";
+ foreach($this->dns as $dn){
+ $dns_names .= $dn."\n";
+ }
+ $dns_names .="";
+
+ /* Lock the current entry, so nobody will edit it during deletion */
+ if (count($this->dns) == 1){
+ $info = sprintf(_("You're about to delete the following entry: %s"), @LDAP::fix($dns_names));
+ } else {
+ $info = sprintf(_("You're about to delete the following entries: %s"), @LDAP::fix($dns_names));
+ }
+ $this->msg_dialog = new msg_dialog(_("Delete users"),$info,CONFIRM_DIALOG);
+ $this->current_action = $s_action;
+ }
+ }
+
+
+ /********************
+ Delete MULTIPLE entries confirmed
+ ********************/
+
+ /* Confirmation for deletion has been passed. Users should be deleted. */
+ if ($this->current_action == "del_multiple" && is_object($this->msg_dialog) && $this->msg_dialog->is_confirmed()){
+
+ $this->current_action = "";
+
+ /* Remove user by user and check acls before removeing them */
+ foreach($this->dns as $key => $dn){
+
+ $acl = $this->ui->get_permissions($dn, "users/user");
+ if (preg_match('/d/', $acl)){
+
+ /* Delete request is permitted, perform LDAP action */
+ $this->usertab= new usertabs($this->config, $this->config->data['TABS']['USERTABS'],$dn);
+ $this->usertab->set_acl_base();
+ $this->usertab->delete ();
+ unset ($this->usertab);
+ $this->usertab= NULL;
+ } else {
+ msg_dialog::display(_("User delete"),sprintf(_("You are not allowed to delete the user '%s'!"),$dn),WARNING_DIALOG);
+ if(isset($this->ui->uid)){
+ new log("security","users/".get_class($this),$dn,array(),"Tried to trick deletion.");
+ }
+ }
+ /* Remove lock file after successfull deletion */
+ del_lock ($dn);
+ unset($this->dns[$key]);
+ }
+ }
+
+
+ /********************
+ Delete MULTIPLE entries Canceled
+ ********************/
+
+ /* Remove lock */
+ if(isset($_POST['delete_multiple_user_cancel'])){
+ foreach($this->dns as $key => $dn){
+ del_lock ($dn);
+ unset($this->dns[$key]);
+ }
+ }
+
+
+ /********************
+ Toggle lock status for user
+ ********************/
+
+ if($s_action == "toggle_lock_status" && isset($this->list[$s_entry])){
+
+ /* Get entry check current status */
+ $val = $this->list[$s_entry];
+ $pwd = $val['userPassword'][0];
+
+ if(!preg_match("/^\{[^\}]/",$pwd)){
+ trigger_error("Can not deactivate user which is using clear password encryption.");
+ }else{
+
+ $locked = false;
+ if(preg_match("/^[^\}]*+\}!/",$pwd)){
+ $locked = true;
+ }
+
+ /* Create ldap array to update status */
+ $attrs = array("userPassword" => $pwd);
+ if($locked){
+ $attrs['userPassword'] = preg_replace("/(^[^\}]+\})!(.*$)/","\\1\\2",$attrs['userPassword']);
+ }else{
+ $attrs['userPassword'] = preg_replace("/(^[^\}]+\})(.*$)/","\\1!\\2",$attrs['userPassword']);
+ }
+
+ /* Write new status back to ldap */
+ $ldap = $this->config->get_ldap_link();
+ $ldap->cd($val['dn']);
+ $ldap->modify($attrs);
+ if($locked){
+ show_ldap_error($ldap->get_error(),_("Could not set user status from locked to unlocked."));
+ }else{
+ show_ldap_error($ldap->get_error(),_("Could not set user status from unlocked to locked."));
+ }
+ }
+ }
+
+
/********************
Delete entry requested, display confirm dialog
********************/
@@ -302,10 +517,14 @@ class userManagement extends plugin
return(gen_locked_message ($user, $this->dn));
}
+
/* Lock the current entry, so nobody will edit it during deletion */
- add_lock ($this->dn, $this->ui->dn);
- $smarty->assign("info", sprintf(_("You're about to delete the user %s."), @LDAP::fix($this->dn)));
- return($smarty->fetch(get_template_path('remove.tpl', TRUE)));
+# add_lock ($this->dn, $this->ui->dn);
+# $smarty->assign("info", sprintf(_("You're about to delete the user %s."), @LDAP::fix($this->dn)));
+# $smarty->assign("multiple", false);
+# return($smarty->fetch(get_template_path('remove.tpl', TRUE)));
+ $this->msg_dialog = new msg_dialog( _("Delete user"),sprintf(_("You're about to delete the user %s."), @LDAP::fix($this->dn)),CONFIRM_DIALOG);
+ $this->current_action = $s_action;
}
@@ -314,8 +533,10 @@ class userManagement extends plugin
********************/
/* Confirmation for deletion has been passed. User should be deleted. */
- if (isset($_POST['delete_user_confirm'])){
+ if ($this->current_action == "del" && is_object($this->msg_dialog) && $this->msg_dialog->is_confirmed()){
+ $this->current_action = "";
+
/* Some nice guy may send this as POST, so we've to check
for the permissions again. */
@@ -327,17 +548,17 @@ class userManagement extends plugin
$this->usertab= new usertabs($this->config, $this->config->data['TABS']['USERTABS'],$this->dn);
$this->usertab->set_acl_base();
$this->usertab->delete ();
- gosa_log ("User object '".$this->dn."' has been removed");
unset ($this->usertab);
$this->usertab= NULL;
+ msg_dialog::display(_("User delted"),_("User successfully removed."),INFO_DIALOG);
} else {
/* Normally this shouldn't be reached, send some extra
logs to notify the administrator */
- print_red (_("You are not allowed to delete this user!"));
+ msg_dialog::display(_("User delete"),_("You are not allowed to delete this user!"),WARNING_DIALOG);
if(isset($this->ui->uid)){
- gosa_log ("Warning: '".$this->ui->uid."' tried to trick user deletion.");
+ new log("security","users/".get_class($this),$this->dn,array(),"Tried to trick deletion.");
}
}
@@ -384,10 +605,8 @@ class userManagement extends plugin
/* Save user data to ldap */
if($this->usertab->save() == 1){
- gosa_log ("User object '".$this->dn."' saving failed.");
return;
}
- gosa_log ("User object '".$this->dn."' has been saved");
if (!isset($_POST['edit_apply'])){
/* User has been saved successfully, remove lock from LDAP. */
@@ -397,6 +616,7 @@ class userManagement extends plugin
/* In case of new users, ask for a password, skip this for templates */
if (($set_pass || $this->usertab->password_change_needed()) && !$this->is_template){
+ $this->dn = $this->usertab->dn;
return($smarty->fetch(get_template_path('password.tpl', TRUE)));
}
@@ -640,8 +860,13 @@ class userManagement extends plugin
$display= $this->usertab->execute();
/* Don't show buttons if tab dialog requests this */
- if(isset($this->usertab->by_object)){
- if (!$this->usertab->by_object[$this->usertab->current]->dialog){
+
+ $dia = FALSE;
+ if(isset($this->usertab->by_object[$this->usertab->current]->dialog)){
+ $dia = $this->usertab->by_object[$this->usertab->current]->dialog;
+ }
+
+ if(!is_object($dia) && $dia != TRUE){
$display.= "\n"; $display.= "\n"; $display.= " \n"; @@ -652,7 +877,6 @@ class userManagement extends plugin $display.= "\n"; $display.= "
"; } - } return ($display); } @@ -669,7 +893,7 @@ class userManagement extends plugin /* Add departments if subsearch is disabled */ if(!$this->DivListUsers->SubSearch){ - $this->DivListUsers->AddDepartments($this->DivListUsers->selectedBase,4); + $this->DivListUsers->AddDepartments($this->DivListUsers->selectedBase,4,1); } $this->reload(); $this->DivListUsers->setEntries($this->list); @@ -737,25 +961,34 @@ class userManagement extends plugin if ($SubSearch){ $ListTemp = get_list($filter, "users", $base, - array("uid", "givenName", "sn", "objectClass"), GL_SUBSEARCH | GL_SIZELIMIT); + array("uid", "givenName", "sn", "objectClass","userPassword"), GL_SUBSEARCH | GL_SIZELIMIT); } else { $base= get_people_ou().$base; $ListTemp = get_list($filter, "users", $base, - array("uid", "givenName", "sn", "objectClass"), GL_SIZELIMIT); + array("uid", "givenName", "sn", "objectClass","userPassword"), GL_SIZELIMIT); } $SortTemp = array(); $List = array(); foreach($ListTemp as $Key => $Entry){ - // Generate caption for rows - if (isset($Entry["sn"]) && isset($Entry["givenName"])){ - $display= $Entry["sn"][0].", ".$Entry["givenName"][0]." [".$Entry["uid"][0]."]"; - } else { - $display= "[".$Entry["uid"][0]."]"; - } - $display = strtolower($display); - $List[$display] = $Entry; - $SortTemp[$display] = $display; + /* Skip entries that are not located under the people ou (normaly 'ou=people,') + * Else winstations will be listed too, if you use the subtree flag. + */ + if(!preg_match("/".normalizePreg(get_people_ou())."/i",$Entry['dn'])){ + continue; + }else{ + + // Generate caption for rows + if (isset($Entry["sn"]) && isset($Entry["givenName"])){ + $display= $Entry["sn"][0].", ".$Entry["givenName"][0]." [".$Entry["uid"][0]."]"; + } else { + $display= "[".$Entry["uid"][0]."]"; + } + + $display = strtolower($display); + $List[$display] = $Entry; + $SortTemp[$display] = $display; + } } sort($SortTemp); reset($SortTemp); @@ -774,70 +1007,81 @@ class userManagement extends plugin } } - - /* Perform copy & paste requests - If copy&paste is in progress this returns a dialog to fix required attributes - */ - function copyPasteHandling($s_action,$s_entry) + + function copyPasteHandling_from_queue($s_action,$s_entry) { - /* Only perform copy/paste if it is enabled */ - if($this->CopyPasteHandler){ + /* Check if Copy & Paste is disabled */ + if(!is_object($this->CopyPasteHandler)){ + return(""); + } + + /* Add a single entry to queue */ + if($s_action == "cut" || $s_action == "copy"){ + /* Cleanup object queue */ + $this->CopyPasteHandler->cleanup_queue(); + $dn = $this->list[$s_entry]['dn']; + $this->CopyPasteHandler->add_to_queue($dn,$s_action,"usertabs","USERTABS","users"); + } - /* Prepare current object to be pasted */ - if( $s_action == "editPaste" || $this->CopyPasteHandler->stillOpen()){ + /* Add entries to queue */ + if($s_action == "copy_multiple" || $s_action == "cut_multiple"){ - $this->CopyPasteHandler->save_object(); - $this->CopyPasteHandler->SetVar("base", $this->DivListUsers->selectedBase); + /* Cleanup object queue */ + $this->CopyPasteHandler->cleanup_queue(); - /* Execute copy & paste dialog and display returned data, normaly a dialog which allows - us to solve all attribute mismatches for this object. - If nothing is returned, copy & paste was succesfully or aborted */ - if(($ret= $this->CopyPasteHandler->execute())){ - return ($ret); - } + /* Add new entries to CP queue */ + foreach($this->list_get_selected_items() as $id){ + $dn = $this->list[$id]['dn']; - /* Use the last dn to search for it's ID in the newly generated list. */ - $dn= $this->CopyPasteHandler->lastdn; - foreach($this->list as $id => $entry){ - if($entry['dn'] == $dn){ - $s_entry= $id; - break; - } + if($s_action == "copy_multiple"){ + $this->CopyPasteHandler->add_to_queue($dn,"copy","usertabs","USERTABS","users"); } - - /* Set CPPasswordChange to s_entry which indicates that this entry requires a new password. */ - if(isset($_POST['passwordTodo']) && ($_POST['passwordTodo'] == "new")){ - $this->CPPasswordChange = $s_entry; + if($s_action == "cut_multiple"){ + $this->CopyPasteHandler->add_to_queue($dn,"cut","usertabs","USERTABS","users"); } } + } + + /* Start pasting entries */ + if($s_action == "editPaste"){ + $this->start_pasting_copied_objects = TRUE; + } - /* Copy selected object - Create a new empty object and the current selected object. - Send both to copy&paste class*/ - if($s_action == "copy"){ - $this->CopyPasteHandler->Clear(); - $dn= $this->list[trim($s_entry)]['dn']; - $obj = new usertabs($this->config, $this->config->data['TABS']['USERTABS'], $dn); - $obj->set_acl_base($dn); - $objNew = new usertabs($this->config, $this->config->data['TABS']['USERTABS'], "new"); - $objNew->set_acl_base($dn); - - $this->CopyPasteHandler->Copy($obj,$objNew); + /* Return C&P dialog */ + if($this->start_pasting_copied_objects && $this->CopyPasteHandler->entries_queued()){ + + /* Load entry from queue and set base */ + $this->CopyPasteHandler->load_entry_from_queue(); + $this->CopyPasteHandler->SetVar("base",$this->DivListUsers->selectedBase); + + /* Get dialog */ + $data = $this->CopyPasteHandler->execute(); + + /* Set CPPasswordChange to s_entry which indicates that this entry requires a new password. */ + if(isset($_POST['passwordTodo']) && ($_POST['passwordTodo'] == "new")){ + $s_entry = $this->CopyPasteHandler->last_entry(); + $this->reload(); + foreach($this->list as $key => $entry){ + if($entry['dn'] == $s_entry){ + $this->CPPasswordChange = $key; + } + } } - /* Cut selected object. - Open user object and send it to the copy & paste handler */ - if($s_action == "cut"){ - $this->CopyPasteHandler->Clear(); - $dn= $this->list[trim($s_entry)]['dn']; - $obj= new usertabs($this->config, $this->config->data['TABS']['USERTABS'], $dn); - $obj->set_acl_base($dn); - $obj->set_acl_category("users"); - $this->CopyPasteHandler->Cut($obj); + /* Return dialog data */ + if(!empty($data) && $this->CPPasswordChange == ""){ + return($data); } } + + /* Automatically disable status for pasting */ + if(!$this->CopyPasteHandler->entries_queued()){ + $this->start_pasting_copied_objects = FALSE; + } + return(""); } + function save_object() { /* Handle divlist filter && department selection*/ @@ -846,6 +1090,20 @@ class userManagement extends plugin } } + + function list_get_selected_items() + { + $ids = array(); + foreach($_POST as $name => $value){ + if(preg_match("/^item_selected_[0-9]*$/",$name)){ + $id = preg_replace("/^item_selected_/","",$name); + $ids[$id] = $id; + } + } + return($ids); + } + + /* A set of disabled and therefore overloaded functions. They are not needed in this class. */ function remove_from_parent() { }