Ejemplo n.º 1
0
// Editor component for company records
$editor = new Editor(translate('Collection'), 'collection');
param_to_global('id', 'int', 'old_id', 'collection_id');
param_to_global('user_no', 'int');
param_to_global('principal_id', 'int');
param_to_global('collection_name', '{^.+$}');
if (isset($user_no)) {
    $usr = getUserByID($user_no);
}
if (isset($principal_id)) {
    $usr = getPrincipalByID($principal_id);
}
$editor->SetLookup('timezone', 'SELECT \'\', \'*** Unknown ***\' UNION SELECT tz_id, tz_locn FROM time_zone WHERE tz_id = tz_locn AND length(tz_spec) > 100 ORDER BY 1');
$editor->SetLookup('schedule_transp', 'SELECT \'opaque\', \'Opaque\' UNION SELECT \'transp\', \'Transparent\'');
$editor->AddAttribute('timezone', 'id', 'fld_timezone');
$editor->AddAttribute('schedule_transp', 'id', 'fld_schedule_transp');
$editor->AddAttribute('is_calendar', 'id', 'fld_is_calendar');
$editor->AddAttribute('is_addressbook', 'id', 'fld_is_addressbook');
$editor->AddAttribute('is_calendar', 'onclick', 'toggle_enabled(\'fld_is_calendar\',\'=fld_timezone\',\'=fld_schedule_transp\',\'!fld_is_addressbook\',\'=fld_ics_file\');');
$editor->AddAttribute('is_addressbook', 'onclick', 'toggle_enabled(\'fld_is_addressbook\',\'!fld_is_calendar\');');
$editor->AddField('use_default_privs', 'default_privileges IS NULL');
$editor->AddAttribute('use_default_privs', 'id', 'fld_use_default_privs');
$editor->AddAttribute('use_default_privs', 'onclick', 'toggle_visible(\'fld_use_default_privs\',\'!privileges_settings\');');
$editor->AddField('ics_file', "''");
$editor->AddAttribute('ics_file', 'title', translate('Upload a .ics calendar in iCalendar format to initialise or replace this calendar.'));
$editor->AddAttribute('ics_file', 'id', 'fld_ics_file');
$editor->SetWhere('collection_id=' . $id);
$privilege_names = array('read', 'write-properties', 'write-content', 'unlock', 'read-acl', 'read-current-user-privilege-set', 'bind', 'unbind', 'write-acl', 'read-free-busy', 'schedule-deliver-invite', 'schedule-deliver-reply', 'schedule-query-freebusy', 'schedule-send-invite', 'schedule-send-reply', 'schedule-send-freebusy');
$params = array(':session_principal' => $session->principal_id, ':scan_depth' => $c->permission_scan_depth);
$is_update = $_POST['_editor_action'][$editor->Id] == 'update';
Ejemplo n.º 2
0
function principal_editor()
{
    global $c, $id, $can_write_principal, $session;
    $editor = new Editor(translate('Principal'), 'dav_principal');
    $editor->SetLookup('date_format_type', "SELECT 'E', 'European' UNION SELECT 'U', 'US Format' UNION SELECT 'I', 'ISO Format'");
    $editor->SetLookup('type_id', 'SELECT principal_type_id, principal_type_desc FROM principal_type ORDER BY principal_type_id');
    $editor->SetLookup('locale', 'SELECT \'\', \'' . translate("*** Default Locale ***") . '\' UNION SELECT locale, locale_name_locale FROM supported_locales ORDER BY 1 ASC');
    $editor->AddAttribute('locale', 'title', translate("The preferred language for this person."));
    $editor->AddAttribute('fullname', 'title', translate("The full name for this person, group or other type of principal."));
    $editor->SetWhere('principal_id=' . $id);
    $editor->AddField('is_admin', 'EXISTS( SELECT 1 FROM role_member WHERE role_no = 1 AND role_member.user_no = dav_principal.user_no )');
    $editor->AddAttribute('is_admin', 'title', translate('An "Administrator" user has full rights to the whole DAViCal System'));
    $post_values = false;
    if (isset($_POST['xxxxusername'])) {
        $_POST['xxxxusername'] = trim(str_replace('/', '', $_POST['xxxxusername']));
        if ($_POST['xxxxusername'] == '') {
            $c->messages[] = i18n("The username must not be blank, and may not contain a slash");
            $can_write_principal = false;
        }
    }
    if (isset($_POST['fullname']) && trim($_POST['fullname']) == '') {
        $c->messages[] = i18n("The full name must not be blank.");
        $can_write_principal = false;
    }
    if (isset($_POST['email']) && trim($_POST['email']) == '') {
        $c->messages[] = i18n("The email address really should not be blank.");
    }
    $pwstars = '@@@@@@@@@@';
    if ($can_write_principal && $editor->IsSubmit()) {
        $editor->WhereNewRecord("principal_id=(SELECT CURRVAL('dav_id_seq'))");
        if (!$session->AllowedTo('Admin')) {
            unset($_POST['admin_role']);
            unset($_POST['user_active']);
        }
        unset($_POST['password']);
        if ($_POST['newpass1'] != '' && $_POST['newpass1'] != $pwstars) {
            if ($_POST['newpass1'] == $_POST['newpass2']) {
                $_POST['password'] = $_POST['newpass1'];
            } else {
                $c->messages[] = "Password not updated. The supplied passwords do not match.";
            }
        }
        if (isset($_POST['fullname']) && !isset($_POST['displayname'])) {
            $_POST['displayname'] = $_POST['fullname'];
        }
        if (isset($_POST['default_privileges'])) {
            $privilege_bitpos = array_flip($privilege_names);
            $priv_names = array_keys($_POST['default_privileges']);
            $privs = privilege_to_bits($priv_names);
            $_POST['default_privileges'] = sprintf('%024s', decbin($privs));
            $editor->Assign('default_privileges', $privs_dec);
        }
        if ($editor->IsCreate()) {
            $c->messages[] = i18n("Creating new Principal record.");
        } else {
            $c->messages[] = i18n("Updating Principal record.");
        }
        $editor->Write();
        if ($_POST['type_id'] != 3 && $editor->IsCreate()) {
            /** We only add the default calendar if it isn't a group, and this is a create action */
            require_once 'auth-functions.php';
            CreateHomeCollections($editor->Value('username'));
        }
        if ($session->AllowedTo('Admin')) {
            if ($_POST['is_admin'] == 'on') {
                $sql = 'INSERT INTO role_member (role_no, user_no) SELECT 1, dav_principal.user_no FROM dav_principal WHERE user_no = :user_no AND NOT EXISTS(SELECT 1 FROM role_member rm WHERE rm.role_no = 1 AND rm.user_no = dav_principal.user_no )';
                $editor->Assign('is_admin', 't');
            } else {
                $sql = 'DELETE FROM role_member WHERE role_no = 1 AND user_no = :user_no';
                $editor->Assign('is_admin', 'f');
            }
            $params[':user_no'] = $editor->Value('user_no');
            $qry = new AwlQuery($sql, $params);
            $qry->Exec('admin-principal-edit');
        }
    } else {
        if (isset($id) && $id > 0) {
            $editor->GetRecord();
            if ($editor->IsSubmit()) {
                $c->messages[] = i18n('You do not have permission to modify this record.');
            }
        }
    }
    if ($editor->Available()) {
        $c->page_title = $editor->Title(translate('Principal') . ': ' . $editor->Value('fullname'));
    } else {
        $c->page_title = $editor->Title(translate('Create New Principal'));
        $privs = decbin(privilege_to_bits($c->default_privileges));
        $editor->Assign('default_privileges', $privs);
        $editor->Assign('user_active', 't');
        foreach ($c->template_usr as $k => $v) {
            $editor->Assign($k, $v);
        }
    }
    if ($post_values) {
        $editor->PostToValues();
        if (isset($_POST['default_privileges'])) {
            $privilege_bitpos = array_flip($privilege_names);
            $priv_names = array_keys($_POST['default_privileges']);
            $privs = privilege_to_bits($priv_names);
            $_POST['default_privileges'] = sprintf('%024s', decbin($privs));
            $editor->Assign('default_privileges', $_POST['default_privileges']);
        }
    }
    $prompt_principal_id = translate('Principal ID');
    $value_id = $editor->Available() ? '##principal_id.hidden####principal_id.value##' : translate('New Principal');
    $prompt_username = translate('Username');
    $prompt_password_1 = translate('Change Password');
    $prompt_password_2 = translate('Confirm Password');
    $prompt_fullname = translate('Fullname');
    $prompt_displayname = translate('Display Name');
    $prompt_email = translate('Email Address');
    $prompt_date_format = translate('Date Format Style');
    $prompt_admin = translate('Administrator');
    $prompt_active = translate('Active');
    $prompt_locale = translate('Locale');
    $prompt_type = translate('Principal Type');
    $prompt_privileges = translate('Privileges granted to All Users');
    $privs_html = build_privileges_html($editor, 'default_privileges');
    $admin_row_entry = '';
    $delete_principal_button = '';
    if ($session->AllowedTo('Admin')) {
        $admin_row_entry = ' <tr> <th class="right">' . $prompt_admin . ':</th><td class="left">##is_admin.checkbox##</td> </tr>';
        $admin_row_entry .= ' <tr> <th class="right">' . $prompt_active . ':</th><td class="left">##user_active.checkbox##</td> </tr>';
        if (isset($id)) {
            $delete_principal_button = '<a href="' . $c->base_url . '/admin.php?action=edit&t=principal&subaction=delete_principal&id=' . $id . '" class="submit">' . translate("Delete Principal") . '</a>';
        }
    }
    $id = $editor->Value('principal_id');
    $template = <<<EOTEMPLATE
##form##
<script language="javascript">
function toggle_privileges() {
  var argv = toggle_privileges.arguments;
  var argc = argv.length;

  if ( argc < 2 ) {
    return;
  }
  var match_me = argv[0];

  var set_to = -1;
  if ( argv[1] == 'all' ) {
    var form = document.getElementById(argv[2]);
    var fieldcount = form.elements.length;
    var matching = '/^' + match_me + '/';
    for (var i = 0; i < fieldcount; i++) {
      var fieldname = form.elements[i].name;
      if ( fieldname.match( match_me ) ) {
        if ( set_to == -1 ) {
          set_to = ( form.elements[i].checked ? 0 : 1 );
        }
        form.elements[i].checked = set_to;
      }
    }
  }
  else {
    for (var i = 1; i < argc; i++) {
      var f = document.getElementById( match_me + '_' + argv[i]);
      if ( set_to == -1 ) {
        set_to = ( f.checked ? 0 : 1 );
      }
      f.checked = set_to;
    }
  }
}
</script>
<style>
th.right, label.privilege {
  white-space:nowrap;
}
label.privilege {
  margin:0.2em 1em 0.2em 0.1em;
  padding:0 0.2em;
  line-height:1.6em;
  font-size:87%;
}
</style>
<table>
 <tr> <th class="right">{$prompt_principal_id}:</th><td class="left">
  <table width="100%" class="form_inner"><tr>
   <td>{$value_id}</td>
   <td align="right">{$delete_principal_button}</td>
  </tr></table>
 </td></tr>
 <tr> <th class="right">{$prompt_username}:</th>    <td class="left">##xxxxusername.input.50##</td> </tr>
 <tr> <th class="right">{$prompt_password_1}:</th>  <td class="left">##newpass1.password.{$pwstars}##</td> </tr>
 <tr> <th class="right">{$prompt_password_2}:</th>  <td class="left">##newpass2.password.{$pwstars}##</td> </tr>
 <tr> <th class="right">{$prompt_fullname}:</th>    <td class="left">##fullname.input.50##</td> </tr>
 <tr> <th class="right">{$prompt_email}:</th>       <td class="left">##email.input.50##</td> </tr>
 <tr> <th class="right">{$prompt_locale}:</th>      <td class="left">##locale.select##</td> </tr>
 <tr> <th class="right">{$prompt_date_format}:</th> <td class="left">##date_format_type.select##</td> </tr>
 <tr> <th class="right">{$prompt_type}:</th>        <td class="left">##type_id.select##</td> </tr>
 {$admin_row_entry}
 <tr> <th class="right" style="white-space:normal;">{$prompt_privileges}:</th><td class="left">{$privs_html}</td> </tr>
 <tr> <th class="right"></th>                   <td class="left" colspan="2">##submit##</td> </tr>
</table>
</form>
EOTEMPLATE;
    $editor->SetTemplate($template);
    return $editor;
}
Ejemplo n.º 3
0
// Editor component for collections
$editor = new Editor(translate('Collection'), 'collection');
param_to_global('id', 'int', 'old_id', 'collection_id');
param_to_global('user_no', 'int');
param_to_global('principal_id', 'int');
param_to_global('collection_name', '{^.+$}');
if (isset($user_no)) {
    $principal = new Principal('user_no', $user_no);
}
if (isset($principal_id)) {
    $principal = new Principal('principal_id', $principal_id);
}
$editor->SetLookup('timezone', 'SELECT \'\', \'*** Unknown ***\' UNION SELECT tzid, olson_name FROM timezones WHERE tzid = olson_name AND length(vtimezone) > 100 ORDER BY 1');
$editor->SetLookup('schedule_transp', 'SELECT \'opaque\', \'Opaque\' UNION SELECT \'transp\', \'Transparent\'');
$editor->AddAttribute('timezone', 'id', 'fld_timezone');
$editor->AddAttribute('schedule_transp', 'id', 'fld_schedule_transp');
$editor->AddAttribute('is_calendar', 'id', 'fld_is_calendar');
$editor->AddAttribute('is_addressbook', 'id', 'fld_is_addressbook');
$editor->AddAttribute('is_calendar', 'onclick', 'toggle_enabled(\'fld_is_calendar\',\'=fld_timezone\',\'=fld_schedule_transp\',\'!fld_is_addressbook\');');
$editor->AddAttribute('is_addressbook', 'onclick', 'toggle_enabled(\'fld_is_addressbook\',\'!fld_is_calendar\');');
$editor->AddField('use_default_privs', 'default_privileges IS NULL');
$editor->AddAttribute('use_default_privs', 'id', 'fld_use_default_privs');
$editor->AddAttribute('use_default_privs', 'onclick', 'toggle_visible(\'fld_use_default_privs\',\'!privileges_settings\');');
$editor->AddField('ics_file', "''");
$editor->AddAttribute('ics_file', 'title', translate('Upload an iCalendar file or VCard file to replace this collection.'));
$editor->AddAttribute('ics_file', 'id', 'fld_ics_file');
$editor->AddField('mode', 'FALSE');
$editor->AddAttribute('mode', 'title', translate('Should the uploaded entries be appended to the collection?'));
$editor->AddAttribute('mode', '_label', translate('Append'));
$editor->AddAttribute('mode', 'id', 'fld_mode');