![[tokkee]](http://tokkee.org/images/avatar.png){kind=avatar}
index eb2c71c0562278b3b7d1a4cebcef3278cdd01326..f275209efd8083132075c471e2d6b6e8f2b78239 100644 (file)
var $SubObjects = array(); // All leafobjects of this object
var $FAIstate = "";
+ var $ui ;
+ var $view_logged = FALSE;
function faiVariable ($config, $dn= NULL)
{
/* Load Attributes */
plugin::plugin ($config, $dn);
- $this->acl ="#all#";
-
- /* If "dn==new" we try to create a new entry
- * Else we must read all objects from ldap which belong to this entry.
- * First read SubObjects from ldap ... and then the partition definitions for the SubObjects.
- */
-
if($dn != "new"){
$this->dn =$dn;
- /* Set acls
- */
- $ui = get_userinfo();
- $acl = get_permissions ($this->dn, $ui->subtreeACL);
- $acli = get_module_permission($acl, "FAIclass", $this->dn);
- $this->acl=$acli;
-
/* Get FAIstate
*/
if(isset($this->attrs['FAIstate'][0])){
$attrs_to_search = $this->subAttributes;
$attrs_to_search[] = "FAIstate";
- $ldap->search("(&(objectClass=FAIclass)(objectClass=".$this->subClass."))",$this->subAttributes);
+ $ldap->search("(&(objectClass=FAIclass)(objectClass=".$this->subClass."))",$attrs_to_search);
while($object = $ldap->fetch()){
$this->SubObjects[$object['cn'][0]]['status'] = "edited";
$this->SubObjects[$object['cn'][0]]['dn'] = $object['dn'];
}
+
}
+ $this->ui = get_userinfo();
}
+
+ function acl_base_for_current_object($dn)
+ {
+ if($dn == "new"){
+ if($this->dn == "new"){
+ $dn= $_SESSION['CurrentMainBase'];
+ }else{
+ $dn = $this->dn;
+ }
+ }
+ return($dn);
+ }
+
+
function execute()
{
- /* Call parent execute */
- plugin::execute();
+ /* Call parent execute */
+ plugin::execute();
+
+ if($this->is_account && !$this->view_logged){
+ $this->view_logged = TRUE;
+ new log("view","fai/".get_class($this),$this->dn);
+ }
/* Fill templating stuff */
$smarty= get_smarty();
/* Add new sub object */
if(isset($_POST['AddSubObject'])){
$this->dialog= new $this->subClassName($this->config,"new");
- $this->dialog->acl = $this->acl;
+ $this->dialog->set_acl_base($this->acl_base_for_current_object($this->dn));
+ $this->dialog->set_acl_category("fai");
+ $this->dialog->parent = &$this;
$this->is_dialog=true;
}
if((isset($_POST['EditSubObject']))&&(isset($_POST['SubObject']))){
$var = $_POST['SubObject'][0];
+ $c_dn = $this->acl_base_for_current_object($this->SubObjects[$var]['dn']);
$this->dialog= new $this->subClassName($this->config,$this->dn,$this->SubObjects[$var]);
- $this->dialog->acl = $this->acl;
+ $this->dialog->set_acl_category("fai");
+ $this->dialog->set_acl_base($c_dn);
+ $this->dialog->parent = &$this;
$_SESSION['objectinfo'] = $this->SubObjects[$var]['dn'];
$this->is_dialog=true;
}
/* Remove Sub object */
if((isset($_POST['DelSubObject']))&&(isset($_POST['SubObject']))){
foreach($_POST['SubObject'] as $var){
- if($this->SubObjects[$var]['status'] == "edited"){
- $this->SubObjects[$var]['status']= "delete";
- }else{
- unset($this->SubObjects[$var]);
+
+ $c_dn = $this->acl_base_for_current_object($this->SubObjects[$var]['dn']);
+ $acl = $this->ui->get_permissions($c_dn,"fai/faiVariable");
+ if(preg_match("/d/",$acl)){
+ if($this->SubObjects[$var]['status'] == "edited"){
+ $this->SubObjects[$var]['status']= "delete";
+ }else{
+ unset($this->SubObjects[$var]);
+ }
}
}
}
return($display);
}
- $smarty->assign("SubObjects",$this->getList());
+ $ui = get_userinfo();
+ $ret = $this->getList();
+ $tmp = array();
+ foreach($this->SubObjects as $key => $obj){
+ $acl = $ui->get_permissions($obj['dn'],"fai/faiVariableEntry");
+ if(preg_match("/r/",$acl) || $obj['dn'] == "new"){
+ $tmp[$key] = $ret[$key];
+ }
+ }
+ $smarty->assign("SubObjects",$tmp);
+
- /* Magic quotes GPC, escapes every ' " \, to solve some security risks
+ /* Magic quotes GPC, escapes every ' " \, to solve some security risks
* If we post the escaped strings they will be escaped again
*/
-
foreach($this->attributes as $attrs){
if(get_magic_quotes_gpc()){
$smarty->assign($attrs,htmlentities (stripslashes(utf8_decode($this->$attrs))));
}
}
- foreach($this->attributes as $attr){
- $smarty->assign($attr."ACL",chkacl($this->acl,$attr));
- }
+ $c_dn = $this->acl_base_for_current_object($this->dn);
+ $smarty->assign("is_createable", preg_match("/c/",$this->ui->get_permissions($c_dn,"fai/faiVariableEntry")) && $this->FAIstate!="freeze");
+ $smarty->assign("is_removeable", preg_match("/d/",$this->ui->get_permissions($c_dn,"fai/faiVariableEntry")) && $this->FAIstate!="freeze");
+ $tmp = $this->plInfo();
+ foreach($tmp['plProvidedAcls'] as $name => $translation) {
+ $smarty->assign($name."ACL",$this->getacl($name));
+ }
+
$display.= $smarty->fetch(get_template_path('faiVariable.tpl', TRUE));
return($display);
*/
function remove_from_parent()
{
- $ldap = $this->config->get_ldap_link();
- $ldap->cd ($this->dn);
-
- $use_dn = str_ireplace( get_release_dn($this->dn), $_SESSION['faifilter']['branch'], $this->dn);
- if($_SESSION['faifilter']['branch'] == "main"){
- $use_dn = $this->dn;
- }
-
- prepare_to_save_FAI_object($use_dn,array(),true);
+ if($this->acl_is_removeable()){
+ $ldap = $this->config->get_ldap_link();
+ $ldap->cd ($this->dn);
- foreach($this->SubObjects as $name => $obj){
- $use_dn = str_ireplace( get_release_dn($this->dn), $_SESSION['faifilter']['branch'], $obj['dn']);
+ $use_dn = preg_replace("/".normalizePreg(get_release_dn($this->dn))."/i", $_SESSION['faifilter']['branch'], $this->dn);
if($_SESSION['faifilter']['branch'] == "main"){
- $use_dn = $obj['dn'];
+ $use_dn = $this->dn;
}
+
prepare_to_save_FAI_object($use_dn,array(),true);
+ new log("remove","fai/".get_class($this),$use_dn,$this->attributes);
+
+ foreach($this->SubObjects as $name => $obj){
+ $use_dn = preg_replace("/".normalizePreg(get_release_dn($this->dn))."/i", $_SESSION['faifilter']['branch'], $obj['dn']);
+ if($_SESSION['faifilter']['branch'] == "main"){
+ $use_dn = $obj['dn'];
+ }
+ prepare_to_save_FAI_object($use_dn,array(),true);
+ }
+ $this->handle_post_events("remove");
}
- $this->handle_post_events("remove");
}
$ldap = $this->config->get_ldap_link();
prepare_to_save_FAI_object($this->dn,$this->attrs);
show_ldap_error($ldap->get_error(), sprintf(_("Saving of FAI/variable with dn '%s' failed."),$this->dn));
+
+ if($this->initially_was_account){
+ new log("modify","fai/".get_class($this),$this->dn,$this->attributes);
+ }else{
+ new log("create","fai/".get_class($this),$this->dn,$this->attributes);
+ }
/* Do object tagging */
$this->handle_object_tagging();
"plDescription" => _("FAI variable"),
"plSelfModify" => FALSE,
"plDepends" => array(),
- "plPriority" => 0,
+ "plPriority" => 22,
"plSection" => array("administration"),
"plCategory" => array("fai"),
"plProvidedAcls" => array(
- "cn" => _("Name"),
- "description" => _("Description"),
- "FAIvariableContent"=> _("Variable content"))
+ "cn" => _("Name")." ("._("Read only").")",
+ "description" => _("Description"))
));
}
}