Ejemplo n.º 1
0
function create_resource($R)
{
    extract($R);
    if ($resource_info['iid'] == '') {
        $resource_info['iid'] = '1';
    }
    $R['resource_info']['resource_id'] = find_latest_UID('resource', $db) + 1;
    $resource_id_created = insert_resource($R);
    if ($resource_id_created) {
        $resource_id = find_latest_UID('resource', $db);
        $resource_info['resource_id'] = $resource_id;
        if ($resource_info['iid'] == '0') {
            #INSERT LINE ON RULES TABLE
            $rule_info = array('project_id' => $resource_info['project_id'], 'owner' => $user_id, 'subject' => $resource_info['entity'], 'subject_id' => $resource_info['resource_id'], 'verb' => 'has UID', 'object' => 'UID', 'notes' => nl2br($resource_info['notes']));
            $db->query($sql, __LINE__, __FILE__);
            $R['rule_info'] = $rule_info;
            $rule_inserted = insert_rule($R);
            if ($rule_inserted) {
                $rule_info['rule_id'] = find_latest_UID('rule', $db);
                $inputs = array('newsubject' => $resource_info['entity'], 'newverb' => 'has UID', 'newobject' => 'UID', 'newnotes' => nl2br($resource_info['notes']));
                $action = 'create';
                $log = compact('action', 'rule_info', 'user_id', 'project_id', 'db', 'inputs');
                insert_rule_log($log);
            }
            #now check if there is any rule in the same project that already has this class as object.
            $s3ql = compact('user_id', 'db');
            $s3ql['from'] = 'rules';
            $s3ql['where']['object'] = $resource_info['entity'];
            $s3ql['where']['project_id'] = $resource_info['project_id'];
            $object_rules = S3QLaction($s3ql);
            if (is_array($object_rules)) {
                foreach ($object_rules as $key => $rule_to_change) {
                    $s3ql = compact('user_id', 'db');
                    $s3ql['edit'] = 'rule';
                    $s3ql['where']['rule_id'] = $rule_to_change['rule_id'];
                    $s3ql['set']['object_id'] = $resource_id;
                    $done = S3QLaction($s3ql);
                }
            }
        } else {
            $statement_info = array('project_id' => $resource_info['project_id'], 'resource_id' => $resource_id, 'rule_id' => get_rule_id_by_entity_id($resource_info['resource_class_id'], $resource_info['project_id'], $db), 'value' => $resource_id, 'notes' => $resource_info['notes'], 'created_by' => $resource_info['owner'], 'db' => $db);
            $R['statement_info'] = $statement_info;
            insert_statement($R);
        }
        return $resource_id;
    }
}
Ejemplo n.º 2
0
function insert_s3db($D)
{
    #insert_s3db(compact('element', 'inputs', 'user_id', 'db'));
    #this is meant to be a general function for every insert, froum user to group. It create the entry, based on information on array $info and adds an entry on permissions
    #There will be 2 special cases: creating a class also creates the rule "has UID" and creating an instance also creates the statament where reosurce_id is instance_id and rule is "hasUID"
    extract($D);
    $table = $GLOBALS['s3tables'][$element];
    #echo '<pre>';print_r($D);
    $cols_for_entry = $GLOBALS['dbstruct'][$element];
    $letter = strtoupper(substr($element, 0, 1));
    #some special restrictions apply
    switch ($letter) {
        case 'U':
            $cols_for_entry = array_diff($cols_for_entry, array('addr1', 'addr2', 'city', 'state', 'postal_code', 'country'));
            array_push($cols_for_entry, 'account_pwd');
            $inputs['account_addr_id'] = insert_address($D);
            break;
        case 'G':
            $cols_for_entry = array_merge($cols_for_entry, array('account_pwd', 'account_group'));
            $inputs['account_type'] = 'g';
            $inputs['account_group'] = $inputs['account_type'];
            $inputs['account_uname'] = $inputs['account_lid'];
            break;
        case 'C':
            $inputs['iid'] = '0';
            break;
        case 'I':
            $inputs['iid'] = '1';
            $inputs['resource_class_id'] = $inputs['resource_class_id'] == '' ? $inputs['class_id'] : $inputs['resource_class_id'];
            $inputs['resource_id'] = $inputs['resource_id'] != '' ? $inputs['resource_id'] : $inputs['instance_id'];
            break;
        case 'F':
            $element = 'statement';
            $cols_for_entry = $GLOBALS['dbstruct']['statements'];
            $table = $GLOBALS['s3tables']['statements'];
            $inputs['statement_id'] = s3id();
            #now need to move file from tmp folder into final folder
            $moved = tmpfile2folder(array('inputs' => $inputs, 'db' => $db, 'user_id' => $user_id));
            if (!$moved[0]) {
                return $moved[1];
            } else {
                $inputs = $moved[1];
            }
            break;
    }
    #remove ''_id from cols for entry if that field is empty;
    if ($inputs[$GLOBALS['s3ids'][$element]] == '') {
        #never levae the primary key input empty
        #$inputs[$GLOBALS['s3ids'][$element]] = find_latest_UID($table, $db)+1;
        $inputs[$GLOBALS['s3ids'][$element]] = s3id();
    }
    $sql = buildInsertString($cols_for_entry, $inputs, $table);
    #echo $sql;exit;
    $db->query($sql, __LINE__, __FILE__);
    if ($db->Errno == 1) {
        $inputs[$GLOBALS['s3ids'][$element]] = s3id();
        $sql = buildInsertString($cols_for_entry, $inputs, $table);
        $db->query($sql, __LINE__, __FILE__);
    }
    $dbdata = get_object_vars($db);
    #$dbdata['Errno']='0';
    #echo '<pre>';print_r($dbdata);exit;
    if ($dbdata['Errno'] != '0') {
        if ($table == 'account') {
            $sql = "update s3db_" . $table . " set account_status = 'A' where account_id = '" . $inputs['account_id'] . "'";
            $db->query($sql, __LINE__, __FILE__);
            $dbdata = get_object_vars($db);
        }
        if ($dbdata['Errno'] != 0) {
            return array(False, $GLOBALS['error_codes']['something_went_wrong'] . '<message>' . str_replace('key', $GLOBALS['COREids'][$element], $dbdata['Error']) . '</message>', $GLOBALS['error_codes']['something_went_wrong'], $dbdata['Error']);
        }
    } else {
        #$element_id = $db->get_last_insert_id($table, $GLOBALS['s3ids'][$element]);
        #$element_id = find_latest_UID($table, $db);
        $element_id = $inputs[$GLOBALS['s3ids'][$element]];
        $info[$letter . $element_id] = $inputs;
        #special restrictions apply after create:
        switch ($letter) {
            case 'P':
                $project_id = $element_id;
                #if project_id is remote, need to change it's name a bit because / and # are not allowed in project_name;
                #$project_id = urlencode($project_id);
                #create the folder on the extras for the files of this project
                $folder_code_name = random_string(15) . '.project' . urlencode($project_id);
                $maindir = $GLOBALS['s3db_info']['server']['db']['uploads_folder'] . $GLOBALS['s3db_info']['server']['db']['uploads_file'];
                $destinationfolder = $maindir . '/' . $folder_code_name;
                #create the folder for the project
                if (mkdir($destinationfolder, 0777)) {
                    $indexfile = $destinationfolder . '/index.php';
                    if (file_exists($destinationfolder)) {
                        file_put_contents($indexfile, 'This folder cannot be accessed');
                        chmod($indexfile, 0777);
                    }
                    $sql = "update s3db_project set project_folder = '" . $folder_code_name . "' where project_id = '" . $project_id . "'";
                    $db->query($sql, __LINE__, __FILE__);
                } else {
                    echo "Could not create directory for this project. You might not be able to upload files to this project.";
                }
                break;
            case 'I':
                $class_id = $inputs['resource_class_id'];
                $statement_info = $inputs;
                $statement_info['rule_id'] = fastRuleID4class(compact('class_id', 'db', 'user_id'));
                $statement_info['value'] = $element_id;
                $statement_info['resource_id'] = $element_id;
                #$stat_inserted = insert_s3db(array('element'=>'statement', 'inputs'=>$statement_info, 'db'=>$db, 'user_id'=>$user_id));
                #echo '<pre>';print_r($statement_info);exit;
                $stat_inserted = insert_statement(compact('statement_info', 'db', 'user_id'));
                $action = 'create';
                insert_statement_log(compact('oldvalues', 'inputs', 'action', 'statement_info', 'user_id', 'db'));
                #echo '<pre>';print_r($stat_inserted);
                if ($stat_inserted[0]) {
                    ereg('<statement_id>([0-9]+)</statement_id>', $stat_inserted[1], $s3qlout);
                    $statement_info['statement_id'] = $stat_inserted[1];
                }
                $info['S' . $statement_info['statement_id']] = $statement_info;
                break;
            case 'C':
                $rule_info = $inputs;
                $rule_info['subject'] = $inputs['entity'];
                $rule_info['subject_id'] = $element_id;
                $rule_info['verb_id'] = '0';
                $rule_info['verb'] = 'has UID';
                $rule_info['object'] = 'UID';
                #echo '<pre>';print_r($inputs);
                #echo '<pre>';print_r($rule_info);exit;
                $rule_inserted = insert_rule(compact('rule_info', 'db', 'user_id'));
                break;
            case 'R':
                $rule_info = $inputs;
                $rule_info['rule_id'] = $element_id;
                #echo '<pre>';print_r($rule_info);exit;
                $action = 'create';
                $rule_inserted = insert_rule_log(compact('rule_info', 'action', 'db', 'user_id'));
                break;
            case 'S':
                $statement_info = $inputs;
                $action = 'create';
                insert_statement_log(compact('oldvalues', 'action', 'statement_info', 'user_id', 'db'));
            case 'F':
                $statement_info = $inputs;
                $action = 'create';
                insert_statement_log(compact('oldvalues', 'action', 'statement_info', 'user_id', 'db'));
        }
        #now add an entry that specifies user "creator' with permission level on 222 this entry (because someone has to have it)
        #some resources need to be mirrored, or swapped:
        if (ereg('^(U|G)$', $letter)) {
            #owner of groups is automatically created within it with PL 222
            if (ereg('^G$', $letter)) {
                $permission_info = array('uid' => 'U' . $user_id, 'shared_with' => strtoupper(substr($element, 0, 1)) . $element_id, 'permission_level' => '222');
                #echo '<pre>';print_r($permission_info);
                insert_permission(compact('permission_info', 'db', 'user_id', 'info'));
            } elseif (ereg('^U$', $letter)) {
                ##also, for each user insertions, create an item_id for this user in the userManagement project. This will only create it if it does not yet exist
                include_once S3DB_SERVER_ROOT . '/s3dbcore/authentication.php';
                $user_proj = create_authentication_proj($db, $user_id);
                #now, create an item in the userManagement project for this user
                $user2add = $element_id;
                $c = compact('user2add', 'user_proj', 'user_id', 'db');
                $user_proj = insert_authentication_tuple($c);
                if ($inputs['permission_level'] != "") {
                    ##creator has specified that his own permissions can propagate
                    $permission_info = array('uid' => 'U' . $user_id, 'shared_with' => 'U' . $user2add, 'permission_level' => $inputs['permission_level']);
                    insert_permission(compact('permission_info', 'db', 'user_id', 'info'));
                }
            }
            #and then insert them i deployment
            $permission_info = array('uid' => 'D' . $GLOBALS['Did'], 'shared_with' => strtoupper(substr($element, 0, 1)) . $element_id);
            $permission_info['permission_level'] = $inputs['permission_level'] != '' ? $inputs['permission_level'] : '200';
        } else {
            if (ereg('^P$', $letter)) {
                #project has a special treatment, creators of project get to have permission level 222 on it.
                $permission_info['shared_with'] = 'U' . $user_id;
                $permission_info['shared_with'] = 'U' . $user_id;
                $permission_info['uid'] = $letter . $element_id;
                $permission_info['permission_level'] = 'YYY';
                ##This assures that it will migrate to child resources
                insert_permission(compact('permission_info', 'db', 'user_id', 'info'));
            } elseif (ereg('^R$', $letter)) {
                #Rule require permission to be inserted also for subject_id, verb_id and, if exists, object-id
                ##For SUBJECT
                $permission_info = array('uid' => 'R' . $rule_info['rule_id'], 'shared_with' => 'C' . $rule_info['subject_id'], 'permission_level' => '222', 'info' => $info);
                #insert_permission(compact('permission_info', 'db', 'user_id', 'info'));
                ##For VERB
                $permission_info = array('uid' => 'R' . $rule_info['rule_id'], 'shared_with' => 'I' . $rule_info['verb_id'], 'permission_level' => '222', 'info' => $info);
                #insert_permission(compact('permission_info', 'db', 'user_id', 'info'));
                #FOR OBJECT
                if ($rule_info['object_id']) {
                    $permission_info = array('uid' => 'R' . $rule_info['rule_id'], 'shared_with' => 'C' . $rule_info['object_id'], 'permission_level' => '222', 'info' => $info);
                    #insert_permission(compact('permission_info', 'db', 'user_id', 'info'));
                }
                $permission_info['shared_with'] = 'P' . $inputs['project_id'];
            } elseif (ereg('^C$', $letter)) {
                $permission_info['shared_with'] = 'P' . $inputs['project_id'];
            } elseif (ereg('^I$', $letter)) {
                #insert for statement too
                $permission_info = array('uid' => 'S' . $statement_info['statement_id'], 'shared_with' => 'R' . $statement_info['rule_id'], 'permission_level' => '222', 'info' => $info);
                #insert_permission(compact('permission_info', 'db', 'user_id', 'info'));
                #and then for instance
                $permission_info['shared_with'] = 'C' . $inputs['resource_class_id'];
            } elseif (ereg('^S|F$', $letter)) {
                if ($letter == 'F') {
                    $element_id = $statement_info['statement_id'];
                    $element = 'file';
                    $letter = 'S';
                }
                $permission_info = array('uid' => $letter . $statement_info['statement_id'], 'shared_with' => 'I' . $statement_info['resource_id'], 'permission_level' => '222', 'info' => $info);
                #insert_permission(compact('permission_info', 'db', 'user_id', 'info'));
                ##If there is an object_id, insert one for that too
                if ($statement_info['object_id']) {
                    $permission_info = array('uid' => $letter . $statement_info['statement_id'], 'shared_with' => 'I' . $statement_info['object_id'], 'permission_level' => '222', 'info' => $info);
                    #insert_permission(compact('permission_info', 'db', 'user_id', 'info'));
                }
                #And add one for the rule
                $permission_info['shared_with'] = 'R' . $inputs['rule_id'];
            }
            #and not these are global
            $permission_info['permission_level'] = $inputs['permission_level'] != '' ? $inputs['permission_level'] : '222';
            $permission_info['uid'] = $letter . $element_id;
            $info[$permission_info['uid']] = URI($permission_info['uid'], $user_id, $db);
        }
        #echo '<pre>';print_r($permission_info);
        #insert_permission(compact('permission_info', 'db', 'user_id', 'info'));
        return array(TRUE, $GLOBALS['error_codes']['success'] . "; " . $element . '_id' . ': <' . $element . '_id' . '>' . $element_id . '</' . $element . '_id' . '>' . '<a href =" ' . $query['url'] . '?key=' . $D['key'] . '&query=<S3QL><select>*</select><from>' . $GLOBALS['plurals'][$element] . '</from><where><' . $element . '_id>' . $element_id . '</' . $element . '_id></where></S3QL>">View ' . $element . '</a>', $element, $element . '_id' => $element_id, $GLOBALS['messages']['success'], strtoupper($element) . ' inserted');
    }
}