Skip to content
GitLab
Select Git revision
  • dev default
  • 6378-orcid-test-method-is-wrong-and-break-orcid-saving
  • core-php8
  • master
  • 6342-update-the-locales-for-1-5
  • 6344-template-issue-when-creating-a-template-with-empty-password-error-message-should-not-be-seen
  • 6365-core-locking-mechanism-is-not-changing-the-mail-ressource-it-does-lock-the-mail-account
  • 6365-core-when-lock-mechanism-is-trigger-the-user-should-not-be-editable-if-not-unlock
  • fusiondirectory-1.5
  • fusiondirectory-1.4
  • fusiondirectory-1.3.1
  • fusiondirectory-1.3
  • fusiondirectory-1.2.3
  • fusiondirectory-1.2.2
  • fusiondirectory-1.2.1
  • fusiondirectory-1.2
  • fusiondirectory-1.1.1
  • fusiondirectory-1.1
  • fusiondirectory-1.0.20
  • fusiondirectory-1.0.19
  • fusiondirectory-1.0.18
  • fusiondirectory-1.0.17
  • fusiondirectory-1.0.16
  • fusiondirectory-1.0.15
  • fusiondirectory-1.0.14
  • fusiondirectory-1.0.13
  • fusiondirectory-1.0.12
  • fusiondirectory-1.0.11
Find file BlameHistoryPermalink
class_acl.inc 11.85 KiB
1 
<?php
2 
/*
3 
  This code is part of FusionDirectory (http://www.fusiondirectory.org/)
4 
  Copyright (C) 2003-2010  Cajus Pollmeier
5 
  Copyright (C) 2011-2013  FusionDirectory
6
7 
  This program is free software; you can redistribute it and/or modify
8 
  it under the terms of the GNU General Public License as published by
9 
  the Free Software Foundation; either version 2 of the License, or
10 
  (at your option) any later version.
11
12 
  This program is distributed in the hope that it will be useful,
13 
  but WITHOUT ANY WARRANTY; without even the implied warranty of
14 
  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
15 
  GNU General Public License for more details.
16
17 
  You should have received a copy of the GNU General Public License
18 
  along with this program; if not, write to the Free Software
19 
  Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA.
20 
*/
21
22 
/*!
23 
 * \file class_acl.inc
24 
 * Source code for Class ACL
25 
 */
26
27 
/*!
28 
 * \brief This class contains all the function needed to manage acl
29 
 * \see class_plugin
30 
 */
31 
class acl extends plugin
32 
{
33 
  /* attribute list for save action */
34 
  var $attributes     = array('gosaAclEntry');
35 
  var $objectclasses  = array('gosaAcl');
36
37 
  /* Helpers */
38 
  var $dialogState      = "head";
39 
  var $gosaAclEntry     = array();
40 
  var $aclType          = "";
41 
  var $aclObject        = "";
42 
  var $aclContents      = array();
43 
  var $aclFilter        = "";
44 
  var $aclMyObjects     = array();
45 
  var $roles            = array();
46 
  var $recipients       = array();
47 
  var $currentIndex     = 0;
48 
  var $wasNewEntry      = FALSE;
49 
  var $savedAclContents = array();
50 
  var $acl_category     = "acl/";
51
52 
  /*!
53 
   * \brief Acl contructor
54 
   *
55 
   * \param String $config Configuration file for ACL
56 
   *
57 
   * \param String $parent
58 
   *
59 
   * \param String $dn The DN
60 
   */
61 
  function acl (&$config, $dn = NULL, $baseobject = NULL)
62 
  {
63 
    /* Include config object */
64 
    parent::__construct($config, $dn, $baseobject);
65
66 
    /* Load ACL's */
67 
    $this->gosaAclEntry = array();
68 
    if (isset($this->attrs['gosaAclEntry'])) {
69 
      for ($i = 0; $i < $this->attrs['gosaAclEntry']['count']; $i++) {
70 
        $acl = $this->attrs['gosaAclEntry'][$i];
7172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140
$this->gosaAclEntry = array_merge($this->gosaAclEntry, acl::explodeACL($acl)); } } ksort($this->gosaAclEntry); /* Save parent - we've to know more about it than other plugins... */ if (($baseobject !== NULL) && isset($baseobject->parent)) { $this->parent =& $baseobject->parent; } $ldap = $config->get_ldap_link(); /* Roles TODO - use objects::ls?*/ $ldap->cd($config->current['BASE']); $ldap->search('(objectClass=gosaRole)', array('cn', 'description','gosaAclTemplate','dn')); while ($attrs = $ldap->fetch()) { $role_id = $attrs['dn']; $this->roles[$role_id]['acls'] = acl::explodeRole($attrs['gosaAclTemplate']); $this->roles[$role_id]['cn'] = $attrs['cn'][0]; if (isset($attrs['description'][0])) { $this->roles[$role_id]['description'] = $attrs['description'][0]; } } /* Finally - we want to get saved... */ $this->is_account = TRUE; } /*! * \brief Function sort an array by elements priority * * \param Array $list Array to be sorted */ function sort_by_priority($list) { uksort($list, function ($a, $b) { $infos_a = pluglist::pluginInfos(preg_replace('|^[^/]*/|', '', $a)); $infos_b = pluglist::pluginInfos(preg_replace('|^[^/]*/|', '', $b)); $pa = (isset($infos_a['plPriority'])?$infos_a['plPriority']:0); $pb = (isset($infos_b['plPriority'])?$infos_b['plPriority']:0); if ($pa == $pb) { return 0; } return ($pa < $pb ? -1 : 1); } ); return $list; } /*! * \brief Explode a role * * \param string $acl ACL to be exploded */ static function explodeRole($role) { if (!is_array($role)) { $role = array($role); } unset($role['count']); $result = array(); foreach ($role as $aclTemplate) { $list = explode(':', $aclTemplate, 2); $result[$list[0]] = self::extractACL($list[1]); } ksort($result);