2 /*=====================================================================*\
3 || ###################################################################
5 || # Copyright ©2002-2007 Blue Static
7 || # This program is free software; you can redistribute it and/or modify
8 || # it under the terms of the GNU General Public License as published by
9 || # the Free Software Foundation; version 2 of the License.
11 || # This program is distributed in the hope that it will be useful, but
12 || # WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
13 || # or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
16 || # You should have received a copy of the GNU General Public License along
17 || # with this program; if not, write to the Free Software Foundation, Inc.,
18 || # 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA
19 || ###################################################################
20 \*=====================================================================*/
22 require_once('./global.php');
23 require_once('./includes/api_usergroup.php');
25 require_once('./includes/class_api_error.php');
26 APIError(array(new API_Error_Handler($admin), 'admin_error'));
28 NavLinks
::usersPages();
29 $navigator->set_focus('tab', 'users', null);
31 if (!can_perform('canadmingroups'))
36 // ###################################################################
37 // define permissions as groups
40 T('General Permissions') => array(
41 'canviewbugs' => T('Can View Bugs'),
42 'canviewhidden' => T('Can View Hidden Bugs and Comments'),
43 'canviewownhidden' => T('Can View Own Hidden Bugs'),
44 'cansearch' => T('Can Search Bugs'),
45 'cansubscribe' => T('Can Subscribe to Bugs'),
46 'canbeassignedto' => T('Can Be Assigned Bugs')
49 T('Posting/Submitting Permissions') => array(
50 'canvote' => T('Can Vote on Polls'),
51 'cansubmitbugs' => T('Can Submit Bugs'),
52 'canpostcomments' => T('Can Post Comments'),
53 'cangetattach' => T('Can View Attachments'),
54 'canputattach' => T('Can Upload/Edit Own Attachments'),
55 'caneditattach' => T('Can Manage All Attachments')
58 T('Moderation/Managment Permissions') => array(
59 'caneditown' => T('Can Edit Own Bugs'),
60 'caneditother' => T('Can Edit Others\' Bugs'),
61 'caneditownreply' => T('Can Edit Own Comments'),
62 'caneditotherreply' => T('Can Edit Others\' Comments'),
63 'canassign' => T('Can Assign Bugs'),
64 'canchangestatus' => T('Can Change Status'),
65 'candeletedata' => T('Can Delete Bugs and Comments')
68 T('Administrator Permissions') => array(
69 'canadminpanel' => T('Can Access Control Panel'),
70 'canadminbugs' => T('Can Administer Bug Reports'),
71 'canadminfields' => T('Can Administer Additional Bug Fields'),
72 'canadminversions' => T('Can Administer Products / Components / Versions'),
73 'canadminusers' => T('Can Administer Users'),
74 'canadmingroups' => T('Can Administer Usergroups'),
75 'canadmintools' => T('Can Administer Settings / Maintenance Tools')
79 // ###################################################################
81 if (empty($_REQUEST['do']))
83 $_REQUEST['do'] = 'modify';
86 // ###################################################################
88 if ($_REQUEST['do'] == 'kill')
90 $usergroup = new UsergroupAPI($bugsys);
91 $usergroup->set('usergroupid', $bugsys->in
['usergroupid']);
92 $usergroup->set_condition();
95 $admin->redirect('usergroup.php?do=modify');
98 // ###################################################################
100 if ($_REQUEST['do'] == 'delete')
102 if ($bugsys->in
['usergroupid'] < 7)
104 $admin->error(T('You can\'t delete a default usergroup.'));
107 $admin->page_confirm(T('Are you sure you want to delete this usergroup? All users in this group will be set back to the default registered usergroup (id: 2).'), 'usergroup.php', 'kill', array('usergroupid' => $bugsys->in
['usergroupid']));
110 // ###################################################################
112 if ($_REQUEST['do'] == 'add' OR $_REQUEST['do'] == 'edit' OR $_REQUEST['do'] == 'clone')
114 $clone = ($_REQUEST['do'] == 'clone');
115 $add = ($_REQUEST['do'] == 'add' OR $clone);
120 NavLinks
::usergroupsEdit($bugsys->in
['usergroupid']);
121 $navigator->set_focus('link', 'users-pages-usergroups', 'users-pages');
125 NavLinks
::usergroupsAdd();
126 $navigator->set_focus('link', 'usergroups-add', 'usergroups');
129 $admin->page_start(($add ? T('New Usergroup') : T('Edit Usergroup')));
131 $admin->form_start('usergroup.php', ($add ? 'insert' : 'update'));
135 $usergroup = new UsergroupAPI($bugsys);
136 $usergroup->set('usergroupid', $bugsys->in
['usergroupid']);
137 $usergroup->set_condition();
142 $admin->form_hidden_field('cloneid', $usergroup->objdata
['usergroupid']);
146 $admin->form_hidden_field('usergroupid', $usergroup->objdata
['usergroupid']);
151 $usergroup['permissions'] = 319;
155 $admin->table_start();
156 $admin->table_head(T('Usergroup Details'));
157 $admin->row_input(T('Usergroup Title'), 'title', (($add AND $clone) ? '' : $bugsys->sanitize($usergroup->objdata
['title'])));
158 $admin->row_input(T('Display Title<div><dfn>This is the title that others will be able to see when comments are posted.</dfn></div>'), 'displaytitle', (($add AND $clone) ? '' : $bugsys->sanitize($usergroup->objdata
['displaytitle'])));
162 $admin->table_start();
164 $admin->table_head(T('Permission Settings'));
166 foreach ($permissions AS $group => $settings)
168 $admin->row_span($group, 'thead', 'center');
169 foreach ($settings AS $setting => $name)
171 $admin->row_yesno($name, "perm[$setting]", ($usergroup->objdata
['permissions'] & $bugsys->permissions
["$setting"]));
177 // custom field permissions
178 $admin->table_start();
179 $admin->table_head(T('Custom Field Permissions'));
183 $perms = $db->query("SELECT fieldid
, mask FROM
" . TABLE_PREFIX . "bugfieldpermission WHERE usergroupid
= " . $usergroup->objdata['usergroupid']);
184 while ($perm = $db->fetch_array($perms))
186 $permissions["$perm[fieldid
]"] = $perm['mask'];
190 $fields = $db->query("SELECT fieldid
, name FROM
" . TABLE_PREFIX . "bugfield ORDER BY fieldid
");
191 while ($field = $db->fetch_array($fields))
194 $admin->list_item(T('No Permission'), 0, $permissions["$field[fieldid
]"] == 0);
195 $admin->list_item(T('Can View Field'), 1, $permissions["$field[fieldid
]"] == 1);
196 $admin->list_item(T('Can View, Edit Field'), 2, $permissions["$field[fieldid
]"] == 2);
197 $admin->row_list($field['name'], "custom
[$field[fieldid
]]");
203 $admin->table_start();
204 $admin->row_submit();
212 // ###################################################################
214 if ($_POST['do'] == 'insert')
216 $bugsys->input_clean('perm', TYPE_UINT);
217 foreach ($bugsys->in['perm'] AS $permtitle => $binaryswitch)
219 $permissionvalue += $bugsys->permissions["$permtitle"] * $binaryswitch;
222 $usergroup = new UsergroupAPI($bugsys);
223 $usergroup->set('title', $bugsys->in
['title']);
224 $usergroup->set('displaytitle', $bugsys->in
['displaytitle']);
225 $usergroup->set('permissions', $permissionvalue);
226 $usergroup->insert();
228 $bugsys->input_clean('custom', TYPE_UINT
);
229 if (is_array($bugsys->in
['custom']))
231 foreach ($bugsys->in
['custom'] AS $fieldid => $mask)
233 $values[] = $usergroup->insertid
. ", " . $bugsys->clean($fieldid, TYPE_UINT
) . ", " . $mask;
237 if (is_array($values))
240 INSERT INTO " . TABLE_PREFIX
. "bugfieldpermission
241 (usergroupid, fieldid, mask)
243 (" . implode("),\n\t\t\t(", $values) . "
248 // copy product permissions from cloning
249 if ($bugsys->input_clean('cloneid', TYPE_UINT
))
251 $prodperms = $db->query("SELECT * FROM " . TABLE_PREFIX
. "permission WHERE usergroupid = " . $bugsys->in
['cloneid']);
252 while ($prod = $db->fetch_array($prodperms))
254 $db->query("INSERT INTO " . TABLE_PREFIX
. "permission (usergroupid, productid, mask) VALUES (" . $usergroup->insertid
. ", $prod[productid], $prod[mask])");
259 $admin->redirect('usergroup.php?do=modify');
262 // ###################################################################
264 if ($_POST['do'] == 'update')
266 $bugsys->input_clean_array(array(
268 'usergroupid' => TYPE_UINT
,
269 'custom' => TYPE_UINT
271 $bugsys->input_clean('perm', TYPE_UINT
);
272 foreach ($bugsys->in
['perm'] AS $permtitle => $binaryswitch)
274 $permissionvalue +
= $bugsys->permissions
["$permtitle"] * $binaryswitch;
277 $usergroup = new UsergroupAPI($bugsys);
278 $usergroup->set('usergroupid', $bugsys->in['usergroupid']);
279 $usergroup->set_condition();
280 $usergroup->set('title', $bugsys->in['title']);
281 $usergroup->set('displaytitle', $bugsys->in['displaytitle']);
282 $usergroup->set('permissions', $permissionvalue);
283 $usergroup->update();
285 $bugsys->input_clean('custom', TYPE_UINT);
286 if (is_array($bugsys->in['custom']))
288 foreach ($bugsys->in['custom'] AS $fieldid => $mask)
290 $values[] = $usergroup->values['usergroupid'] . ", " . $bugsys->clean($fieldid, TYPE_UINT) . ", " . $mask;
294 if (is_array($values))
297 REPLACE INTO
" . TABLE_PREFIX . "bugfieldpermission
298 (usergroupid
, fieldid
, mask
)
300 (" . implode("),\n\t\t\t(", $values) . ")"
305 $admin->redirect('usergroup.php?do=modify');
308 // ###################################################################
310 if ($_POST['do'] == 'doapprove')
312 $bugsys->input_clean('approve', TYPE_UINT);
315 if (is_array($bugsys->in['approve']))
317 foreach ($bugsys->in['approve'] AS $id => $yesno)
321 $idlist[] = $bugsys->clean($id, TYPE_UINT);
326 // load the template system...
327 $bugsys->load('template_fs', 'template', true);
328 $template->setExtension('tpl');
329 $template->setTemplateDir('templates/');
330 $template->setDatabaseCache(TABLE_PREFIX . 'template');
332 if (sizeof($idlist) > 0)
334 $users = $db->query("SELECT
* FROM
" . TABLE_PREFIX . "user WHERE userid
IN (" . implode(',', $idlist) . ")");
335 while ($user = $db->fetch_array($users))
337 $tpl = $template->fetch(FetchEmailPath('accountapproved.xml', $bugsys->datastore['language'][$bugsys->options['defaultlanguage']]['langcode']));
338 eval('$email = "' . $tpl . '";');
339 $email = $bugsys->xml->parse($email);
340 $mail->setSubject($email['email']['subject']['value']);
341 $mail->setBodyText($email['email']['bodyText']['value']);
342 $mail->send($user['email'], $user['displayname']);
345 $db->query("UPDATE
" . TABLE_PREFIX . "user SET usergroupid
= 2 WHERE userid
IN (" . implode(',', $idlist) . ")");
348 $admin->redirect('usergroup.php', T('The selected users have been promoted to the "Registered
" usergroup.'));
351 // ###################################################################
353 if ($_REQUEST['do'] == 'approve')
355 NavLinks::usergroupsAdd();
356 $navigator->set_focus('link', 'usergroups-approve', 'usergroups');
358 $admin->page_start(T('Moderate Awaiting Users'), 3);
360 $admin->form_start('usergroup.php', 'doapprove');
361 $admin->table_start();
362 $admin->table_head(T('Moderate Un-Approved Users'), 3);
364 $admin->table_column_head(array(T('Display Name'), T('Usergroup'), T('Approve')));
366 $users = $db->query("SELECT
* FROM
" . TABLE_PREFIX . "user WHERE usergroupid
IN (3, 4)");
367 while ($user = $db->fetch_array($users))
369 $admin->row_multi_item(array(
370 '<a href="user
.php
?do=edit
&
;userid
=' . $user['userid
'] . '">' . $user['email'] . '</a>' => 'l',
371 $bugsys->datastore['usergroup']["$user[usergroupid
]"]['title'] => 'c',
372 '<input name="approve
[' . $user['userid
'] . ']" type="checkbox
" value="1" />' => 'c'
376 $admin->row_submit(false, ':save:', ':reset:', 3);
383 // ###################################################################
385 if ($_REQUEST['do'] == 'modify')
387 NavLinks::usergroupsAdd();
388 $navigator->set_focus('link', 'users-pages-usergroups', 'users-pages');
390 $admin->page_start(T('Usergroup Manager'));
392 $admin->form_start('usergroup.php', 'null');
393 $admin->table_start();
394 $admin->table_head(T('Usergroup Manager'), 3, 'usergroups');
396 $groups = $db->query("SELECT
* FROM
" . TABLE_PREFIX . "usergroup ORDER BY usergroupid ASC
");
397 while ($group = $db->fetch_array($groups))
399 $usergroups["$group[usergroupid
]"] = $group;
401 $db->free_result($groups);
403 $groups = $db->query("
404 SELECT
COUNT(user
.userid
) AS total
, user
.usergroupid
405 FROM
" . TABLE_PREFIX . "user
AS user
406 LEFT JOIN
" . TABLE_PREFIX . "usergroup
AS usergroup
USING (usergroupid
)
407 GROUP BY usergroup
.usergroupid
408 ORDER BY usergroup
.usergroupid
"
410 while ($group = $db->fetch_array($groups))
412 $usergroups["$group[usergroupid
]"]['total'] = $group['total'];
415 $admin->table_column_head(array(T('Usergroup'), T('Number of Users'), T('Action')));
416 foreach ($usergroups AS $group)
418 $admin->row_multi_item(array(
419 "<a href
=\"usergroup
.php
?do=edit
&
;usergroupid
=$group[usergroupid
]\">$group[title
]</a
>" => 'l',
420 (!$group['total'] ? '-' : $group['total']) => 'c',
422 "<a href
=\"usergroup
.php
?do=edit
&
;usergroupid
=$group[usergroupid
]\">[" . T('Edit') . "]</a
> " .
423 "<a href
=\"usergroup
.php
?do=clone&
;usergroupid
=$group[usergroupid
]\">[" . T('Clone') . "]</a
>" .
424 ($group['usergroupid'] > 6 ? " <a href
=\"usergroup
.php
?do=delete
&
;usergroupid
=$group[usergroupid
]\">[" . T('Delete') . "]</a
>" : '') => 'c'
434 /*=====================================================================*\
435 || ###################################################################
438 || ###################################################################
439 \*=====================================================================*/