示例#1
0
 public function canRead($userId)
 {
     if (!Loader::includeModule("lists")) {
         return false;
     }
     $elementId = $this->entityId;
     $elementQuery = \CIBlockElement::getList(array(), array('ID' => $elementId), false, false, array('IBLOCK_TYPE_ID', 'IBLOCK_ID'));
     $element = $elementQuery->fetch();
     $listPerm = \CListPermissions::checkAccess($this->getUser(), $element['IBLOCK_TYPE_ID'], $element['IBLOCK_ID']);
     if ($listPerm < 0) {
         return false;
     } elseif ($listPerm < \CListPermissions::CAN_READ && !\CIBlockElementRights::userHasRightTo($element['IBLOCK_ID'], $elementId, "element_read")) {
         return false;
     } else {
         return true;
     }
 }
示例#2
0
文件: ajax.php 项目: Satariall/izurit
 protected function checkPermission()
 {
     $this->listPerm = CListPermissions::checkAccess($this->getUser(), $this->iblockTypeId);
     if ($this->listPerm < 0) {
         switch ($this->listPerm) {
             case CListPermissions::WRONG_IBLOCK_TYPE:
                 $this->errorCollection->add(array(new Error(Loc::getMessage('CC_BLL_MODULE_NOT_INSTALLED'))));
                 break;
             case CListPermissions::WRONG_IBLOCK:
                 $this->errorCollection->add(array(new Error(Loc::getMessage('CC_BLL_WRONG_IBLOCK_TYPE'))));
                 break;
             case CListPermissions::LISTS_FOR_SONET_GROUP_DISABLED:
                 $this->errorCollection->add(array(new Error(Loc::getMessage('CC_BLL_LISTS_FOR_SONET_GROUP_DISABLED'))));
                 break;
             default:
                 $this->errorCollection->add(array(new Error(Loc::getMessage('CC_BLL_UNKNOWN_ERROR'))));
                 break;
         }
     } elseif ($this->listPerm < CListPermissions::IS_ADMIN) {
         $this->errorCollection->add(array(new Error(Loc::getMessage('CC_BLL_ACCESS_DENIED'))));
     }
 }
示例#3
0
文件: ajax.php 项目: Satariall/izurit
 protected function checkPermission()
 {
     global $USER;
     $this->listPerm = CListPermissions::checkAccess($USER, $this->iblockTypeId);
     if ($this->listPerm < 0) {
         switch ($this->listPerm) {
             case CListPermissions::WRONG_IBLOCK_TYPE:
                 $this->errorCollection->add(array(new Error(Loc::getMessage('LISTS_CPAC_WRONG_IBLOCK_TYPE'))));
                 break;
             case CListPermissions::WRONG_IBLOCK:
                 $this->errorCollection->add(array(new Error(Loc::getMessage('LISTS_CPAC_WRONG_IBLOCK'))));
                 break;
             case CListPermissions::LISTS_FOR_SONET_GROUP_DISABLED:
                 $this->errorCollection->add(array(new Error(Loc::getMessage('LISTS_CPAC_SONET_GROUP_DISABLED'))));
                 break;
             default:
                 $this->errorCollection->add(array(new Error(Loc::getMessage('LISTS_CPAC_UNKNOWN_ERROR'))));
                 break;
         }
     } elseif ($this->listPerm < CListPermissions::IS_ADMIN) {
         $this->errorCollection->add(array(new Error(Loc::getMessage('LISTS_CPAC_ACCESS_DENIED'))));
     }
 }
示例#4
0
 protected function checkPermission()
 {
     global $USER;
     $this->listPerm = CListPermissions::checkAccess($USER, $this->iblockTypeId, $this->iblockId, $this->socnetGroupId);
     if ($this->listPerm < 0) {
         switch ($this->listPerm) {
             case CListPermissions::WRONG_IBLOCK_TYPE:
                 $this->errorCollection->add(array(new Error(Loc::getMessage('LISTS_LAC_WRONG_IBLOCK_TYPE'))));
                 break;
             case CListPermissions::WRONG_IBLOCK:
                 $this->errorCollection->add(array(new Error(Loc::getMessage('LISTS_LAC_WRONG_IBLOCK'))));
                 break;
             case CListPermissions::LISTS_FOR_SONET_GROUP_DISABLED:
                 $this->errorCollection->add(array(new Error(Loc::getMessage('LISTS_LAC_SONET_GROUP_DISABLED'))));
                 break;
             default:
                 $this->errorCollection->add(array(new Error(Loc::getMessage('LISTS_LAC_UNKNOWN_ERROR'))));
                 break;
         }
     } elseif ($this->listPerm < CListPermissions::CAN_READ && !(CIBlockRights::userHasRightTo($this->iblockId, $this->iblockId, "element_read") || CIBlockSectionRights::userHasRightTo($this->iblockId, $this->sectionId, "section_element_bind"))) {
         $this->errorCollection->add(array(new Error(Loc::getMessage('LISTS_LAC_ACCESS_DENIED'))));
     }
 }
 /**
  * @param $userId
  * @return bool
  */
 public function canRead($userId)
 {
     if ($this->canRead !== null) {
         return $this->canRead;
     }
     if (($res = $this->getDataToCheck($this->entityId)) && !empty($res)) {
         list($message, $topic) = $res;
         if (!empty($topic["XML_ID"])) {
             $entityId = substr($topic["XML_ID"], strrpos($topic["XML_ID"], "_") + 1);
             $entityType = substr($topic["XML_ID"], 0, strrpos($topic["XML_ID"], "_"));
             switch ($entityType) {
                 case "TASK":
                     if (Loader::includeModule("tasks")) {
                         $connector = new TaskConnector($entityId, $this->attachedObject);
                         $this->canRead = $connector->canRead($userId);
                         return $this->canRead;
                     }
                     break;
                 case "EVENT":
                     if (Loader::includeModule("calendar")) {
                         $connector = new CalendarEventConnector($entityId, $this->attachedObject);
                         $this->canRead = $connector->canRead($userId);
                         return $this->canRead;
                     }
                     break;
                 case "IBLOCK":
                     if ((int) $topic["USER_ID"] > 0 && Loader::includeModule("socialnetwork")) {
                         $codes = array();
                         if (($res = \CSocNetLog::getList(array(), array("SOURCE_ID" => $entityId, "EVENT_ID" => array("photo_photo", "news", "wiki")), false, false, array("ID"))->fetch()) && $res) {
                             $db_res = \CSocNetLogRights::getList(array(), array("LOG_ID" => $res["ID"]));
                             while ($res = $db_res->fetch()) {
                                 $codes[] = $res["GROUP_CODE"];
                             }
                         }
                         $this->canRead = $this->canAccess($userId, $codes);
                         return $this->canRead;
                     }
                     $this->canRead = true;
                     return $this->canRead;
                 case "MEETING":
                     $this->canRead = (int) $message["FORUM_ID"] == (int) \COption::getOptionInt('meeting', 'comments_forum_id', 0, SITE_ID);
                     return $this->canRead;
                 case "TIMEMAN_ENTRY":
                     if (Loader::includeModule("timeman")) {
                         $dbEntry = \CTimeManEntry::getList(array(), array("ID" => $entityId), false, false, array("ID", "USER_ID"));
                         if ($arEntry = $dbEntry->fetch()) {
                             if ($arEntry["USER_ID"] == $userId) {
                                 $this->canRead = true;
                                 return $this->canRead;
                             } else {
                                 $arManagers = \CTimeMan::getUserManagers($arEntry["USER_ID"]);
                                 $this->canRead = in_array($userId, $arManagers);
                                 return $this->canRead;
                             }
                         }
                     }
                     $this->canRead = false;
                     return $this->canRead;
                 case "TIMEMAN_REPORT":
                     if (Loader::includeModule("timeman")) {
                         $dbReport = \CTimeManReportFull::getList(array(), array("ID" => $entityId), false, false, array("ID", "USER_ID"));
                         if ($arReport = $dbReport->fetch()) {
                             if ($arReport["USER_ID"] == $userId) {
                                 $this->canRead = true;
                                 return $this->canRead;
                             } else {
                                 $arManagers = \CTimeMan::getUserManagers($arReport["USER_ID"]);
                                 $this->canRead = in_array($userId, $arManagers);
                                 return $this->canRead;
                             }
                         }
                     }
                     $this->canRead = false;
                     return $this->canRead;
                 case "WF":
                     $this->canRead = false;
                     if (Loader::includeModule("bizproc") && Loader::includeModule("lists")) {
                         $documentId = \CBPStateService::getStateDocumentId($entityId);
                         $elementId = intval($documentId[2]);
                         $elementObject = \CIBlockElement::getList(array(), array('ID' => $elementId), false, false, array('IBLOCK_TYPE_ID', 'IBLOCK_ID'));
                         $element = $elementObject->fetch();
                         $listPerm = \CListPermissions::checkAccess($this->getUser(), $element['IBLOCK_TYPE_ID'], $element['IBLOCK_ID']);
                         if ($listPerm < 0) {
                             $this->canRead = false;
                         } elseif ($listPerm < \CListPermissions::CAN_READ && !\CIBlockElementRights::UserHasRightTo($element['IBLOCK_ID'], $elementId, "element_read")) {
                             $this->canRead = false;
                         } else {
                             $this->canRead = true;
                         }
                     }
                     return $this->canRead;
             }
         } else {
             if ((!empty($topic["SOCNET_GROUP_ID"]) || !empty($topic["OWNER_ID"])) && Loader::includeModule("socialnetwork")) {
                 if (!empty($topic["SOCNET_GROUP_ID"])) {
                     $this->canRead = \CSocNetFeatures::isActiveFeature(SONET_ENTITY_GROUP, $topic["SOCNET_GROUP_ID"], "forum") && \CSocNetFeaturesPerms::canPerformOperation($userId, SONET_ENTITY_GROUP, $topic["SOCNET_GROUP_ID"], "forum", "view");
                     return $this->canRead;
                 } else {
                     $this->canRead = \CSocNetFeatures::isActiveFeature(SONET_ENTITY_USER, $topic["OWNER_ID"], "forum") && \CSocNetFeaturesPerms::canPerformOperation($userId, SONET_ENTITY_USER, $topic["OWNER_ID"], "forum", "view");
                     return $this->canRead;
                 }
             }
         }
         if ($message) {
             $user = $this->getUser();
             if ($user && $userId == $user->getId()) {
                 $userGroups = $user->getUserGroupArray();
             } else {
                 $userGroups = array(2);
             }
             /** @noinspection PhpDynamicAsStaticMethodCallInspection */
             if (\CForumUser::isAdmin($userId, $userGroups)) {
                 $this->canRead = true;
                 return $this->canRead;
             }
             /** @noinspection PhpDynamicAsStaticMethodCallInspection */
             $perms = \CForumNew::getUserPermission($message["FORUM_ID"], $userGroups);
             if ($perms >= "Y") {
                 $this->canRead = true;
                 return $this->canRead;
             }
             if ($perms < "E" || $perms < "Q" && $message["APPROVED"] != "Y") {
                 $this->canRead = false;
                 return $this->canRead;
             }
             /** @noinspection PhpDynamicAsStaticMethodCallInspection */
             $forum = \CForumNew::getByID($message["FORUM_ID"]);
             $this->canRead = $forum["ACTIVE"] == "Y";
             return $this->canRead;
         }
     }
     $this->canRead = false;
     return $this->canRead;
 }