![[tokkee]](http://tokkee.org/images/avatar.png){kind=avatar}
index 5497098cc47842655f61756dedc279566ea0ae98..9fdb2b15de0f1c98dc14f1ceab8470efb0b317e9 100644 (file)
var $subClassName = "faiHookEntry";
/* Attributes to initialise for each subObject */
- var $subAttributes = array("cn","description","FAItask","FAIscript");
+ var $subAttributes = array("cn","description","FAItask");
+ var $sub_Load_Later = array("FAIscript");
var $sub64coded = array();
+ var $subBinary = array("FAIscript");
/* Specific attributes */
var $cn = ""; // The class name for this object
var $SubObjects = array(); // All leafobjects of this object
var $FAIstate = "";
+ var $ui;
function faiHook ($config, $dn= NULL)
{
/* Load Attributes */
plugin::plugin ($config, $dn);
- $this->acl ="#all#";
-
/* If "dn==new" we try to create a new entry
* Else we must read all objects from ldap which belong to this entry.
*/
if($dn != "new"){
$this->dn =$dn;
- /* Set acls
- */
- $ui = get_userinfo();
- $acl = get_permissions ($this->dn, $ui->subtreeACL);
- $acli = get_module_permission($acl, "FAIclass", $this->dn);
- $this->acl=$acli;
-
/* Get FAIstate
*/
if(isset($this->attrs['FAIstate'][0])){
*/
$ldap = $this->config->get_ldap_link();
$ldap->cd ($this->dn);
- $ldap->search("(&(objectClass=FAIclass)(objectClass=".$this->subClass."))",$this->subAttributes);
+ $attrs_to_search = $this->subAttributes;
+ $attrs_to_search[] = "FAIstate";
+ $ldap->search("(&(objectClass=FAIclass)(objectClass=".$this->subClass."))", $attrs_to_search);
while($object = $ldap->fetch()){
- /* Set status for save management */
- foreach($this->subAttributes as $attrs){
- if(!isset($object[$attrs][0])){
- $this->SubObjects[$object['cn'][0]][$attrs]="";
- }else{
- $this->SubObjects[$object['cn'][0]][$attrs]=$object[$attrs][0];
+ /* Skip objects, that are tagged as removed */
+ if(isset($object['FAIstate'][0])){
+ if(preg_match("/removed$/",$object['FAIstate'][0])){
+ continue;
}
}
- $this->SubObjects[$object['cn'][0]]['status'] = "edited";
- $this->SubObjects[$object['cn'][0]]['dn'] = $object['dn'];
+ /* Set status for save management */
+ $objects = array();
+ $objects['status'] = "FreshLoaded";
+ $objects['dn'] = $object['dn'];
+ $objects = $this->get_object_attributes($objects,$this->subAttributes);
+ $this->SubObjects[$objects['cn']] = $objects;
+ }
+ }
+ $this->ui = get_userinfo();
+ }
+
- foreach($this->sub64coded as $codeIt){
- $this->SubObjects[$object['cn'][0]][$codeIt]=base64_decode($this->SubObjects[$object['cn'][0]][$codeIt]);
+ /* Reload some attributes */
+ function get_object_attributes($object,$attributes)
+ {
+ $ldap = $this->config->get_ldap_link();
+ $ldap->cd($this->config->current['BASE']);
+ $ldap->cat($object['dn'],$attributes);
+ $tmp = $ldap->fetch();
+
+ foreach($attributes as $attrs){
+ if(isset($tmp[$attrs][0])){
+ $var = $tmp[$attrs][0];
+
+ /* Check if we must decode some attributes */
+ if(in_array_ics($attrs,$this->sub64coded)){
+ $var = base64_decode($var);
}
- foreach($this->subAttributes as $attrs){
- $this->SubObjects[$object['cn'][0]][$attrs]=addslashes($this->SubObjects[$object['cn'][0]][$attrs]);
+ /* check if this is a binary entry */
+ if(in_array_ics($attrs,$this->subBinary)){
+ $var = $ldap->get_attribute($object['dn'], $attrs,$r_array=0);
}
- $this->SubObjects[$object['cn'][0]]['FAIscript'] = addslashes( $ldap->get_attribute($object['dn'], "FAIscript",$r_array=0));
+
+ /* Fix slashes */
+ $var = addslashes($var);
+ $object[$attrs] = $var;
+ }
+ }
+ return($object);
+ }
+
+
+ function acl_base_for_current_object($dn)
+ {
+ if($dn == "new"){
+ if($this->dn == "new"){
+ $dn= $_SESSION['CurrentMainBase'];
+ }else{
+ $dn = $this->dn;
}
}
+ return($dn);
}
+
function getUsedFAItask($cn)
{
$ret = array();
$once = false;
$entry = preg_replace("/^editscript_/","",$name);
$entry = base64_decode(preg_replace("/_.*/","",$entry));
- $this->dialog= new $this->subClassName($this->config,$this->dn,$this->SubObjects[$entry]);
- $this->dialog->acl = $this->acl;
- $_SESSION['objectinfo'] = $this->SubObjects[$entry]['dn'];
+
+ $obj = $this->SubObjects[$entry];
+ if($obj['status'] == "FreshLoaded"){
+ $obj = $this->get_object_attributes($obj,$this->sub_Load_Later);
+ }
+
+ $this->dialog= new $this->subClassName($this->config,$this->dn,$obj);
+ $this->dialog->set_acl_base($this->acl_base_for_current_object($obj['dn']));
+ $this->dialog->set_acl_category("fai");
+
+ $_SESSION['objectinfo'] = $obj['dn'];
$this->dialog->parent = &$this;
$this->is_dialog=true;
}
if(preg_match("/^deletescript_/",$name)&&($once)){
- $once = false;
$entry = preg_replace("/^deletescript_/","",$name);
$entry = base64_decode(preg_replace("/_.*/","",$entry));
- if($this->SubObjects[$entry]['status'] == "edited"){
- $this->SubObjects[$entry]['status']= "delete";
- }else{
- unset($this->SubObjects[$entry]);
+
+ $dn = $this->acl_base_for_current_object($this->SubObjects[$entry]['dn']);
+ $acl = $this->ui -> get_permissions($dn,"fai/faiScriptEntry") ;
+
+ if(preg_match("/d/",$acl)){
+ $once = false;
+
+ $status = $this->SubObjects[$entry]['status'];
+ if($status == "edited" || $status == "FreshLoaded"){
+ $this->SubObjects[$entry]['status']= "delete";
+ }else{
+ unset($this->SubObjects[$entry]);
+ }
}
}
}
/* Add new sub object */
if(isset($_POST['AddSubObject'])){
- $this->dialog= new $this->subClassName($this->config,"new");
- $this->dialog->acl = $this->acl;
- $this->dialog->parent = &$this;
- $this->is_dialog=true;
- }
-
- if($this->dn != "new"){
- $_SESSION['objectinfo']= $this->dn;
- }
- /* Edit selected Sub Object */
- if((isset($_POST['EditSubObject']))&&(isset($_POST['SubObject']))){
- $hook = $_POST['SubObject'][0];
- $this->dialog= new $this->subClassName($this->config,$this->dn,$this->SubObjects[$hook]);
- $this->dialog->acl = $this->acl;
+ $c_dn = $this->acl_base_for_current_object($this->dn);
+ $this->dialog= new $this->subClassName($this->config,"new");
+ $this->dialog->set_acl_base($c_dn);
+ $this->dialog->set_acl_category("fai");
$this->dialog->parent = &$this;
- $_SESSION['objectinfo'] = $this->SubObjects[$hook]['dn'];
$this->is_dialog=true;
}
- /* Remove Sub object */
- if((isset($_POST['DelSubObject']))&&(isset($_POST['SubObject']))){
- foreach($_POST['SubObject'] as $hook){
- if($this->SubObjects[$hook]['status'] == "edited"){
- $this->SubObjects[$hook]['status']= "delete";
- }else{
- unset($this->SubObjects[$hook]);
- }
- }
- }
/* Save Dialog */
if(isset($_POST['SaveSubObject'])){
$obj = $this->dialog->save();
if(isset($obj['remove'])){
+ $old_stat = $this->SubObjects[$obj['remove']['from']]['status'];
+
/* Depending on status, set new status */
- if($this->SubObjects[$obj['remove']['from']]['status']=="edited"){
+ if($old_stat == "edited" || $old_stat == "FreshLoaded"){
$this->SubObjects[$obj['remove']['from']]['status'] = "delete";
}elseif($this->SubObjects[$obj['remove']['from']]['status']=="new"){
unset($this->SubObjects[$obj['remove']['from']]);
$this->SubObjects[$obj['remove']['to']] = $obj;
unset($this->SubObjects[$obj['remove']['to']]['remove']);
}else{
+ if($obj['status'] == "FreshLoaded"){
+ $obj['status'] = "edited";
+ }
$this->SubObjects[$obj['cn']]=$obj;
}
$this->is_dialog=false;
$divlist = new divSelectBox("FAIhooks");
$divlist->setHeight(400);
- if((chkacl($this->acl,"cn")!="") || ($this->FAIstate == "freeze")){
- $img_edit = "<input type='image' src='images/edit.png' name='editscript_%s' title='"._("edit")."' alt='"._("edit")."'>";
- $img_remo = "";
- }else{
- $img_edit = "<input type='image' src='images/edit.png' name='editscript_%s' title='"._("edit")."' alt='"._("edit")."'>";
- $img_remo = "<input type='image' src='images/edittrash.png' name='deletescript_%s' title='"._("delete")."' alt='"._("delete")."'>";
- }
foreach($this->getList(true) as $key => $name){
- if(($this->SubObjects[$key]['status'] == "new") || ($this->SubObjects[$key]['dn'] == "new")){
+ $dn= $this->acl_base_for_current_object($name['dn']);
+ $acl = $this->ui->get_permissions($dn,"fai/faiHookEntry") ;
+ $act = "";
+
+ /* Check if this object is freezed, in this case hide the delete icon */
+ if($this->FAIstate == "freeze"){
+ $act .= "<input type='image' src='images/edit.png' name='editscript_%s' title='"._("edit")."' alt='"._("edit")."'>";
+ }else{
+ $act .= "<input type='image' src='images/edit.png' name='editscript_%s' title='"._("edit")."' alt='"._("edit")."'>";
+ if(preg_match("/d/",$acl)){
+ $act .="<input type='image' src='images/edittrash.png' name='deletescript_%s' title='"._("delete")."' alt='"._("delete")."'>";
+ }
+ }
+
+ /* Check if we are allowed to use the export button for this object */
+ $s_acl = $this->ui->get_permissions($dn,"fai/faiHookEntry","FAIscript") ;
+ if(($this->SubObjects[$key]['status'] == "new") || ($this->SubObjects[$key]['dn'] == "new") || !preg_match("/r/",$s_acl)){
$down = "";
}else{
- $down = "<a href='getFAIscript.php?id=".base64_encode($name['dn'])."' target='_blank'>
+ $down = "<a href='getFAIscript.php?id=".base64_encode($name['dn'])."'>
<img src='images/save.png' alt='"._("Download")."' title='"._("Download")."' border=0>
</a>";
}
- $divlist->AddEntry(array( array("string"=>$name['name']),
- array("string"=>$down , "attach" => "style='width:20px;'"),
- array("string"=>str_replace("%s",base64_encode($key),$img_edit.$img_remo),
- "attach"=>"style='border-right: 0px;width:50px;text-align:right;'")));
+ /* Check if we are allowed to view the object */
+ $s_acl = $this->ui->get_permissions($dn,"fai/faiHookEntry","cn") ;
+ if(preg_match("/r/",$s_acl)){
+ $divlist->AddEntry(array( array("string"=>$name['name']),
+ array("string"=>$down , "attach" => "style='width:20px;'"),
+ array("string"=>str_replace("%s",base64_encode($key),$act),
+ "attach"=>"style='border-right: 0px;width:50px;text-align:right;'")));
+ }
}
$smarty->assign("Entry_divlist",$divlist->DrawList());
/* Divlist creation complete
}
}
- foreach($this->attributes as $attr){
- $smarty->assign($attr."ACL",chkacl($this->acl,$attr));
+ $tmp = $this->plInfo();
+
+ $c_dn = $this->acl_base_for_current_object($this->dn);
+ $smarty->assign("sub_object_is_addable", preg_match("/c/",$this->ui->get_permissions($c_dn,"fai/faiHookEntry")) && $this->FAIstate!="freeze");
+ foreach($tmp['plProvidedAcls'] as $name => $translation){
+ $smarty->assign($name."ACL",$this->getacl($name));
}
$display.= $smarty->fetch(get_template_path('faiHook.tpl', TRUE));
if($obj['status'] != "delete"){
if($use_dns){
if((isset($obj['description']))&&(!empty($obj['description']))){
- $a_return[$obj['cn']]['name']= $obj['cn']." [".$obj['description']."]";
+ $a_return[$obj['cn']]['name']= $obj['cn']." [".stripslashes($obj['description'])."]";
}else{
$a_return[$obj['cn']]['name']= $obj['cn'];
}
$a_return[$obj['cn']]['dn']= $obj['dn'];
}else{
if((isset($obj['description']))&&(!empty($obj['description']))){
- $a_return[$obj['cn']]= $obj['cn']." [".$obj['description']."]";
+ $a_return[$obj['cn']]= $obj['cn']." [".stripslashes($obj['description'])."]";
}else{
$a_return[$obj['cn']]= $obj['cn'];
}
{
$ldap = $this->config->get_ldap_link();
$ldap->cd ($this->dn);
- $ldap->rmdir_recursive($this->dn);
+
+# $use_dn = str_ireplace( get_release_dn($this->dn), $_SESSION['faifilter']['branch'], $this->dn);
+ $use_dn = preg_replace("/".normalizePreg(get_release_dn($this->dn))."/i", $_SESSION['faifilter']['branch'], $this->dn);
+ if($_SESSION['faifilter']['branch'] == "main"){
+ $use_dn = $this->dn;
+ }
+
+ prepare_to_save_FAI_object($use_dn,array(),true);
+
+ foreach($this->SubObjects as $name => $obj){
+# $use_dn = str_ireplace( get_release_dn($this->dn), $_SESSION['faifilter']['branch'], $obj['dn']);
+ $use_dn = preg_replace("/".normalizePreg(get_release_dn($this->dn))."/i", $_SESSION['faifilter']['branch'], $obj['dn']);
+ if($_SESSION['faifilter']['branch'] == "main"){
+ $use_dn = $obj['dn'];
+ }
+ prepare_to_save_FAI_object($use_dn,array(),true);
+ }
$this->handle_post_events("remove");
}
$ldap = $this->config->get_ldap_link();
- $ldap->cat($this->dn);
- if($ldap->count()!=0){
- /* Write FAIscript to ldap*/
- $ldap->cd($this->dn);
- $this->cleanup();
- $ldap->modify ($this->attrs);
-
- }else{
- /* Write FAIscript to ldap*/
- $ldap->cd($this->config->current['BASE']);
- $ldap->create_missing_trees(preg_replace('/^[^,]+,/', '', $this->dn));
- $ldap->cd($this->dn);
- $ldap->add($this->attrs);
- }
- show_ldap_error($ldap->get_error());
+ prepare_to_save_FAI_object($this->dn,$this->attrs);
+ show_ldap_error($ldap->get_error(), sprintf(_("Saving of FAI/hook with dn '%s' failed."),$this->dn));
/* Do object tagging */
$this->handle_object_tagging();
- show_ldap_error($ldap->get_error());
$ldap->cd($this->dn);
* After deletion, we perform add and modify
*/
$Objects = array();
+
+ /* We do not need to save untouched objects */
+ foreach($this->SubObjects as $name => $obj){
+ if($obj['status'] == "FreshLoaded"){
+ unset($this->SubObjects[$name]);
+ }
+ }
+
foreach($this->SubObjects as $name => $obj){
if($obj['status'] == "delete"){
$Objects[$name] = $obj;
}
$tmp = array();
- foreach($this->subAttributes as $attrs){
+ $attributes = array_merge($this->sub_Load_Later,$this->subAttributes);
+ foreach($attributes as $attrs){
if(empty($obj[$attrs])){
$obj[$attrs] = array();
}
}
}
-
+ $tmp['objectClass'] = $this->subClasses;
+
$sub_dn = "cn=".$obj['cn'].",".$this->dn;
- plugin::plugin($this->config,$sub_dn);
- $tmp['objectClass'] = $this->attrs['objectClass'];
- foreach($this->subClasses as $class){
- if(!in_array($class,$tmp['objectClass'])){
- $tmp['objectClass'][] = $class;
+ if($obj['status']=="new"){
+ $ldap->cat($sub_dn,array("objectClass"));
+ if($ldap->count()){
+ $obj['status']="edited";
}
}
- if($obj['status']=="new"){
- $ldap->cat($sub_dn);
- if($ldap->count()){
- $obj['status']="modify";
+ /* Check if gosaAdministrativeUnitTag is required as object class */
+ if($obj['status'] == "edited"){
+ $ldap->cat($sub_dn,array("objectClass"));
+ $attrs = $ldap->fetch();
+ if(isset($attrs['objectClass'])){
+ if(in_array_ics("gosaAdministrativeUnitTag",$attrs['objectClass'])){
+ $tmp['objectClass'][] = "gosaAdministrativeUnitTag";
+ }
}
}
if($obj['status'] == "delete"){
- $ldap->cd($sub_dn);
- $ldap->rmdir_recursive($sub_dn);
+ prepare_to_save_FAI_object($sub_dn,array(),true);
$this->handle_post_events("remove");
}elseif($obj['status'] == "edited"){
- $ldap->cd($sub_dn);
- $this->cleanup();
- $ldap->modify ($tmp);
-
+ prepare_to_save_FAI_object($sub_dn,$tmp);
$this->handle_post_events("modify");
}elseif($obj['status']=="new"){
- if($tmp['description']==array()){
- unset($tmp['description']);
- }
- $ldap->cd($this->config->current['BASE']);
- $ldap->create_missing_trees(preg_replace('/^[^,]+,/', '', $sub_dn));
- $ldap->cd($sub_dn);
- $ldap->add($tmp);
+ prepare_to_save_FAI_object($sub_dn,$tmp);
$this->handle_post_events("add");
}
$this->handle_object_tagging($sub_dn, $this->gosaUnitTag);
- show_ldap_error($ldap->get_error());
}
}
+
+ /* Return plugin informations for acl handling */
+ function plInfo()
+ {
+ return (array(
+ "plShortName" => _("Hook"),
+ "plDescription" => _("FAI hook"),
+ "plSelfModify" => FALSE,
+ "plDepends" => array(),
+ "plPriority" => 20,
+ "plSection" => array("administration"),
+ "plCategory" => array("fai"),
+ "plProvidedAcls" => array(
+ "cn" => _("Name")." ("._("Read only").")",
+ "description" => _("Description"))
+ ));
+ }
}
// vim:tabstop=2:expandtab:shiftwidth=2:filetype=php:syntax:ruler: