Code

Added configuration flag flag.
[gosa.git] / plugins / personal / generic / class_user.inc
index a7f0c6badcc4808b0f2c916f5a86d74050726c9f..c24f100f06db46e18e03179de982bf3b060dba37 100644 (file)
@@ -42,9 +42,10 @@ class user extends plugin
   var $l= "";
   var $st= "";
   var $postalAddress= "";
-  var $dob= "0";
+  var $dateOfBirth;
   var $use_dob= "0";
-  var $gender= "0";
+  var $gender="0";
+  var $preferredLanguage="0";
 
   var $jpegPhoto= "*removed*";
   var $photoData= "";
@@ -75,6 +76,8 @@ class user extends plugin
   var $role= "";
   var $publicVisible= "";
 
+  var $dialog;
+
   /* variables to trigger password changes */
   var $pw_storage= "crypt";
   var $last_pw_storage= "unset";
@@ -82,8 +85,8 @@ class user extends plugin
 
   /* attribute list for save action */
   var $attributes= array("sn", "givenName", "uid", "personalTitle", "academicTitle",
-      "homePostalAddress", "homePhone", "labeledURI", "o", "ou", "dob", "gender",
-      "departmentNumber", "employeeNumber", "employeeType", "l", "st",
+      "homePostalAddress", "homePhone", "labeledURI", "o", "ou", "dateOfBirth", "gender","preferredLanguage",
+      "departmentNumber", "employeeNumber", "employeeType", "l", "st","jpegPhoto",
       "roomNumber", "telephoneNumber", "mobile", "pager", "cn", "userPKCS12",
       "postalAddress", "facsimileTelephoneNumber", "userSMIMECertificate");
 
@@ -102,15 +105,24 @@ class user extends plugin
      'dn' from LDAP */
   function user ($config, $dn= NULL)
   {
-    /* Configuration is fine, allways */
     $this->config= $config;
+    /* Configuration is fine, allways */
+    if ($this->config->current['GOVERNMENTMODE']){
+      $this->attributes=array_merge($this->attributes,$this->govattrs);
+    }
 
     /* Load base attributes */
     plugin::plugin ($config, $dn);
 
-    /* Load government mode attributes */
     if ($this->config->current['GOVERNMENTMODE']){
+      /* Fix public visible attribute if unset */
+      if (!isset($this->attrs['publicVisible'])){
+        $this->publicVisible == "nein";
+      }
+    }
 
+    /* Load government mode attributes */
+    if ($this->config->current['GOVERNMENTMODE']){
       /* Copy all attributs */
       foreach ($this->govattrs as $val){
         if (isset($this->attrs["$val"][0])){
@@ -144,6 +156,8 @@ class user extends plugin
 
       /* get password storage type */
       if (isset ($this->attrs['userPassword'][0])){
+       /* Initialize local array */
+       $matches= array();
         if (preg_match ("/^{([^}]+)}(.+)/", $this->attrs['userPassword'][0], $matches)){
           $this->pw_storage= strtolower($matches[1]);
         } else {
@@ -173,11 +187,12 @@ class user extends plugin
       $this->last_pw_storage= $this->pw_storage;
     }
 
-    /* Generate dob entry */
+    /* Generate dateOfBirth entry */
     if (isset ($this->attrs['dateOfBirth'])){
       /* This entry is ISO 8601 conform */
       list($year, $month, $day)= split("-", $this->attrs['dateOfBirth'][0], 3);
-      $this->dob= mktime ( 0, 0, 0, $month, $day, $year);
+    
+      $this->dateOfBirth=array( 'mon'=> $month,"mday"=> $day,"year"=> $year);
       $this->use_dob= "1";
     } else {
       $this->use_dob= "0";
@@ -186,20 +201,32 @@ class user extends plugin
     /* Put gender attribute to upper case */
     if (isset ($this->attrs['gender'])){
       $this->gender= strtoupper($this->attrs['gender'][0]);
-    }  
+    }
   }
 
 
   /* execute generates the html output for this node */
   function execute()
   {
+    /* Call parent execute */
+    plugin::execute();
+
     $smarty= get_smarty();
 
     /* Fill calendar */
-    if ($this->dob == "0"){
+    if ($this->dateOfBirth == "0"){
       $date= getdate();
     } else {
-      $date= getdate($this->dob);
+      if(is_array($this->dateOfBirth)){
+        $date = $this->dateOfBirth;
+  
+        // Trigger on dates like 1985-04-01, getdate only understands timestamps
+      } else if (!empty($this->dateOfBirth) && !is_numeric($this->dateOfBirth)){
+        $date= getdate(strtotime($this->dateOfBirth));
+
+      } else {
+        $date = getdate($this->dateOfBirth);
+      } 
     }
 
     $days= array();
@@ -207,13 +234,22 @@ class user extends plugin
       $days[$d]= $d;
     }
     $years= array();
-    for($y= $date['year']-100; $y<=$date['year']+100; $y++){
+
+    if(($date['year']-100)<1901){
+      $start = 1901;
+    }else{
+      $start = $date['year']-100;
+    }
+
+    $end = $start +100;
+    
+    for($y= $start; $y<=$end; $y++){
       $years[]= $y;
     }
-    $years['-']= "";
+    $years['-']= "-&nbsp;";
     $months= array(_("January"), _("February"), _("March"), _("April"),
         _("May"), _("June"), _("July"), _("August"), _("September"),
-        _("October"), _("November"), _("December"), '-' => '');
+        _("October"), _("November"), _("December"), '-' => '-&nbsp;');
     $smarty->assign("day", $date["mday"]);
     $smarty->assign("days", $days);
     $smarty->assign("months", $months);
@@ -222,9 +258,15 @@ class user extends plugin
     $smarty->assign("year", $date["year"]);
 
     /* Assign sex */
-    $sex= array(0 => "", "F" => _("female"), "M" => _("male"));
+    $sex= array(0 => "&nbsp;", "F" => _("female"), "M" => _("male"));
     $smarty->assign("gender_list", $sex);
 
+    /* Assign prefered langage */
+    $language= array(0 => "&nbsp;", "fr_FR" => ("fr_FR"), "en_EN" => ("en_EN"), 
+                                    "de_DE" => ("de_DE"), "it_IT" => ("it_IT"), 
+                                    "nl_NL" => ("nl_NL"), "ru_RU" => ("ru_RU"));
+    $smarty->assign("preferredLanguage_list", $language);
+
     /* Get random number for pictures */
     srand((double)microtime()*1000000); 
     $smarty->assign("rand", rand(0, 10000));
@@ -236,6 +278,31 @@ class user extends plugin
       return;
     }
 
+    /* Base select dialog */
+    $once = true;
+    foreach($_POST as $name => $value){
+      if(preg_match("/^chooseBase/",$name) && $once){
+        $once = false;
+        $this->dialog = new baseSelectDialog($this->config,$this->allowedBasesToMoveTo());
+        $this->dialog->setCurrentBase($this->base);
+      }
+    }
+
+    /* Dialog handling */
+    if(is_object($this->dialog)){
+      /* Must be called before save_object */
+      $this->dialog->save_object();
+   
+      if($this->dialog->isClosed()){
+        $this->dialog = false;
+      }elseif($this->dialog->isSelected()){
+        $this->base = $this->dialog->isSelected();
+        $this->dialog= false;
+      }else{
+        return($this->dialog->execute());
+      }
+    }
+
     /* Want picture edit dialog? */
     if (isset($_POST['edit_picture'])){
       /* Save values for later recovery, in case some presses
@@ -248,8 +315,8 @@ class user extends plugin
 
     /* Remove picture? */
     if (isset($_POST['picture_remove'])){
+      $this->set_picture ();
       $this->jpegPhoto= "*removed*";
-      $this->set_picture ("./images/default.jpg");
       $this->is_modified= TRUE;
 
       return($smarty->fetch (get_template_path('generic_picture.tpl', TRUE, dirname(__FILE__))));
@@ -282,12 +349,13 @@ class user extends plugin
       $this->photoData= $this->old_photoData;
 
       /* Update picture */
-      $_SESSION['picture']= $this->photoData;
+      $_SESSION['binary']= $this->photoData;
+      $_SESSION['binarytype']= "image/jpeg";
       $this->picture_dialog= FALSE;
       $this->dialog= FALSE;
     }
 
-    /* Toggle dob information */
+    /* Toggle dateOfBirth information */
     if (isset($_POST['set_dob'])){
       $this->use_dob= ($this->use_dob == "0")?"1":"0";
     }
@@ -343,9 +411,10 @@ class user extends plugin
           as $val){
 
         /* Check for clean upload */
-        if ($_FILES[$val."_file"]['name'] != "" && 
+        if (array_key_exists($val."_file", $_FILES) &&
+            array_key_exists('name', $_FILES[$val."_file"]) &&
+            $_FILES[$val."_file"]['name'] != "" &&
             is_uploaded_file($_FILES[$val."_file"]['tmp_name'])) {
-
           $this->set_cert("$val", $_FILES[$val."_file"]['tmp_name']);
         }
       }
@@ -359,9 +428,9 @@ class user extends plugin
 
           foreach(array("userCertificate", "userSMIMECertificate", "userPKCS12") as $cert){
             if ($this->$cert != ""){
-              $smarty->assign("$cert"."_state", _("present"));
+              $smarty->assign("$cert"."_state", "true");
             } else {
-              $smarty->assign("$cert"."_state", _("absent"));
+              $smarty->assign("$cert"."_state", "");
             }
           }
           return ($smarty->fetch (get_template_path('generic_certs.tpl', TRUE, dirname(__FILE__))));
@@ -384,9 +453,37 @@ class user extends plugin
     if ($this->cert_dialog){
       foreach(array("userCertificate", "userSMIMECertificate", "userPKCS12") as $cert){
         if ($this->$cert != ""){
-          $smarty->assign("$cert"."_state", _("present"));
+          /* import certificate */
+          $certificate = new certificate;
+          $certificate->import($this->$cert);
+      
+          /* Read out data*/
+          $timeto   = $certificate->getvalidto_date();
+          $timefrom = $certificate->getvalidfrom_date();
+
+          /* Additional info if start end time is '0' */
+          $add_str_info = "";
+          if($timeto == 0 && $timefrom == 0){
+            $add_str_info = "<br><i>"._("(Some types of certificates are currently not supported and may be displayed as 'invalid'.)")."</i>";
+          }
+
+          $str = "<table summary=\"\" border=0>
+                    <tr>
+                      <td style='vertical-align:top'>CN</td>
+                      <td>".preg_replace("/ /", "&nbsp;", $certificate->getname())."</td>
+                    </tr>
+                  </table><br>".
+                  
+                  sprintf(_("Certificate is valid from %s to %s and is currently %s."), 
+                        "<b>".date('d M Y',$timefrom)."</b>",
+                        "<b>".date('d M Y',$timeto)."</b>", 
+                        $certificate->isvalid()?"<b><font style='color:green'>"._("valid")."</font></b>": 
+                                                "<b><font style='color:red'>"._("invalid")."</font></b>").$add_str_info;
+          $smarty->assign($cert."info",$str);
+          $smarty->assign($cert."_state","true");
         } else {
-          $smarty->assign("$cert"."_state", _("absent"));
+          $smarty->assign($cert."info", "<i>"._("No certificate installed")."</i>");
+          $smarty->assign($cert."_state","");
         }
       }
       $smarty->assign("governmentmode", "false");
@@ -394,18 +491,19 @@ class user extends plugin
     }
 
     /* Show us the edit screen */
-    $smarty->assign("bases", $this->config->idepartments);
-    $smarty->assign("base_select", $this->base);
-    $smarty->assign("selectmode", chkacl($this->acl, "create"));
-    $smarty->assign("certificatesACL", chkacl($this->acl, "certificates"));
-    $smarty->assign("jpegPhotoACL", chkacl($this->acl, "jpegPhoto"));
+    @$smarty->assign("bases", $this->allowedBasesToMoveTo());
+#  $smarty->assign("bases", $this->config->idepartments);
+    $smarty->assign("base_select",      $this->base);
+    $smarty->assign("selectmode",       chkacl($this->acl, "create"));
+    $smarty->assign("certificatesACL",  chkacl($this->acl, "certificates"));
+    $smarty->assign("jpegPhotoACL",     chkacl($this->acl, "jpegPhoto"));
 
     /* Prepare password hashes */
     if ($this->pw_storage == ""){
       $this->pw_storage= $this->config->current['HASH'];
     }
 
-    $temp   = passwordMethod::get_available_methods();
+    $temp   = @passwordMethod::get_available_methods();
     $hashes = $temp['name'];
     
     $smarty->assign("pwmode", $hashes);
@@ -423,7 +521,7 @@ class user extends plugin
         preg_match('/true/i', $this->config->current['GOVERNMENTMODE'])){
       $smarty->assign("governmentmode", "true");
       $ivbbmodes= array("nein", "ivbv", "testa", "ivbv,testa", "internet",
-          "internet,ivbv", "internet,testa", "internet,ivbv,testa", "ja");
+          "internet,ivbv", "internet,testa", "internet,ivbv,testa");
       $smarty->assign("ivbbmodes", $ivbbmodes);
       foreach ($this->govattrs as $val){
         $smarty->assign("$val", $this->$val);
@@ -442,9 +540,8 @@ class user extends plugin
     }  else {
       $uidACL= "readonly";
     }
-    if ($uidACL == ""){
-      $uidACL= chkacl($this->acl, "uid");
-    }
+    $uidACL.= " ".chkacl($this->acl, "uid");
+    
     $smarty->assign("uidACL", $uidACL);
     $smarty->assign("is_template", $this->is_template);
     $smarty->assign("use_dob", $this->use_dob);
@@ -457,9 +554,8 @@ class user extends plugin
         $smarty->assign("has_phoneaccount", "false");
       }
     } else {
-        $smarty->assign("has_phoneaccount", "false");
+      $smarty->assign("has_phoneaccount", "false");
     }
-
     return($smarty->fetch (get_template_path('generic.tpl', TRUE, dirname(__FILE__))));
   }
 
@@ -469,6 +565,7 @@ class user extends plugin
   {
     $ldap= $this->config->get_ldap_link();
     $ldap->rmdir ($this->dn);
+    show_ldap_error($ldap->get_error(), _("Removing generic user account failed"));
 
     /* Delete references to groups */
     $ldap->cd ($this->config->current['BASE']);
@@ -488,8 +585,43 @@ class user extends plugin
       $og->save ();
     }
 
+    /* Kerberos server defined? */
+    if (isset($this->config->data['SERVERS']['KERBEROS'])){
+      $cfg= $this->config->data['SERVERS']['KERBEROS'];
+    }
+    if (isset($cfg['SERVER']) && function_exists('kadm5_init_with_password')){
+
+      /* Connect to the admin interface */
+      $handle = kadm5_init_with_password($cfg['SERVER'], $cfg['REALM'],
+          $cfg['ADMIN'], $cfg['PASSWORD']);
+
+      /* Errors? */            
+      if ($handle === FALSE){
+        print_red (_("Kerberos database communication failed"));
+        return (2);
+      }
+
+      /* Build user principal, get list of existsing principals */
+      $principal= $this->uid."@".$cfg['REALM'];
+      $principals = kadm5_get_principals($handle);
+
+      /* User exists in database? */
+      if (in_array($principal, $principals)){
+
+        /* Ok. User exists. Remove him/her */
+          $ret= kadm5_delete_principal ( $handle, $principal);
+          if ($ret === FALSE){
+            print_red (_("Can't remove user from kerberos database."));
+          }
+      }
+
+      /* Free kerberos admin handle */
+      kadm5_destroy($handle);
+    }
+
+
     /* Optionally execute a command after we're done */
-    $this->handle_post_events("remove");
+    $this->handle_post_events("remove",array("uid" => $this->uid));
   }
 
 
@@ -523,11 +655,13 @@ class user extends plugin
       /* Save base and pw_storage, since these are no LDAP attributes */
       if (isset($_POST['base'])){
         foreach(array("base", "pw_storage") as $val){
-          $data= validate($_POST[$val]);
-          if ($data != $this->$val){
-            $this->is_modified= TRUE;
+          if(isset($_POST[$val])){
+            $data= validate($_POST[$val]);
+            if ($data != $this->$val){
+              $this->is_modified= TRUE;
+            }
+            $this->$val= $data;
           }
-          $this->$val= $data;
         }
       }
     }
@@ -542,7 +676,7 @@ class user extends plugin
       $this->reconnect= true;
       return (0);
     } else {
-      $this->error = "Could not bind to " . $binddn;
+      $this->error = "Could not bind to " . $credentials['ADMIN'];
       return NULL;
     }
   }
@@ -550,14 +684,27 @@ class user extends plugin
   /* Save data to LDAP, depending on is_account we save or delete */
   function save()
   {
+    /* Only force save of changes .... 
+       If this attributes aren't changed, avoid saving.
+     */
+    if($this->gender=="0") $this->gender ="";
+    if($this->preferredLanguage=="0") $this->preferredLanguage ="";
+    
     /* First use parents methods to do some basic fillup in $this->attrs */
     plugin::save ();
 
+    if ($this->use_dob == "1"){
+      /* If it is an array, the generic page has never been loaded - so there's no difference. Using an array would cause an error btw. */
+      if(!is_array($this->attrs['dateOfBirth'])) {
+        $this->attrs['dateOfBirth']= date("Y-m-d", $this->attrs['dateOfBirth']);
+      }
+    }
     /* Remove additional objectClasses */
     $tmp= array();
     foreach ($this->attrs['objectClass'] as $key => $set){
       $found= false;
-      foreach (array("ivbbEntry", "gosaUserTemplate") as $val){
+      foreach (array("ivbbentry", "gosaUserTemplate") as $val){
         if (preg_match ("/^$set$/i", $val)){
           $found= true;
           break;
@@ -579,7 +726,7 @@ class user extends plugin
 
     /* Hard coded government mode? */
     if ($this->config->current['GOVERNMENTMODE'] != 'false'){
-      $this->attrs['objectClass'][]= "ivbbEntry";
+      $this->attrs['objectClass'][]= "ivbbentry";
 
       /* Copy standard attributes */
       foreach ($this->govattrs as $val){
@@ -590,6 +737,17 @@ class user extends plugin
         }
       }
 
+      /* Remove attribute if set to "nein" */
+      if ($this->publicVisible == "nein"){
+        $this->attrs['publicVisible']= array();
+        if($this->new){
+          unset($this->attrs['publicVisible']);
+        }else{
+          $this->attrs['publicVisible']=array();
+        }
+
+      }
+
     }
 
     /* Special handling for attribute userCertificate needed */
@@ -600,23 +758,28 @@ class user extends plugin
       $remove_userCertificate= true;
     }
 
-    /* Special handling for dob value */
-    if ($this->use_dob == "1"){
-      $this->attrs["dob"]= date("Y-m-d", $this->dob);
-    } else {
+    /* Special handling for dateOfBirth value */
+    if ($this->use_dob != "1"){
       if ($this->new) {
-        unset($this->attrs["dob"]);
+        unset($this->attrs["dateOfBirth"]);
       } else {
-        $this->attrs["dob"]= array();
+        $this->attrs["dateOfBirth"]= array();
       }
     }
-    if ($this->gender == "0"){
+    if (!$this->gender){
       if ($this->new) {
         unset($this->attrs["gender"]);
       } else {
         $this->attrs["gender"]= array();
       }
     }
+    if (!$this->preferredLanguage){
+      if ($this->new) {
+        unset($this->attrs["preferredLanguage"]);
+      } else {
+        $this->attrs["preferredLanguage"]= array();
+      }
+    }
 
     /* Special handling for attribute jpegPhote needed, scale image via
        image magick to 147x200 pixels and inject resulting data. */
@@ -682,7 +845,7 @@ class user extends plugin
         $this->attrs["jpegPhoto"] = $output;
       }
 
-    } elseif(!$this->new) {
+    } else{
       $this->attrs["jpegPhoto"] = array();
     }
 
@@ -708,7 +871,7 @@ class user extends plugin
 
     /* Save data. Using 'modify' implies that the entry is already present, use 'add' for
        new entries. So do a check first... */
-    $ldap->cat ($this->dn);
+    $ldap->cat ($this->dn, array('dn'));
     if ($ldap->fetch()){
       $mode= "modify";
     } else {
@@ -726,9 +889,10 @@ class user extends plugin
         $this->attributes, "Save via $mode");
 
     /* Finally write data with selected 'mode' */
+    $this->cleanup();
     $ldap->cd ($this->dn);
     $ldap->$mode ($this->attrs);
-    if (show_ldap_error($ldap->get_error())){
+    if (show_ldap_error($ldap->get_error(), _("Saving generic user account failed"))){
       return (1);
     }
 
@@ -788,7 +952,7 @@ class user extends plugin
 
         /* Ok. User exists. Remove him/her when pw_storage has
            changed to be NOT kerberos. */
-        if ($this->pw_storage != "kerberos"){
+        if ($this->pw_storage != $this->config->current['KRBSASL']){
           $ret= kadm5_delete_principal ( $handle, $principal);
 
           if ($ret === FALSE){
@@ -798,8 +962,8 @@ class user extends plugin
 
       } else {
 
-        /* User doesn't exists, create it when pw_storage is kerberos. */
-        if ($this->pw_storage == "kerberos"){
+        /* User doesn't exists, create it when pw_storage is kerberos or SASL. */
+        if ($this->pw_storage == "kerberos" || $this->pw_storage == "sasl" ){
           $ret= kadm5_create_principal ( $handle, $principal);
 
           if ($ret === FALSE){
@@ -815,11 +979,14 @@ class user extends plugin
 
     /* Optionally execute a command after we're done */
     if ($mode == "add"){
-      $this->handle_post_events("add");
+      $this->handle_post_events("add",array("uid" => $this->uid));
     } elseif ($this->is_modified){
-      $this->handle_post_events("modify");
+      $this->handle_post_events("modify",array("uid" => $this->uid));
     }
 
+    /* Fix tagging if needed */
+    $this->handle_object_tagging();
+
     return (0);
   }
 
@@ -827,10 +994,18 @@ class user extends plugin
   /* Check formular input */
   function check()
   {
-    $message= array();
+    /* Call common method to give check the hook */
+    $message= plugin::check();
 
     /* Assemble cn */
-    $this->cn= $this->givenName." ".$this->sn;
+    $pt= "";
+    if(isset($this->config->current['INCLUDE_PERSONAL_TITLE']) && preg_match("/true/i",$this->config->current['INCLUDE_PERSONAL_TITLE'])){
+      if(!empty($this->personalTitle)){
+        $pt = $this->personalTitle." ";
+      }
+    }
+    
+    $this->cn= $pt.$this->givenName." ".$this->sn;
 
     /* Permissions for that base? */
     if (isset($this->config->current['DNMODE']) && $this->config->current['DNMODE'] == "uid"){
@@ -885,7 +1060,7 @@ class user extends plugin
     }
 
     /* Check for valid input */
-    if (!is_uid($this->uid)){
+    if ($this->is_modified && !is_uid($this->uid)){
       $message[]= _("The field 'Login' contains invalid characters. Lowercase, numbers and dashes are allowed.");
     }
     if (!is_url($this->labeledURI)){
@@ -899,9 +1074,6 @@ class user extends plugin
     }
 
     /* Check phone numbers */
-    if (!is_phone_nr($this->homePhone)){
-      $message[]= _("The field 'Phone' contains an invalid phone number.");
-    }
     if (!is_phone_nr($this->telephoneNumber)){
       $message[]= _("The field 'Phone' contains an invalid phone number.");
     }
@@ -916,12 +1088,12 @@ class user extends plugin
     }
 
     /* Check for reserved characers */
-    if (preg_match ('/[,+"<>;]/', $this->givenName)){
+    if (preg_match ('/[,+"?\'()=<>;]/', $this->givenName)){
       $message[]= _("The field 'Given name' contains invalid characters.");
-  }
-  if (preg_match ('/[,+"<>;]/', $this->sn)){
-    $message[]= _("The field 'Name' contains invalid characters.");
-  }
+    }
+    if (preg_match ('/[,+"?\'()=<>;]/', $this->sn)){
+      $message[]= _("The field 'Name' contains invalid characters.");
+    }
 
   return $message;
   }
@@ -964,7 +1136,8 @@ class user extends plugin
       if ($ei) {
         if ($info = ldap_get_values_len($ds, $ei, "jpegPhoto")){
           $this->photoData= $info[0];
-          $_SESSION['picture']= $this->photoData;
+          $_SESSION['binary']= $this->photoData;
+          $_SESSION['binarytype']= "image/jpeg";
           $this->jpegPhoto= "";
         }
       }
@@ -1012,16 +1185,17 @@ class user extends plugin
 
 
   /* Load picture from file to object */
-  function set_picture($filename)
+  function set_picture($filename ="")
   {
-    if (!is_file($filename)){
+    if (!is_file($filename) || $filename == ""){
       $filename= "./images/default.jpg";
       $this->jpegPhoto= "*removed*";
     }
 
     $fd = fopen ($filename, "rb");
     $this->photoData= fread ($fd, filesize ($filename));
-    $_SESSION['picture']= $this->photoData;
+    $_SESSION['binary']= $this->photoData;
+    $_SESSION['binarytype']= "image/jpeg";
     $this->jpegPhoto= "";
 
     fclose ($fd);
@@ -1032,9 +1206,13 @@ class user extends plugin
   function set_cert($cert, $filename)
   {
     $fd = fopen ($filename, "rb");
-    $this->$cert= fread ($fd, filesize ($filename));
-    fclose ($fd);
-    $this->is_modified= TRUE;
+    if (filesize($filename)>0) {
+      $this->$cert= fread ($fd, filesize ($filename));
+      fclose ($fd);
+      $this->is_modified= TRUE;
+    } else {
+      print_red(_("Could not open specified certificate!"));
+    }
   }
 
   /* Adapt from given 'dn' */
@@ -1075,6 +1253,121 @@ class user extends plugin
     }
   }
 
+  /* This avoids that users move themselves out of their rights. 
+   */
+  function allowedBasesToMoveTo()
+  {
+    $allowed = array();
+    $ret_all = false;
+    if($this->uid == $_SESSION['ui']->username){
+      $ldap= $this->config->get_ldap_link(); 
+      $ldap->cd($this->config->current['BASE']); 
+      $ldap->search("(&(objectClass=posixGroup)(memberUid=".$_SESSION['ui']->username."))",array("gosaSubtreeACL"));
+       
+      while($attrs = $ldap->fetch()){
+    
+        if(isset($attrs['gosaSubtreeACL'])){
+        
+          foreach($attrs['gosaSubtreeACL'] as $attr){
+            if((preg_match("/:user#/",$attr))||(preg_match("/:all/",$attr))){
+              $s =  preg_replace("/^.*".get_groups_ou().",/","",$attrs['dn']);
+
+              foreach($this->config->idepartments as $key => $dep) {
+                if(preg_match("/".$s."/i",$key)){
+                  $allowed[$key] = $dep;
+                }
+              }
+            }
+          }
+        }
+      }
+      if(count($allowed) == 0){
+        foreach($this->config->idepartments as $key => $dep) {
+          if($this->base==$key){
+            $allowed[$key] = $dep;
+          }
+        }
+      }  
+  
+      return($allowed);
+      
+    }else{
+      return($this->config->idepartments);
+    }
+  } 
+
+
+  function getCopyDialog()
+  {
+    $str = "";
+
+    $_SESSION['binary'] = $this->photoData; 
+    $_SESSION['binarytype']= "image/jpeg";
+
+    /* Get random number for pictures */
+    srand((double)microtime()*1000000); 
+    $rand = rand(0, 10000);
+
+    $smarty = get_smarty();
+
+    $smarty->assign("passwordTodo","clear");
+
+    if(isset($_POST['passwordTodo'])){
+      $smarty->assign("passwordTodo",$_POST['passwordTodo']);
+    }
+
+    $smarty->assign("sn",       $this->sn);
+    $smarty->assign("givenName",$this->givenName);
+    $smarty->assign("uid",      $this->uid);
+    $smarty->assign("rand",     $rand);
+    $str = $smarty->fetch(get_template_path("paste_generic.tpl",TRUE,dirname(__FILE__)));
+
+
+    $ret = array();
+    $ret['string'] = $str;
+    $ret['status'] = "";  
+    return($ret);
+  }
+
+  function saveCopyDialog()
+  {
+
+    if((isset($_FILES['picture_file']['tmp_name'])) && ($_FILES['picture_file']['size'] > 0)){
+      $this->set_picture($_FILES['picture_file']['tmp_name']);
+    }
+
+    /* Remove picture? */
+    if (isset($_POST['picture_remove'])){
+      $this->jpegPhoto= "*removed*";
+      $this->set_picture ("./images/default.jpg");
+      $this->is_modified= TRUE;
+    }
+
+    $attrs = array("uid","givenName","sn");
+    foreach($attrs as $attr){
+      if(isset($_POST[$attr])){
+        $this->$attr = $_POST[$attr];
+      }
+    } 
+  }
+
+
+  function PrepareForCopyPaste($source)
+  {
+    plugin::PrepareForCopyPaste($source);
+
+    /* Reset certificate information addepted from source user
+        to avoid setting the same user certificate for the destination user. */
+    $this->userPKCS12= "";
+    $this->userSMIMECertificate= "";
+    $this->userCertificate= "";
+    $this->certificateSerialNumber= "";
+    $this->old_certificateSerialNumber= "";
+    $this->old_userPKCS12= "";
+    $this->old_userSMIMECertificate= "";
+    $this->old_userCertificate= "";
+  }
 }
 
 // vim:tabstop=2:expandtab:shiftwidth=2:filetype=php:syntax:ruler: