Code

Updated images
[gosa.git] / gosa-plugins / systems / admin / systems / class_systemManagement.inc
index a7e9df0de1f9b5bcef62160c3e76cf51ccac1b05..4413c7ef91bb3b950fa72f3b360658481eabb237 100644 (file)
 #
 # NewDevices 
 # -> Edit
-# ->  |- SelectDeviceType()       (Allows to select target SystemType and OGroup)
+#     |- SelectDeviceType()        (Allows to select target SystemType and OGroup)
 # -> Save
 #     |-> systemTypeChosen()       (Queue entry to be activated) 
-#     |-> handleActivationQueue()  (Now acticvate objects)
+#     |-> handleActivationQueue()  (Now acticvate queued objects)
 #       |-> Ogroup selected   
-#       | |-> Try to adapt values from Ogroup and save directly.
+#       | |-> Try to adapt values from ogroup and save directly.
 #       |
 #       |-> NO Ogroup selected
-#       |  |-> Open dialogs of the target object and allow modifcation.
+#       |  |-> Open dialogs of the target system type and allow modifcations.
 #       |
-#       |->activate_new_device()   (Now activate the device)
-#
-#
-#
-#
+#       |->activate_new_device()   (Finally activate the device - FAIsate=..)
 #
 #
+# NewArpDevices (NewUnknwonDevices )
+# -> Edit
+#     |-> editEntry - ArpNewDeviceTabs
+# -> Save       
+#     |-> NO gotoIntegeration 
+#     | |-> Save DHCP and DNS entries, then remove the source entry from ldap.
+#     |
+#     |-> gotoIntegration selected (Handle object like a NewDevice now)
+#     |-> systemTypeChosen()       (Queue entry to be activated)
+#     |-> handleActivationQueue()  (Now acticvate queued objects)
+#       |-> Ogroup selected
+#       | |-> Try to adapt values from ogroup and save directly.
+#       |
+#       |-> NO Ogroup selected
+#       |  |-> Open dialogs of the target system type and allow modifcations.
+#       |
+#       |->activate_new_device()   (Finally activate the device - FAIsate=..)
 #
-
-
-
-
-
-
-
-
-
 class systemManagement extends management
 {
   var $plHeadline     = "Systems";
-  var $plDescription  = "List of systems";
+  var $plDescription  = "Systems";
   var $plIcon  = "plugins/systems/images/plugin.png";
 
   // Tab definition 
@@ -62,15 +66,11 @@ class systemManagement extends management
   protected $tabType = "";
   protected $aclCategory = "";
   protected $aclPlugin   = "";
-  protected $objectName   = "";
-
+  protected $objectName   = "system";
   protected $objectInfo = array();
-
   protected $opsi = NULL;
-
-
   protected $activationQueue  = array();
-  
+
   function __construct($config,$ui)
   {
     $this->config = $config;
@@ -87,17 +87,18 @@ class systemManagement extends management
 
     // Build filter
 #    if (session::global_is_set(get_class($this)."_filter")){
-#      $filter= session::global_get(get_class($this)."_filter");
-#    } else {
+ #    $filter= session::global_get(get_class($this)."_filter");
+  #  } else {
       $filter = new filter(get_template_path("system-filter.xml", true));
       $filter->setObjectStorage($this->storagePoints);
-#    }
+   # }
     $this->setFilter($filter);
 
     // Build headpage
     $headpage = new listing(get_template_path("system-list.xml", true));
+    $headpage->registerElementFilter("systemRelease", "systemManagement::systemRelease");
     $headpage->setFilter($filter);
-    $filter->setConverter('INCOMING', 'systemManagement::incomingFilterConverter');
+    $filter->setConverter('systemManagement::incomingFilterConverter');
 
     // Register Daemon Events
     if(class_available("DaemonEvent") && class_available("gosaSupportDaemon")){
@@ -123,6 +124,8 @@ class systemManagement extends management
     $this->registerAction("new_ieee802Device",    "newEntry");
     $this->registerAction("new_FAKE_OC_OpsiHost", "newEntry");
 
+    $this->registerAction("setPassword", "setPassword");
+    $this->registerAction("passwordChangeConfirmed", "passwordChangeConfirmed");
 
     // Add copy&paste and snapshot handler.
     if ($this->config->boolValueIsTrue("main", "copyPaste")){
@@ -142,12 +145,189 @@ class systemManagement extends management
     if(class_available("opsi")){
       $this->opsi = new opsi($this->config);
     }
+    parent::__construct($config, $ui, "systems", $headpage);
+  }
+
+
+  /*! \brief  Act on password change requests.
+   */
+  function setPassword($action,$target)
+  {
+    if(count($target) == 1){
+      $tDefs= $this->getObjectDefinitions();
+      $headpage = $this->getHeadpage();
+      $dn = array_pop($target);
+      $type = $headpage->getType($dn);
+      $entry = $headpage->getEntry($dn);
+      $ui       = get_userinfo();
+      $smarty = get_smarty();
+      if(in_array("FAKE_OC_PWD_changeAble", $entry['objectClass'])){
+        $acl = $tDefs[$type]['aclCategory'].'/'.$tDefs[$type]['aclClass'];
+        $tabacl   = $ui->get_permissions($dn,$acl,"userPassword");
+        if(preg_match("/w/",$tabacl)){
+          $this->dn= $dn;
+          set_object_info($this->dn);
+          return ($smarty->fetch(get_template_path('password.tpl', TRUE)));
+        }else{
+          msg_dialog::display(_("Permission error"), _("You have no permission to change this password!"), ERROR_DIALOG);
+        }
+      }
+    }
+  }
 
 
-    parent::__construct($config, $ui, "systems", $headpage);
+  /*! \brief  This method is used to queue and process copy&paste actions.
+   *          Allows to copy, cut and paste mutliple entries at once.
+   *  @param  String  'action'  The name of the action which was the used as trigger.
+   *  @param  Array   'target'  A list of object dns, which should be affected by this method.
+   *  @param  Array   'all'     A combination of both 'action' and 'target'.
+   */
+  function copyPasteHandler($action="",$target=array(),$all=array(),
+      $altTabClass ="", $altTabType = "", $altAclCategory="",$altAclPlugin="")
+  {
+    // Return without any actions while copy&paste handler is disabled.
+    if(!is_object($this->cpHandler))  return("");
+
+    // Save user input
+    $this->cpHandler->save_object();
+
+    // Add entries to queue
+    if($action == "copy" || $action == "cut"){
+
+      $tDefs= $this->getObjectDefinitions();
+      $headpage = $this->getHeadpage();
+      $ui       = get_userinfo();
+      $this->cpHandler->cleanup_queue();
+      foreach($target as $dn){
+
+        $type = $headpage->getType($dn);
+        $entry = $headpage->getEntry($dn);
+  
+        $aclCategory = $tDefs[$type]['aclCategory'];
+        $aclPlugin = $tDefs[$type]['aclClass'];
+        $tabClass = $tDefs[$type]['tabClass'];
+        $tabType = $tDefs[$type]['tabDesc'];
+
+        if($action == "copy" && $this->ui->is_copyable($dn,$aclCategory,$aclPlugin)){
+          $this->cpHandler->add_to_queue($dn,"copy",$tabClass,$tabType,$aclCategory,$this);
+          @DEBUG (DEBUG_TRACE, __LINE__, __FUNCTION__, __FILE__,$dn,"Entry copied!");
+        }
+        if($action == "cut" && $this->ui->is_cutable($dn,$aclCategory,$aclPlugin)){
+          $this->cpHandler->add_to_queue($dn,"cut",$tabClass,$tabType,$aclCategory,$this);
+          @DEBUG (DEBUG_TRACE, __LINE__, __FUNCTION__, __FILE__,$dn,"Entry cutted!");
+        }
+      }
+    }
+
+    // Initiate pasting
+    if($action == "paste"){
+      $this->cpPastingStarted = TRUE;
+    }
+
+    // Display any c&p dialogs, eg. object modifications required before pasting.
+    if($this->cpPastingStarted && $this->cpHandler->entries_queued()){
+      $headpage = $this->getHeadpage();
+      $this->cpHandler->SetVar("base",$headpage->getBase());
+      $data = $this->cpHandler->execute();
+      if(!empty($data)){
+        return($data);
+      }
+    }
+
+    // Automatically disable pasting process since there is no entry left to paste.
+    if(!$this->cpHandler->entries_queued()){
+      $this->cpPastingStarted = FALSE;
+    }
+    return("");
+  }
+
+
+  /*! \brief  Password change confirmed, now try to change the systems pwd.
+   */
+  function passwordChangeConfirmed()
+  {
+    $tDefs= $this->getObjectDefinitions();
+    $headpage = $this->getHeadpage();
+    $type = $headpage->getType($this->dn);
+    $entry = $headpage->getEntry($this->dn);
+    $ui       = get_userinfo();
+    $smarty = get_smarty();
+
+    if(!in_array('FAKE_OC_PWD_changeAble', $entry['objectClass'])){
+      trigger_error("Tried to change pwd, for invalid object!");
+    }elseif ($_POST['new_password'] != $_POST['repeated_password']){
+      msg_dialog::display(_("Error"), 
+          _("The passwords you've entered as 'New password' and 'Repeated password' do not   match!"), ERROR_DIALOG);
+      return($smarty->fetch(get_template_path('password.tpl', TRUE)));
+    }else{
+      $acl = $tDefs[$type]['aclCategory'].'/'.$tDefs[$type]['aclClass'];
+      $tabacl   = $ui->get_permissions($this->dn,$acl,"userPassword");
+
+      // Check acls
+      if(!preg_match("/w/",$tabacl)){
+        msg_dialog::display(_("Permission error"), _("You have no permission to change this password!"), ERROR_DIALOG);
+      }else{
+        $ldap = $this->config->get_ldap_link();
+        $ldap->cd($this->dn);
+        $ldap->cat($this->dn);
+        $old_attrs = $ldap->fetch();
+
+        $attrs= array();
+        if ($_POST['new_password'] == ""){
+
+          /* Remove password attribute
+           */
+          if(in_array("simpleSecurityObject",$old_attrs['objectClass'])){
+            $attrs['objectClass'] = array();
+            for($i = 0 ; $i < $old_attrs['objectClass']['count'] ; $i ++){
+              if(!preg_match("/simpleSecurityObject/i",$old_attrs['objectClass'][$i])){
+                $attrs['objectClass'][] = $old_attrs['objectClass'][$i];
+              }
+            }
+          }
+          $attrs['userPassword']= array();
+        } else {
+
+          /* Add/modify password attribute
+           */
+          if(!in_array("simpleSecurityObject",$old_attrs['objectClass'])){
+            $attrs['objectClass'] = array();
+            for($i = 0 ; $i < $old_attrs['objectClass']['count'] ; $i ++){
+              $attrs['objectClass'][] = $old_attrs['objectClass'][$i];
+            }
+            $attrs['objectClass'][] = "simpleSecurityObject";
+          }
+
+          if(class_available("passwordMethodCrypt")){
+            $pwd_m = new passwordMethodCrypt($this->config);
+            $pwd_m->set_hash("crypt/md5");
+            $attrs['userPassword'] = $pwd_m->generate_hash($_POST['new_password']);
+          }else{
+            msg_dialog::display(_("Password method"),_("Password method crypt is missing. Cannot set system password."));
+            $attrs = array();
+          }
+        }
+        $ldap->modify($attrs);
+        if (!$ldap->success()){
+          msg_dialog::display(_("LDAP error"), msgPool::ldaperror($ldap->get_error(), $this->dn, LDAP_MOD, $type));
+        }else{
+          if(class_available($tDefs[$type]['plugClass'])){
+            $plug = $tDefs[$type]['plugClass'];
+            $p = new $plug($this->config,$this->dn);
+            $p->handle_post_events("modify");
+          }
+        }
+        new log("security","systems/".get_class($this),$this->dn,array_keys($attrs),$ldap->get_error());
+      }
+      set_object_info();
+    }
   }
 
 
+  /*! \brief  The method gets called when somebody clicked the CD icon 
+   *           in the system listing. 
+   *          A confirmation will be shown to acknowledge the creation.
+   */
   function createISO($action,$target)
   {
     if(count($target) == 1){
@@ -158,7 +338,12 @@ class systemManagement extends management
 
     }
   }
-  
+
+  /*! \brief  Once the user has confirmed the ISO creation in 'createISO',
+   *           this method gets called. 
+   *          An iFrame is shown which then used 'performIsoCreation' as contents. 
+   */
   function initiateISOcreation()
   {
     $smarty = get_smarty();
@@ -167,6 +352,9 @@ class systemManagement extends management
   }
 
 
+  /*! \brief  ISO creation confirmed and iFrame is visible, now create the ISO 
+   *           and display the status to fill the iFrame.
+   */
   function performIsoCreation()
   {
     $return_button   = "<form method='get' action='main.php' target='_parent'>
@@ -235,7 +423,7 @@ class systemManagement extends management
 
 
   /*! \brief    Handle GOsa-si events
-   *            All events are handled here.
+   *            All schedules and triggered events are handled here.
    */
   function handleEvent($action="",$target=array(),$all=array())
   {
@@ -247,10 +435,10 @@ class systemManagement extends management
 
     // Detect triggere or scheduled actions 
     $headpage = $this->getHeadpage();
+    $event = preg_replace("/^[TS]_/","",$action); 
     if(preg_match("/^[TS]_/", $action)){
 
       // Send special reinstall action for opsi hosts
-      $event = preg_replace("/^[TS]_/","",$action); 
       if($event == "DaemonEvent_reinstall" && $this->si_active && $this->opsi){
         foreach($target as $key => $dn){
           $type = $headpage->getType($dn);
@@ -324,13 +512,19 @@ class systemManagement extends management
     }
   }
 
+
+  /*! \brief  Close all dialogs and reset the activationQueue.
+   */ 
   function cancelEdit()
   {
     management::cancelEdit();
     $this->activationQueue = array();
   }
   
-  
+  /*! \brief  Save event dialogs. 
+   *          And append the new GOsa-si event.
+   */ 
   function saveEventDialog()
   {
     $o_queue = new gosaSupportDaemon();
@@ -340,7 +534,6 @@ class systemManagement extends management
     }else{
       $this->closeDialogs();
     }
   }
  
 
@@ -437,18 +630,24 @@ class systemManagement extends management
 
           // Delete the object
           $this->dn = $dn;
-          $this->tabObject= new $info['tabClass']($this->config,$this->config->data['TABS'][$info['tabDesc']], 
-              $this->dn, $info['aclCategory'], true, true);
-          $this->tabObject->set_acl_base($this->dn);
-          $this->tabObject->parent = &$this;
-          $this->tabObject->delete ();
+          if($info['tabClass'] == "phonetabs"){
+             $this->tabObject= new $tabtype($this->config, $this->config->data['TABS'][$tabobj], $dn,$type);
+             $this->tabObject->set_acl_base($dn);
+             $this->tabObject->by_object['phoneGeneric']->remove_from_parent ();
+          }else{
+            $this->tabObject= new $info['tabClass']($this->config,$this->config->data['TABS'][$info['tabDesc']], 
+                $this->dn, $info['aclCategory'], true, true);
+            $this->tabObject->set_acl_base($this->dn);
+            $this->tabObject->parent = &$this;
+            $this->tabObject->delete ();
+          }
 
           // Remove the lock for the current object.
           del_lock($this->dn);
 
         }else{
           $disallowed[] = $dn;
-          new log("security","groups/".get_class($this),$dn,array(),"Tried to trick deletion.");
+          new log("security","system/".get_class($this),$dn,array(),"Tried to trick deletion.");
         }
       }
     }
@@ -463,10 +662,7 @@ class systemManagement extends management
 
 
   /*! \brief  Edit the selected system type.
-   *
-   *  @param  String  'action'  The name of the action which was the used as trigger.
-   *  @param  Array   'target'  A list of object dns, which should be affected by this method.
-   *  @param  Array   'all'     A combination of both 'action' and 'target'.
+   *          NewDevice and ArpNewDevice are handled here separately 
    */
   function editEntry($action="",$target=array(),$all=array(), $altTabClass ="", $altTabType = "", $altAclCategory="")
   {
@@ -513,14 +709,17 @@ class systemManagement extends management
     if(!isset($tInfo[$info])){
       trigger_error("Unknown action type '".$action."' cant create a new system!");
     }else{
-      management::newEntry($action,$target,$all, 
+      return(management::newEntry($action,$target,$all, 
           $tInfo[$info]['tabClass'],
           $tInfo[$info]['tabDesc'],
-          $tInfo[$info]['aclCategory']);
+          $tInfo[$info]['aclCategory']));
     }
   }
 
 
+  /*! \brief  Activates all selcted 'NewDevices' at once.
+   *          Enqueues the selected Devices in the activation queue.
+   */
   function activateMultiple($action,$target)
   {
     $headpage = $this->getHeadpage();
@@ -536,8 +735,9 @@ class systemManagement extends management
   }
 
 
-
-
+  /*! \brief  The system selection dialog was closed. 
+   *          We will now queue the given entry to be activated.
+   */ 
   function systemTypeChosen()
   {
     // Detect the systems target type 
@@ -558,6 +758,8 @@ class systemManagement extends management
   }
 
 
+  /*! \brief  Activate queued goto systems.
+   */
   function handleActivationQueue()
   {
     @DEBUG (DEBUG_TRACE, __LINE__, __FUNCTION__, __FILE__,
@@ -631,9 +833,9 @@ class systemManagement extends management
 
           if($data['OG'] != "none"){
             $this->tabObject->base = preg_replace("/^[^,]+,".preg_quote(get_ou('ogroupRDN'), '/')."/i", "", $data['OG']);
-            $this->tabObject->by_object[$plugClass]->base = $this->tabObject->base;
+            $this->tabObject->by_object[$plugClass]->baseSelector->setBase($this->tabObject->base);
           } else {
-            $this->tabObject->by_object[$plugClass]->base = $headpage->getBase();
+            $this->tabObject->by_object[$plugClass]->baseSelector->setBase($headpage->getBase());
             $this->tabObject->base = $headpage->getBase();
           }
 
@@ -728,6 +930,10 @@ class systemManagement extends management
   }
 
 
+  /*! \brief  Save object modifications here and any dialogs too.
+   *          After a successfull update of the object data, close
+   *           the dialogs.
+   */
   protected function saveChanges()
   {
     @DEBUG (DEBUG_TRACE, __LINE__, __FUNCTION__, __FILE__,
@@ -753,22 +959,71 @@ class systemManagement extends management
       }
     }
 
-    //
+    // Try to save changes here.
     $str = management::saveChanges();
     if($this->tabObject) return("");
 
+    // Activate system if required..
     if(isset($this->activationQueue[$this->last_dn])){
       $dn = $this->last_tabObject->dn;
       $this->activate_new_device($dn);
       unset($this->activationQueue[$this->last_dn]);
     }
 
+    /* Post handling for activated systems
+       target opsi -> Remove source.
+       target gosa -> Activate system.
+     */
+    if($this->last_tabObject instanceOf opsi_tabs){
+      $ldap = $this->config->get_ldap_link();
+      $ldap->cd($this->config->current['BASE']);
+      $ldap->rmdir ($this->last_tabObject->dn);
+      @DEBUG(DEBUG_LDAP,__LINE__, __FUNCTION__, __FILE__,
+          "Source removed: ".$this->tabObject->dn,"<b>Opsi host activated</b>");
+
+      $hostId =  $this->last_tabObject->by_object['opsiGeneric']->hostId;
+      $mac    =  $this->last_tabObject->by_object['opsiGeneric']->mac;
+      $this->opsi->job_opsi_activate_client($hostId,$mac);
+
+    }elseif(isset($this->last_tabObject->was_activated) && $this->last_tabObject->was_activated){
+      $this->activate_new_device($this->last_tabObject->dn);
+    }
+
     // Avoid using values from an older input dialog
     $_POST = array();
     $this->handleActivationQueue();
   }
 
 
+  /*! \brief  Save object modifications here and any dialogs too.
+   *          Keep dialogs opened.
+   */
+  protected function applyChanges()
+  {
+    $str = management::applyChanges();
+    if($str) return($str);
+
+    /* Post handling for activated systems
+       target opsi -> Remove source.
+       target gosa -> Activate system.
+     */
+    if($this->tabObject instanceOf opsi_tabs){
+      $ldap = $this->config->get_ldap_link();
+      $ldap->cd($this->config->current['BASE']);
+      $ldap->rmdir ($this->tabObject->dn);
+      @DEBUG(DEBUG_LDAP,__LINE__, __FUNCTION__, __FILE__,
+          "Source removed: ".$this->tabObject->dn,"<b>Opsi host activated</b>");
+
+      $hostId =  $this->tabObject->by_object['opsiGeneric']->hostId;
+      $mac    =  $this->tabObject->by_object['opsiGeneric']->mac;
+      $this->opsi->job_opsi_activate_client($hostId,$mac);
+
+    }elseif(isset($this->tabObject->was_activated) && $this->tabObject->was_activated){
+      $this->activate_new_device($this->tabObject->dn);
+    }
+  }
+  
+
   /*! \brief  Sets FAIstate to "install" for "New Devices".
     This function is some kind of "Post handler" for activated systems,
     it is called directly after the object (workstabs,servtabs) gets saved.
@@ -814,8 +1069,125 @@ class systemManagement extends management
   }
 
 
+  /*! \brief  Opens the snapshot creation dialog for the given target.
+   *
+   *  @param  String  'action'  The name of the action which was the used as trigger.
+   *  @param  Array   'target'  A list of object dns, which should be affected by this method.
+   *  @param  Array   'all'     A combination of both 'action' and 'target'.
+   */
+  function createSnapshotDialog($action="",$target=array(),$all=array())
+  {
+    @DEBUG (DEBUG_TRACE, __LINE__, __FUNCTION__, __FILE__,$target,"Snaptshot creation initiated!");
+
+    $pInfo    = $this->getObjectDefinitions();
+    $headpage = $this->getHeadpage();
+    foreach($target as $dn){
+
+      $entry = $headpage->getEntry($dn);
+      $type = $headpage->getType($dn);
+      if(!isset($pInfo[$type])) {
+        trigger_error('Unknown system type \''.$type.'\'!');
+        return;
+      }
+
+      if(!empty($dn) && $this->ui->allow_snapshot_create($dn,$pInfo[$type]['aclCategory'])){
+        $this->dialogObject = new SnapShotDialog($this->config,$dn,$this);
+        $this->dialogObject->aclCategories = array($pInfo[$type]['aclCategory']);
+        $this->dialogObject->parent = &$this;
+
+      }else{
+        msg_dialog::display(_("Permission"),sprintf(_("You are not allowed to create a snapshot for %s."),$dn),
+            ERROR_DIALOG);
+      }
+    }
+  }
+
+
+  /*! \brief  Displays the "Restore snapshot dialog" for a given target.
+   *          If no target is specified, open the restore removed object
+   *           dialog.
+   *  @param  String  'action'  The name of the action which was the used as trigger.
+   *  @param  Array   'target'  A list of object dns, which should be affected by this method.
+   *  @param  Array   'all'     A combination of both 'action' and 'target'.
+   */
+  function restoreSnapshotDialog($action="",$target=array(),$all=array())
+  {
+    // Set current restore base for snapshot handling.
+    $headpage = $this->getHeadpage();
+    $pInfo    = $this->getObjectDefinitions();
+    if(is_object($this->snapHandler)){
+      $bases = array();
+      foreach($this->storagePoints as $sp){
+        $bases[] = $sp.$headpage->getBase();
+      }
+    }
+
+    // No bases specified? Try base
+    if(!count($bases)) $bases[] = $this->headpage->getBase();
+
+    // No target, open the restore removed object dialog.
+    if(!count($target)){
+
+      $cats = array();
+      foreach($pInfo as $data){
+        $cats[] = $data['aclCategory'];
+      }
+      $cats = array_unique($cats);
+
+      $entry = $headpage->getBase();
+      if(!empty($entry) && $this->ui->allow_snapshot_restore($entry,$cats)){
+        @DEBUG (DEBUG_TRACE, __LINE__, __FUNCTION__, __FILE__,$entry,"Snaptshot restoring initiated!");
+        $this->dialogObject = new SnapShotDialog($this->config,$entry,$this);
+        $this->dialogObject->set_snapshot_bases($bases);
+        $this->dialogObject->display_all_removed_objects = true;
+        $this->dialogObject->display_restore_dialog = true;
+        $this->dialogObject->parent = &$this;
+      }else{
+        msg_dialog::display(_("Permission"),sprintf(_("You are not allowed to restore a snapshot for %s."),$entry),
+            ERROR_DIALOG);
+      }
+    }else{
+
+      // Display the restore points for a given object.
+      $dn = array_pop($target);
+      $entry = $headpage->getEntry($dn);
+      $type = $headpage->getType($dn);
+      if(!isset($pInfo[$type])) {
+        trigger_error('Unknown system type \''.$type.'\'!');
+        return;
+      }
+
+      if(!empty($dn) && $this->ui->allow_snapshot_create($dn,$pInfo[$type]['aclCategory'])){
+        @DEBUG (DEBUG_TRACE, __LINE__, __FUNCTION__, __FILE__,$dn,"Snaptshot restoring initiated!");
+        $this->dialogObject = new SnapShotDialog($this->config,$dn,$this);
+        $this->dialogObject->set_snapshot_bases($bases);
+        $this->dialogObject->display_restore_dialog = true;
+        $this->dialogObject->parent = &$this;
+      }else{
+        msg_dialog::display(_("Permission"),sprintf(_("You are not allowed to restore a snapshot for %s."),$dn),
+            ERROR_DIALOG);
+      }
+    }
+  }
+
+
+  /*! \brief  Restores a snapshot object.
+   *          The dn of the snapshot entry has to be given as ['target'] parameter.
+   *
+   *  @param  String  'action'  The name of the action which was the used as trigger.
+   *  @param  Array   'target'  A list of object dns, which should be affected by this method.
+   *  @param  Array   'all'     A combination of both 'action' and 'target'.
+   */
+  function restoreSnapshot($action="",$target=array(),$all=array())
+  {
+    $dn       = array_pop($target);
+    $this->snapHandler->restore_snapshot($dn);
+    @DEBUG (DEBUG_TRACE, __LINE__, __FUNCTION__, __FILE__,$dn,"Snaptshot restored!");
+    $this->closeDialogs();
+  }
+
 
- /*! \brief  Detects actions/events send by the ui
 /*! \brief  Detects actions/events send by the ui
    *           and the corresponding targets.
    */
   function detectPostActions()
@@ -826,6 +1198,8 @@ class systemManagement extends management
     if(isset($_POST['cd_create']))  $action['action'] = "initiateISOcreation";
     if(isset($_GET['PerformIsoCreation']))  $action['action'] = "performIsoCreation";
     if(isset($_POST['SystemTypeAborted']))  $action['action'] = "cancel";
+    if(isset($_POST['password_cancel']))  $action['action'] = "cancel";
+    if(isset($_POST['password_finish']))  $action['action'] = "passwordChangeConfirmed";
 
     if(isset($_POST['new_goServer']))  $action['action'] = "new_goServer";
     if(isset($_POST['new_gotoWorkstation']))  $action['action'] = "new_gotoWorkstation";
@@ -890,9 +1264,9 @@ class systemManagement extends management
           "plugClass"   => "workgeneric",
           "tabClass"    => "worktabs",
           "tabDesc"     => "WORKTABS",
-          "aclClass"    => "workstation",
+          "aclClass"    => "workgeneric",
           "sendEvents"  => TRUE,
-          "aclCategory" => "workgeneric"),
+          "aclCategory" => "workstation"),
 
         "gotoTerminal" => array(
             "ou"          => get_ou('terminalRDN'),
@@ -900,17 +1274,17 @@ class systemManagement extends management
             "tabClass"    => "termtabs",
             "sendEvents"  => TRUE,
             "tabDesc"     => "TERMTABS",
-            "aclClass"    => "terminal",
-            "aclCategory" => "termgeneric"),
+            "aclClass"    => "termgeneric",
+            "aclCategory" => "terminal"),
 
         "gotoPrinter" => array(
             "ou"          => get_ou('printerRDN'),
             "plugClass"   => "printgeneric",
             "tabClass"    => "printtabs",
             "tabDesc"     => "PRINTTABS",
-            "aclClass"    => "printer",
+            "aclClass"    => "printgeneric",
             "sendEvents"  => FALSE,
-            "aclCategory" => "printgeneric"),
+            "aclCategory" => "printer"),
 
         "FAKE_OC_NewDevice" => array(
             "ou"          => get_ou('systemIncomingRDN'),
@@ -918,8 +1292,8 @@ class systemManagement extends management
             "tabClass"    => "termtabs",
             "sendEvents"  => TRUE,
             "tabDesc"     => "TERMTABS",
-            "aclClass"    => "terminal",
-            "aclCategory" => "termgeneric"),
+            "aclClass"    => "termgeneric",
+            "aclCategory" => "terminal"),
 
         "goFonHardware" => array(
             "ou"          => get_ou('phoneRDN'),
@@ -927,8 +1301,8 @@ class systemManagement extends management
             "tabClass"    => "phonetabs",
             "tabDesc"     => "PHONETABS",
             "sendEvents"  => FALSE,
-            "aclClass"    => "phone",
-            "aclCategory" => "phoneGeneric"),
+            "aclClass"    => "phoneGeneric",
+            "aclCategory" => "phone"),
 
         "FAKE_OC_winstation" => array(
             "ou"          => get_winstations_ou(),
@@ -959,6 +1333,8 @@ class systemManagement extends management
     $tabs['gotoTerminal__IS_BUSY'] = &$tabs['gotoTerminal'];
     $tabs['gotoTerminal__IS_ERROR'] = &$tabs['gotoTerminal'];
     $tabs['gotoTerminal__IS_LOCKED'] = &$tabs['gotoTerminal'];
+    $tabs['FAKE_OC_TerminalTemplate'] = &$tabs['gotoTerminal'];
+    $tabs['FAKE_OC_WorkstationTemplate'] = &$tabs['gotoTerminal'];
     $tabs['goServer__IS_BUSY'] = &$tabs['goServer'];
     $tabs['goServer__IS_ERROR'] = &$tabs['goServer'];
     $tabs['goServer__IS_LOCKED'] = &$tabs['goServer'];
@@ -967,6 +1343,60 @@ class systemManagement extends management
 
     return($tabs);
   }
+
+
+  static function systemRelease($a,$b,$c,$objectclasses= null,$class= null)
+  {
+    global $config;
+
+    // No objectclasses set - go ahead
+    if(!$objectclasses) return("&nbsp;");
+
+    // Skip non fai objects
+    if (!in_array_ics("FAIobject", $objectclasses)) {
+      return "&nbsp;";
+    }
+
+    // If we've an own fai class, just use this
+    if ($class && is_array($class)) {
+      foreach (explode(' ', $class[0]) as $element) {
+        if ($element[0] == ":") {
+          return "&nbsp;".image('images/empty.png')."&nbsp;".mb_substr($element, 1);
+        }
+      }
+    }
+
+    // Load information if needed
+    $ldap = $config->get_ldap_link();
+    $ldap->cd($config->current['BASE']);
+    $ldap->search("(&(objectClass=gosaGroupOfNames)(FAIclass=*)(member=".$b."))",array('FAIclass','cn'));
+    while($attrs = $ldap->fetch()){
+      $rel = preg_replace("/^.*:/","",$attrs['FAIclass'][0]);
+      $sys = sprintf(_("Inherited from %s"),$attrs['cn'][0]);
+      $str = "&nbsp;".image('plugins/ogroups/images/ogroup.png', "", $sys)."&nbsp;".$rel;
+      return($str);
+    }
+    
+    return("&nbsp;");
+  }
+
+
+  /*! \brief  !! Incoming dummy acls, required to defined acls for incoming objects
+   */
+  static function plInfo()
+  {
+    return (array(
+          "plShortName"   => _("Incoming objects"),
+          "plDescription" => _("Incoming objects"),
+          "plSelfModify"  => FALSE,
+          "plDepends"     => array(),
+          "plPriority"    => 99,
+          "plSection"     => array("administration"),
+          "plCategory"    => array("incoming"   => array( "description"  => _("Incoming"),
+              "objectClass"  => "")),
+          "plProvidedAcls"=> array()
+          ));
+  }
 } 
 // vim:tabstop=2:expandtab:shiftwidth=2:filetype=php:syntax:ruler:
 ?>