";
+ }
+
+
+ function recurseActions($actions)
+ {
+ static $level= 2;
+ $result= "
";
+ $separator= "";
+
+ foreach ($actions as $action) {
+
+ // Skip the entry completely if there's no permission to execute it
+ if (!$this->hasActionPermission($action, $this->filter->base)) {
+ continue;
+ }
+
+ // Fill image if set
+ $img= "";
+ if (isset($action['image'])){
+ $img= "$img"._($action['label'])." ";
+ }
+ $result.= $this->recurseActions($action['action'])."";
+ $level--;
+ $separator= "";
+ continue;
+ }
+
+ // Render entry elseways
+ if (isset($action['label'])){
+ $result.= "$img"._($action['label'])." ";
+ }
+
+ // Check for special types
+ switch ($action['type']) {
+ case 'copypaste':
+ $result.= $this->renderCopyPasteMenu($separator);
+ break;
+
+ case 'snapshot':
+ $result.= $this->renderSnapshotMenu($separator);
+ break;
+
+ case 'daemon':
+ $result.= $this->renderDaemonMenu($separator);
+ break;
+ }
+
+ $separator= "";
+ }
+
+ $result.= " ";
return $result;
}
- static function filterActions()
+ function hasActionPermission($action, $dn)
+ {
+ $ui= get_userinfo();
+
+ if (isset($action['acl'])) {
+ $acls= $action['acl'];
+ if (!is_array($acls)) {
+ $acls= array($acls);
+ }
+
+ // Every ACL has to pass
+ foreach ($acls as $acl) {
+ $module= $this->module;
+ $aclList= array();
+
+ // Split for category and plugins if needed
+ // match for "[rw]" style entries
+ if (preg_match('/^\[([rwcdm]+)\]$/', $acl, $match)){
+ $aclList= array($match[1]);
+ }
+
+ // match for "users[rw]" style entries
+ if (preg_match('/^([a-zA-Z0-9]+)\[([rwcdm]+)\]$/', $acl, $match)){
+ $module= $match[1];
+ $aclList= array($match[2]);
+ }
+
+ // match for "users/user[rw]" style entries
+ if (preg_match('/^([a-zA-Z0-9]+\/[a-zA-Z0-9]+)\[([rwcdm]+)\]$/', $acl, $match)){
+ $module= $match[1];
+ $aclList= array($match[2]);
+ }
+
+ // match "users/user[userPassword:rw(,...)*]" style entries
+ if (preg_match('/^([a-zA-Z0-9]+\/[a-zA-Z0-9]+)\[([a-zA-Z0-9]+:[rwcdm]+(,[a-zA-Z0-9]+:[rwcdm]+)*)\]$/', $acl, $match)){
+ $module= $match[1];
+ $aclList= split(',', $match[2]);
+ }
+
+ // Walk thru prepared ACL by using $module
+ foreach($aclList as $sAcl) {
+ $checkAcl= "";
+
+ // Category or detailed permission?
+ if (strpos('/', $module) === false) {
+ if (preg_match('/([a-zA-Z0-9]+):([rwcdm]+)/', $sAcl, $m) ) {
+ $checkAcl= $ui->get_permissions($dn, $module, $m[1]);
+ $sAcl= $m[2];
+ } else {
+ $checkAcl= $ui->get_permissions($dn, $module, '0');
+ }
+ } else {
+ $checkAcl= $ui->get_category_permissions($dn, $module);
+ }
+
+ // Split up remaining part of the acl and check if it we're
+ // allowed to do something...
+ $parts= str_split($sAcl);
+ foreach ($parts as $part) {
+ if (strpos($checkAcl, $part) === false){
+ return false;
+ }
+ }
+
+ }
+ }
+ }
+
+ return true;
+ }
+
+
+ function refreshBasesList()
{
- return "TBD";
+ global $config;
+ $ui= get_userinfo();
+
+ // Do some array munching to get it user friendly
+ $ids= $config->idepartments;
+ $d= $ui->get_module_departments($this->module);
+ $k_ids= array_keys($ids);
+ $deps= array_intersect($d,$k_ids);
+
+ // Fill internal bases list
+ $this->bases= array();
+ foreach($k_ids as $department){
+ $this->bases[$department] = $ids[$department];
+ }
}
+
+
+ function getDepartments()
+ {
+ $departments= array();
+ $ui= get_userinfo();
+
+ // Get list of supported department types
+ $types = departmentManagement::get_support_departments();
+
+ // Load departments allowed by ACL
+ $validDepartments = $ui->get_module_departments($this->module);
+
+ // Build filter and look in the LDAP for possible sub departments
+ // of current base
+ $filter= "(&(objectClass=gosaDepartment)(|";
+ $attrs= array("description", "objectClass");
+ foreach($types as $name => $data){
+ $filter.= "(objectClass=".$data['OC'].")";
+ $attrs[]= $data['ATTR'];
+ }
+ $filter.= "))";
+ $res= get_list($filter, $this->module, $this->base, $attrs, GL_NONE | GL_SIZELIMIT);
+
+ // Analyze list of departments
+ foreach ($res as $department) {
+ if (!in_array($department['dn'], $validDepartments)) {
+ continue;
+ }
+
+ // Add the attribute where we use for sorting
+ $oc= null;
+ foreach(array_keys($types) as $type) {
+ if (in_array($type, $department['objectClass'])) {
+ $oc= $type;
+ break;
+ }
+ }
+ $department['sort-attribute']= $types[$oc]['ATTR'];
+
+ // Move to the result list
+ $departments[]= $department;
+ }
+
+ return $departments;
+ }
+
+
+ function renderCopyPasteMenu($separator, $copy= true, $cut= true)
+ {
+ // We can only provide information if we've got a copypaste handler
+ // instance
+ if(!(isset($this->copyPasteHandler) && is_object($this->copyPasteHandler))){
+ return "";
+ }
+
+ // Presets
+ $result= "";
+ $read= $paste= false;
+ $ui= get_userinfo();
+
+ // Switch flags to on if there's at least one category which allows read/paste
+ foreach($this->categories as $category){
+ $read= $read || preg_match('/r/', $ui->get_category_permissions($this->base, $category));
+ $paste= $paste || $ui->is_pasteable($this->base, $category) == 1;
+ }
+
+
+ // Draw entries that allow copy and cut
+ if($read){
+
+ // Copy entry
+ if($copy){
+ $result.= "
".$event['MenuImage']." ".$event['s_Menu_Name']." ";
+ $separator= "";
+ }
+ }
+ }
+
+ return $result;
+ }
+
}
?>
![](images/lists/sort-".($this->sortDirection[$index]?"up":"down").".png "\".($this->sortDirection[$index]?_(\"Up\"):_(\"Down\")).\"")
";
+ }
+ $sortable= (isset($config['sortAttribute']));
+
+ $link= "href='?plug=".$_GET['plug']."&PID=".$this->pid."&act=SORT_$index'";
+ if (isset($config['label'])) {
+ if ($sortable) {
+ $this->header[$index]= "
");
@@ -181,21 +383,86 @@ echo "action menu, sorting, department browsing, filter base handling, bottom li
}
- function setFilter($filter)
+ function update()
{
- $this->filter= &$filter;
- $this->entries= $this->filter->query();
- }
+ global $config;
+ $ui= get_userinfo();
+ // Reset object counter
+ $this->objectTypeCount= array();
- function update()
- {
// Do not do anything if this is not our PID
- # DISABLED because the object is not in the session
- #if(isset($_REQUEST['PID']) && $_REQUEST['PID'] != $this->pid) {
- # return;
- #}
+ if(isset($_REQUEST['PID']) && $_REQUEST['PID'] != $this->pid) {
+ return;
+ }
+
+ // Save base
+ if (isset($_POST['BASE']) && $this->baseMode == true) {
+ $base= validate($_POST['BASE']);
+ if (isset($this->bases[$base])) {
+ $this->base= $base;
+ }
+ }
+
+ // Override the base if we got a message from the browser navigation
+ if ($this->departmentBrowser && isset($_GET['act'])) {
+ if (preg_match('/^department_([0-9]+)$/', validate($_GET['act']), $match)){
+ if (isset($this->departments[$match[1]])){
+ $this->base= $this->departments[$match[1]]['dn'];
+ }
+ }
+ }
+
+ // Filter GET with "act" attributes
+ if (isset($_GET['act'])) {
+ $key= validate($_GET['act']);
+ if (preg_match('/^SORT_([0-9]+)$/', $key, $match)) {
+ // Switch to new column or invert search order?
+ $column= $match[1];
+ if ($this->sortColumn != $column) {
+ $this->sortColumn= $column;
+ } else {
+ $this->sortDirection[$column]= !$this->sortDirection[$column];
+ }
+
+ // Allow header to update itself according to the new sort settings
+ $this->renderHeader();
+ }
+ }
+
+ // Override base if we got signals from the navigation elements
+ $action= "";
+ foreach ($_POST as $key => $value) {
+ if (preg_match('/^(ROOT|BACK|HOME)_x$/', $key, $match)) {
+ $action= $match[1];
+ break;
+ }
+ }
+
+ // Navigation handling
+ if ($action == 'ROOT') {
+ $deps= $ui->get_module_departments($this->module);
+ $this->base= $deps[0];
+ }
+ if ($action == 'BACK') {
+ $deps= $ui->get_module_departments($this->module);
+ $base= preg_replace("/^[^,]+,/", "", $this->base);
+ if(in_array_ics($base, $deps)){
+ $this->base= $base;
+ }
+ }
+ if ($action == 'HOME') {
+ $ui= get_userinfo();
+ $this->base= get_base_from_people($ui->dn);
+ }
+ // Reload departments
+ if ($this->departmentBrowser){
+ $this->departments= $this->getDepartments();
+ }
+
+ // Update filter and refresh entries
+ $this->filter->setBase($this->base);
$this->entries= $this->filter->query();
}
@@ -235,6 +502,9 @@ echo "action menu, sorting, department browsing, filter base handling, bottom li
}
}
+ // Save number of columns for later use
+ $this->numColumns= count($cols);
+
return $result;
}
@@ -254,6 +524,50 @@ echo "action menu, sorting, department browsing, filter base handling, bottom li
}
// Watch out for filters and prepare to execute them
+ $data= $this->processElementFilter($data, $config, $row);
+
+ // Replace all non replaced %{...} instances because they
+ // are non resolved attributes or filters
+ $data= preg_replace('/%{[^}]+}/', ' ', $data);
+
+ return $data;
+ }
+
+
+ function renderBase()
+ {
+ $result= "";
+
+ // Reset the currently used base to the first DN we found if there
+ // was no match.
+ if(!$found){
+ $this->base = $firstDN;
+ }
+
+ return $result;
+ }
+
+
+ function processElementFilter($data, $config, $row)
+ {
preg_match_all("/%\{filter:([^(]+)\((.*)\)\}/", $data, $matches, PREG_SET_ORDER);
foreach ($matches as $match) {
@@ -301,28 +615,124 @@ echo "action menu, sorting, department browsing, filter base handling, bottom li
}
// Replace information
- $data= preg_replace('/'.preg_quote($match[0]).'/', call_user_func_array(array($cl, $method), $params), $data);
+ if ($cl == "listing") {
+ // Non static call - seems to result in errors
+ $data= @preg_replace('/'.preg_quote($match[0]).'/', call_user_func_array(array($this, "$method"), $params), $data);
+ } else {
+ // Static call
+ $data= preg_replace('/'.preg_quote($match[0]).'/', call_user_func_array(array($cl, $method), $params), $data);
+ }
}
return $data;
}
- static function filterObjectType($dn, $classes)
+ function getObjectType($types, $classes)
+ {
+ // Walk thru types and see if there's something matching
+ foreach ($types as $objectType) {
+ $ocs= $objectType['objectClass'];
+ if (!is_array($ocs)){
+ $ocs= array($ocs);
+ }
+
+ $found= true;
+ foreach ($ocs as $oc){
+ if (preg_match('/^!(.*)$/', $oc, $match)) {
+ $oc= $match[1];
+ if (in_array($oc, $classes)) {
+ $found= false;
+ }
+ } else {
+ if (!in_array($oc, $classes)) {
+ $found= false;
+ }
+ }
+ }
+
+ if ($found) {
+ return $objectType;
+ }
+ }
+
+ return null;
+ }
+
+
+ function filterObjectType($dn, $classes)
{
// Walk thru classes and return on first match
$result= " ";
- $prio= 99;
- foreach ($classes as $objectClass) {
- if (isset(listing::$objectTypes[$objectClass])){
- if (!isset(listing::$objectTypes[$objectClass]["priority"])){
- $result= "
";
+ continue;
+ }
+ } else {
+ if(!in_array($objectclass, $classes)) {
+ $result.= "
";
}
@@ -395,7 +817,7 @@ echo "action menu, sorting, department browsing, filter base handling, bottom li
/* Draw back button */
if($enableBack){
$result["BACK"]= "";
+ "title='"._("Go up one department")."' alt='"._("Up")."' name='BACK'>";
}else{
$result["BACK"]= "
";
}
@@ -403,14 +825,14 @@ echo "action menu, sorting, department browsing, filter base handling, bottom li
/* Draw home button */
if($enableHome){
$result["HOME"]= "";
+ "title='"._("Go to users department")."' alt='"._("Home")."' name='HOME'>";
}else{
$result["HOME"]= "
";
}
/* Draw reload button, this button is enabled everytime */
$result["RELOAD"]= "";
+ "title='"._("Reload list")."' name='REFRESH' alt='"._("Submit")."'>";
return ($result);
}
@@ -419,10 +841,9 @@ echo "action menu, sorting, department browsing, filter base handling, bottom li
function getAction()
{
// Do not do anything if this is not our PID
- # DISABLED because the object is not in the session
- #if(isset($_REQUEST['PID']) && $_REQUEST['PID'] != $this->pid) {
- # return;
- #}
+ if(isset($_REQUEST['PID']) && $_REQUEST['PID'] != $this->pid) {
+ return;
+ }
$result= array("targets" => array(), "action" => "");
@@ -434,6 +855,11 @@ echo "action menu, sorting, department browsing, filter base handling, bottom li
$result['action']= preg_replace('/^listing_([a-zA-Z_]+)_[0-9]+$/', '$1', $key);
$result['targets'][]= $this->entries[$target]['dn'];
}
+
+ // Drop targets if empty
+ if (count($result['targets']) == 0) {
+ unset($result['targets']);
+ }
return $result;
}
@@ -466,14 +892,417 @@ echo "action menu, sorting, department browsing, filter base handling, bottom li
}
}
+ // Filter POST with "act" attributes -> posted from action menu
+ if (isset($_POST['act']) && $_POST['act'] != '') {
+ $result['action']= validate($_POST['act']);
+ }
+
+ // Drop targets if empty
+ if (count($result['targets']) == 0) {
+ unset($result['targets']);
+ }
+ return $result;
+ }
+
+
+ function renderActionMenu()
+ {
+ // Don't send anything if the menu is not defined
+ if (!isset($this->xmlData['actionmenu']['action'])){
+ return "";
+ }
+
+ // Load shortcut
+ $actions= &$this->xmlData['actionmenu']['action'];
+ $result= "".
+ "
";
+
+ // Build ul/li list
+ $result.= $this->recurseActions($actions);
+
+ return "
";
+ }
+ $result.= $this->recurseActions($action['action'])."";
+ $level--;
+ $separator= "";
+ continue;
+ }
+
+ // Render entry elseways
+ if (isset($action['label'])){
+ $result.= "
"._("Copy")."";
+ $separator= "";
+ }
+
+ // Cut entry
+ if($cut){
+ $result.= "
"._("Cut")."";
+ $separator= "";
+ }
+ }
+
+ // Draw entries that allow pasting entries
+ if($paste){
+ if($this->copyPasteHandler->entries_queued()){
+ $result.= "
"._("Paste")."";
+ }else{
+ $result.= "
"._("Paste")."";
+ }
+ }
+
+ return($result);
+ }
+
+
+ function renderCopyPasteActions($row, $dn, $category, $class, $copy= true, $cut= true)
+ {
+ // We can only provide information if we've got a copypaste handler
+ // instance
+ if(!(isset($this->copyPasteHandler) && is_object($this->copyPasteHandler))){
+ return "";
+ }
+
+ // Presets
+ $ui = get_userinfo();
+ $result = "";
+
+ // Render cut entries
+ if($cut){
+ if($ui->is_cutable($dn, $category, $class)){
+ $result .= "";
+ }else{
+ $result.="
"._("Restore snapshots")."";
+ }else{
+ $result.= "
"._("Restore snapshots")."";
+ }
+ }
+
+ return($result);
+ }
+
+
+ function renderSnapshotActions($row, $dn, $category, $class, $copy= true, $cut= true)
+ {
+ // We can only provide information if we've got a snapshot handler
+ // instance
+ if(!(isset($this->snapshotHandler) && is_object($this->snapshotHandler))){
+ return "";
+ }
+
+ // Presets
+ $result= "";
+ $ui = get_userinfo();
+
+ // Only act if enabled here
+ if($this->snapshotHandler->enabled()){
+
+ // Draw restore button
+ if ($ui->allow_snapshot_restore($dn, $category)){
+
+ // Do we have snapshots for this dn?
+ if($this->snapshotHandler->hasSnapshots($dn)){
+ $result.= "";
+ } else {
+ $result.= "