<?php
/*=====================================================================*\
|| ###################################################################
|| # Bugdar
|| # Copyright (c)2004-2009 Blue Static
|| #
|| # This program is free software; you can redistribute it and/or modify
|| # it under the terms of the GNU General Public License as published by
|| # the Free Software Foundation; version 2 of the License.
|| #
|| # This program is distributed in the hope that it will be useful, but
|| # WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|| # or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
|| # more details.
|| #
|| # You should have received a copy of the GNU General Public License along
|| # with this program; if not, write to the Free Software Foundation, Inc.,
|| # 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA
|| ###################################################################
\*=====================================================================*/

require_once('./global.php');
require_once('./includes/api_usergroup.php');

APIError(array(new API_Error_Handler($admin), 'admin_error'));

NavLinks::usersPages();
$navigator->set_focus('tab', 'users', null);

if (!can_perform('canadmingroups'))
{
	admin_login();
}

// ###################################################################
// define permissions as groups

$permissions = array(
	T('General Permissions') => array(
		'canviewbugs' => T('Can View Bugs'),
		'canviewhidden' => T('Can View Hidden Bugs and Comments'),
		'canviewownhidden' => T('Can View Own Hidden Bugs'),
		'cansearch' => T('Can Search Bugs'),
		'cansubscribe' => T('Can Subscribe to Bugs'),
		'canbeassignedto' => T('Can Be Assigned Bugs')
	),
	
	T('Posting/Submitting Permissions') => array(
		'canvote' => T('Can Vote on Polls'),
		'cansubmitbugs' => T('Can Submit Bugs'),
		'canpostcomments' => T('Can Post Comments'),
		'cangetattach' => T('Can View Attachments'),
		'canputattach' => T('Can Upload/Edit Own Attachments'),
		'caneditattach' => T('Can Manage All Attachments')
	),
	
	T('Moderation/Managment Permissions') => array(
		'caneditown' => T('Can Edit Own Bugs'),
		'caneditother' => T('Can Edit Others\' Bugs'),
		'caneditownreply' => T('Can Edit Own Comments'),
		'caneditotherreply' => T('Can Edit Others\' Comments'),
		'canassign' => T('Can Assign Bugs'),
		'canchangestatus' => T('Can Change Status'),
		'candeletedata' => T('Can Delete Bugs and Comments')
	),
	
	T('Administrator Permissions') => array(
		'canadminpanel' => T('Can Access Control Panel'),
		'canadminbugs' => T('Can Administer Bug Reports'),
		'canadminfields' => T('Can Administer Additional Bug Fields'),
		'canadminversions' => T('Can Administer Products / Components / Versions'),
		'canadminusers' => T('Can Administer Users'),
		'canadmingroups' => T('Can Administer Usergroups'),
		'canadmintools' => T('Can Administer Settings / Maintenance Tools')
	)
);

// ###################################################################

if (empty($_REQUEST['do']))
{
	$_REQUEST['do'] = 'modify';
}

// ###################################################################

if ($_REQUEST['do'] == 'kill')
{
	$usergroup = new UsergroupAPI();
	$usergroup->set('usergroupid',	$input->in['usergroupid']);
	$usergroup->set_condition();
	$usergroup->delete();
	
	$admin->redirect('usergroup.php?do=modify');
}

// ###################################################################

if ($_REQUEST['do'] == 'delete')
{
	if ($input->in['usergroupid'] < 7)
	{
		$admin->error(T('You can\'t delete a default usergroup.'));
	}
	
	$admin->page_confirm(T('Are you sure you want to delete this usergroup? All users in this group will be set back to the default registered usergroup (id: 2).'), 'usergroup.php', 'kill', array('usergroupid' => $input->in['usergroupid']));
}

// ###################################################################

if ($_REQUEST['do'] == 'add' OR $_REQUEST['do'] == 'edit' OR $_REQUEST['do'] == 'clone')
{
	$clone = ($_REQUEST['do'] == 'clone');
	$add = ($_REQUEST['do'] == 'add' OR $clone);
	$edit = !$add;
	
	if ($edit)
	{
		NavLinks::usergroupsEdit($input->in['usergroupid']);
		$navigator->set_focus('link', 'users-pages-usergroups', 'users-pages');
	}
	else
	{
		NavLinks::usergroupsAdd();
		$navigator->set_focus('link', 'usergroups-add', 'usergroups');
	}
	
	$admin->page_start(($add ? T('New Usergroup') : T('Edit Usergroup')));
	
	$admin->form_start('usergroup.php', ($add ? 'insert' : 'update'));
	
	if ($edit OR $clone)
	{
		$usergroup = new UsergroupAPI();
		$usergroup->set('usergroupid',	$input->in['usergroupid']);
		$usergroup->set_condition();
		$usergroup->fetch();
		
		if ($clone)
		{
			$admin->form_hidden_field('cloneid', $usergroup->record['usergroupid']);
		}
		else
		{
			$admin->form_hidden_field('usergroupid', $usergroup->record['usergroupid']);
		}
	}
	else
	{
		$usergroup['permissions'] = 319;
	}
	
	// Details
	$admin->table_start();
	$admin->table_head(T('Usergroup Details'));
	$admin->row_input(T('Usergroup Title'), 'title', (($add AND $clone) ? '' : $bugsys->sanitize($usergroup->record['title'])));
	$admin->row_input(T('Display Title<div><dfn>This is the title that others will be able to see when comments are posted.</dfn></div>'), 'displaytitle', (($add AND $clone) ? '' : $bugsys->sanitize($usergroup->record['displaytitle'])));
	$admin->table_end();
	
	// Permission
	$admin->table_start();
		
	$admin->table_head(T('Permission Settings'));
	
	foreach ($permissions AS $group => $settings)
	{
		$admin->row_span($group, 'thead', 'center');
		foreach ($settings AS $setting => $name)
		{
			$admin->row_yesno($name, "perm[$setting]", ($usergroup->record['permissions'] & bugdar::$permissions["$setting"]));
		}
	}
	
	$admin->table_end();
		
	// custom field permissions
	$admin->table_start();
	$admin->table_head(T('Custom Field Permissions'));
	
	if ($edit OR $clone)
	{
		$perms = $db->query("SELECT fieldid, mask FROM " . TABLE_PREFIX . "bugfieldpermission WHERE usergroupid = " . $usergroup->record['usergroupid']);
		foreach ($perms as $perm)
		{
			$permissions["$perm[fieldid]"] = $perm['mask'];
		}
	}
	
	$fields = $db->query("SELECT fieldid, name FROM " . TABLE_PREFIX . "bugfield ORDER BY fieldid");
	foreach ($fields as $field)
	{
		unset($listitem);
		$admin->list_item(T('No Permission'), 0, $permissions["$field[fieldid]"] == 0);
		$admin->list_item(T('Can View Field'), 1, $permissions["$field[fieldid]"] == 1);
		$admin->list_item(T('Can View, Edit Field'), 2, $permissions["$field[fieldid]"] == 2);
		$admin->row_list($field['name'], "custom[$field[fieldid]]");
	}
	
	$admin->table_end();
	
	// Submit
	$admin->table_start();
	$admin->row_submit();
	$admin->table_end();
	
	$admin->form_end();
	
	$admin->page_end();
}

// ###################################################################

if ($_POST['do'] == 'insert')
{
	$input->inputClean('perm', TYPE_UINT);
	foreach ($input->in['perm'] AS $permtitle => $binaryswitch)
	{
		$permissionvalue += bugdar::$permissions["$permtitle"] * $binaryswitch;
	}
	
	$usergroup = new UsergroupAPI();
	$usergroup->set('title',		$input->in['title']);
	$usergroup->set('displaytitle',	$input->in['displaytitle']);
	$usergroup->set('permissions',	$permissionvalue);
	$usergroup->insert();
	
	$input->inputClean('custom', TYPE_UINT);
	if (is_array($input->in['custom']))
	{
		foreach ($input->in['custom'] AS $fieldid => $mask)
		{
			$values[] = $usergroup->insertid . ", " . $bugsys->clean($fieldid, TYPE_UINT) . ", " . $mask;
		}
	}
	
	if (is_array($values))
	{
		$db->query("
			INSERT INTO " . TABLE_PREFIX . "bugfieldpermission
				(usergroupid, fieldid, mask)
			VALUES
				(" . implode("),\n\t\t\t(", $values) . "
			)"
		);
	}
	
	// copy product permissions from cloning
	if ($input->inputClean('cloneid', TYPE_UINT))
	{
		$prodperms = $db->query("SELECT * FROM " . TABLE_PREFIX . "permission WHERE usergroupid = " . $input->in['cloneid']);
		foreach ($prodperms as $prod)
		{
			$db->query("INSERT INTO " . TABLE_PREFIX . "permission (usergroupid, productid, mask) VALUES (" . $usergroup->insertid . ", $prod[productid], $prod[mask])");
		}
		build_permissions();
	}
	
	$admin->redirect('usergroup.php?do=modify');
}

// ###################################################################

if ($_POST['do'] == 'update')
{
	$input->inputClean_array(array(
		'perm'			=> TYPE_UINT,
		'usergroupid'	=> TYPE_UINT,
		'custom'		=> TYPE_UINT
	));
	$input->inputClean('perm', TYPE_UINT);
	foreach ($input->in['perm'] AS $permtitle => $binaryswitch)
	{
		$permissionvalue += bugdar::$permissions["$permtitle"] * $binaryswitch;
	}
	
	$usergroup = new UsergroupAPI();
	$usergroup->set('usergroupid',	$input->in['usergroupid']);
	$usergroup->set_condition();
	$usergroup->set('title',		$input->in['title']);
	$usergroup->set('displaytitle',	$input->in['displaytitle']);
	$usergroup->set('permissions',	$permissionvalue);
	$usergroup->update();
	
	$input->inputClean('custom', TYPE_UINT);
	if (is_array($input->in['custom']))
	{
		foreach ($input->in['custom'] AS $fieldid => $mask)
		{
			$values[] = $usergroup->values['usergroupid'] . ", " . $bugsys->clean($fieldid, TYPE_UINT) . ", " . $mask;
		}
	}
	
	if (is_array($values))
	{
		$db->query("
			REPLACE INTO " . TABLE_PREFIX . "bugfieldpermission
				(usergroupid, fieldid, mask)
			VALUES
				(" . implode("),\n\t\t\t(", $values) . ")"
		);
	}

	
	$admin->redirect('usergroup.php?do=modify');
}

// ###################################################################

if ($_POST['do'] == 'doapprove')
{
	$input->inputClean('approve', TYPE_UINT);
	
	$idlist = array();
	if (is_array($input->in['approve']))
	{
		foreach ($input->in['approve'] AS $id => $yesno)
		{
			if ($yesno > 0)
			{
				$idlist[] = $bugsys->clean($id, TYPE_UINT);
			}
		}
	}
	
	// load the template system...
	$bugsys->load('template_fs', 'template', true);
	$template->setExtension('tpl');
	$template->setTemplateDir('templates/');
	$template->setDatabaseCache(TABLE_PREFIX . 'template');
	
	if (sizeof($idlist) > 0)
	{
		$users = $db->query("SELECT * FROM " . TABLE_PREFIX . "user WHERE userid IN (" . implode(',', $idlist) . ")");
		foreach ($users as $user)
		{
			$tpl = $template->fetch(FetchEmailPath('accountapproved.xml', bugdar::$datastore['language'][bugdar::$options['defaultlanguage']]['langcode']));
			eval('$email = "' . $tpl . '";');
			$email = $bugsys->xml->parse($email);
			$mail->setSubject($email['email']['subject']['value']);
			$mail->setBodyText($email['email']['bodyText']['value']);
			$mail->send($user['email'], $user['displayname']);
		}
		
		$db->query("UPDATE " . TABLE_PREFIX . "user SET usergroupid = 2 WHERE userid IN (" . implode(',', $idlist) . ")");
	}
	
	$admin->redirect('usergroup.php', T('The selected users have been promoted to the "Registered" usergroup.'));
}

// ###################################################################

if ($_REQUEST['do'] == 'approve')
{
	NavLinks::usergroupsAdd();
	$navigator->set_focus('link', 'usergroups-approve', 'usergroups');
	
	$admin->page_start(T('Moderate Awaiting Users'), 3);
	
	$admin->form_start('usergroup.php', 'doapprove');
	$admin->table_start();
	$admin->table_head(T('Moderate Un-Approved Users'), 3);
	
	$admin->table_column_head(array(T('Display Name'), T('Usergroup'), T('Approve')));
	
	$users = $db->query("SELECT * FROM " . TABLE_PREFIX . "user WHERE usergroupid IN (3, 4)");
	foreach ($users as $user)
	{
		$admin->row_multi_item(array(
			'<a href="user.php?do=edit&amp;userid=' . $user['userid'] . '">' . $user['email'] . '</a>' => 'l',
			bugdar::$datastore['usergroup']["$user[usergroupid]"]['title'] => 'c',
			'<input name="approve[' . $user['userid'] . ']" type="checkbox" value="1" />' => 'c'			
		));
	}
	
	$admin->row_submit(false, ':save:', ':reset:', 3);
	$admin->table_end();
	$admin->form_end();
	
	$admin->page_end();
}

// ###################################################################

if ($_REQUEST['do'] == 'modify')
{
	NavLinks::usergroupsAdd();
	$navigator->set_focus('link', 'users-pages-usergroups', 'users-pages');
	
	$admin->page_start(T('Usergroup Manager'));
	
	$admin->form_start('usergroup.php', 'null');
	$admin->table_start();
	$admin->table_head(T('Usergroup Manager'), 3, 'usergroups');
	
	$groups = $db->query("SELECT * FROM " . TABLE_PREFIX . "usergroup ORDER BY usergroupid ASC");
	foreach ($groups as $group)
	{
		$usergroups["$group[usergroupid]"] = $group;
	}
	$db->free_result($groups);
	
	$groups = $db->query("
		SELECT COUNT(user.userid) AS total, user.usergroupid
		FROM " . TABLE_PREFIX . "user AS user
		LEFT JOIN " . TABLE_PREFIX . "usergroup AS usergroup USING (usergroupid)
		GROUP BY usergroup.usergroupid
		ORDER BY usergroup.usergroupid"
	);
	foreach ($groups as $group)
	{
		$usergroups["$group[usergroupid]"]['total'] = $group['total'];
	}
	
	$admin->table_column_head(array(T('Usergroup'), T('Number of Users'), T('Action')));
	foreach ($usergroups AS $group)
	{
		$admin->row_multi_item(array(
			"<a href=\"usergroup.php?do=edit&amp;usergroupid=$group[usergroupid]\">$group[title]</a>" => 'l',
			(!$group['total'] ? '-' : $group['total']) => 'c',

			"<a href=\"usergroup.php?do=edit&amp;usergroupid=$group[usergroupid]\">[" . T('Edit') . "]</a> " .
			"<a href=\"usergroup.php?do=clone&amp;usergroupid=$group[usergroupid]\">[" . T('Clone') . "]</a>" .
			($group['usergroupid'] > 6 ? " <a href=\"usergroup.php?do=delete&amp;usergroupid=$group[usergroupid]\">[" . T('Delete') . "]</a>" : '') => 'c'
		));
	}
	
	$admin->table_end();
	$admin->form_end();
	
	$admin->page_end();
}

?>