mirror of
https://github.com/YunoHost-Apps/piwigo_ynh.git
synced 2024-09-03 20:06:03 +02:00
182 lines
6 KiB
PHP
182 lines
6 KiB
PHP
<?php
|
|
// +-----------------------------------------------------------------------+
|
|
// | Piwigo - a PHP based photo gallery |
|
|
// +-----------------------------------------------------------------------+
|
|
// | Copyright(C) 2008-2016 Piwigo Team http://piwigo.org |
|
|
// | Copyright(C) 2003-2008 PhpWebGallery Team http://phpwebgallery.net |
|
|
// | Copyright(C) 2002-2003 Pierrick LE GALL http://le-gall.net/pierrick |
|
|
// +-----------------------------------------------------------------------+
|
|
// | This program is free software; you can redistribute it and/or modify |
|
|
// | it under the terms of the GNU General Public License as published by |
|
|
// | the Free Software Foundation |
|
|
// | |
|
|
// | This program is distributed in the hope that it will be useful, but |
|
|
// | WITHOUT ANY WARRANTY; without even the implied warranty of |
|
|
// | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
|
|
// | General Public License for more details. |
|
|
// | |
|
|
// | You should have received a copy of the GNU General Public License |
|
|
// | along with this program; if not, write to the Free Software |
|
|
// | Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, |
|
|
// | USA. |
|
|
// +-----------------------------------------------------------------------+
|
|
|
|
if (!defined('IN_ADMIN'))
|
|
{
|
|
die('Hacking attempt!');
|
|
}
|
|
|
|
include_once(PHPWG_ROOT_PATH.'admin/include/functions.php');
|
|
|
|
// +-----------------------------------------------------------------------+
|
|
// | Check Access and exit when user status is not ok |
|
|
// +-----------------------------------------------------------------------+
|
|
check_status(ACCESS_ADMINISTRATOR);
|
|
|
|
// +-----------------------------------------------------------------------+
|
|
// | variables init |
|
|
// +-----------------------------------------------------------------------+
|
|
|
|
if (isset($_GET['user_id']) and is_numeric($_GET['user_id']))
|
|
{
|
|
$page['user'] = $_GET['user_id'];
|
|
}
|
|
else
|
|
{
|
|
die('user_id URL parameter is missing');
|
|
}
|
|
|
|
// +-----------------------------------------------------------------------+
|
|
// | updates |
|
|
// +-----------------------------------------------------------------------+
|
|
|
|
if (isset($_POST['falsify'])
|
|
and isset($_POST['cat_true'])
|
|
and count($_POST['cat_true']) > 0)
|
|
{
|
|
// if you forbid access to a category, all sub-categories become
|
|
// automatically forbidden
|
|
$subcats = get_subcat_ids($_POST['cat_true']);
|
|
$query = '
|
|
DELETE FROM '.USER_ACCESS_TABLE.'
|
|
WHERE user_id = '.$page['user'].'
|
|
AND cat_id IN ('.implode(',', $subcats).')
|
|
;';
|
|
pwg_query($query);
|
|
}
|
|
elseif (isset($_POST['trueify'])
|
|
and isset($_POST['cat_false'])
|
|
and count($_POST['cat_false']) > 0)
|
|
{
|
|
add_permission_on_category($_POST['cat_false'], $page['user']);
|
|
}
|
|
|
|
// +-----------------------------------------------------------------------+
|
|
// | template init |
|
|
// +-----------------------------------------------------------------------+
|
|
|
|
$template->set_filenames(
|
|
array(
|
|
'user_perm' => 'user_perm.tpl',
|
|
'double_select' => 'double_select.tpl'
|
|
)
|
|
);
|
|
|
|
$template->assign(
|
|
array(
|
|
'TITLE' =>
|
|
l10n(
|
|
'Manage permissions for user "%s"',
|
|
get_username($page['user'])
|
|
),
|
|
'L_CAT_OPTIONS_TRUE'=>l10n('Authorized'),
|
|
'L_CAT_OPTIONS_FALSE'=>l10n('Forbidden'),
|
|
|
|
'F_ACTION' =>
|
|
PHPWG_ROOT_PATH.
|
|
'admin.php?page=user_perm'.
|
|
'&user_id='.$page['user']
|
|
)
|
|
);
|
|
|
|
|
|
// retrieve category ids authorized to the groups the user belongs to
|
|
$group_authorized = array();
|
|
|
|
$query = '
|
|
SELECT DISTINCT cat_id, c.uppercats, c.global_rank
|
|
FROM '.USER_GROUP_TABLE.' AS ug
|
|
INNER JOIN '.GROUP_ACCESS_TABLE.' AS ga
|
|
ON ug.group_id = ga.group_id
|
|
INNER JOIN '.CATEGORIES_TABLE.' AS c
|
|
ON c.id = ga.cat_id
|
|
WHERE ug.user_id = '.$page['user'].'
|
|
;';
|
|
$result = pwg_query($query);
|
|
|
|
if (pwg_db_num_rows($result) > 0)
|
|
{
|
|
$cats = array();
|
|
while ($row = pwg_db_fetch_assoc($result))
|
|
{
|
|
$cats[] = $row;
|
|
$group_authorized[] = $row['cat_id'];
|
|
}
|
|
usort($cats, 'global_rank_compare');
|
|
|
|
foreach ($cats as $category)
|
|
{
|
|
$template->append(
|
|
'categories_because_of_groups',
|
|
get_cat_display_name_cache($category['uppercats'], null)
|
|
);
|
|
}
|
|
}
|
|
|
|
// only private categories are listed
|
|
$query_true = '
|
|
SELECT id,name,uppercats,global_rank
|
|
FROM '.CATEGORIES_TABLE.' INNER JOIN '.USER_ACCESS_TABLE.' ON cat_id = id
|
|
WHERE status = \'private\'
|
|
AND user_id = '.$page['user'];
|
|
if (count($group_authorized) > 0)
|
|
{
|
|
$query_true.= '
|
|
AND cat_id NOT IN ('.implode(',', $group_authorized).')';
|
|
}
|
|
$query_true.= '
|
|
;';
|
|
display_select_cat_wrapper($query_true,array(),'category_option_true');
|
|
|
|
$result = pwg_query($query_true);
|
|
$authorized_ids = array();
|
|
while ($row = pwg_db_fetch_assoc($result))
|
|
{
|
|
$authorized_ids[] = $row['id'];
|
|
}
|
|
|
|
$query_false = '
|
|
SELECT id,name,uppercats,global_rank
|
|
FROM '.CATEGORIES_TABLE.'
|
|
WHERE status = \'private\'';
|
|
if (count($authorized_ids) > 0)
|
|
{
|
|
$query_false.= '
|
|
AND id NOT IN ('.implode(',', $authorized_ids).')';
|
|
}
|
|
if (count($group_authorized) > 0)
|
|
{
|
|
$query_false.= '
|
|
AND id NOT IN ('.implode(',', $group_authorized).')';
|
|
}
|
|
$query_false.= '
|
|
;';
|
|
display_select_cat_wrapper($query_false,array(),'category_option_false');
|
|
|
|
// +-----------------------------------------------------------------------+
|
|
// | sending html code |
|
|
// +-----------------------------------------------------------------------+
|
|
|
|
$template->assign_var_from_handle('DOUBLE_SELECT', 'double_select');
|
|
$template->assign_var_from_handle('ADMIN_CONTENT', 'user_perm');
|
|
?>
|