/**
*
* @param string $currentVersion
* @return string $versionUpdatedTo
*/
public function update($initialVersion)
{
$currentVersion = $initialVersion;
if ($currentVersion == '1.0') {
$impl = new PermissionProvider();
// add read access to Items
$class = new \core_kernel_classes_Class(TAO_ITEM_CLASS);
AdminService::addPermissionToClass($class, INSTANCE_ROLE_BACKOFFICE, array('READ'));
// add backoffice user rights to Tests
$class = new \core_kernel_classes_Class(TAO_TEST_CLASS);
AdminService::addPermissionToClass($class, INSTANCE_ROLE_BACKOFFICE, $impl->getSupportedRights());
$currentVersion = '1.0.1';
}
return $currentVersion;
}
/**
*
* @param string $currentVersion
* @return string $versionUpdatedTo
*/
public function update($initialVersion)
{
$currentVersion = $initialVersion;
if ($currentVersion == '1.0') {
$impl = new PermissionProvider();
// add read access to Items
$class = new \core_kernel_classes_Class(TAO_ITEM_CLASS);
AdminService::addPermissionToClass($class, INSTANCE_ROLE_BACKOFFICE, array('READ'));
// add backoffice user rights to Tests
$class = new \core_kernel_classes_Class(TAO_TEST_CLASS);
AdminService::addPermissionToClass($class, INSTANCE_ROLE_BACKOFFICE, $impl->getSupportedRights());
$currentVersion = '1.0.1';
}
if ($currentVersion == '1.0.1') {
$currentVersion = '1.0.2';
}
if ($currentVersion == '1.0.2') {
$taoClass = new \core_kernel_classes_Class(TAO_OBJECT_CLASS);
$classAdmin = new AdminAction();
ClassActionRegistry::getRegistry()->registerAction($taoClass, $classAdmin);
$currentVersion = '1.1';
}
if ($currentVersion == '1.1') {
$classesToAdd = array(new \core_kernel_classes_Class(CLASS_GENERIS_USER), new \core_kernel_classes_Class(CLASS_ROLE));
// add admin to new instances
$classAdmin = new AdminAction();
foreach ($classesToAdd as $class) {
ClassActionRegistry::getRegistry()->registerAction($class, $classAdmin);
}
// add base permissions to new classes
$taoClass = new \core_kernel_classes_Class(TAO_OBJECT_CLASS);
foreach ($taoClass->getSubClasses(false) as $class) {
if (!in_array($class->getUri(), array(TAO_ITEM_CLASS, TAO_TEST_CLASS))) {
$classesToAdd[] = $class;
}
}
$rights = PermissionManager::getPermissionModel()->getSupportedRights();
foreach ($classesToAdd as $class) {
if (count(AdminService::getUsersPermissions($class->getUri())) == 0) {
AdminService::addPermissionToClass($class, INSTANCE_ROLE_BACKOFFICE, $rights);
} else {
\common_Logger::w('Unexpected rights present for ' . $class->getUri());
}
}
$currentVersion = '1.2.0';
}
return $currentVersion;
}
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
*
* Copyright (c) 2013 (original work) Open Assessment Technologies SA (under the project TAO-PRODUCT);
*
*
*/
use oat\taoDacSimple\model\DataBaseAccess;
use oat\generis\model\data\permission\PermissionManager;
use oat\taoDacSimple\model\PermissionProvider;
use oat\taoDacSimple\model\AdminService;
$persistence = common_persistence_Manager::getPersistence('default');
$schemaManager = $persistence->getDriver()->getSchemaManager();
$schema = $schemaManager->createSchema();
$fromSchema = clone $schema;
$table = $schema->createtable(DataBaseAccess::TABLE_PRIVILEGES_NAME);
$table->addColumn('user_id', "string", array("notnull" => null, "length" => 255));
$table->addColumn('resource_id', "string", array("notnull" => null, "length" => 255));
$table->addColumn('privilege', "string", array("notnull" => null, "length" => 255));
$table->setPrimaryKey(array("user_id", "resource_id", "privilege"));
$queries = $persistence->getPlatform()->getMigrateSchemaSql($fromSchema, $schema);
foreach ($queries as $query) {
$persistence->exec($query);
}
$impl = new PermissionProvider();
PermissionManager::setPermissionModel($impl);
$rights = $impl->getSupportedRights();
foreach (PermissionProvider::getSupportedRootClasses() as $class) {
AdminService::addPermissionToClass($class, INSTANCE_ROLE_BACKOFFICE, $rights);
}
/**
* Check if the array to save contains a user that has all privileges
*
* @param array $usersPrivileges
* @return bool
*/
protected function validatePermissions($usersPrivileges)
{
$pp = new PermissionProvider();
foreach ($usersPrivileges as $user => $options) {
if (array_diff($options, $pp->getSupportedRights()) === array_diff($pp->getSupportedRights(), $options)) {
return true;
}
}
return false;
}
