getByPermission() public static method

public static getByPermission ( string $Permission = 'Discussions.Add', null $CategoryID = null, array $Filter = [], array $PermFilter = [] ) : array
$Permission string
$CategoryID null
$Filter array
$PermFilter array
return array
Example #1
0
 /**
  * Create or update a discussion.
  *
  * @since 2.0.0
  * @access public
  *
  * @param int $CategoryID Unique ID of the category to add the discussion to.
  */
 public function discussion($CategoryUrlCode = '')
 {
     // Override CategoryID if categories are disabled
     $UseCategories = $this->ShowCategorySelector = (bool) c('Vanilla.Categories.Use');
     if (!$UseCategories) {
         $CategoryUrlCode = '';
     }
     // Setup head
     $this->addJsFile('jquery.autosize.min.js');
     $this->addJsFile('autosave.js');
     $this->addJsFile('post.js');
     $Session = Gdn::session();
     Gdn_Theme::section('PostDiscussion');
     // Set discussion, draft, and category data
     $DiscussionID = isset($this->Discussion) ? $this->Discussion->DiscussionID : '';
     $DraftID = isset($this->Draft) ? $this->Draft->DraftID : 0;
     $Category = false;
     $CategoryModel = new CategoryModel();
     if (isset($this->Discussion)) {
         $this->CategoryID = $this->Discussion->CategoryID;
         $Category = CategoryModel::categories($this->CategoryID);
     } elseif ($CategoryUrlCode != '') {
         $Category = CategoryModel::categories($CategoryUrlCode);
         if ($Category) {
             $this->CategoryID = val('CategoryID', $Category);
         }
     }
     if ($Category) {
         $this->Category = (object) $Category;
         $this->setData('Category', $Category);
         $this->Form->addHidden('CategoryID', $this->Category->CategoryID);
         if (val('DisplayAs', $this->Category) == 'Discussions' && !$DraftID) {
             $this->ShowCategorySelector = false;
         } else {
             // Get all our subcategories to add to the category if we are in a Header or Categories category.
             $this->Context = CategoryModel::getSubtree($this->CategoryID);
         }
     } else {
         $this->CategoryID = 0;
         $this->Category = null;
     }
     $CategoryData = $this->ShowCategorySelector ? CategoryModel::categories() : false;
     // Check permission
     if (isset($this->Discussion)) {
         // Make sure that content can (still) be edited.
         $CanEdit = DiscussionModel::canEdit($this->Discussion);
         if (!$CanEdit) {
             throw permissionException('Vanilla.Discussions.Edit');
         }
         // Make sure only moderators can edit closed things
         if ($this->Discussion->Closed) {
             $this->permission('Vanilla.Discussions.Edit', true, 'Category', $this->Category->PermissionCategoryID);
         }
         $this->Form->setFormValue('DiscussionID', $this->Discussion->DiscussionID);
         $this->title(t('Edit Discussion'));
         if ($this->Discussion->Type) {
             $this->setData('Type', $this->Discussion->Type);
         } else {
             $this->setData('Type', 'Discussion');
         }
     } else {
         // Permission to add.
         if ($this->Category) {
             $this->permission('Vanilla.Discussions.Add', true, 'Category', $this->Category->PermissionCategoryID);
         } else {
             $this->permission('Vanilla.Discussions.Add');
         }
         $this->title(t('New Discussion'));
     }
     touchValue('Type', $this->Data, 'Discussion');
     // See if we should hide the category dropdown.
     if ($this->ShowCategorySelector) {
         $AllowedCategories = CategoryModel::getByPermission('Discussions.Add', $this->Form->getValue('CategoryID', $this->CategoryID), ['Archived' => 0, 'AllowDiscussions' => 1], ['AllowedDiscussionTypes' => $this->Data['Type']]);
         if (count($AllowedCategories) == 1) {
             $AllowedCategory = array_pop($AllowedCategories);
             $this->ShowCategorySelector = false;
             $this->Form->addHidden('CategoryID', $AllowedCategory['CategoryID']);
             if ($this->Form->isPostBack() && !$this->Form->getFormValue('CategoryID')) {
                 $this->Form->setFormValue('CategoryID', $AllowedCategory['CategoryID']);
             }
         }
     }
     // Set the model on the form
     $this->Form->setModel($this->DiscussionModel);
     if (!$this->Form->isPostBack()) {
         // Prep form with current data for editing
         if (isset($this->Discussion)) {
             $this->Form->setData($this->Discussion);
         } elseif (isset($this->Draft)) {
             $this->Form->setData($this->Draft);
         } else {
             if ($this->Category !== null) {
                 $this->Form->setData(array('CategoryID' => $this->Category->CategoryID));
             }
             $this->populateForm($this->Form);
         }
     } elseif ($this->Form->authenticatedPostBack()) {
         // Form was submitted
         // Save as a draft?
         $FormValues = $this->Form->formValues();
         $FormValues = $this->DiscussionModel->filterForm($FormValues);
         $this->deliveryType(Gdn::request()->getValue('DeliveryType', $this->_DeliveryType));
         if ($DraftID == 0) {
             $DraftID = $this->Form->getFormValue('DraftID', 0);
         }
         $Draft = $this->Form->buttonExists('Save_Draft') ? true : false;
         $Preview = $this->Form->buttonExists('Preview') ? true : false;
         if (!$Preview) {
             if (!is_object($this->Category) && is_array($CategoryData) && isset($FormValues['CategoryID'])) {
                 $this->Category = val($FormValues['CategoryID'], $CategoryData);
             }
             if (is_object($this->Category)) {
                 // Check category permissions.
                 if ($this->Form->getFormValue('Announce', '') && !$Session->checkPermission('Vanilla.Discussions.Announce', true, 'Category', $this->Category->PermissionCategoryID)) {
                     $this->Form->addError('You do not have permission to announce in this category', 'Announce');
                 }
                 if ($this->Form->getFormValue('Close', '') && !$Session->checkPermission('Vanilla.Discussions.Close', true, 'Category', $this->Category->PermissionCategoryID)) {
                     $this->Form->addError('You do not have permission to close in this category', 'Close');
                 }
                 if ($this->Form->getFormValue('Sink', '') && !$Session->checkPermission('Vanilla.Discussions.Sink', true, 'Category', $this->Category->PermissionCategoryID)) {
                     $this->Form->addError('You do not have permission to sink in this category', 'Sink');
                 }
                 if (!isset($this->Discussion) && (!$Session->checkPermission('Vanilla.Discussions.Add', true, 'Category', $this->Category->PermissionCategoryID) || !$this->Category->AllowDiscussions)) {
                     $this->Form->addError('You do not have permission to start discussions in this category', 'CategoryID');
                 }
             }
             $isTitleValid = true;
             $Name = trim($this->Form->getFormValue('Name', ''));
             if (!$Draft) {
                 // Let's be super aggressive and disallow titles with no word characters in them!
                 $hasWordCharacter = preg_match('/\\w/u', $Name) === 1;
                 if (!$hasWordCharacter || $Name != '' && Gdn_Format::text($Name) == '') {
                     $this->Form->addError(t('You have entered an invalid discussion title'), 'Name');
                     $isTitleValid = false;
                 }
             }
             if ($isTitleValid) {
                 // Trim the name.
                 $FormValues['Name'] = $Name;
                 $this->Form->setFormValue('Name', $Name);
             }
             if ($this->Form->errorCount() == 0) {
                 if ($Draft) {
                     $DraftID = $this->DraftModel->save($FormValues);
                     $this->Form->setValidationResults($this->DraftModel->validationResults());
                 } else {
                     $DiscussionID = $this->DiscussionModel->save($FormValues);
                     $this->Form->setValidationResults($this->DiscussionModel->validationResults());
                     if ($DiscussionID > 0) {
                         if ($DraftID > 0) {
                             $this->DraftModel->delete($DraftID);
                         }
                     }
                     if ($DiscussionID == SPAM || $DiscussionID == UNAPPROVED) {
                         $this->StatusMessage = t('DiscussionRequiresApprovalStatus', 'Your discussion will appear after it is approved.');
                         // Clear out the form so that a draft won't save.
                         $this->Form->formValues(array());
                         $this->render('Spam');
                         return;
                     }
                 }
             }
         } else {
             // If this was a preview click, create a discussion/comment shell with the values for this comment
             $this->Discussion = new stdClass();
             $this->Discussion->Name = $this->Form->getValue('Name', '');
             $this->Comment = new stdClass();
             $this->Comment->InsertUserID = $Session->User->UserID;
             $this->Comment->InsertName = $Session->User->Name;
             $this->Comment->InsertPhoto = $Session->User->Photo;
             $this->Comment->DateInserted = Gdn_Format::date();
             $this->Comment->Body = val('Body', $FormValues, '');
             $this->Comment->Format = val('Format', $FormValues, c('Garden.InputFormatter'));
             $this->EventArguments['Discussion'] =& $this->Discussion;
             $this->EventArguments['Comment'] =& $this->Comment;
             $this->fireEvent('BeforeDiscussionPreview');
             if ($this->_DeliveryType == DELIVERY_TYPE_ALL) {
                 $this->addAsset('Content', $this->fetchView('preview'));
             } else {
                 $this->View = 'preview';
             }
         }
         if ($this->Form->errorCount() > 0) {
             // Return the form errors
             $this->errorMessage($this->Form->errors());
         } elseif ($DiscussionID > 0 || $DraftID > 0) {
             // Make sure that the ajax request form knows about the newly created discussion or draft id
             $this->setJson('DiscussionID', $DiscussionID);
             $this->setJson('DraftID', $DraftID);
             if (!$Preview) {
                 // If the discussion was not a draft
                 if (!$Draft) {
                     // Redirect to the new discussion
                     $Discussion = $this->DiscussionModel->getID($DiscussionID, DATASET_TYPE_OBJECT, array('Slave' => false));
                     $this->setData('Discussion', $Discussion);
                     $this->EventArguments['Discussion'] = $Discussion;
                     $this->fireEvent('AfterDiscussionSave');
                     if ($this->_DeliveryType == DELIVERY_TYPE_ALL) {
                         redirect(discussionUrl($Discussion, 1)) . '?new=1';
                     } else {
                         $this->RedirectUrl = discussionUrl($Discussion, 1, true) . '?new=1';
                     }
                 } else {
                     // If this was a draft save, notify the user about the save
                     $this->informMessage(sprintf(t('Draft saved at %s'), Gdn_Format::date()));
                 }
             }
         }
     }
     // Add hidden fields for editing
     $this->Form->addHidden('DiscussionID', $DiscussionID);
     $this->Form->addHidden('DraftID', $DraftID, true);
     $this->fireEvent('BeforeDiscussionRender');
     if ($this->CategoryID) {
         $Breadcrumbs = CategoryModel::getAncestors($this->CategoryID);
     } else {
         $Breadcrumbs = array();
     }
     $Breadcrumbs[] = array('Name' => $this->data('Title'), 'Url' => val('AddUrl', val($this->data('Type'), DiscussionModel::discussionTypes()), '/post/discussion'));
     $this->setData('Breadcrumbs', $Breadcrumbs);
     $this->setData('_AnnounceOptions', $this->announceOptions());
     // Render view (posts/discussion.php or post/preview.php)
     $this->render();
 }
Example #2
0
 /**
  * Returns XHTML for a select list containing categories that the user has
  * permission to use.
  *
  * @param array $FieldName An array of category data to render.
  * @param array $Options An associative array of options for the select. Here
  * is a list of "special" options and their default values:
  *
  *   Attribute     Options                        Default
  *   ------------------------------------------------------------------------
  *   Value         The ID of the category that    FALSE
  *                 is selected.
  *   IncludeNull   Include a blank row?           TRUE
  *   Context       A set of categories to         []
  *                 interset with the CategoryData
  *                 that is relative to the category
  *                 we're in.
  *   CategoryData  Custom set of categories to    CategoryModel::Categories()
  *                 display.
  *
  * @return string
  */
 public function categoryDropDown($FieldName = 'CategoryID', $Options = array())
 {
     $this->EventArguments['Options'] =& $Options;
     $this->fireEvent('BeforeCategoryDropDown');
     $Value = arrayValueI('Value', $Options);
     // The selected category id
     $CategoryData = val('CategoryData', $Options);
     if (!$CategoryData && val('Context', $Options)) {
         $CategoryData = val('Context', $Options);
     } elseif ($CategoryData && val('Context', $Options)) {
         $CategoryData = array_intersect_key($CategoryData, val('Context', $Options));
     }
     // Sanity check
     if (is_object($CategoryData)) {
         $CategoryData = (array) $CategoryData;
     } elseif (!is_array($CategoryData)) {
         $CategoryData = array();
     }
     $Permission = val('Permission', $Options, 'add');
     // Grab the category data.
     if (!$CategoryData) {
         $CategoryData = CategoryModel::getByPermission('Discussions.View', $Value, val('Filter', $Options, array('Archived' => 0)), val('PermFilter', $Options, array()));
     }
     // Respect category permissions (remove categories that the user shouldn't see).
     $SafeCategoryData = array();
     foreach ($CategoryData as $CategoryID => $Category) {
         $Name = $Category['Name'];
         if ($Value != $CategoryID) {
             if ($Category['CategoryID'] <= 0 || !$Category['PermsDiscussionsView']) {
                 continue;
             }
             if ($Category['Archived']) {
                 continue;
             }
         }
         $SafeCategoryData[$CategoryID] = $Category;
     }
     unset($Options['Filter'], $Options['PermFilter'], $Options['Context'], $Options['CategoryData']);
     if (!isset($Options['class'])) {
         $Options['class'] = $this->getStyle('dropdown');
     } else {
         $Options['class'] = $this->translateClasses($Attributes['class']);
     }
     // Opening select tag
     $Return = '<select';
     $Return .= $this->_idAttribute($FieldName, $Options);
     $Return .= $this->_nameAttribute($FieldName, $Options);
     $Return .= $this->_attributesToString($Options);
     $Return .= ">\n";
     // Get value from attributes
     if ($Value === false) {
         $Value = $this->getValue($FieldName);
     }
     if (!is_array($Value)) {
         $Value = array($Value);
     }
     // Prevent default $Value from matching key of zero
     $HasValue = $Value !== array(false) && $Value !== array('') ? true : false;
     // Start with null option?
     $IncludeNull = val('IncludeNull', $Options);
     if ($IncludeNull === true) {
         $Return .= '<option value="">' . t('Select a category...') . '</option>';
     } elseif (is_array($IncludeNull)) {
         $Return .= "<option value=\"{$IncludeNull[0]}\">{$IncludeNull[1]}</option>\n";
     } elseif ($IncludeNull) {
         $Return .= "<option value=\"\">{$IncludeNull}</option>\n";
     } elseif (!$HasValue) {
         $Return .= '<option value=""></option>';
     }
     // Show root categories as headings (ie. you can't post in them)?
     $DoHeadings = val('Headings', $Options, c('Vanilla.Categories.DoHeadings'));
     // If making headings disabled and there was no default value for
     // selection, make sure to select the first non-disabled value, or the
     // browser will auto-select the first disabled option.
     $ForceCleanSelection = $DoHeadings && !$HasValue && !$IncludeNull;
     // Write out the category options
     if (is_array($SafeCategoryData)) {
         foreach ($SafeCategoryData as $CategoryID => $Category) {
             $Depth = val('Depth', $Category, 0);
             $Disabled = $Depth == 1 && $DoHeadings || !$Category['AllowDiscussions'] || val('DisplayAs', $Category) != 'Discussions';
             $Selected = in_array($CategoryID, $Value) && $HasValue;
             if ($ForceCleanSelection && $Depth > 1) {
                 $Selected = true;
                 $ForceCleanSelection = false;
             }
             if ($Category['AllowDiscussions']) {
                 if ($Permission == 'add' && !$Category['PermsDiscussionsAdd']) {
                     $Disabled = true;
                 }
             }
             $Return .= '<option value="' . $CategoryID . '"';
             if ($Disabled) {
                 $Return .= ' disabled="disabled"';
             } elseif ($Selected) {
                 $Return .= ' selected="selected"';
                 // only allow selection if NOT disabled
             }
             $Name = htmlspecialchars(val('Name', $Category, 'Blank Category Name'));
             if ($Depth > 1) {
                 $Name = str_repeat('&#160;', 4 * ($Depth - 1)) . $Name;
                 //               $Name = str_replace(' ', '&#160;', $Name);
             }
             $Return .= '>' . $Name . "</option>\n";
         }
     }
     return $Return . '</select>';
 }