user_permissions.inc.php 6.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201
  1. <?php
  2. /**
  3. * @package chamilo.permissions
  4. */
  5. /**
  6. * Code
  7. */
  8. $user_id=$userIdViewed;
  9. if ($mainUserInfo['status']==1)
  10. {
  11. $course_admin=1;
  12. }
  13. include_once('permissions_functions.inc.php');
  14. include_once('all_permissions.inc.php');
  15. include_once (api_get_library_path()."/blog.lib.php");
  16. // ---------------------------------------------------
  17. // ACTIONS
  18. // ---------------------------------------------------
  19. if ($_POST['StoreUserPermissions'] and $setting_visualisation=='checkbox')
  20. {
  21. $result_message=store_permissions('user', $user_id);
  22. if ($result_message)
  23. {
  24. Display::display_normal_message($result_message);
  25. }
  26. }
  27. if (isset($_GET['action']))
  28. {
  29. if ( isset($_GET['permission']) AND isset($_GET['tool']) AND ($_GET['action']=='grant' OR $_GET['action']=='revoke'))
  30. {
  31. $result_message=store_one_permission('user', $_GET['action'], $user_id, $_GET['tool'], $_GET['permission']);
  32. }
  33. if (isset($_GET['role']) AND ($_GET['action']=='grant' OR $_GET['action']=='revoke'))
  34. {
  35. $result_message=assign_role('user', $_GET['action'], $user_id, $_GET['role'], $_GET['scope']);
  36. }
  37. }
  38. if (isset($result_message))
  39. {
  40. Display::display_normal_message($result_message);
  41. }
  42. // ---------------------------------------------------
  43. // RETRIEVING THE PERMISSIONS OF THE USER
  44. // ---------------------------------------------------
  45. $current_user_permissions=array();
  46. $current_user_permissions=get_permissions('user',$user_id);
  47. // INHERITED PERMISSIONS (group permissions, user roles, group roles)
  48. // RETRIEVING THE PERMISSIONS OF THE GROUPS OF THE USER
  49. $groups_of_user=array();
  50. $groups_of_user=GroupManager::get_group_ids($_course['real_id'],$user_id);
  51. foreach ($groups_of_user as $group)
  52. {
  53. $this_group_permissions=get_permissions('group',$group);
  54. foreach ($this_group_permissions as $tool=>$permissions)
  55. {
  56. foreach ($permissions as $permission)
  57. {
  58. $inherited_group_permissions[$tool][]=$permission;
  59. }
  60. }
  61. }
  62. $inherited_permissions=$inherited_group_permissions;
  63. // RETRIEVING THE PERMISSIONS OF THE ROLES OF THE USER
  64. if (api_get_setting('user_roles')=='true') {
  65. // course roles that are assigned to the user
  66. $current_user_role_permissions_of_user=get_roles_permissions('user',$user_id);
  67. $inherited_permissions=permission_array_merge($inherited_permissions,$current_user_role_permissions_of_user);
  68. // NOTE: deze array moet nog gemerged worden met de $inherited_permissions array
  69. // (heet momenteel nog $current_group_permissions_of_user omdat voorlopig enkel de
  70. // groepsge�rfde permissions in beschouwing worden genomen
  71. // dit moet ook de rol permissies van rollen die toegekend worden aan een gebruiker
  72. // en de rol permissies van rollen die toegekend worden aan de groepen van een gebruiker
  73. // omvatten.
  74. // NOTE: checken als de rollen brol wel degelijk geactiveerd is voordat we dit allemaal
  75. // ophalen.
  76. // platform roles that are assigned to the user
  77. $current_user_role_permissions_of_user=get_roles_permissions('user',$user_id, 'platform');
  78. $inherited_permissions=permission_array_merge($inherited_permissions,$current_user_role_permissions_of_user);
  79. }
  80. // RETRIEVING THE PERMISSIONS OF THE ROLES OF THE GROUPS OF THE USER
  81. if (api_get_setting('group_roles')=='true')
  82. {
  83. // NOTE: DIT MOET NOG VERDER UITGEWERKT WORDEN
  84. foreach ($groups_of_user as $group)
  85. {
  86. $this_current_group_role_permissions_of_user=get_roles_permissions('user',$user_id);
  87. //$inherited_permissions[$tool][]=$permission;
  88. }
  89. }
  90. // ---------------------------------------------------
  91. // LIMITED OR FULL
  92. // ---------------------------------------------------
  93. $current_user_permissions=limited_or_full($current_user_permissions);
  94. $inherited_permissions=limited_or_full($inherited_permissions);
  95. if (api_get_setting('permissions')=='limited')
  96. {
  97. $header_array=$rights_limited;
  98. }
  99. if (api_get_setting('permissions')=='full')
  100. {
  101. $header_array=$rights_full;
  102. }
  103. echo "<form method=\"post\" action=\"".str_replace('&', '&amp;', $_SERVER['REQUEST_URI'])."\">";
  104. // ---------------------------------------------------
  105. // DISPLAYING THE ROLES LIST
  106. // ---------------------------------------------------
  107. if (api_get_setting('user_roles')=='true')
  108. {
  109. // the list of the roles for the user
  110. echo '<strong>'.get_lang('UserRoles').'</strong><br />';
  111. $current_user_course_roles=get_roles('user',$user_id);
  112. $current_user_platform_roles=get_roles('user',$user_id, 'platform');
  113. display_role_list($current_user_course_roles, $current_user_platform_roles);
  114. echo '<br />';
  115. }
  116. // ---------------------------------------------------
  117. // DISPLAYING THE MATRIX (user permissions)
  118. // ---------------------------------------------------
  119. echo '<strong>'.get_lang('UserPermissions').'</strong>';
  120. echo "<table class=\"data_table\">\n";
  121. // the header
  122. echo "\t<tr>\n";
  123. echo "\t\t<th>".get_lang('Module')."</th>\n";
  124. foreach ($header_array as $header_key=>$header_value)
  125. {
  126. echo "\t\t<th>".get_lang($header_value)."</th>\n";
  127. }
  128. echo "\t</tr>\n";
  129. // the main area with the checkboxes or images
  130. foreach ($tool_rights as $tool=>$rights) // $tool_rights contains all the possible tools and their rights
  131. {
  132. echo "\t<tr>\n";
  133. echo "\t\t<td>\n";
  134. if (strstr($tool,'BLOG'))
  135. {
  136. // Not dealing with a real tool here, get name of this blog
  137. // Strip blog id
  138. $tmp = strpos($tool,'_')+1;
  139. $blog_id = substr($tool,$tmp,strlen($tool));
  140. // Get title
  141. echo get_lang('Blog').": ".Blog::get_blog_title($blog_id);
  142. }
  143. else
  144. {
  145. echo get_lang($tool);
  146. }
  147. echo "\t\t</td>\n";
  148. foreach ($header_array as $key=>$value)
  149. {
  150. echo "\t\t<td align='center'>\n";
  151. if (in_array($value,$rights))
  152. {
  153. if ($setting_visualisation=='checkbox')
  154. {
  155. display_checkbox_matrix($current_user_permissions, $tool, $value, $inherited_permissions,$course_admin);
  156. }
  157. if ($setting_visualisation=='image')
  158. {
  159. display_image_matrix($current_user_permissions, $tool, $value,$inherited_permissions, $course_admin);
  160. }
  161. }
  162. // note: in a later stage this part will be replaced by a function
  163. // so that we can easily switch between a checkbox approach or an image approach
  164. // where every click is in fact a change of status. In the checkbox approach you first have to
  165. // do the changes and then store them by clicking the submit button.
  166. echo "\t\t</td>\n";
  167. }
  168. echo "\t</tr>\n";
  169. }
  170. echo "</table>\n";
  171. if ($setting_visualisation=='checkbox')
  172. {
  173. echo "<input type=\"Submit\" name=\"StoreUserPermissions\" value=\"".get_lang('StorePermissions')."\">";
  174. }
  175. echo "</form><br />";
  176. // ---------------------------------------------------
  177. // LEGEND
  178. // ---------------------------------------------------
  179. echo '<strong>'.get_lang('Legend').'</strong><br />';
  180. echo '<img src="../img/wrong.gif" /> '.get_lang('UserHasPermissionNot').'<br />';
  181. echo '<img src="../img/checkbox_on2.gif" /> '.get_lang('UserHasPermission').'<br />';
  182. echo '<img src="../img/checkbox_on3.gif" /> '.get_lang('UserHasPermissionByRoleGroup').'<br />';
  183. ?>