* Copyright (C) 2002-2003 Jean-Louis Bergamo * Copyright (C) 2004-2010 Laurent Destailleur * Copyright (C) 2004 Eric Seigne * Copyright (C) 2005-2012 Regis Houssin * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 3 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program. If not, see . */ /** * \file htdocs/user/group/perms.php * \brief Onglet user et permissions de la fiche utilisateur */ require '../../main.inc.php'; require_once DOL_DOCUMENT_ROOT.'/user/class/usergroup.class.php'; require_once DOL_DOCUMENT_ROOT.'/core/lib/usergroups.lib.php'; require_once DOL_DOCUMENT_ROOT.'/core/lib/functions2.lib.php'; $langs->load("users"); $langs->load("admin"); $id=GETPOST('id','int'); $action=GETPOST('action', 'alpha'); $confirm=GETPOST('confirm', 'alpha'); $module=GETPOST('module', 'alpha'); $rights=GETPOST('rights', 'int'); // Defini si peux lire les permissions $canreadperms=($user->admin || $user->rights->user->user->lire); // Defini si peux modifier les permissions $caneditperms=($user->admin || $user->rights->user->user->creer); // Advanced permissions $advancedpermsactive=false; if (! empty($conf->global->MAIN_USE_ADVANCED_PERMS)) { $advancedpermsactive=true; $canreadperms=($user->admin || ($user->rights->user->group_advance->read && $user->rights->user->group_advance->readperms)); $caneditperms=($user->admin || $user->rights->user->group_advance->write); } if (! $canreadperms) accessforbidden(); /** * Actions */ if ($action == 'addrights' && $caneditperms) { $editgroup = new Usergroup($db); $result=$editgroup->fetch($id); if ($result > 0) $editgroup->addrights($rights, $module); } if ($action == 'delrights' && $caneditperms) { $editgroup = new Usergroup($db); $result=$editgroup->fetch($id); if ($result > 0) $editgroup->delrights($rights, $module); } /** * View */ $form = new Form($db); llxHeader('',$langs->trans("Permissions")); if ($id) { $fgroup = new Usergroup($db); $fgroup->fetch($id); $fgroup->getrights(); /* * Affichage onglets */ $head = group_prepare_head($fgroup); $title = $langs->trans("Group"); dol_fiche_head($head, 'rights', $title, 0, 'group'); // Charge les modules soumis a permissions $modules = array(); $modulesdir = dolGetModulesDirs(); $db->begin(); foreach ($modulesdir as $dir) { // Load modules attributes in arrays (name, numero, orders) from dir directory //print $dir."\n
"; $handle=@opendir(dol_osencode($dir)); if (is_resource($handle)) { while (($file = readdir($handle))!==false) { if (is_readable($dir.$file) && substr($file, 0, 3) == 'mod' && substr($file, dol_strlen($file) - 10) == '.class.php') { $modName = substr($file, 0, dol_strlen($file) - 10); if ($modName) { include_once $dir."/".$file; $objMod = new $modName($db); // Load all lang files of module if (isset($objMod->langfiles) && is_array($objMod->langfiles)) { foreach($objMod->langfiles as $domain) { $langs->load($domain); } } // Load all permissions if ($objMod->rights_class) { $entity=((! empty($conf->multicompany->enabled) && ! empty($fgroup->entity)) ? $fgroup->entity : null); $ret=$objMod->insert_permissions(0, $entity); $modules[$objMod->rights_class]=$objMod; } } } } } } $db->commit(); // Lecture des droits groupes $permsgroup = array(); $sql = "SELECT r.id, r.libelle, r.module "; $sql.= " FROM ".MAIN_DB_PREFIX."rights_def as r"; $sql.= ", ".MAIN_DB_PREFIX."usergroup_rights as ugr"; $sql.= " WHERE ugr.fk_id = r.id"; if(! empty($conf->multicompany->enabled)) { if (empty($conf->multicompany->transverse_mode)) { $sql.= " AND r.entity = ".$fgroup->entity; } else { $sql.= " AND r.entity IN (0,1)"; } } else { $sql.= " AND r.entity IN (0,".$conf->entity.")"; } $sql.= " AND ugr.fk_usergroup = ".$fgroup->id; $result=$db->query($sql); if ($result) { $num = $db->num_rows($result); $i = 0; while ($i < $num) { $obj = $db->fetch_object($result); array_push($permsgroup,$obj->id); $i++; } $db->free($result); } else { dol_print_error($db); } /* * Ecran ajout/suppression permission */ print ''; // Ref print ''; print ''; print ''; // Nom print ''; print '\n"; // Note print ''; print ''; print "\n"; print '

'.$langs->trans("Ref").'	'; print $form->showrefnav($fgroup,'id','',$user->rights->user->user->lire || $user->admin); print '
'.$langs->trans("Name").'	'.$fgroup->name.''; if (! $fgroup->entity) { print img_picto($langs->trans("GlobalGroup"),'redstar'); } print "
'.$langs->trans("Note").'	'.dol_htmlentitiesbr($fgroup->note).'

'; if ($user->admin) print info_admin($langs->trans("WarningOnlyPermissionOfActivatedModules")); print ''; print ''; print ''; if ($caneditperms) print ''; print ''; print ''; print ''; $sql = "SELECT r.id, r.libelle, r.module"; $sql.= " FROM ".MAIN_DB_PREFIX."rights_def as r"; $sql.= " WHERE r.libelle NOT LIKE 'tou%'"; // On ignore droits "tous" if(! empty($conf->multicompany->enabled)) { if (empty($conf->multicompany->transverse_mode)) { $sql.= " AND r.entity = ".$fgroup->entity; } else { $sql.= " AND r.entity IN (0,1)"; } } else { $sql.= " AND r.entity = ".$conf->entity; } if (empty($conf->global->MAIN_USE_ADVANCED_PERMS)) $sql.= " AND r.perms NOT LIKE '%_advance'"; // Hide advanced perms if option is disable $sql.= " ORDER BY r.module, r.id"; $result=$db->query($sql); if ($result) { $i = 0; $var = true; $oldmod = ''; $num = $db->num_rows($result); while ($i < $num) { $obj = $db->fetch_object($result); // Si la ligne correspond a un module qui n'existe plus (absent de includes/module), on l'ignore if (empty($modules[$obj->module])) { $i++; continue; } if ($oldmod <> $obj->module) { $oldmod = $obj->module; $var = !$var; // Rupture detectee, on recupere objMod $objMod = $modules[$obj->module]; $picto=($objMod->picto?$objMod->picto:'generic'); if ($caneditperms) { print ''; print ''; print ''; print ''; print ''; } } print ''; // Module print ''; if (in_array($obj->id, $permsgroup)) { // Own permission by group if ($caneditperms) { print ''; } print ''; } else { // Do not own permission if ($caneditperms) { print ''; } print ''; } $perm_libelle=($conf->global->MAIN_USE_ADVANCED_PERMS && ($langs->trans("PermissionAdvanced".$obj->id)!=("PermissionAdvanced".$obj->id))?$langs->trans("PermissionAdvanced".$obj->id):(($langs->trans("Permission".$obj->id)!=("Permission".$obj->id))?$langs->trans("Permission".$obj->id):$obj->libelle)); print ''; print ''; $i++; } } print '

'.$langs->trans("Module").'			'.$langs->trans("Permissions").'
'.img_object('',$picto).' '.$objMod->getName(); print '	'; print ''.$langs->trans("All").""; print '/'; print ''.$langs->trans("None").""; print '
'.img_object('',$picto).' '.$objMod->getName().'	'.img_edit_remove($langs->trans("Remove")).'	'; print img_picto($langs->trans("Active"),'tick'); print '	'.img_edit_add($langs->trans("Add")).'		'.$perm_libelle. '

'; } $db->close(); llxFooter();