X-Git-Url: https://git.tokkee.org/?a=blobdiff_plain;f=include%2Fclass_plugin.inc;h=6cbec1b4eddc6cf2a5559cf6b04e21b406a3c27c;hb=440d89fb458e56ac12369a090b1156e2d6711160;hp=574ff73450a84f3db7f7e8f677635bbcab1262cb;hpb=8f458663064802aafec4e2f53aa178e7cc434137;p=gosa.git

diff --git a/include/class_plugin.inc b/include/class_plugin.inc
index 574ff7345..6cbec1b4e 100644
--- a/include/class_plugin.inc
+++ b/include/class_plugin.inc
@@ -226,8 +226,9 @@ class plugin
 
     /* This one is empty currently. Fabian - please fill in the docu code */
     $_SESSION['current_class_for_help'] = get_class($this);
+
     /* Reset Lock message POST/GET check array, to prevent perg_match errors*/
-    $_SESSION['LOCK_VARS_TO_USE'] =array();
+    $_SESSION['LOCK_VARS_TO_USE'] = $_SESSION['LOCK_VARS_USED'] =array();
   }
 
   /*! \brief execute plugin
@@ -1509,6 +1510,105 @@ class plugin
     return($deps);
   }
 
+  /* This function modifies object acls too, if an object is moved.
+   *  $old_dn   specifies the actually used dn
+   *  $new_dn   specifies the destiantion dn
+   */
+  function update_acls($old_dn,$new_dn,$output_changes = FALSE)
+  {
+    global $config;
+
+    /* Check if old_dn is empty. This should never happen */
+    if(empty($old_dn) || empty($new_dn)){
+      trigger_error("Failed to check acl dependencies, wrong dn given.");
+      return;
+    }
+
+    /* Update userinfo if necessary */
+    if($_SESSION['ui']->dn == $old_dn){
+      $_SESSION['ui']->dn = $new_dn;
+      gosa_log(_("Updated current user dn from '".$old_dn."' to '".$new_dn."'"));
+    }
+
+    /* Object was moved, ensure that all acls will be moved too */
+    if($new_dn != $old_dn && $old_dn != "new"){
+
+      /* get_ldap configuration */
+      $update = array();
+      $ldap = $config->get_ldap_link();
+      $ldap->cd ($config->current['BASE']);
+      $ldap->search("(&(objectClass=gosaAcl)(gosaAclEntry=*))",array("cn","gosaAclEntry"));
+      while($attrs = $ldap->fetch()){
+
+        $acls = array();
+
+        /* Walk through acls */
+        for($i = 0 ; $i <  $attrs['gosaAclEntry']['count'] ; $i ++ ){
+
+          /* Reset vars */
+          $found = false;
+
+          /* Get Acl parts */
+          $acl_parts = split(":",$attrs['gosaAclEntry'][$i]);
+
+          /* Get every single member for this acl */  
+          $members = array();  
+          if(preg_match("/,/",$acl_parts[2])){
+            $members = split(",",$acl_parts[2]);
+          }else{
+            $members = array($acl_parts[2]);
+          } 
+      
+          /* Check if member match current dn */
+          foreach($members as $key => $member){
+            $member = base64_decode($member);
+            if($member == $old_dn){
+              $found = true;
+              $members[$key] = base64_encode($new_dn);
+            }
+          } 
+         
+          /* Create new member string */ 
+          $new_members = "";
+          foreach($members as $member){
+            $new_members .= $member.",";
+          }
+          $new_members = preg_replace("/,$/","",$new_members);
+          $acl_parts[2] = $new_members;
+        
+          /* Reconstruckt acl entry */
+          $acl_str  ="";
+          foreach($acl_parts as $t){
+           $acl_str .= $t.":";
+          }
+          $acl_str = preg_replace("/:$/","",$acl_str);
+       }
+
+       /* Acls for this object must be adjusted */
+       if($found){
+
+          if($output_changes){
+            echo "<font color='green'>".
+                  _("Changing ACL dn")."&nbsp;:&nbsp;<br>&nbsp;-"._("from")."&nbsp;<b>&nbsp;".
+                  $old_dn.
+                  "</b><br>&nbsp;-"._("to")."&nbsp;<b>".
+                  $new_dn.
+                  "</b></font><br>";
+          }
+          $update[$attrs['dn']] =array();
+          foreach($acls as $acl){
+            $update[$attrs['dn']]['gosaAclEntry'][] = $acl;
+          }
+        }
+      }
+
+      /* Write updated acls */
+      foreach($update as $dn => $attrs){
+        $ldap->cd($dn);
+        $ldap->modify($attrs);
+      }
+    }
+  }
 }
 // vim:tabstop=2:expandtab:shiftwidth=2:filetype=php:syntax:ruler:
 ?>