp_acl[]= $final;
}
/* Call main method */
plugin::save();
/* Finally (re-)assign it... */
$this->attrs['gosaAclEntry']= $tmp_acl;
/* Remove acl from this entry if it is empty... */
if (!count($tmp_acl)){
/* Remove attribute */
if ($this->initially_was_account){
$this->attrs['gosaAclEntry']= array();
} else {
if (isset($this->attrs['gosaAclEntry'])){
unset($this->attrs['gosaAclEntry']);
}
}
/* Remove object class */
$this->attrs['objectClass']= array_remove_entries(array('gosaAcl'), $this->attrs['objectClass']);
}
/* Do LDAP modifications */
$ldap= $this->config->get_ldap_link();
$ldap->cd($this->dn);
$this->cleanup();
$ldap->modify ($this->attrs);
show_ldap_error($ldap->get_error(), sprintf(_("Saving ACLs with dn '%s' failed."),$this->dn));
/* Refresh users ACLs */
$ui= get_userinfo();
$ui->loadACL();
$_SESSION['ui']= $ui;
}
function remove_from_parent()
{
}
}
// vim:tabstop=2:expandtab:shiftwidth=2:filetype=php:syntax:ruler:
?>