/**
*
* @desc recursive method
* @uses AuthItem::findUnboundItems()
* @param array $tree Part of or empty array as main RBAC Tree container
* @param integer $depth the Tree depth, which is not realy needed and nowhere used yet
* @return array with AuthItem ['this', 'childs' => ['this', 'childs[...]]]
*
*/
private function _buildItemTree($tree, $depth)
{
if (count($tree) < 1) {
/*
* find the Top Level Items with its childs
*
* SELECT
* `t`.`parent` AS `t0_c0`,
* `t`.`parent` AS `t0_c0`,
* `t`.`child` AS `t0_c1`,
* `parents`.`parent` AS `t1_c0`,
* `parents`.`child` AS `t1_c1`,
* `items`.`name` AS `t2_c0`,
* `items`.`type` AS `t2_c1`,
* `items`.`description` AS `t2_c2`,
* `items`.`bizrule` AS `t2_c3`,
* `items`.`data` AS `t2_c4`
* FROM `AuthItemChild` `t`
* LEFT OUTER JOIN `AuthItemChild` `parents`
* ON (`parents`.`child`=`t`.`parent`)
* LEFT OUTER JOIN `AuthItem` `items`
* ON (`t`.`child`=`items`.`name`)
* WHERE (parents.parent IS NULL)
* ORDER BY t.parent
*/
$result = $this->findAll(array('with' => array('parents', 'childs'), 'condition' => 'parents.parent IS NULL', 'order' => 'parents.parent DESC'));
$depth++;
$tree['depth'] = 0;
$tree['parent-name'] = null;
$tree['this-name'] = null;
$tree['this'] = null;
$tree['childs'] = array();
$modelAuthItem = new AuthItem();
//if(!count($result)) return $tree;
foreach ($result as $row) {
$cnt = count($tree['childs']) - 1;
if (isset($tree['childs'][0]) && $tree['childs'][$cnt]['this-name'] == $row->parent) {
// build second depth in existing first depth
$tree['childs'][$cnt]['childs'][] = $this->_buildItemTree(array('depth' => $depth + 1, 'parent-name' => $row->parent, 'this-name' => $row->childs->name, 'this' => $row->childs, 'childs' => array()), $depth + 1);
} else {
// build new first depth and included second depth
$tree['childs'][] = array('depth' => $depth, 'parent-name' => null, 'this-name' => $row->parent, 'this' => $modelAuthItem->findByAttributes(array('name' => $row->parent)), 'childs' => array($this->_buildItemTree(array('depth' => $depth + 1, 'parent-name' => $row->parent, 'this-name' => $row->childs->name, 'this' => $row->childs, 'childs' => array()), $depth + 1)));
}
}
// add unbound items
$model = new AuthItem();
$unboundItems = $model->findUnboundItems();
foreach ($unboundItems as $item) {
$child = array('depth' => 1, 'parent-name' => null, 'this-name' => $item->name, 'this' => $item, 'childs' => array());
array_unshift($tree['childs'], $child);
}
return $tree;
} else {
/*
* SELECT
* `t`.`parent` AS `t0_c0`,
* `t`.`child` AS `t0_c1`,
* `childs`.`name` AS `t1_c0`,
* `childs`.`type` AS `t1_c1`,
* `childs`.`description` AS `t1_c2`,
* `childs`.`bizrule` AS `t1_c3`,
* `childs`.`data` AS `t1_c4`
* FROM `AuthItemChild` `t`
* LEFT OUTER JOIN `AuthItem` `childs`
* ON (`t`.`child`=`childs`.`name`)
* WHERE (`t`.`parent`=:yp0)
* ORDER BY childs.name
*/
$ct = new CDbCriteria(array('order' => 'childs.name'));
$ct->addColumnCondition(array('t.parent' => $tree['this']->name));
$result = AuthItemChild::model()->with('childs')->findAll($ct);
/*
$result = $this->findAllByAttributes(
array('parent'=>$tree['this']->name),
array(
'with' => 'childs',
//'condition' => array('t.parent'=>$tree['this']->name),
'order' => 'childs.name',
)
);
*/
$depth++;
if (count($result) > 0) {
foreach ($result as $row) {
$tree['childs'][] = $this->_buildItemTree(array('depth' => $depth, 'parent-name' => $row->parent, 'this-name' => $row->childs->name, 'this' => $row->childs, 'childs' => array()), $depth);
}
}
return $tree;
}
}
/**
*
* @desc
*/
public function actionMove()
{
$this->checkAccess('RbacViewer', true);
if (!empty($_POST)) {
$this->checkAccess('RbacEditor', true);
$from = isset($_POST['moveFromItem']) ? $_POST['moveFromItem'] : null;
$to = isset($_POST['moveToItem']) ? $_POST['moveToItem'] : null;
// check only if parent is protected
if (in_array($to, $this->protectedItems)) {
if (in_array($from, $this->protectedItems)) {
$this->messageErrors[] = "Sorry, Item is protected by Controller";
$this->actionIndex();
}
}
if (!$from || !$to || $from == $to) {
$this->messageErrors[] = "Please select Parent- and Childitem and care that they are not same.";
$this->actionIndex();
}
// default validate
$model = new AuthItemChild();
$model->attributes = array('child' => $from, 'parent' => $to);
if (!$model->validate()) {
$this->messageErrors[] = "Post validation Error. Please mail Siteadmin if this Error returns.";
$this->actionIndex();
}
// check if branch already exists
if ($model->findByAttributes(array('child' => $from, 'parent' => $to)) !== null) {
$this->messageErrors[] = "Create Brunch Error: Brunch already exists.";
$this->actionIndex();
}
// Items exist?
$model = new AuthItem();
if (!count($model->findByAttributes(array('name' => $from))) || !count($model->findByAttributes(array('name' => $to)))) {
$this->messageErrors[] = "Check Items exists Error. Please mail Siteadmin if this Error returns.";
$this->actionIndex();
}
// make recursioncheck and move Items
$model = new RBACTree();
$model->moveFrom = $from;
$model->moveTo = $to;
if ($model->checkRecursion()) {
$model->moveItem();
$this->messageSuccess[] = "Item {$from} successfull moved to {$to}.";
} else {
$this->messageErrors[] = "Can't move Selection cause that will produce a Recursion.\n\t\t\t\t<br>If you can't see producing a Recursion, it may help to eject Item before moving it.";
$this->actionIndex();
}
}
$this->actionIndex();
}
