Code

Updated FAI template entry.
[gosa.git] / gosa-plugins / fai / admin / fai / class_faiManagement.inc
index 64b10d5b88e33ff09745e55f8654a48d2908b322..e5f1bd8c6a3287afc75c055bbf8754e2bed563e2 100644 (file)
 class faiManagement extends plugin
 {
        /* Definitions */
-       var $plHeadline                 = "FAI";
-       var $plDescription              = "Fully Automatic Installation - management";
-
-       /* CLI vars */
-       var $cli_summary                  = "Handling of FAI entries";
-       var $cli_description    = "This plugin represents a management tool\n
-               which allows us to manage all needed attributes for fully automatic installations (FAI)";
-       var $cli_parameters             = array("eins" => "Eins ist toll", "zwei" => "Zwei ist noch besser");
+  var $plHeadline     = "Software deployment";
+  var $plDescription  = "Manage software packages and deployment reciepes";
+  var $plIcon         = "plugins/fai/images/plugin.png";
 
        /* Headpage attributes */
   var $lock_type    = "";    // should be branch/freeze
@@ -50,7 +45,19 @@ class faiManagement extends plugin
   var $DivListFai;
   var $start_pasting_copied_objects = FALSE;
   var $CopyPasteHandler = FALSE;
-  var $base = "";
+
+  /* Allow inserting of new elements if freezed releases 
+  */
+  var $allow_freeze_object_attach = TRUE;
+
+  var $no_save;
+  var $acl_base     ="";
+  var $fai_base     ="";
+  var $fai_release  ="";
+
+  var $acl_module = array("fai");
+
+  var $opsi = NULL;
 
        /* construction/reconstruction 
         */
@@ -60,14 +67,42 @@ class faiManagement extends plugin
                $this->dn                       = "";
                $this->config   = $config;
                $this->ui                       = $ui;  
+
+    /* Check if the opsi plugin is installed.
+     */
+    if(class_available("opsi")){
+      $this->opsi = new opsi($this->config);;
+    }
     
     /* Creat dialog object */
     $this->DivListFai = new divListFai($this->config,$this);
 
     /* Copy & Paste handler */
-    if ($this->config->boolValueIsTrue("main", "enableCopyPaste")){
+    if ($this->config->boolValueIsTrue("main", "copyPaste")){
       $this->CopyPasteHandler= new CopyPasteHandler($this->config);
     }
+
+    /* Set default release 
+     */
+    $this->acl_base = $this->config->current['BASE'];
+    $this->fai_base = get_ou("faiBaseRDN").$this->config->current['BASE'];
+
+    if(!session::is_set("fai_filter")){
+
+      /* Set intial release */
+      $rel = $config->search("faiManagement","DEFAULTFAIRELEASE",array("menu"));
+      $rels = array_flip($this->getBranches());
+      if(isset($rels[$rel])){
+        $rel = $rels[$rel];
+      }else{
+        $rel = $this->fai_base;
+      }
+
+      session::set("fai_filter",array("fai_release" => $rel));
+    }
+
+    $fai_filter = session::get("fai_filter");
+    $this->fai_release = $fai_filter['fai_release'];
        }
 
        function execute()
@@ -75,6 +110,7 @@ class faiManagement extends plugin
     /* Call parent execute */
     plugin::execute();
 
+
     /* Initialise vars and smarty */
                $smarty         = get_smarty();
                $smarty->assign("BranchName","");
@@ -82,9 +118,10 @@ class faiManagement extends plugin
                $display        = "";
     $s_action  = "";
                $s_entry        = "";
+    $no_save = FALSE;   // hide Apply / Save buttons
     
     /* If an entry was locked, these vars will be stored in a session to allow direct edit */
-    session::set('LOCK_VARS_TO_USE',array("/^edit_entry$/","/^id$/","/^entry_edit_/","/^entry_delete_/","/^item_selected/","/^remove_multiple_fai_objects/","/^menu_action/"));
+    session::set('LOCK_VARS_TO_USE',array("/^edit_freeze_entry$/","/^edit_entry$/","/^id$/","/^entry_edit_/","/^entry_delete_/","/^item_selected/","/^remove_multiple_fai_objects/","/^menu_action/"));
 
 
     /****************
@@ -103,7 +140,6 @@ class faiManagement extends plugin
                     "/^multiple_copy_fai/" => "copy_multiple", 
                     "/^multiple_cut_fai/" => "cut_multiple", 
                     "/^copy/" => "copy",
-                    "/^cut/" => "cut",
                     "/^remove_multiple_fai_objects/" => "del_multiple");
 
                foreach($_POST as $name => $value){
@@ -112,24 +148,56 @@ class faiManagement extends plugin
           $s_action = $act;
           $s_entry = ltrim(preg_replace($reg,"",$name),"_");
           $s_entry = preg_replace("/_.*$/","",$s_entry);
+          break;
         }
       }
                        if(preg_match("/^entry_edit_.*/",$name)){
                                $s_entry = preg_replace("/^entry_edit_/","",$name);
                                $s_entry = preg_replace("/_.*$/","",$s_entry);
-                               $s_action = "edit";
-                       }elseif(preg_match("/^entry_delete_.*/",$name)){
-                               $s_entry = preg_replace("/^entry_delete_/","",$name);
-                               $s_entry = preg_replace("/_.*$/","",$s_entry);
+        $s_action = "edit";
+        break;
+      }elseif(preg_match("/^entry_freeze_edit_.*/",$name)){
+        $s_entry = preg_replace("/^entry_freeze_edit_/","",$name);
+        $s_entry = preg_replace("/_.*$/","",$s_entry);
+        $s_action = "edit";
+        $no_save = TRUE;
+        break;
+      }elseif(preg_match("/^entry_delete_.*/",$name)){
+        $s_entry = preg_replace("/^entry_delete_/","",$name);
+        $s_entry = preg_replace("/_.*$/","",$s_entry);
         $s_action = "delete";
+        break;
+      }
+
+      /* Get posts from opsi onjects 
+       */  
+      if($this->opsi instanceof opsi && $this->opsi->enabled()){
+        if(preg_match("/^entry_opsi_edit_/",$name)){
+          $s_entry = preg_replace("/^entry_opsi_edit_([0-9]*).*$/","\\1",$name);
+          $s_action = "opsi_edit";
+          break;
+        }
       }
     }
 
+    /* Get posts from opsi objects 
+     */ 
+               if($this->opsi instanceof opsi && $this->opsi->enabled() && isset($_GET['edit_opsi_entry'])){
+                       $s_entry = $_GET['edit_opsi_entry'];
+                       $s_action = "opsi_edit";
+               }
+
                if(isset($_GET['edit_entry'])){
                        $s_entry = $_GET['edit_entry'];
                        $s_action = "edit";
                }
 
+               if(isset($_GET['edit_freeze_entry'])){
+                       $s_entry = $_GET['edit_freeze_entry'];
+                       $s_action = "edit";
+      $no_save = TRUE;
+               }
+
     if(isset($_GET['act']) && $_GET['act'] == "freeze_branch"){
       $s_action = "freeze_branch";
     }
@@ -178,6 +246,11 @@ class faiManagement extends plugin
       $s_action = "del_multiple";
     }
 
+
+    if(!empty($s_action)){
+      $this->no_save = $no_save;
+    }
+
     /********************
       Copy & Paste
      ********************/
@@ -189,6 +262,44 @@ class faiManagement extends plugin
     }
 
 
+    /*******************
+      Opsi extension 
+     *******************/
+
+    if($this->opsi instanceof opsi && $this->opsi->enabled()){
+      if($s_action == "opsi_edit"){
+        $name = $this->objects[$s_entry]['cn'];
+        $cfg = $this->opsi->get_product_properties($name);
+        $this->dialog = new tabs_opsiProdConfig($this->config, $this->config->data['TABS']['OPSIPRODCONFIG'],"","opsi");
+        if(isset($this->dialog->by_object['opsiProperties'])){
+          $this->dialog->by_object['opsiProperties']->set_cfg($cfg);
+          $this->dialog->by_object['opsiProperties']->set_product($name);
+        }else{
+          trigger_error("Unknown tab, please check config.");
+        }
+      }
+      if($this->dialog instanceof tabs_opsiProdConfig && isset($_POST['cancel_properties'])){
+        $this->dialog = NULL;
+      }
+      if($this->dialog instanceof tabs_opsiProdConfig && isset($_POST['save_properties'])){
+        $this->dialog->save_object();
+        $op    = $this->dialog->by_object['opsiProperties'];
+        $name  = $op->get_product();
+        $cfg   = $op->get_cfg();
+        $this->opsi->set_product_properties($name,$cfg); 
+        if($this->opsi->is_error()){
+          msg_dialog::display(_("Error"),msgPool::siError($this->opsi->get_error()),ERROR_DIALOG);
+        }else{
+          $this->dialog = NULL;
+        }
+      }
+      if($this->dialog instanceof tabs_opsiProdConfig){
+        $this->dialog->save_object();
+        return($this->dialog->execute());
+      }
+    }
+
+
     /****************
       Delete confirme dialog 
      ****************/
@@ -210,14 +321,13 @@ class faiManagement extends plugin
 
                                /* Lock the current entry, so nobody will edit it during deletion */
                                add_lock ($this->dn, $this->ui->dn);
-                               $smarty->assign("warning", sprintf(_("You're about to delete all information about the FAI class at '%s'."), @LDAP::fix($this->dn)));
+                               $smarty->assign("warning",msgPool::deleteInfo(LDAP::fix($this->dn),_("FAI object")));
         $smarty->assign("multiple", false);
                                return($smarty->fetch(get_template_path('remove.tpl', TRUE)));
                        } else {
 
-                               /* Obviously the user isn't allowed to delete. Show message and
-                                  clean session. */
-                               print_red (_("You are not allowed to delete this component!"));
+                               /* Obviously the user isn't allowed to delete. Show message and clean session. */
+        msg_dialog::display(_("Permission error"), msgPool::permDelete(),ERROR_DIALOG);
                        }
                }
 
@@ -236,7 +346,7 @@ class faiManagement extends plugin
         foreach($ids as $id){
           $dn = $this->objects[$id]['dn'];
           $cn = $this->objects[$id]['cn'];
-          if($this->objects[$id]['FAIstate'] != "freeze"){
+          if(!preg_match('/^freeze/', $this->objects[$id]['FAIstate'])){
             $this->dns[$id] = $dn;
           }else{
             $errors .= $cn.", ";
@@ -253,19 +363,14 @@ class faiManagement extends plugin
 
         if(count($this->dns)){
 
-          $dns_names = "<br><pre>";
+          $dns_names = array();
           foreach($this->dns as $dn){
             add_lock ($dn, $this->ui->dn);
-            $dns_names .= $dn."\n";
+            $dns_names[] = LDAP::fix($dn);
           }
-          $dns_names .="</pre>";
 
           /* Lock the current entry, so nobody will edit it during deletion */
-          if (count($this->dns) == 1){
-            $smarty->assign("warning",     sprintf(_("You're about to delete the following entry %s"), @LDAP::fix($dns_names)));
-          } else {
-            $smarty->assign("warning",     sprintf(_("You're about to delete the following entries %s"), @LDAP::fix($dns_names)));
-          }
+                                 $smarty->assign("warning",msgPool::deleteInfo($dns_names,_("FAI object")));
           $smarty->assign("multiple", true);
           return($smarty->fetch(get_template_path('remove.tpl', TRUE)));
         }
@@ -294,6 +399,7 @@ class faiManagement extends plugin
         if(preg_match("/d/",$acl)){
 
           $this->dialog = new $type[0]($this->config, $this->config->data['TABS'][$type[2]], $dn,"fai");
+          $this->dialog->parent = &$this;
           $this->dialog->set_acl_base($dn);
           $this->dialog->by_object[$type[1]]->remove_from_parent ();
           unset ($this->dialog);
@@ -309,14 +415,14 @@ class faiManagement extends plugin
 
           /* Normally this shouldn't be reached, send some extra
              logs to notify the administrator */
-          print_red (_("You are not allowed to delete this component!"));
+          msg_dialog::display(_("Permission error"), msgPool::permDelete(), ERROR_DIALOG);
           new log("security","fai/".get_class($this),$dn,array(),"Tried to trick deletion.");
         }
-
-        /* Remove lock file after successfull deletion */
-        del_lock ($dn);
-        unset($this->dns[$key]);
       }
+
+      /* Remove lock file after successfull deletion */
+      $this->remove_lock();
+      $this->dns = array();
     }
 
 
@@ -326,10 +432,8 @@ class faiManagement extends plugin
 
     /* Remove lock */
     if(isset($_POST['delete_multiple_fai_object_cancel'])){
-      foreach($this->dns as $key => $dn){
-        del_lock ($dn);
-        unset($this->dns[$key]);
-      }
+      $this->dns = array();
+      $this->remove_lock();
     }
 
 
@@ -339,7 +443,7 @@ class faiManagement extends plugin
 
                /* Delete canceled? */
                if (isset($_POST['delete_cancel'])){
-                       del_lock ($this->dn);
+      $this->remove_lock();
                }
 
 
@@ -347,7 +451,7 @@ class faiManagement extends plugin
       Delete confirmed 
      ****************/
 
-               /* Deltetion was confirmed, so delete this entry
+               /* Deletion was confirmed, so delete this entry
      */
     if (isset($_POST['delete_terminal_confirm'])){
 
@@ -366,6 +470,7 @@ class faiManagement extends plugin
 
           $this->dialog = new $type[0]($this->config,  $this->config->data['TABS'][$type[2]], $this->dn,"fai");
           $this->dialog->set_acl_base($this->dn);
+          $this->dialog->parent = &$this;
           $this->dialog->by_object[$type[1]]->remove_from_parent ();
           unset ($this->dialog);
           $this->dialog= FALSE;
@@ -380,15 +485,16 @@ class faiManagement extends plugin
 
           /* Normally this shouldn't be reached, send some extra
              logs to notify the administrator */
-          print_red (_("You are not allowed to delete this component!"));
+          msg_dialog::display(_("Permission error"), msgPool::permDelete(), ERROR_DIALOG);
           new log("security","fai/".get_class($this),$dn,array(),"Tried to trick deletion.");
         }
 
       }else{
-        print_red(sprintf(_("Object could not be deleted '%s', object does not exist."),$this->dn));
+        msg_dialog::display(_("Error"), sprintf(_("Cannot delete '%s': object does not exist!"), $this->dn) , ERROR_DIALOG);
       }
+
       /* Remove lock file after successfull deletion */
-      del_lock ($this->dn);
+      $this->remove_lock();
     }
 
 
@@ -408,12 +514,10 @@ class faiManagement extends plugin
                        add_lock ($this->dn, $this->ui->dn);
 
                        $this->dialog     = new $a_setup[0]($this->config,$this->config->data['TABS'][$a_setup[2]],$this->dn,"fai");
+      $this->dialog->parent = &$this;
+      $this->dialog->by_object[$a_setup[1]]->FAIstate = $entry['FAIstate'];
       $this->dialog->set_acl_base($this->dn);
                        $this->is_dialog  = true;
-
-      if($entry['FAIstate'] == "freeze"){
-        #$this->dialog->set_acl(array("*none*"))  ;    
-      }
                        session::set('objectinfo',$this->dn);
                }
 
@@ -429,7 +533,7 @@ class faiManagement extends plugin
     /* Remove branch 
      */
     if($s_action == "remove_branch"){
-      $base= $this->DivListFai->selectedBranch;
+      $base= $this->fai_release;
 
       /* Check if we have a post remove method configured
        *  else skip this operation. (Skip:Button in the ui should be disabled in this case too)
@@ -437,12 +541,12 @@ class faiManagement extends plugin
       if("" != $this->config->search("faiManagement", "POSTREMOVE",array('menu','tabs'))){
         /* Load permissions for selected 'dn' and check if
            we're allowed to remove this 'dn' */
-        if($this->acl_is_removeable()){
-
-          $smarty->assign("info", sprintf(_("You're about to delete a fai branch / freeze  '%s'."), $this->DivListFai->selectedBranch));
+        if(preg_match("/d/",$this->ui->get_permissions($this->acl_base,"fai/faiManagement"))){
+          $smarty->assign("release_hidden",base64_encode($this->fai_release));
+          $smarty->assign("info", msgPool::deleteInfo(LDAP::fix($this->fai_release),_("FAI branch/freeze")));
           return($smarty->fetch(get_template_path('remove_branch.tpl',TRUE)));
         } else {
-          print_red (_("You are not allowed to delete this release!"));
+          msg_dialog::display(_("Permission error"), _("You have no permission to delete this release!"), ERROR_DIALOG);
         }
       }
     }
@@ -459,27 +563,75 @@ class faiManagement extends plugin
        */
       if("" != $this->config->search("faiManagement", "POSTREMOVE",array('menu','tabs'))){
 
-        $bb =  $this->DivListFai->selectedBranch;
-        if(!isset($ldap)){
-          $ldap = $this->config->get_ldap_link();
-        }
-
-        $br = $this->getBranches();
-
-        if(isset($br[$bb]) && $this->acl_is_removeable()){
-          $name = $br[$bb];
-          $ldap->cd($bb);
-          $ldap->recursive_remove();
-          $ldap->cd(preg_replace('/,'.normalizePreg(get_ou('faiou')).'/', ','.get_ou('applicationou'), $bb));
-          $ldap->recursive_remove();
-          $this->DivListFai->selectedBranch = "main";
+        if(!isset($_POST['release_hidden']) || base64_decode($_POST['release_hidden']) != $this->fai_release){
+          msg_dialog::display(_("Warning"),_("Release remove aborted because the release name check failed!"));
+        }else{
 
-          /* Post remove */
-          $this->lock_name   = $name;
-          $this->lock_dn     = $bb;
-          $this->postremove();
+          $bb =  $this->fai_release;
+          if(!isset($ldap)){
+            $ldap = $this->config->get_ldap_link();
+          }
 
-          new log("remove","fai/".get_class($this),$br[$bb],array(),"Release removed");
+          $br = $this->getBranches();
+
+          if(isset($br[$bb]) && preg_match("/d/",$this->ui->get_permissions($this->acl_base,"fai/faiManagement"))){
+            $name = $br[$bb];
+
+            $ldap->cd($bb);
+            $ldap->recursive_remove();
+            $ldap->cd(preg_replace('/,'.preg_quote(get_ou('faiBaseRDN'), '/').'/', ','.get_ou('applicationRDN'), $bb));
+            $ldap->recursive_remove();
+            $ldap->cd(preg_replace('/,'.preg_quote(get_ou('faiBaseRDN'), '/').'/', ','.get_ou('mimetypeRDN'), $bb));
+            $ldap->recursive_remove();
+
+            /* Search for all groups with configured application menus.
+              - First search all groups, to ensure that we only remove entries form whithin groups. 
+              - The search für menu configuration for the specified release and collect all those dns.
+              - Remove entries
+             */
+            $release_ou = preg_replace("/".preg_quote(get_ou("faiBaseRDN"), '/').".*$/","",$bb);
+            $ldap->cd($this->config->current['BASE']);
+            $ldap->search("(objectClass=posixGroup)",array("dn"));
+          
+            /* Collect all group dns 
+             */
+            $groups = array();
+            while($attrs = $ldap->fetch()){
+              $groups[] = $attrs['dn'];
+            }
+
+            /* Collect all group menu release dns that match the release we have removed 
+             */
+            $dns = array();
+            foreach($groups as $dn){
+              $ldap->cd($dn);
+              $ldap->search("(objectClass=FAIbranch)",array("dn"));
+              while($attrs = $ldap->fetch()){
+                if(preg_match("/^".preg_quote($release_ou, '/')."/",$attrs['dn'])){
+                  $dns[] = $attrs['dn'];
+                }
+              }
+            }
+            
+            /* Finally remove collected release dns 
+             */
+            foreach($dns as $dn){
+              $ldap->cd($dn);
+              $ldap->recursive_remove();
+            }
+
+            /* Post remove */
+            $this->fai_release = $this->fai_base;
+            $this->lock_name   = $name;
+            $this->lock_dn     = $bb;
+            $this->postremove();
+
+            $fai_filter = session::get("fai_filter");
+            $fai_filter['fai_release'] = $this->fai_release;
+            session::set("fai_filter",$fai_filter);
+
+            new log("remove","fai/".get_class($this),$br[$bb],array(),"Release removed");
+          }
         }
       }
     }
@@ -502,21 +654,17 @@ class faiManagement extends plugin
       $name = $_POST['BranchName'];
       $is_ok = true;
       $smarty->assign("BranchName",$name);
-      $base= get_ou('faiou').$this->DivListFai->selectedBase;
+      $base= $this->fai_base;
 
       /* Check used characters */
-      if(preg_match("/[^0-9a-z \ö\ä\ü\.-_:,]/i",$name)){
-        if($type == "branch"){
-          print_red(_("Specified branch name is invalid."));
-        }else{
-          print_red(_("Specified freeze name is invalid."));
-        }
+      if(!preg_match("/^[0-9a-z\.]*$/",$name)){
+        msg_dialog::display(_("Error"), msgPool::invalid(_("Name"),$name,"/[0-9a-z\.]/"), ERROR_DIALOG);
         $is_ok = false;
       }
 
       /* Check if this name is already in use */
-      if(!$this->CheckNewBranchName($_POST['BranchName'],$this->DivListFai->selectedBranch)){
-        print_red(_("This name is already in use."));
+      if(!$this->CheckNewBranchName($_POST['BranchName'],$this->fai_release)){
+        msg_dialog::display(_("Error"), msgPool::duplicated(_("Name")), ERROR_DIALOG);
         $is_ok = false;
       }
 
@@ -544,10 +692,15 @@ class faiManagement extends plugin
 
     if(isset($_GET['PerformBranch'])){
     
-      if(!$this->acl_is_createable()){
-        print_red(_("You are not allowed to create a new branch."));
+      if(!preg_match("/c/",$this->ui->get_permissions($this->acl_base,"fai/faiManagement"))){
+        msg_dialog::display(_("Permission error"), msgPool::permCreate(_("Branch")), ERROR_DIALOG);
       }else{
 
+        /* In order to see error messages we have to reset the error handler.
+            Due to the exit(); 
+         */
+        restore_error_handler();
+
         /* Create it know */
         $this->dispNewBranch = false;
         $this->dispNewFreeze = false;
@@ -561,28 +714,28 @@ class faiManagement extends plugin
         $ldap = $this->config->get_ldap_link();
 
         $baseToUse = $base;
-        if($this->DivListFai->selectedBranch != "main" ){
-          $baseToUse = $this->DivListFai->selectedBranch;
+        if($this->fai_release !=  $this->fai_base){
+          $baseToUse = $this->fai_release;
         }
 
         /* Create new Release name to be able to set faidebianRelease for FAIpackageList */
 
         $CurrentReleases  = $this->getBranches();
         $NewReleaseName   = $name;
-        if(isset($CurrentReleases[$this->DivListFai->selectedBranch])) {
-          if($this->DivListFai->selectedBranch != "main"){
-            $NewReleaseName = $CurrentReleases[$this->DivListFai->selectedBranch]."/".$name;
+        if(isset($CurrentReleases[$this->fai_release])) {
+          if($this->fai_release != $this->fai_base){
+            $NewReleaseName = $CurrentReleases[$this->fai_release]."/".$name;
             $NewReleaseName = preg_replace("#\/#","/",$NewReleaseName); 
           }else{
             $NewReleaseName   = $name;
           }
         }
 
-        $appsrc = preg_replace("/".normalizePreg(get_ou('faiou'))."/",get_ou('applicationou'),$baseToUse); 
-        $appdst = preg_replace("/".normalizePreg(get_ou('faiou'))."/",get_ou('applicationou'),"ou=".$name.",".$baseToUse) ; 
+        $appsrc = preg_replace("/".preg_quote(get_ou('faiBaseRDN'), '/')."/",get_ou('applicationRDN'),$baseToUse); 
+        $appdst = preg_replace("/".preg_quote(get_ou('faiBaseRDN'), '/')."/",get_ou('applicationRDN'),"ou=".$name.",".$baseToUse) ; 
 
-        $mimesrc = preg_replace("/".normalizePreg(get_ou('faiou'))."/",get_ou('mimetypeou'),$baseToUse); 
-        $mimedst = preg_replace("/".normalizePreg(get_ou('faiou'))."/",get_ou('mimetypeou'),"ou=".$name.",".$baseToUse) ; 
+        $mimesrc = preg_replace("/".preg_quote(get_ou('faiBaseRDN'), '/')."/",get_ou('mimetypeRDN'),$baseToUse); 
+        $mimedst = preg_replace("/".preg_quote(get_ou('faiBaseRDN'), '/')."/",get_ou('mimetypeRDN'),"ou=".$name.",".$baseToUse) ; 
 
         /* Check if source depeartments exist */
         foreach(array($baseToUse,$appsrc,$mimesrc) as $dep){
@@ -608,7 +761,7 @@ class faiManagement extends plugin
 
         /* Duplicate group application releases 
          */
-        FAI::copy_FAI_group_releases($CurrentReleases[$this->DivListFai->selectedBranch],$name,$type);
+        FAI::copy_FAI_group_releases($CurrentReleases[$this->fai_release],$name,$type);
 
         /* Duplicate applications 
          */
@@ -649,6 +802,7 @@ class faiManagement extends plugin
 
         echo "<div style='width:100%;text-align:right;'><form name='form' method='post' action='?plug=".$_GET['plug']."' target='_parent'>
           <br><input type='submit' name='CloseIFrame' value='"._("Continue")."'>
+          <input type='hidden' name='php_c_check' value='1'>
           </form></div>";
 
         echo "<script language=\"javascript\" type=\"text/javascript\">scrollDown2();</script>" ;
@@ -665,6 +819,28 @@ class faiManagement extends plugin
         $this->lock_name  = $name; 
         $this->lock_dn    = $baseToUse;
         $this->postcreate();
+
+
+        /* Send daemon event to reload the fai release database 
+         */
+        if(class_available("DaemonEvent") && class_available("gosaSupportDaemon")){
+          $events = DaemonEvent::get_event_types(SYSTEM_EVENT | HIDDEN_EVENT);
+          if(isset($events['TRIGGERED']['DaemonEvent_recreate_fai_release_db'])){
+            $evt = $events['TRIGGERED']['DaemonEvent_recreate_fai_release_db'];
+            $tmp = new $evt['CLASS_NAME']($this->config);
+            $tmp->set_type(TRIGGERED_EVENT);
+            $tmp->add_targets(array("GOSA"));
+            $o_queue = new gosaSupportDaemon();
+            if(!$o_queue->append($tmp)){
+              msg_dialog::display(_("Service infrastructure"),msgPool::siError($o_queue->get_error()),ERROR_DIALOG);
+            }
+          }
+        }else{  
+          trigger_error("Unknown class DaemonEvent / gosaSupportDaemon");
+          msg_dialog::display(_("Fatal error"),
+              "Daemon events called but classes where not accessible, DaemonEvent gosaSupportDaemon",
+              FATAL_ERROR_DIALOG);
+        }
         exit();
       }
     }
@@ -678,8 +854,8 @@ class faiManagement extends plugin
      */
     if("" != $this->config->search("faiManagement", "POSTCREATE",array('menu','tabs'))){
       if(($s_action == "branch_branch")||($this->dispNewBranch)){
-        if(!$this->acl_is_createable()){
-          print_red(_("You are not allowed to create a new branch."));
+        if(!preg_match("/c/",$this->ui->get_permissions($this->acl_base,"fai/faiManagement"))){
+          msg_dialog::display(_("Permission error"), msgPool::permCreate(_("Branch")), ERROR_DIALOG);
         }else{
           $this->dispNewBranch=true;
           $smarty->assign("iframe",false);
@@ -699,8 +875,8 @@ class faiManagement extends plugin
      */
     if("" != $this->config->search("faiManagement", "POSTCREATE",array('menu','tabs'))){
       if(($s_action == "freeze_branch")||($this->dispNewFreeze)){
-        if(!$this->acl_is_createable()){
-          print_red(_("You are not allowed to create a new branch."));
+        if(!preg_match("/c/",$this->ui->get_permissions($this->acl_base,"fai/faiManagement"))){
+          msg_dialog::display(_("Permission error"), msgPool::permCreate(_("Branch")), ERROR_DIALOG);
         }else{
           $this->dispNewFreeze = true;
           $smarty->assign("iframe",false);
@@ -721,13 +897,20 @@ class faiManagement extends plugin
                     "new_variable"      =>  "FAIvariable",
                     "new_template"      =>  "FAItemplate",
                     "new_package"       =>  "FAIpackageList");
+    $types_i18n = array( "new_partition"     =>  _("partition table"),
+                    "new_script"        =>  _("script"),
+                    "new_hook"          =>  _("hook"),
+                    "new_variable"      =>  _("variable"),
+                    "new_template"      =>  _("template"),
+                    "new_package"       =>  _("package list"));
 
     if(isset($types[$s_action])){
-      $acl = $this->ui->get_permissions($this->DivListFai->selectedBase,"fai/".$type_acl_mapping[$types[$s_action]]);
+      $acl = $this->ui->get_permissions($this->acl_base,"fai/".$type_acl_mapping[$types[$s_action]]);
       if(preg_match("/c/",$acl)){
         $this->dialog = new askClassName($this->config,$this->dn,$this->ui,$types[$s_action]);
+        $this->dialog->parent = &$this;
       }else{
-        print_red(sprintf(_("You are not allowed to create a new '%s' object."),$types[$s_action]));
+        msg_dialog::display(_("Permission error"), sprintf(_("You have no permission to create a new %s!"), $types_i18n[$s_action]), ERROR_DIALOG);
       }
     }
 
@@ -735,15 +918,16 @@ class faiManagement extends plugin
     if($s_action == "new_profile"){
       $this->dn = "new" ;
 
-      $acl = $this->ui->get_permissions($this->DivListFai->selectedBase,"fai/faiProfile");
+      $acl = $this->ui->get_permissions($this->acl_base,"fai/faiProfile");
       if(preg_match("/c/",$acl)){
         $a_setup= $this->get_type(array("objectClass"=>array("FAIprofile")));
         $this->dialog = new $a_setup[0]($this->config,$this->config->data['TABS'][$a_setup[2]],$this->dn,"fai");
         $this->dialog->set_acl_base($this->base);
+        $this->dialog->parent = &$this;
 
         $this->is_dialog = false;
       }else{
-        print_red(sprintf(_("You are not allowed to create a new '%s' object."),"FAIprofile"));
+        msg_dialog::display(_("Permission error"), sprintf(_("You have no permission to create a new %s!"), _("profile")), ERROR_DIALOG);
       }
     }
 
@@ -756,7 +940,7 @@ class faiManagement extends plugin
       $this->dialog->save_object();
       if(count($this->dialog->check())!=0){
         foreach($this->dialog->check() as $msg){
-          print_red($msg);
+          msg_dialog::display(_("Error"), $msg, ERROR_DIALOG);
         }              
       }elseif(isset($this->dialog->objectClass)){
         $this->dn = "new" ;
@@ -767,6 +951,7 @@ class faiManagement extends plugin
           $this->dialog = new $a_setup[0]($this->config,$this->config->data['TABS'][$a_setup[2]],$this->dn,"fai");
           $this->dialog->set_acl_base($this->base);
           $this->dialog->by_object[$a_setup[1]]->cn = $name;
+          $this->dialog->parent = &$this;
           $this->is_dialog = true;
         }
       }                
@@ -778,11 +963,10 @@ class faiManagement extends plugin
      ****************/
 
                if(isset($_POST['edit_cancel'])){
-                       unset($this->dialog);
                        $this->dialog=FALSE;
                        $this->is_dialog = false;
                        session::un_set('objectinfo');
-                       del_lock ($this->dn);
+      $this->remove_lock();
                }
 
 
@@ -799,17 +983,22 @@ class faiManagement extends plugin
       $msgs= $this->dialog->check();
                        if(count($msgs)!=0){
                                foreach($msgs as $msg){
-                                       print_red($msg);
+          msg_dialog::display(_("Error"), $msg, ERROR_DIALOG);
                                }
                        }else{
                                $this->dialog->save();
         FAI::save_release_changes_now();
         if (!isset($_POST['edit_apply'])){
-          del_lock ($this->dn);
-          unset($this->dialog);
+          $this->remove_lock();
           $this->dialog=FALSE;
           $this->is_dialog=false;
           session::un_set('objectinfo');
+        }else{
+
+          /* Reinitialize tab */
+          if($this->dialog instanceof tabs){
+            $this->dialog->re_init();
+          }
         }
                        }
                }
@@ -836,24 +1025,26 @@ class faiManagement extends plugin
         if((isset($obj->is_dialog) && (!$obj->is_dialog)) || (isset($obj->dialog) && (!$obj->dialog))){
 
           $display.= "<p style=\"text-align:right\">\n";
-          $display.= "<input type=\"submit\" name=\"edit_finish\" style=\"width:80px\" value=\""._("Ok")."\">\n";
-          $display.= "&nbsp;\n";
-          if ($this->dn != "new"){
-            $display.= "<input type=submit name=\"edit_apply\" value=\""._("Apply")."\">\n";
+          if(!$this->no_save){
+            $display.= "<input type=\"submit\" name=\"edit_finish\" style=\"width:80px\" value=\"".msgPool::okButton()."\">\n";
             $display.= "&nbsp;\n";
+            if ($this->dn != "new"){
+              $display.= "<input type=submit name=\"edit_apply\" value=\"".msgPool::applyButton()."\">\n";
+              $display.= "&nbsp;\n";
+            }
           }
-          $display.= "<input type=\"submit\" name=\"edit_cancel\" value=\""._("Cancel")."\">\n";
+          $display.= "<input type=\"submit\" name=\"edit_cancel\" value=\"".msgPool::cancelButton()."\">\n";
           $display.= "</p>";
         }elseif(!isset($this->dialog->current)){
           $display.= "<p style=\"text-align:right\">\n";
           $display.= "<input type=\"submit\" name=\"edit_continue\" value=\""._("Continue")."\">&nbsp;";
-          $display.= "<input type=\"submit\" name=\"edit_cancel\" value=\""._("Cancel")."\">\n";
+          $display.= "<input type=\"submit\" name=\"edit_cancel\" value=\"".msgPool::cancelButton()."\">\n";
           $display.= "</p>";
         }
       }else{
         $display.= "<p style=\"text-align:right\">\n";
         $display.= "<input type=\"submit\" name=\"edit_continue\" value=\""._("Continue")."\">&nbsp;";
-        $display.= "<input type=\"submit\" name=\"edit_cancel\" value=\""._("Cancel")."\">\n";
+        $display.= "<input type=\"submit\" name=\"edit_cancel\" value=\"".msgPool::cancelButton()."\">\n";
         $display.= "</p>";
 
       }
@@ -866,16 +1057,15 @@ class faiManagement extends plugin
      ****************/
 
     /* Check if there is a snapshot dialog open */
-    $base = $this->DivListFai->selectedBase;
-    if($str = $this->showSnapshotDialog($base,$this->get_used_snapshot_bases())){
+    $base = $this->fai_base;
+    if($str = $this->showSnapshotDialog($base,$this->get_used_snapshot_bases(),$this)){
       return($str);
     }
 
     /* Display dialog with system list */
-    $this->DivListFai->parent = $this;
-    $this->DivListFai->execute();
-    $this->DivListFai->AddDepartments($this->DivListFai->selectedBase,4,1);
     $this->reload();
+    $this->DivListFai->parent = &$this;
+    $this->DivListFai->execute();
     $this->DivListFai->setEntries($this->objects);
     return($this->DivListFai->Draw());
        }
@@ -885,13 +1075,9 @@ class faiManagement extends plugin
   function get_used_snapshot_bases()
   {
     $tmp = array();
-    $types = array("faipartitionou","faiscriptou","faitemplateou","faihookou","faiprofileou","faivariableou","faipackageou");
+    $types = array("faiPartitionRDN","faiScriptRDN","faiTemplateRDN","faiHookRDN","faiProfileRDN","faiVariableRDN","faiPackageRDN");
     foreach($types as $type){
-      if($this->DivListFai->selectedBranch == "main"){
-        $tmp[] = get_ou($type).get_ou('faiou').$this->DivListFai->selectedBase;
-      }else{
-        $tmp[] = get_ou($type).$this->DivListFai->selectedBranch;
-      }
+      $tmp[] = get_ou($type).$this->fai_release;
     }
     return($tmp);
   }
@@ -900,10 +1086,10 @@ class faiManagement extends plugin
   /* Get available branches for current base */
   function getBranches($base = false,$prefix = "")
   {
-    $ret = array("/"=>"main");
+    $ret = array("/"=>$this->fai_base);
     $ldap = $this->config->get_ldap_link();
     if(!$base){
-      $base = session::get('CurrentMainBase');
+      $base = $this->fai_base;
     }
     $tmp = FAI::get_all_releases_from_base($base,true);
     foreach($tmp as $dn => $name){
@@ -938,17 +1124,17 @@ class faiManagement extends plugin
     $this->objects  = array();
 
     /* Get base */
-    $base = get_ou('faiou').$this->DivListFai->selectedBase;
-    if($this->DivListFai->selectedBranch != "main"){
+    $base = $this->fai_base;
+    if($this->fai_release != $this->fai_base){
       $br = $this->getBranches();
-      if(isset($br[$this->DivListFai->selectedBranch])){
-        $base = $this->DivListFai->selectedBranch;
+      if(isset($br[$this->fai_release])){
+        $base = $this->fai_release;
       }else{
-        $base = get_ou('faiou').$this->DivListFai->selectedBase;
+        $base = $this->fai_base;
       }
     }
     $this->base = $base;
-    $this->set_acl_base($this->base);
+    $this->set_acl_base($this->acl_base);
 
     $this->lock_type = FAI::get_release_tag(FAI::get_release_dn($base));
 
@@ -956,13 +1142,13 @@ class faiManagement extends plugin
      * Generate List of Partitions,Hooks,Scripts,Templates,Profiles ... 
      */
     $ObjectTypes = array(
-        "FAIpartitionTable"  => array("OU"=> get_ou('faipartitionou') , "CHKBOX"=>"ShowPartitions"  ,"ACL" => "faiPartitionTable"),
-        "FAIpackageList"     => array("OU"=> get_ou('faipackageou')   , "CHKBOX"=>"ShowPackages"    ,"ACL" => "faiPackage"),
-        "FAIscript"          => array("OU"=> get_ou('faiscriptou')    , "CHKBOX"=>"ShowScripts"     ,"ACL" => "faiScript"),
-        "FAIvariable"        => array("OU"=> get_ou('faivariableou')  , "CHKBOX"=>"ShowVariables"   ,"ACL" => "faiVariable"),
-        "FAIhook"            => array("OU"=> get_ou('faihookou')      , "CHKBOX"=>"ShowHooks"       ,"ACL" => "faiHook"),
-        "FAIprofile"         => array("OU"=> get_ou('faiprofileou')   , "CHKBOX"=>"ShowProfiles"    ,"ACL" => "faiProfile"),
-        "FAItemplate"        => array("OU"=> get_ou('faitemplateou')  , "CHKBOX"=>"ShowTemplates"   ,"ACL" => "faiTemplate"));
+        "FAIpartitionTable"  => array("OU"=> get_ou('faiPartitionRDN') , "CHKBOX"=>"ShowPartitions"  ,"ACL" => "faiPartitionTable"),
+        "FAIpackageList"     => array("OU"=> get_ou('faiPackageRDN')   , "CHKBOX"=>"ShowPackages"    ,"ACL" => "faiPackage"),
+        "FAIscript"          => array("OU"=> get_ou('faiScriptRDN')    , "CHKBOX"=>"ShowScripts"     ,"ACL" => "faiScript"),
+        "FAIvariable"        => array("OU"=> get_ou('faiVariableRDN')  , "CHKBOX"=>"ShowVariables"   ,"ACL" => "faiVariable"),
+        "FAIhook"            => array("OU"=> get_ou('faiHookRDN')      , "CHKBOX"=>"ShowHooks"       ,"ACL" => "faiHook"),
+        "FAIprofile"         => array("OU"=> get_ou('faiProfileRDN')   , "CHKBOX"=>"ShowProfiles"    ,"ACL" => "faiProfile"),
+        "FAItemplate"        => array("OU"=> get_ou('faiTemplateRDN')  , "CHKBOX"=>"ShowTemplates"   ,"ACL" => "faiTemplate"));
 
     $filter = "";
     foreach($ObjectTypes as $key => $data){
@@ -978,6 +1164,7 @@ class faiManagement extends plugin
     /* Ge listed ldap objects */
     $ldap = $this->config->get_ldap_link();
     $ldap->cd($this->config->current['BASE']);
+
     foreach($tmp as $entry){
 
       /* Get some more informations about the object */ 
@@ -1002,24 +1189,49 @@ class faiManagement extends plugin
           $obj['cn']                         = $object['cn'][0];
           $obj['dn']                         = $object['dn'];
           $obj['acl']                      = $acl;
+          $obj['class']                          = $rest ['ACL'];
+          $obj['FAIstate']      = $entry['FAIstate'];
           $obj['description']   = $object['description'][0];
           $obj['objectClass']   = $object['objectClass'];
 
-          /* Append type to this string, to be able to check if the selected 
-           * entry is of type 'freeze' or 'branch'
-           */
-          if(!isset($object['FAIstate'])){
-            $obj['FAIstate'] = $this->lock_type;
-          }else{
-            $obj['FAIstate'] = $object['FAIstate'][0]; 
-          }
-
           $this->objects[strtolower($obj['cn']).$obj['cn'].$type] = $obj;
           $this->objects[strtolower($obj['cn']).$obj['cn'].$type]['type']=$type;
         }
                        }
                }
 
+    /*  Append opsi objects, if opsi is available and if we are on the fai_base
+     */
+    if($this->opsi instanceof opsi && $this->opsi->enabled()){  
+      $opsi_acl = $this->ui->get_permissions($base,"opsi/opsiProperties");
+      if(preg_match("/r/",$opsi_acl)){
+        $err = FALSE;
+        if(!$err && $this->DivListFai->ShowOpsiNetboot){
+          $n_pro = $this->opsi->get_netboot_products();
+          $err |= $this->opsi->is_error();
+          foreach($n_pro as $name => $data){
+            $entry = array("cn" => $name,
+                "description" => $data['DESC'],
+                "type" => "opsi_netboot");
+            $this->objects[$name."_opsi_netboot"] = $entry;
+          }  
+        }
+        if(!$err && $this->DivListFai->ShowOpsiLocal){
+          $l_pro = $this->opsi->get_local_products();
+          $err |= $this->opsi->is_error();
+          foreach($l_pro as $name => $data){
+            $entry = array("cn" => $name,
+                "description" => $data['DESC'],
+                "type" => "opsi_local");
+            $this->objects[$name."_opsi_local"] = $entry;
+          }  
+        }  
+        if($err){
+          msg_dialog::display(_("Error"),msgPool::siError($this->opsi->get_error()),ERROR_DIALOG);
+        }
+      }
+    }
+
                ksort($this->objects);
                reset ($this->objects);
        
@@ -1037,6 +1249,9 @@ class faiManagement extends plugin
                if (isset($this->dn)){
                        del_lock ($this->dn);
                }
+    if(isset($this->dns) && is_array($this->dns) && count($this->dns)){
+      del_lock ($this->dns);
+    }
        }
 
        function get_type($array){
@@ -1066,7 +1281,7 @@ class faiManagement extends plugin
 
   function CheckNewBranchName($name,$base)
   {
-    $f = $this->DivListFai->selectedBranch;
+    $f = $this->fai_release;
     if($name == ""){
       return(false);
     }elseif(in_array($name,$this->getBranches($f))) {
@@ -1080,6 +1295,30 @@ class faiManagement extends plugin
   function save_object()
   {
     $this->DivListFai->save_object();
+
+    /* Get posted release */
+    $r_releases = array_flip($this->getBranches());
+    if(isset($_POST['fai_release']) && isset($r_releases[get_post('fai_release')])){
+
+      /* Ensure that we have a valid release selected */
+      if(!isset($r_releases[get_post('fai_release')])){
+        msg_dialog::display(_("Warning"),_("The selected release is not available anymore. All triggered actions are skipped."));
+        $_POST = array();
+        $plug =$_GET['plug'];
+        $_GET  = array("plug" => $plug);
+        $this->fai_release = $this->fai_base;
+      }else{
+        $this->fai_release = $r_releases[get_post('fai_release')];
+      }
+
+      $fai_filter = session::get("fai_filter");
+      $fai_filter['fai_release'] = $this->fai_release;
+      session::set("fai_filter",$fai_filter);
+    }
+
+    if(is_object($this->CopyPasteHandler)){
+      $this->CopyPasteHandler->save_object();
+    }
   }
 
 
@@ -1090,24 +1329,24 @@ class faiManagement extends plugin
       return("");
     }
 
-    $base = $this->DivListFai->selectedBranch;
-    if($base == "main"){
-      $base = $this->DivListFai->selectedBase;
-    }
+    $ui = get_userinfo();
 
     /* Add a single entry to queue */
-    if($s_action == "cut" || $s_action == "copy"){
+    if($s_action == "copy"){
 
       /* Cleanup object queue */
       $this->CopyPasteHandler->cleanup_queue();
       $entry    = $this->objects[$s_entry];
       $a_setup  = $this->get_type($entry);
       $dn = $entry['dn'];
-      $this->CopyPasteHandler->add_to_queue($dn,$s_action,$a_setup[0],$a_setup[2],"fai");//$a_setup[1]);
+
+      if($ui->is_copyable($dn,"fai",$a_setup[1])){
+        $this->CopyPasteHandler->add_to_queue($dn,$s_action,$a_setup[0],$a_setup[2],"fai");//$a_setup[1]);
+      }
     }
 
     /* Add entries to queue */
-    if($s_action == "copy_multiple" || $s_action == "cut_multiple"){
+    if($s_action == "copy_multiple"){
 
       /* Cleanup object queue */
       $this->CopyPasteHandler->cleanup_queue();
@@ -1120,29 +1359,22 @@ class faiManagement extends plugin
         $a_setup  = $this->get_type($entry);
         $dn = $entry['dn'];
 
-
-        if($s_action == "copy_multiple"){
+        if($s_action == "copy_multiple" && $ui->is_copyable($dn,"fai",$a_setup[1])){
           $this->CopyPasteHandler->add_to_queue($dn,"copy",$a_setup[0],$a_setup[2],"fai");//$a_setup[1]);
         }
-        if($s_action == "cut_multiple"){
-          $this->CopyPasteHandler->add_to_queue($dn,"cut",$a_setup[0],$a_setup[2],"fai");//$a_setup[1]);
-        }
       }
     }
 
     /* Start pasting entries */
-    if($s_action == "editPaste"){
+    if($s_action == "editPaste" && !($this->lock_type == "freeze" && !$this->allow_freeze_object_attach)){
       $this->start_pasting_copied_objects = TRUE;
     }
 
     /* Return C&P dialog */
     if($this->start_pasting_copied_objects && $this->CopyPasteHandler->entries_queued()){
 
-      /* Load entry from queue and set base */
-      $this->CopyPasteHandler->load_entry_from_queue();
-      $this->CopyPasteHandler->SetVar("base",$base);
-
       /* Get dialog */
+      $this->CopyPasteHandler->SetVar("parent",$this);
       $data = $this->CopyPasteHandler->execute();
 
       FAI::save_release_changes_now();
@@ -1161,6 +1393,31 @@ class faiManagement extends plugin
   }
 
 
+  /* Check if the given FAI class is used in this release 
+   */
+  static function check_class_name($oc,$name,$dn)
+  {
+    $base = FAI::get_release_dn($dn);
+
+    if($oc == "FAIprofile"){
+      $f = "";
+      $ocs = array("FAIprofile","FAItemplate","FAIhook","FAIpartitionTable","FAIpackageList","FAIscript","FAIvariable");
+      foreach($ocs as $oc){
+        $f .= "(objectClass=".$oc.")";
+      } 
+      $res  = FAI::get_all_objects_for_given_base($base,"(|".$f.")",TRUE);    
+    }else{
+      $res  = FAI::get_all_objects_for_given_base($base,"(objectClass=".$oc.")",TRUE);
+    }
+    $delete = array();
+    $used   = array();
+    foreach($res as $object){
+      $used[$object['cn'][0]]= $object['cn'][0];
+    }
+    return($used);
+  }
+
+
   /* Return plugin informations for acl handling */ 
   static function plInfo()
   {