* Copyright (C) 2002-2003 Jean-Louis Bergamo * Copyright (C) 2004-2010 Laurent Destailleur * Copyright (C) 2004 Eric Seigne * Copyright (C) 2005-2010 Regis Houssin * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. */ /** * \file htdocs/user/group/perms.php * \brief Onglet user et permissions de la fiche utilisateur * \version $Id$ */ require("../../main.inc.php"); require_once(DOL_DOCUMENT_ROOT.'/user/class/usergroup.class.php'); require_once(DOL_DOCUMENT_ROOT."/lib/usergroups.lib.php"); $langs->load("users"); $module=isset($_GET["module"])?$_GET["module"]:$_POST["module"]; // Defini si peux lire les permissions $canreadperms=($user->admin || ($user->rights->user->group->read && $user->rights->user->group->readperms)); if (! $canreadperms) accessforbidden(); // Defini si peux modifier les permissions $caneditperms=($user->admin || $user->rights->user->group->write); /** * Actions */ if ($_GET["action"] == 'addrights' && $caneditperms) { $editgroup = new Usergroup($db,$_GET["id"]); $editgroup->addrights($_GET["rights"],$module); } if ($_GET["action"] == 'delrights' && $caneditperms) { $editgroup = new Usergroup($db,$_GET["id"]); $editgroup->delrights($_GET["rights"],$module); } /* ************************************************************************** */ /* */ /* Visu et edition */ /* */ /* ************************************************************************** */ $form = new Form($db); llxHeader('',$langs->trans("Permissions")); if ($_GET["id"]) { $fgroup = new Usergroup($db, $_GET["id"]); $fgroup->fetch($_GET["id"]); $fgroup->getrights(); /* * Affichage onglets */ $head = group_prepare_head($fgroup); $title = $langs->trans("Group"); dol_fiche_head($head, 'rights', $title, 0, 'group'); $db->begin(); // Charge les modules soumis a permissions $modules = array(); foreach ($conf->file->dol_document_root as $dirroot) { $dir = $dirroot . "/includes/modules/"; // Load modules attributes in arrays (name, numero, orders) from dir directory //print $dir."\n
"; $handle=@opendir($dir); if ($handle) { while (($file = readdir($handle))!==false) { if (is_readable($dir.$file) && substr($file, 0, 3) == 'mod' && substr($file, dol_strlen($file) - 10) == '.class.php') { $modName = substr($file, 0, dol_strlen($file) - 10); if ($modName) { include_once($dir."/".$file); $objMod = new $modName($db); if ($objMod->rights_class) { $ret=$objMod->insert_permissions(0); $modules[$objMod->rights_class]=$objMod; //print "modules[".$objMod->rights_class."]=$objMod;"; } } } } } } $db->commit(); // Lecture des droits groupes $permsgroup = array(); $sql = "SELECT r.id, r.libelle, r.module "; $sql.= " FROM ".MAIN_DB_PREFIX."rights_def as r"; $sql.= ", ".MAIN_DB_PREFIX."usergroup_rights as ugr"; $sql.= " WHERE ugr.fk_id = r.id"; $sql.= " AND r.entity = ".$conf->entity; $sql.= " AND ugr.fk_usergroup = ".$fgroup->id; $result=$db->query($sql); if ($result) { $num = $db->num_rows($result); $i = 0; while ($i < $num) { $obj = $db->fetch_object($result); array_push($permsgroup,$obj->id); $i++; } $db->free($result); } else { dol_print_error($db); } /* * Ecran ajout/suppression permission */ print ''; // Ref print ''; print ''; print ''; // Nom print ''; print '\n"; // Note print ''; print ''; print "\n"; print '

'.$langs->trans("Ref").'	'; print $form->showrefnav($fgroup,'id','',$user->rights->user->user->lire || $user->admin); print '
'.$langs->trans("Name").'	'.$fgroup->nom.''; if (! $fgroup->entity) { print img_redstar($langs->trans("GlobalGroup")); } print "
'.$langs->trans("Note").'	'.nl2br($fgroup->note).'

'; if ($user->admin) print info_admin($langs->trans("WarningOnlyPermissionOfActivatedModules")); print ''; print ''; print ''; if ($caneditperms) print ''; print ''; print ''; print ''; $sql = "SELECT r.id, r.libelle, r.module"; $sql.= " FROM ".MAIN_DB_PREFIX."rights_def as r"; $sql.= " WHERE r.libelle NOT LIKE 'tou%'"; // On ignore droits "tous" $sql.= " AND r.entity = ".$conf->entity; $sql.= " ORDER BY r.module, r.id"; $result=$db->query($sql); if ($result) { $num = $db->num_rows($result); $i = 0; $var = True; while ($i < $num) { $obj = $db->fetch_object($result); // Si la ligne correspond a un module qui n'existe plus (absent de includes/module), on l'ignore if (! $modules[$obj->module]) { $i++; continue; } if ($oldmod <> $obj->module) { $oldmod = $obj->module; $var = !$var; // Rupture detectee, on recupere objMod $objMod = $modules[$obj->module]; $picto=($objMod->picto?$objMod->picto:'generic'); if ($caneditperms) { print ''; print ''; print ''; print ''; print ''; } } print ''; // Module print ''; if (in_array($obj->id, $permsgroup)) { // Own permission by group if ($caneditperms) { print ''; } print ''; } else { // Do not own permission if ($caneditperms) { print ''; } print ''; } $perm_libelle=(($langs->trans("Permission".$obj->id)!=("Permission".$obj->id))?$langs->trans("Permission".$obj->id):$obj->libelle); print ''; print ''; $i++; } } print '

'.$langs->trans("Module").'			'.$langs->trans("Permissions").'
'.img_object('',$picto).' '.$objMod->getName(); print '	'; print ''.$langs->trans("All").""; print '/'; print ''.$langs->trans("None").""; print '
'.img_object('',$picto).' '.$objMod->getName().'	'.img_edit_remove($langs->trans("Remove")).'	'; print img_tick(); print '	'.img_edit_add($langs->trans("Add")).'		'.$perm_libelle. '

'; } $db->close(); llxFooter('$Date$ - $Revision$'); ?>