1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236223722382239224022412242224322442245224622472248224922502251225222532254225522562257225822592260226122622263226422652266226722682269227022712272227322742275227622772278227922802281228222832284228522862287228822892290229122922293229422952296229722982299230023012302230323042305230623072308230923102311231223132314231523162317231823192320232123222323232423252326232723282329233023312332233323342335233623372338233923402341234223432344234523462347234823492350235123522353235423552356235723582359236023612362236323642365236623672368236923702371237223732374237523762377237823792380238123822383238423852386238723882389239023912392239323942395239623972398239924002401240224032404 |
- <?php
- /**
- * ManagePermissions handles all possible permission stuff.
- *
- * Simple Machines Forum (SMF)
- *
- * @package SMF
- * @author Simple Machines http://www.simplemachines.org
- * @copyright 2011 Simple Machines
- * @license http://www.simplemachines.org/about/smf/license.php BSD
- *
- * @version 2.1 Alpha 1
- */
- if (!defined('SMF'))
- die('Hacking attempt...');
- /**
- * Dispaches to the right function based on the given subaction.
- * Checks the permissions, based on the sub-action.
- * Called by ?action=managepermissions.
- *
- * @uses ManagePermissions language file.
- */
- function ModifyPermissions()
- {
- global $txt, $scripturl, $context;
- loadLanguage('ManagePermissions+ManageMembers');
- loadTemplate('ManagePermissions');
- // Format: 'sub-action' => array('function_to_call', 'permission_needed'),
- $subActions = array(
- 'board' => array('PermissionByBoard', 'manage_permissions'),
- 'index' => array('PermissionIndex', 'manage_permissions'),
- 'modify' => array('ModifyMembergroup', 'manage_permissions'),
- 'modify2' => array('ModifyMembergroup2', 'manage_permissions'),
- 'quick' => array('SetQuickGroups', 'manage_permissions'),
- 'quickboard' => array('SetQuickBoards', 'manage_permissions'),
- 'postmod' => array('ModifyPostModeration', 'manage_permissions'),
- 'profiles' => array('EditPermissionProfiles', 'manage_permissions'),
- 'settings' => array('GeneralPermissionSettings', 'admin_forum'),
- );
- call_integration_hook('integrate_manage_permissions', array(&$subActions));
- $_REQUEST['sa'] = isset($_REQUEST['sa']) && isset($subActions[$_REQUEST['sa']]) ? $_REQUEST['sa'] : (allowedTo('manage_permissions') ? 'index' : 'settings');
- isAllowedTo($subActions[$_REQUEST['sa']][1]);
- // Create the tabs for the template.
- $context[$context['admin_menu_name']]['tab_data'] = array(
- 'title' => $txt['permissions_title'],
- 'help' => 'permissions',
- 'description' => '',
- 'tabs' => array(
- 'index' => array(
- 'description' => $txt['permissions_groups'],
- ),
- 'board' => array(
- 'description' => $txt['permission_by_board_desc'],
- ),
- 'profiles' => array(
- 'description' => $txt['permissions_profiles_desc'],
- ),
- 'postmod' => array(
- 'description' => $txt['permissions_post_moderation_desc'],
- ),
- 'settings' => array(
- 'description' => $txt['permission_settings_desc'],
- ),
- ),
- );
- $subActions[$_REQUEST['sa']][0]();
- }
- /**
- * Sets up the permissions by membergroup index page.
- * Called by ?action=managepermissions
- * Creates an array of all the groups with the number of members and permissions.
- *
- * @uses ManagePermissions language file.
- * @uses ManagePermissions template file.
- * @uses ManageBoards template, permission_index sub-template.
- */
- function PermissionIndex()
- {
- global $txt, $scripturl, $context, $settings, $modSettings, $smcFunc;
- $context['page_title'] = $txt['permissions_title'];
- // Load all the permissions. We'll need them in the template.
- loadAllPermissions();
- // Also load profiles, we may want to reset.
- loadPermissionProfiles();
- // Are we going to show the advanced options?
- $context['show_advanced_options'] = empty($context['admin_preferences']['app']);
- // Determine the number of ungrouped members.
- $request = $smcFunc['db_query']('', '
- SELECT COUNT(*)
- FROM {db_prefix}members
- WHERE id_group = {int:regular_group}',
- array(
- 'regular_group' => 0,
- )
- );
- list ($num_members) = $smcFunc['db_fetch_row']($request);
- $smcFunc['db_free_result']($request);
- // Fill the context variable with 'Guests' and 'Regular Members'.
- $context['groups'] = array(
- -1 => array(
- 'id' => -1,
- 'name' => $txt['membergroups_guests'],
- 'num_members' => $txt['membergroups_guests_na'],
- 'allow_delete' => false,
- 'allow_modify' => true,
- 'can_search' => false,
- 'href' => '',
- 'link' => '',
- 'is_post_group' => false,
- 'color' => '',
- 'stars' => '',
- 'children' => array(),
- 'num_permissions' => array(
- 'allowed' => 0,
- // Can't deny guest permissions!
- 'denied' => '(' . $txt['permissions_none'] . ')'
- ),
- 'access' => false
- ),
- 0 => array(
- 'id' => 0,
- 'name' => $txt['membergroups_members'],
- 'num_members' => $num_members,
- 'allow_delete' => false,
- 'allow_modify' => true,
- 'can_search' => false,
- 'href' => $scripturl . '?action=moderate;area=viewgroups;sa=members;group=0',
- 'is_post_group' => false,
- 'color' => '',
- 'stars' => '',
- 'children' => array(),
- 'num_permissions' => array(
- 'allowed' => 0,
- 'denied' => 0
- ),
- 'access' => false
- ),
- );
- $postGroups = array();
- $normalGroups = array();
- // Query the database defined membergroups.
- $query = $smcFunc['db_query']('', '
- SELECT id_group, id_parent, group_name, min_posts, online_color, stars
- FROM {db_prefix}membergroups' . (empty($modSettings['permission_enable_postgroups']) ? '
- WHERE min_posts = {int:min_posts}' : '') . '
- ORDER BY id_parent = {int:not_inherited} DESC, min_posts, CASE WHEN id_group < {int:newbie_group} THEN id_group ELSE 4 END, group_name',
- array(
- 'min_posts' => -1,
- 'not_inherited' => -2,
- 'newbie_group' => 4,
- )
- );
- while ($row = $smcFunc['db_fetch_assoc']($query))
- {
- // If it's inherited, just add it as a child.
- if ($row['id_parent'] != -2)
- {
- if (isset($context['groups'][$row['id_parent']]))
- $context['groups'][$row['id_parent']]['children'][$row['id_group']] = $row['group_name'];
- continue;
- }
- $row['stars'] = explode('#', $row['stars']);
- $context['groups'][$row['id_group']] = array(
- 'id' => $row['id_group'],
- 'name' => $row['group_name'],
- 'num_members' => $row['id_group'] != 3 ? 0 : $txt['membergroups_guests_na'],
- 'allow_delete' => $row['id_group'] > 4,
- 'allow_modify' => $row['id_group'] > 1,
- 'can_search' => $row['id_group'] != 3,
- 'href' => $scripturl . '?action=moderate;area=viewgroups;sa=members;group=' . $row['id_group'],
- 'is_post_group' => $row['min_posts'] != -1,
- 'color' => empty($row['online_color']) ? '' : $row['online_color'],
- 'stars' => !empty($row['stars'][0]) && !empty($row['stars'][1]) ? str_repeat('<img src="' . $settings['images_url'] . '/' . $row['stars'][1] . '" alt="*" />', $row['stars'][0]) : '',
- 'children' => array(),
- 'num_permissions' => array(
- 'allowed' => $row['id_group'] == 1 ? '(' . $txt['permissions_all'] . ')' : 0,
- 'denied' => $row['id_group'] == 1 ? '(' . $txt['permissions_none'] . ')' : 0
- ),
- 'access' => false,
- );
- if ($row['min_posts'] == -1)
- $normalGroups[$row['id_group']] = $row['id_group'];
- else
- $postGroups[$row['id_group']] = $row['id_group'];
- }
- $smcFunc['db_free_result']($query);
- // Get the number of members in this post group.
- if (!empty($postGroups))
- {
- $query = $smcFunc['db_query']('', '
- SELECT id_post_group AS id_group, COUNT(*) AS num_members
- FROM {db_prefix}members
- WHERE id_post_group IN ({array_int:post_group_list})
- GROUP BY id_post_group',
- array(
- 'post_group_list' => $postGroups,
- )
- );
- while ($row = $smcFunc['db_fetch_assoc']($query))
- $context['groups'][$row['id_group']]['num_members'] += $row['num_members'];
- $smcFunc['db_free_result']($query);
- }
- if (!empty($normalGroups))
- {
- // First, the easy one!
- $query = $smcFunc['db_query']('', '
- SELECT id_group, COUNT(*) AS num_members
- FROM {db_prefix}members
- WHERE id_group IN ({array_int:normal_group_list})
- GROUP BY id_group',
- array(
- 'normal_group_list' => $normalGroups,
- )
- );
- while ($row = $smcFunc['db_fetch_assoc']($query))
- $context['groups'][$row['id_group']]['num_members'] += $row['num_members'];
- $smcFunc['db_free_result']($query);
- // This one is slower, but it's okay... careful not to count twice!
- $query = $smcFunc['db_query']('', '
- SELECT mg.id_group, COUNT(*) AS num_members
- FROM {db_prefix}membergroups AS mg
- INNER JOIN {db_prefix}members AS mem ON (mem.additional_groups != {string:blank_string}
- AND mem.id_group != mg.id_group
- AND FIND_IN_SET(mg.id_group, mem.additional_groups) != 0)
- WHERE mg.id_group IN ({array_int:normal_group_list})
- GROUP BY mg.id_group',
- array(
- 'normal_group_list' => $normalGroups,
- 'blank_string' => '',
- )
- );
- while ($row = $smcFunc['db_fetch_assoc']($query))
- $context['groups'][$row['id_group']]['num_members'] += $row['num_members'];
- $smcFunc['db_free_result']($query);
- }
- foreach ($context['groups'] as $id => $data)
- {
- if ($data['href'] != '')
- $context['groups'][$id]['link'] = '<a href="' . $data['href'] . '">' . $data['num_members'] . '</a>';
- }
- if (empty($_REQUEST['pid']))
- {
- $request = $smcFunc['db_query']('', '
- SELECT id_group, COUNT(*) AS num_permissions, add_deny
- FROM {db_prefix}permissions
- ' . (empty($context['hidden_permissions']) ? '' : ' WHERE permission NOT IN ({array_string:hidden_permissions})') . '
- GROUP BY id_group, add_deny',
- array(
- 'hidden_permissions' => !empty($context['hidden_permissions']) ? $context['hidden_permissions'] : array(),
- )
- );
- while ($row = $smcFunc['db_fetch_assoc']($request))
- if (isset($context['groups'][(int) $row['id_group']]) && (!empty($row['add_deny']) || $row['id_group'] != -1))
- $context['groups'][(int) $row['id_group']]['num_permissions'][empty($row['add_deny']) ? 'denied' : 'allowed'] = $row['num_permissions'];
- $smcFunc['db_free_result']($request);
- // Get the "default" profile permissions too.
- $request = $smcFunc['db_query']('', '
- SELECT id_profile, id_group, COUNT(*) AS num_permissions, add_deny
- FROM {db_prefix}board_permissions
- WHERE id_profile = {int:default_profile}
- ' . (empty($context['hidden_permissions']) ? '' : ' AND permission NOT IN ({array_string:hidden_permissions})') . '
- GROUP BY id_profile, id_group, add_deny',
- array(
- 'default_profile' => 1,
- 'hidden_permissions' => !empty($context['hidden_permissions']) ? $context['hidden_permissions'] : array(),
- )
- );
- while ($row = $smcFunc['db_fetch_assoc']($request))
- {
- if (isset($context['groups'][(int) $row['id_group']]) && (!empty($row['add_deny']) || $row['id_group'] != -1))
- $context['groups'][(int) $row['id_group']]['num_permissions'][empty($row['add_deny']) ? 'denied' : 'allowed'] += $row['num_permissions'];
- }
- $smcFunc['db_free_result']($request);
- }
- else
- {
- $_REQUEST['pid'] = (int) $_REQUEST['pid'];
- if (!isset($context['profiles'][$_REQUEST['pid']]))
- fatal_lang_error('no_access', false);
- // Change the selected tab to better reflect that this really is a board profile.
- $context[$context['admin_menu_name']]['current_subsection'] = 'profiles';
- $request = $smcFunc['db_query']('', '
- SELECT id_profile, id_group, COUNT(*) AS num_permissions, add_deny
- FROM {db_prefix}board_permissions
- WHERE id_profile = {int:current_profile}
- GROUP BY id_profile, id_group, add_deny',
- array(
- 'current_profile' => $_REQUEST['pid'],
- )
- );
- while ($row = $smcFunc['db_fetch_assoc']($request))
- {
- if (isset($context['groups'][(int) $row['id_group']]) && (!empty($row['add_deny']) || $row['id_group'] != -1))
- $context['groups'][(int) $row['id_group']]['num_permissions'][empty($row['add_deny']) ? 'denied' : 'allowed'] += $row['num_permissions'];
- }
- $smcFunc['db_free_result']($request);
- $context['profile'] = array(
- 'id' => $_REQUEST['pid'],
- 'name' => $context['profiles'][$_REQUEST['pid']]['name'],
- );
- }
- // We can modify any permission set apart from the read only, reply only and no polls ones as they are redefined.
- $context['can_modify'] = empty($_REQUEST['pid']) || $_REQUEST['pid'] == 1 || $_REQUEST['pid'] > 4;
- // Load the proper template.
- $context['sub_template'] = 'permission_index';
- createToken('admin-mpq');
- }
- /**
- * Handle permissions by board... more or less. :P
- */
- function PermissionByBoard()
- {
- global $context, $modSettings, $txt, $smcFunc, $sourcedir, $cat_tree, $boardList, $boards;
- $context['page_title'] = $txt['permissions_boards'];
- $context['edit_all'] = isset($_GET['edit']);
- // Saving?
- if (!empty($_POST['save_changes']) && !empty($_POST['boardprofile']))
- {
- checkSession('request');
- validateToken('admin-mpb');
- $changes = array();
- foreach ($_POST['boardprofile'] as $board => $profile)
- {
- $changes[(int) $profile][] = (int) $board;
- }
- if (!empty($changes))
- {
- foreach ($changes as $profile => $boards)
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}boards
- SET id_profile = {int:current_profile}
- WHERE id_board IN ({array_int:board_list})',
- array(
- 'board_list' => $boards,
- 'current_profile' => $profile,
- )
- );
- }
- $context['edit_all'] = false;
- }
- // Load all permission profiles.
- loadPermissionProfiles();
- // Get the board tree.
- require_once($sourcedir . '/Subs-Boards.php');
- getBoardTree();
- // Build the list of the boards.
- $context['categories'] = array();
- foreach ($cat_tree as $catid => $tree)
- {
- $context['categories'][$catid] = array(
- 'name' => &$tree['node']['name'],
- 'id' => &$tree['node']['id'],
- 'boards' => array()
- );
- foreach ($boardList[$catid] as $boardid)
- {
- if (!isset($context['profiles'][$boards[$boardid]['profile']]))
- $boards[$boardid]['profile'] = 1;
- $context['categories'][$catid]['boards'][$boardid] = array(
- 'id' => &$boards[$boardid]['id'],
- 'name' => &$boards[$boardid]['name'],
- 'description' => &$boards[$boardid]['description'],
- 'child_level' => &$boards[$boardid]['level'],
- 'profile' => &$boards[$boardid]['profile'],
- 'profile_name' => $context['profiles'][$boards[$boardid]['profile']]['name'],
- );
- }
- }
- $context['sub_template'] = 'by_board';
- createToken('admin-mpb');
- }
- /**
- * Handles permission modification actions from the upper part of the
- * permission manager index.
- */
- function SetQuickGroups()
- {
- global $context, $smcFunc;
- checkSession();
- validateToken('admin-mpq', 'quick');
- loadIllegalPermissions();
- loadIllegalGuestPermissions();
- // Make sure only one of the quick options was selected.
- if ((!empty($_POST['predefined']) && ((isset($_POST['copy_from']) && $_POST['copy_from'] != 'empty') || !empty($_POST['permissions']))) || (!empty($_POST['copy_from']) && $_POST['copy_from'] != 'empty' && !empty($_POST['permissions'])))
- fatal_lang_error('permissions_only_one_option', false);
- if (empty($_POST['group']) || !is_array($_POST['group']))
- $_POST['group'] = array();
- // Only accept numeric values for selected membergroups.
- foreach ($_POST['group'] as $id => $group_id)
- $_POST['group'][$id] = (int) $group_id;
- $_POST['group'] = array_unique($_POST['group']);
- if (empty($_REQUEST['pid']))
- $_REQUEST['pid'] = 0;
- else
- $_REQUEST['pid'] = (int) $_REQUEST['pid'];
- // Fix up the old global to the new default!
- $bid = max(1, $_REQUEST['pid']);
- // No modifying the predefined profiles.
- if ($_REQUEST['pid'] > 1 && $_REQUEST['pid'] < 5)
- fatal_lang_error('no_access', false);
- // Clear out any cached authority.
- updateSettings(array('settings_updated' => time()));
- // No groups where selected.
- if (empty($_POST['group']))
- redirectexit('action=admin;area=permissions;pid=' . $_REQUEST['pid']);
- // Set a predefined permission profile.
- if (!empty($_POST['predefined']))
- {
- // Make sure it's a predefined permission set we expect.
- if (!in_array($_POST['predefined'], array('restrict', 'standard', 'moderator', 'maintenance')))
- redirectexit('action=admin;area=permissions;pid=' . $_REQUEST['pid']);
- foreach ($_POST['group'] as $group_id)
- {
- if (!empty($_REQUEST['pid']))
- setPermissionLevel($_POST['predefined'], $group_id, $_REQUEST['pid']);
- else
- setPermissionLevel($_POST['predefined'], $group_id);
- }
- }
- // Set a permission profile based on the permissions of a selected group.
- elseif ($_POST['copy_from'] != 'empty')
- {
- // Just checking the input.
- if (!is_numeric($_POST['copy_from']))
- redirectexit('action=admin;area=permissions;pid=' . $_REQUEST['pid']);
- // Make sure the group we're copying to is never included.
- $_POST['group'] = array_diff($_POST['group'], array($_POST['copy_from']));
- // No groups left? Too bad.
- if (empty($_POST['group']))
- redirectexit('action=admin;area=permissions;pid=' . $_REQUEST['pid']);
- if (empty($_REQUEST['pid']))
- {
- // Retrieve current permissions of group.
- $request = $smcFunc['db_query']('', '
- SELECT permission, add_deny
- FROM {db_prefix}permissions
- WHERE id_group = {int:copy_from}',
- array(
- 'copy_from' => $_POST['copy_from'],
- )
- );
- $target_perm = array();
- while ($row = $smcFunc['db_fetch_assoc']($request))
- $target_perm[$row['permission']] = $row['add_deny'];
- $smcFunc['db_free_result']($request);
- $inserts = array();
- foreach ($_POST['group'] as $group_id)
- foreach ($target_perm as $perm => $add_deny)
- {
- // No dodgy permissions please!
- if (!empty($context['illegal_permissions']) && in_array($perm, $context['illegal_permissions']))
- continue;
- if ($group_id == -1 && in_array($perm, $context['non_guest_permissions']))
- continue;
- if ($group_id != 1 && $group_id != 3)
- $inserts[] = array($perm, $group_id, $add_deny);
- }
- // Delete the previous permissions...
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}permissions
- WHERE id_group IN ({array_int:group_list})
- ' . (empty($context['illegal_permissions']) ? '' : ' AND permission NOT IN ({array_string:illegal_permissions})'),
- array(
- 'group_list' => $_POST['group'],
- 'illegal_permissions' => !empty($context['illegal_permissions']) ? $context['illegal_permissions'] : array(),
- )
- );
- if (!empty($inserts))
- {
- // ..and insert the new ones.
- $smcFunc['db_insert']('',
- '{db_prefix}permissions',
- array(
- 'permission' => 'string', 'id_group' => 'int', 'add_deny' => 'int',
- ),
- $inserts,
- array('permission', 'id_group')
- );
- }
- }
- // Now do the same for the board permissions.
- $request = $smcFunc['db_query']('', '
- SELECT permission, add_deny
- FROM {db_prefix}board_permissions
- WHERE id_group = {int:copy_from}
- AND id_profile = {int:current_profile}',
- array(
- 'copy_from' => $_POST['copy_from'],
- 'current_profile' => $bid,
- )
- );
- $target_perm = array();
- while ($row = $smcFunc['db_fetch_assoc']($request))
- $target_perm[$row['permission']] = $row['add_deny'];
- $smcFunc['db_free_result']($request);
- $inserts = array();
- foreach ($_POST['group'] as $group_id)
- foreach ($target_perm as $perm => $add_deny)
- {
- // Are these for guests?
- if ($group_id == -1 && in_array($perm, $context['non_guest_permissions']))
- continue;
- $inserts[] = array($perm, $group_id, $bid, $add_deny);
- }
- // Delete the previous global board permissions...
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}board_permissions
- WHERE id_group IN ({array_int:current_group_list})
- AND id_profile = {int:current_profile}',
- array(
- 'current_group_list' => $_POST['group'],
- 'current_profile' => $bid,
- )
- );
- // And insert the copied permissions.
- if (!empty($inserts))
- {
- // ..and insert the new ones.
- $smcFunc['db_insert']('',
- '{db_prefix}board_permissions',
- array('permission' => 'string', 'id_group' => 'int', 'id_profile' => 'int', 'add_deny' => 'int'),
- $inserts,
- array('permission', 'id_group', 'id_profile')
- );
- }
- // Update any children out there!
- updateChildPermissions($_POST['group'], $_REQUEST['pid']);
- }
- // Set or unset a certain permission for the selected groups.
- elseif (!empty($_POST['permissions']))
- {
- // Unpack two variables that were transported.
- list ($permissionType, $permission) = explode('/', $_POST['permissions']);
- // Check whether our input is within expected range.
- if (!in_array($_POST['add_remove'], array('add', 'clear', 'deny')) || !in_array($permissionType, array('membergroup', 'board')))
- redirectexit('action=admin;area=permissions;pid=' . $_REQUEST['pid']);
- if ($_POST['add_remove'] == 'clear')
- {
- if ($permissionType == 'membergroup')
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}permissions
- WHERE id_group IN ({array_int:current_group_list})
- AND permission = {string:current_permission}
- ' . (empty($context['illegal_permissions']) ? '' : ' AND permission NOT IN ({array_string:illegal_permissions})'),
- array(
- 'current_group_list' => $_POST['group'],
- 'current_permission' => $permission,
- 'illegal_permissions' => !empty($context['illegal_permissions']) ? $context['illegal_permissions'] : array(),
- )
- );
- else
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}board_permissions
- WHERE id_group IN ({array_int:current_group_list})
- AND id_profile = {int:current_profile}
- AND permission = {string:current_permission}',
- array(
- 'current_group_list' => $_POST['group'],
- 'current_profile' => $bid,
- 'current_permission' => $permission,
- )
- );
- }
- // Add a permission (either 'set' or 'deny').
- else
- {
- $add_deny = $_POST['add_remove'] == 'add' ? '1' : '0';
- $permChange = array();
- foreach ($_POST['group'] as $groupID)
- {
- if ($groupID == -1 && in_array($permission, $context['non_guest_permissions']))
- continue;
- if ($permissionType == 'membergroup' && $groupID != 1 && $groupID != 3 && (empty($context['illegal_permissions']) || !in_array($permission, $context['illegal_permissions'])))
- $permChange[] = array($permission, $groupID, $add_deny);
- elseif ($permissionType != 'membergroup')
- $permChange[] = array($permission, $groupID, $bid, $add_deny);
- }
- if (!empty($permChange))
- {
- if ($permissionType == 'membergroup')
- $smcFunc['db_insert']('replace',
- '{db_prefix}permissions',
- array('permission' => 'string', 'id_group' => 'int', 'add_deny' => 'int'),
- $permChange,
- array('permission', 'id_group')
- );
- // Board permissions go into the other table.
- else
- $smcFunc['db_insert']('replace',
- '{db_prefix}board_permissions',
- array('permission' => 'string', 'id_group' => 'int', 'id_profile' => 'int', 'add_deny' => 'int'),
- $permChange,
- array('permission', 'id_group', 'id_profile')
- );
- }
- }
- // Another child update!
- updateChildPermissions($_POST['group'], $_REQUEST['pid']);
- }
- redirectexit('action=admin;area=permissions;pid=' . $_REQUEST['pid']);
- }
- /**
- * Initializes the necessary to modify a membergroup's permissions.
- */
- function ModifyMembergroup()
- {
- global $context, $txt, $modSettings, $smcFunc, $sourcedir;
- if (!isset($_GET['group']))
- fatal_lang_error('no_access', false);
- $context['group']['id'] = (int) $_GET['group'];
- // Are they toggling the view?
- if (isset($_GET['view']))
- {
- $context['admin_preferences']['pv'] = $_GET['view'] == 'classic' ? 'classic' : 'simple';
- // Update the users preferences.
- require_once($sourcedir . '/Subs-Admin.php');
- updateAdminPreferences();
- }
- $context['view_type'] = !empty($context['admin_preferences']['pv']) && $context['admin_preferences']['pv'] == 'classic' ? 'classic' : 'simple';
- // It's not likely you'd end up here with this setting disabled.
- if ($_GET['group'] == 1)
- redirectexit('action=admin;area=permissions');
- loadAllPermissions($context['view_type']);
- loadPermissionProfiles();
- if ($context['group']['id'] > 0)
- {
- $result = $smcFunc['db_query']('', '
- SELECT group_name, id_parent
- FROM {db_prefix}membergroups
- WHERE id_group = {int:current_group}
- LIMIT 1',
- array(
- 'current_group' => $context['group']['id'],
- )
- );
- list ($context['group']['name'], $parent) = $smcFunc['db_fetch_row']($result);
- $smcFunc['db_free_result']($result);
- // Cannot edit an inherited group!
- if ($parent != -2)
- fatal_lang_error('cannot_edit_permissions_inherited');
- }
- elseif ($context['group']['id'] == -1)
- $context['group']['name'] = $txt['membergroups_guests'];
- else
- $context['group']['name'] = $txt['membergroups_members'];
- $context['profile']['id'] = empty($_GET['pid']) ? 0 : (int) $_GET['pid'];
- // If this is a moderator and they are editing "no profile" then we only do boards.
- if ($context['group']['id'] == 3 && empty($context['profile']['id']))
- {
- // For sanity just check they have no general permissions.
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}permissions
- WHERE id_group = {int:moderator_group}',
- array(
- 'moderator_group' => 3,
- )
- );
- $context['profile']['id'] = 1;
- }
- $context['permission_type'] = empty($context['profile']['id']) ? 'membergroup' : 'board';
- $context['profile']['can_modify'] = !$context['profile']['id'] || $context['profiles'][$context['profile']['id']]['can_modify'];
- // Set up things a little nicer for board related stuff...
- if ($context['permission_type'] == 'board')
- {
- $context['profile']['name'] = $context['profiles'][$context['profile']['id']]['name'];
- $context[$context['admin_menu_name']]['current_subsection'] = 'profiles';
- }
- // Fetch the current permissions.
- $permissions = array(
- 'membergroup' => array('allowed' => array(), 'denied' => array()),
- 'board' => array('allowed' => array(), 'denied' => array())
- );
- // General permissions?
- if ($context['permission_type'] == 'membergroup')
- {
- $result = $smcFunc['db_query']('', '
- SELECT permission, add_deny
- FROM {db_prefix}permissions
- WHERE id_group = {int:current_group}',
- array(
- 'current_group' => $_GET['group'],
- )
- );
- while ($row = $smcFunc['db_fetch_assoc']($result))
- $permissions['membergroup'][empty($row['add_deny']) ? 'denied' : 'allowed'][] = $row['permission'];
- $smcFunc['db_free_result']($result);
- }
- // Fetch current board permissions...
- $result = $smcFunc['db_query']('', '
- SELECT permission, add_deny
- FROM {db_prefix}board_permissions
- WHERE id_group = {int:current_group}
- AND id_profile = {int:current_profile}',
- array(
- 'current_group' => $context['group']['id'],
- 'current_profile' => $context['permission_type'] == 'membergroup' ? 1 : $context['profile']['id'],
- )
- );
- while ($row = $smcFunc['db_fetch_assoc']($result))
- $permissions['board'][empty($row['add_deny']) ? 'denied' : 'allowed'][] = $row['permission'];
- $smcFunc['db_free_result']($result);
- // Loop through each permission and set whether it's checked.
- foreach ($context['permissions'] as $permissionType => $tmp)
- {
- foreach ($tmp['columns'] as $position => $permissionGroups)
- {
- foreach ($permissionGroups as $permissionGroup => $permissionArray)
- {
- foreach ($permissionArray['permissions'] as $perm)
- {
- // Create a shortcut for the current permission.
- $curPerm = &$context['permissions'][$permissionType]['columns'][$position][$permissionGroup]['permissions'][$perm['id']];
- if ($tmp['view'] == 'classic')
- {
- if ($perm['has_own_any'])
- {
- $curPerm['any']['select'] = in_array($perm['id'] . '_any', $permissions[$permissionType]['allowed']) ? 'on' : (in_array($perm['id'] . '_any', $permissions[$permissionType]['denied']) ? 'denied' : 'off');
- $curPerm['own']['select'] = in_array($perm['id'] . '_own', $permissions[$permissionType]['allowed']) ? 'on' : (in_array($perm['id'] . '_own', $permissions[$permissionType]['denied']) ? 'denied' : 'off');
- }
- else
- $curPerm['select'] = in_array($perm['id'], $permissions[$permissionType]['denied']) ? 'denied' : (in_array($perm['id'], $permissions[$permissionType]['allowed']) ? 'on' : 'off');
- }
- else
- {
- $curPerm['select'] = in_array($perm['id'], $permissions[$permissionType]['denied']) ? 'denied' : (in_array($perm['id'], $permissions[$permissionType]['allowed']) ? 'on' : 'off');
- }
- }
- }
- }
- }
- $context['sub_template'] = 'modify_group';
- $context['page_title'] = $txt['permissions_modify_group'];
- createToken('admin-mp');
- }
- /**
- * This function actually saves modifications to a membergroup's board permissions.
- */
- function ModifyMembergroup2()
- {
- global $modSettings, $smcFunc, $context;
- checkSession();
- validateToken('admin-mp');
- loadIllegalPermissions();
- $_GET['group'] = (int) $_GET['group'];
- $_GET['pid'] = (int) $_GET['pid'];
- // Cannot modify predefined profiles.
- if ($_GET['pid'] > 1 && $_GET['pid'] < 5)
- fatal_lang_error('no_access', false);
- // Verify this isn't inherited.
- if ($_GET['group'] == -1 || $_GET['group'] == 0)
- $parent = -2;
- else
- {
- $result = $smcFunc['db_query']('', '
- SELECT id_parent
- FROM {db_prefix}membergroups
- WHERE id_group = {int:current_group}
- LIMIT 1',
- array(
- 'current_group' => $_GET['group'],
- )
- );
- list ($parent) = $smcFunc['db_fetch_row']($result);
- $smcFunc['db_free_result']($result);
- }
- if ($parent != -2)
- fatal_lang_error('cannot_edit_permissions_inherited');
- $givePerms = array('membergroup' => array(), 'board' => array());
- // Guest group, we need illegal, guest permissions.
- if ($_GET['group'] == -1)
- {
- loadIllegalGuestPermissions();
- $context['illegal_permissions'] = array_merge($context['illegal_permissions'], $context['non_guest_permissions']);
- }
- // Prepare all permissions that were set or denied for addition to the DB.
- if (isset($_POST['perm']) && is_array($_POST['perm']))
- {
- foreach ($_POST['perm'] as $perm_type => $perm_array)
- {
- if (is_array($perm_array))
- {
- foreach ($perm_array as $permission => $value)
- if ($value == 'on' || $value == 'deny')
- {
- // Don't allow people to escalate themselves!
- if (!empty($context['illegal_permissions']) && in_array($permission, $context['illegal_permissions']))
- continue;
- $givePerms[$perm_type][] = array($_GET['group'], $permission, $value == 'deny' ? 0 : 1);
- }
- }
- }
- }
- // Insert the general permissions.
- if ($_GET['group'] != 3 && empty($_GET['pid']))
- {
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}permissions
- WHERE id_group = {int:current_group}
- ' . (empty($context['illegal_permissions']) ? '' : ' AND permission NOT IN ({array_string:illegal_permissions})'),
- array(
- 'current_group' => $_GET['group'],
- 'illegal_permissions' => !empty($context['illegal_permissions']) ? $context['illegal_permissions'] : array(),
- )
- );
- if (!empty($givePerms['membergroup']))
- {
- $smcFunc['db_insert']('replace',
- '{db_prefix}permissions',
- array('id_group' => 'int', 'permission' => 'string', 'add_deny' => 'int'),
- $givePerms['membergroup'],
- array('id_group', 'permission')
- );
- }
- }
- // Insert the boardpermissions.
- $profileid = max(1, $_GET['pid']);
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}board_permissions
- WHERE id_group = {int:current_group}
- AND id_profile = {int:current_profile}',
- array(
- 'current_group' => $_GET['group'],
- 'current_profile' => $profileid,
- )
- );
- if (!empty($givePerms['board']))
- {
- foreach ($givePerms['board'] as $k => $v)
- $givePerms['board'][$k][] = $profileid;
- $smcFunc['db_insert']('replace',
- '{db_prefix}board_permissions',
- array('id_group' => 'int', 'permission' => 'string', 'add_deny' => 'int', 'id_profile' => 'int'),
- $givePerms['board'],
- array('id_group', 'permission', 'id_profile')
- );
- }
- // Update any inherited permissions as required.
- updateChildPermissions($_GET['group'], $_GET['pid']);
- // Clear cached privs.
- updateSettings(array('settings_updated' => time()));
- redirectexit('action=admin;area=permissions;pid=' . $_GET['pid']);
- }
- /**
- * A screen to set some general settings for permissions.
- *
- * @param bool $return_config = false
- */
- function GeneralPermissionSettings($return_config = false)
- {
- global $context, $modSettings, $sourcedir, $txt, $scripturl, $smcFunc;
- // All the setting variables
- $config_vars = array(
- array('title', 'settings'),
- // Inline permissions.
- array('permissions', 'manage_permissions'),
- '',
- // A few useful settings
- array('check', 'permission_enable_deny', 0, $txt['permission_settings_enable_deny'], 'help' => 'permissions_deny'),
- array('check', 'permission_enable_postgroups', 0, $txt['permission_settings_enable_postgroups'], 'help' => 'permissions_postgroups'),
- );
- call_integration_hook('integrate_modify_permission_settings', array(&$config_vars));
- if ($return_config)
- return $config_vars;
- $context['page_title'] = $txt['permission_settings_title'];
- $context['sub_template'] = 'show_settings';
- // Needed for the inline permission functions, and the settings template.
- require_once($sourcedir . '/ManageServer.php');
- // Don't let guests have these permissions.
- $context['post_url'] = $scripturl . '?action=admin;area=permissions;save;sa=settings';
- $context['permissions_excluded'] = array(-1);
- // Saving the settings?
- if (isset($_GET['save']))
- {
- checkSession('post');
- call_integration_hook('integrate_save_permission_settings');
- saveDBSettings($config_vars);
- // Clear all deny permissions...if we want that.
- if (empty($modSettings['permission_enable_deny']))
- {
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}permissions, {db_prefix}board_permissions
- WHERE add_deny = {int:denied}',
- array(
- 'denied' => 0,
- )
- );
- }
- // Make sure there are no postgroup based permissions left.
- if (empty($modSettings['permission_enable_postgroups']))
- {
- // Get a list of postgroups.
- $post_groups = array();
- $request = $smcFunc['db_query']('', '
- SELECT id_group
- FROM {db_prefix}membergroups
- WHERE min_posts != {int:min_posts}',
- array(
- 'min_posts' => -1,
- )
- );
- while ($row = $smcFunc['db_fetch_assoc']($request))
- $post_groups[] = $row['id_group'];
- $smcFunc['db_free_result']($request);
- // Remove'em.
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}permissions, {db_prefix}board_permissions
- WHERE id_group IN ({array_int:post_group_list})',
- array(
- 'post_group_list' => $post_groups,
- )
- );
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}membergroups
- SET id_parent = {int:not_inherited}
- WHERE id_parent IN ({array_int:post_group_list})',
- array(
- 'post_group_list' => $post_groups,
- 'not_inherited' => -2,
- )
- );
- }
- redirectexit('action=admin;area=permissions;sa=settings');
- }
- prepareDBSettingContext($config_vars);
- }
- /**
- * Set the permission level for a specific profile, group, or group for a profile.
- * @internal
- *
- * @param string $level
- * @param int $group
- * @param mixed $profile = null, int expected
- */
- function setPermissionLevel($level, $group, $profile = 'null')
- {
- global $smcFunc, $context;
- loadIllegalPermissions();
- loadIllegalGuestPermissions();
- // Levels by group... restrict, standard, moderator, maintenance.
- $groupLevels = array(
- 'board' => array('inherit' => array()),
- 'group' => array('inherit' => array())
- );
- // Levels by board... standard, publish, free.
- $boardLevels = array('inherit' => array());
- // Restrictive - ie. guests.
- $groupLevels['global']['restrict'] = array(
- 'search_posts',
- 'calendar_view',
- 'view_stats',
- 'who_view',
- 'profile_view_own',
- 'profile_identity_own',
- );
- $groupLevels['board']['restrict'] = array(
- 'poll_view',
- 'post_new',
- 'post_reply_own',
- 'post_reply_any',
- 'delete_own',
- 'modify_own',
- 'mark_any_notify',
- 'mark_notify',
- 'report_any',
- 'send_topic',
- );
- // Standard - ie. members. They can do anything Restrictive can.
- $groupLevels['global']['standard'] = array_merge($groupLevels['global']['restrict'], array(
- 'view_mlist',
- 'karma_edit',
- 'pm_read',
- 'pm_send',
- 'profile_view_any',
- 'profile_extra_own',
- 'profile_server_avatar',
- 'profile_upload_avatar',
- 'profile_remote_avatar',
- 'profile_remove_own',
- ));
- $groupLevels['board']['standard'] = array_merge($groupLevels['board']['restrict'], array(
- 'poll_vote',
- 'poll_edit_own',
- 'poll_post',
- 'poll_add_own',
- 'post_attachment',
- 'lock_own',
- 'remove_own',
- 'view_attachments',
- ));
- // Moderator - ie. moderators :P. They can do what standard can, and more.
- $groupLevels['global']['moderator'] = array_merge($groupLevels['global']['standard'], array(
- 'calendar_post',
- 'calendar_edit_own',
- 'access_mod_center',
- 'issue_warning',
- ));
- $groupLevels['board']['moderator'] = array_merge($groupLevels['board']['standard'], array(
- 'make_sticky',
- 'poll_edit_any',
- 'delete_any',
- 'modify_any',
- 'lock_any',
- 'remove_any',
- 'move_any',
- 'merge_any',
- 'split_any',
- 'poll_lock_any',
- 'poll_remove_any',
- 'poll_add_any',
- 'approve_posts',
- ));
- // Maintenance - wannabe admins. They can do almost everything.
- $groupLevels['global']['maintenance'] = array_merge($groupLevels['global']['moderator'], array(
- 'manage_attachments',
- 'manage_smileys',
- 'manage_boards',
- 'moderate_forum',
- 'manage_membergroups',
- 'manage_bans',
- 'admin_forum',
- 'manage_permissions',
- 'edit_news',
- 'calendar_edit_any',
- 'profile_identity_any',
- 'profile_extra_any',
- 'profile_title_any',
- ));
- $groupLevels['board']['maintenance'] = array_merge($groupLevels['board']['moderator'], array(
- ));
- // Standard - nothing above the group permissions. (this SHOULD be empty.)
- $boardLevels['standard'] = array(
- );
- // Locked - just that, you can't post here.
- $boardLevels['locked'] = array(
- 'poll_view',
- 'mark_notify',
- 'report_any',
- 'send_topic',
- 'view_attachments',
- );
- // Publisher - just a little more...
- $boardLevels['publish'] = array_merge($boardLevels['locked'], array(
- 'post_new',
- 'post_reply_own',
- 'post_reply_any',
- 'delete_own',
- 'modify_own',
- 'mark_any_notify',
- 'delete_replies',
- 'modify_replies',
- 'poll_vote',
- 'poll_edit_own',
- 'poll_post',
- 'poll_add_own',
- 'poll_remove_own',
- 'post_attachment',
- 'lock_own',
- 'remove_own',
- ));
- // Free for All - Scary. Just scary.
- $boardLevels['free'] = array_merge($boardLevels['publish'], array(
- 'poll_lock_any',
- 'poll_edit_any',
- 'poll_add_any',
- 'poll_remove_any',
- 'make_sticky',
- 'lock_any',
- 'remove_any',
- 'delete_any',
- 'split_any',
- 'merge_any',
- 'modify_any',
- 'approve_posts',
- ));
- // Make sure we're not granting someone too many permissions!
- foreach ($groupLevels['global'][$level] as $k => $permission)
- {
- if (!empty($context['illegal_permissions']) && in_array($permission, $context['illegal_permissions']))
- unset($groupLevels['global'][$level][$k]);
- if ($group == -1 && in_array($permission, $context['non_guest_permissions']))
- unset($groupLevels['global'][$level][$k]);
- }
- if ($group == -1)
- foreach ($groupLevels['board'][$level] as $k => $permission)
- if (in_array($permission, $context['non_guest_permissions']))
- unset($groupLevels['board'][$level][$k]);
- // Reset all cached permissions.
- updateSettings(array('settings_updated' => time()));
- // Setting group permissions.
- if ($profile === 'null' && $group !== 'null')
- {
- $group = (int) $group;
- if (empty($groupLevels['global'][$level]))
- return;
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}permissions
- WHERE id_group = {int:current_group}
- ' . (empty($context['illegal_permissions']) ? '' : ' AND permission NOT IN ({array_string:illegal_permissions})'),
- array(
- 'current_group' => $group,
- 'illegal_permissions' => !empty($context['illegal_permissions']) ? $context['illegal_permissions'] : array(),
- )
- );
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}board_permissions
- WHERE id_group = {int:current_group}
- AND id_profile = {int:default_profile}',
- array(
- 'current_group' => $group,
- 'default_profile' => 1,
- )
- );
- $groupInserts = array();
- foreach ($groupLevels['global'][$level] as $permission)
- $groupInserts[] = array($group, $permission);
- $smcFunc['db_insert']('insert',
- '{db_prefix}permissions',
- array('id_group' => 'int', 'permission' => 'string'),
- $groupInserts,
- array('id_group')
- );
- $boardInserts = array();
- foreach ($groupLevels['board'][$level] as $permission)
- $boardInserts[] = array(1, $group, $permission);
- $smcFunc['db_insert']('insert',
- '{db_prefix}board_permissions',
- array('id_profile' => 'int', 'id_group' => 'int', 'permission' => 'string'),
- $boardInserts,
- array('id_profile', 'id_group')
- );
- }
- // Setting profile permissions for a specific group.
- elseif ($profile !== 'null' && $group !== 'null' && ($profile == 1 || $profile > 4))
- {
- $group = (int) $group;
- $profile = (int) $profile;
- if (!empty($groupLevels['global'][$level]))
- {
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}board_permissions
- WHERE id_group = {int:current_group}
- AND id_profile = {int:current_profile}',
- array(
- 'current_group' => $group,
- 'current_profile' => $profile,
- )
- );
- }
- if (!empty($groupLevels['board'][$level]))
- {
- $boardInserts = array();
- foreach ($groupLevels['board'][$level] as $permission)
- $boardInserts[] = array($profile, $group, $permission);
- $smcFunc['db_insert']('insert',
- '{db_prefix}board_permissions',
- array('id_profile' => 'int', 'id_group' => 'int', 'permission' => 'string'),
- $boardInserts,
- array('id_profile', 'id_group')
- );
- }
- }
- // Setting profile permissions for all groups.
- elseif ($profile !== 'null' && $group === 'null' && ($profile == 1 || $profile > 4))
- {
- $profile = (int) $profile;
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}board_permissions
- WHERE id_profile = {int:current_profile}',
- array(
- 'current_profile' => $profile,
- )
- );
- if (empty($boardLevels[$level]))
- return;
- // Get all the groups...
- $query = $smcFunc['db_query']('', '
- SELECT id_group
- FROM {db_prefix}membergroups
- WHERE id_group > {int:moderator_group}
- ORDER BY min_posts, CASE WHEN id_group < {int:newbie_group} THEN id_group ELSE 4 END, group_name',
- array(
- 'moderator_group' => 3,
- 'newbie_group' => 4,
- )
- );
- while ($row = $smcFunc['db_fetch_row']($query))
- {
- $group = $row[0];
- $boardInserts = array();
- foreach ($boardLevels[$level] as $permission)
- $boardInserts[] = array($profile, $group, $permission);
- $smcFunc['db_insert']('insert',
- '{db_prefix}board_permissions',
- array('id_profile' => 'int', 'id_group' => 'int', 'permission' => 'string'),
- $boardInserts,
- array('id_profile', 'id_group')
- );
- }
- $smcFunc['db_free_result']($query);
- // Add permissions for ungrouped members.
- $boardInserts = array();
- foreach ($boardLevels[$level] as $permission)
- $boardInserts[] = array($profile, 0, $permission);
- $smcFunc['db_insert']('insert',
- '{db_prefix}board_permissions',
- array('id_profile' => 'int', 'id_group' => 'int', 'permission' => 'string'),
- $boardInserts,
- array('id_profile', 'id_group')
- );
- }
- // $profile and $group are both null!
- else
- fatal_lang_error('no_access', false);
- }
- /**
- * Load permissions into $context['permissions'].
- * @internal
- *
- * @param string $loadType, options: 'classic' or 'simple'
- */
- function loadAllPermissions($loadType = 'classic')
- {
- global $context, $txt, $modSettings;
- // List of all the groups dependant on the currently selected view - for the order so it looks pretty, yea?
- // Note to Mod authors - you don't need to stick your permission group here if you don't mind SMF sticking it the last group of the page.
- $permissionGroups = array(
- 'membergroup' => array(
- 'simple' => array(
- 'view_basic_info',
- 'use_pm_system',
- 'post_calendar',
- 'edit_profile',
- 'delete_account',
- 'use_avatar',
- 'moderate_general',
- 'administrate',
- ),
- 'classic' => array(
- 'general',
- 'pm',
- 'calendar',
- 'maintenance',
- 'member_admin',
- 'profile',
- ),
- ),
- 'board' => array(
- 'simple' => array(
- 'make_posts',
- 'make_unapproved_posts',
- 'post_polls',
- 'participate',
- 'modify',
- 'notification',
- 'attach',
- 'moderate',
- ),
- 'classic' => array(
- 'general_board',
- 'topic',
- 'post',
- 'poll',
- 'notification',
- 'attachment',
- ),
- ),
- );
- /* The format of this list is as follows:
- 'membergroup' => array(
- 'permissions_inside' => array(has_multiple_options, classic_view_group, simple_view_group(_own)*, simple_view_group_any*),
- ),
- 'board' => array(
- 'permissions_inside' => array(has_multiple_options, classic_view_group, simple_view_group(_own)*, simple_view_group_any*),
- );
- */
- $permissionList = array(
- 'membergroup' => array(
- 'view_stats' => array(false, 'general', 'view_basic_info'),
- 'view_mlist' => array(false, 'general', 'view_basic_info'),
- 'who_view' => array(false, 'general', 'view_basic_info'),
- 'search_posts' => array(false, 'general', 'view_basic_info'),
- 'karma_edit' => array(false, 'general', 'moderate_general'),
- 'disable_censor' => array(false, 'general', 'disable_censor'),
- 'pm_read' => array(false, 'pm', 'use_pm_system'),
- 'pm_send' => array(false, 'pm', 'use_pm_system'),
- 'calendar_view' => array(false, 'calendar', 'view_basic_info'),
- 'calendar_post' => array(false, 'calendar', 'post_calendar'),
- 'calendar_edit' => array(true, 'calendar', 'post_calendar', 'moderate_general'),
- 'admin_forum' => array(false, 'maintenance', 'administrate'),
- 'manage_boards' => array(false, 'maintenance', 'administrate'),
- 'manage_attachments' => array(false, 'maintenance', 'administrate'),
- 'manage_smileys' => array(false, 'maintenance', 'administrate'),
- 'edit_news' => array(false, 'maintenance', 'administrate'),
- 'access_mod_center' => array(false, 'maintenance', 'moderate_general'),
- 'moderate_forum' => array(false, 'member_admin', 'moderate_general'),
- 'manage_membergroups' => array(false, 'member_admin', 'administrate'),
- 'manage_permissions' => array(false, 'member_admin', 'administrate'),
- 'manage_bans' => array(false, 'member_admin', 'administrate'),
- 'send_mail' => array(false, 'member_admin', 'administrate'),
- 'issue_warning' => array(false, 'member_admin', 'moderate_general'),
- 'profile_view' => array(true, 'profile', 'view_basic_info', 'view_basic_info'),
- 'profile_identity' => array(true, 'profile', 'edit_profile', 'moderate_general'),
- 'profile_extra' => array(true, 'profile', 'edit_profile', 'moderate_general'),
- 'profile_title' => array(true, 'profile', 'edit_profile', 'moderate_general'),
- 'profile_remove' => array(true, 'profile', 'delete_account', 'moderate_general'),
- 'profile_server_avatar' => array(false, 'profile', 'use_avatar'),
- 'profile_upload_avatar' => array(false, 'profile', 'use_avatar'),
- 'profile_remote_avatar' => array(false, 'profile', 'use_avatar'),
- ),
- 'board' => array(
- 'moderate_board' => array(false, 'general_board', 'moderate'),
- 'approve_posts' => array(false, 'general_board', 'moderate'),
- 'post_new' => array(false, 'topic', 'make_posts'),
- 'post_unapproved_topics' => array(false, 'topic', 'make_unapproved_posts'),
- 'post_unapproved_replies' => array(true, 'topic', 'make_unapproved_posts', 'make_unapproved_posts'),
- 'post_reply' => array(true, 'topic', 'make_posts', 'make_posts'),
- 'merge_any' => array(false, 'topic', 'moderate'),
- 'split_any' => array(false, 'topic', 'moderate'),
- 'send_topic' => array(false, 'topic', 'moderate'),
- 'make_sticky' => array(false, 'topic', 'moderate'),
- 'move' => array(true, 'topic', 'moderate', 'moderate'),
- 'lock' => array(true, 'topic', 'moderate', 'moderate'),
- 'remove' => array(true, 'topic', 'modify', 'moderate'),
- 'modify_replies' => array(false, 'topic', 'moderate'),
- 'delete_replies' => array(false, 'topic', 'moderate'),
- 'announce_topic' => array(false, 'topic', 'moderate'),
- 'delete' => array(true, 'post', 'modify', 'moderate'),
- 'modify' => array(true, 'post', 'modify', 'moderate'),
- 'report_any' => array(false, 'post', 'participate'),
- 'poll_view' => array(false, 'poll', 'participate'),
- 'poll_vote' => array(false, 'poll', 'participate'),
- 'poll_post' => array(false, 'poll', 'post_polls'),
- 'poll_add' => array(true, 'poll', 'post_polls', 'moderate'),
- 'poll_edit' => array(true, 'poll', 'modify', 'moderate'),
- 'poll_lock' => array(true, 'poll', 'moderate', 'moderate'),
- 'poll_remove' => array(true, 'poll', 'modify', 'moderate'),
- 'mark_any_notify' => array(false, 'notification', 'notification'),
- 'mark_notify' => array(false, 'notification', 'notification'),
- 'view_attachments' => array(false, 'attachment', 'participate'),
- 'post_unapproved_attachments' => array(false, 'attachment', 'make_unapproved_posts'),
- 'post_attachment' => array(false, 'attachment', 'attach'),
- ),
- );
- // All permission groups that will be shown in the left column on classic view.
- $leftPermissionGroups = array(
- 'general',
- 'calendar',
- 'maintenance',
- 'member_admin',
- 'topic',
- 'post',
- );
- // We need to know what permissions we can't give to guests.
- loadIllegalGuestPermissions();
- // Some permissions are hidden if features are off.
- $hiddenPermissions = array();
- $relabelPermissions = array(); // Permissions to apply a different label to.
- $relabelGroups = array(); // As above but for groups.
- if (!in_array('cd', $context['admin_features']))
- {
- $hiddenPermissions[] = 'calendar_view';
- $hiddenPermissions[] = 'calendar_post';
- $hiddenPermissions[] = 'calendar_edit';
- }
- if (!in_array('w', $context['admin_features']))
- $hiddenPermissions[] = 'issue_warning';
- // Post moderation?
- if (!$modSettings['postmod_active'])
- {
- $hiddenPermissions[] = 'approve_posts';
- $hiddenPermissions[] = 'post_unapproved_topics';
- $hiddenPermissions[] = 'post_unapproved_replies';
- $hiddenPermissions[] = 'post_unapproved_attachments';
- }
- // If we show them on classic view we change the name.
- else
- {
- // Relabel the topics permissions
- $relabelPermissions['post_new'] = 'auto_approve_topics';
- // Relabel the reply permissions
- $relabelPermissions['post_reply'] = 'auto_approve_replies';
- // Relabel the attachment permissions
- $relabelPermissions['post_attachment'] = 'auto_approve_attachments';
- }
- // Provide a practical way to modify permissions.
- call_integration_hook('integrate_load_permissions', array(&$permissionGroups, &$permissionList, &$leftPermissionGroups, &$hiddenPermissions, &$relabelPermissions));
- $context['permissions'] = array();
- $context['hidden_permissions'] = array();
- foreach ($permissionList as $permissionType => $permissionList)
- {
- $context['permissions'][$permissionType] = array(
- 'id' => $permissionType,
- 'view' => $loadType,
- 'columns' => array()
- );
- foreach ($permissionList as $permission => $permissionArray)
- {
- // If this is a guest permission we don't do it if it's the guest group.
- if (isset($context['group']['id']) && $context['group']['id'] == -1 && in_array($permission, $context['non_guest_permissions']))
- continue;
- // What groups will this permission be in?
- $own_group = $permissionArray[($loadType == 'classic' ? 1 : 2)];
- $any_group = $loadType == 'simple' && !empty($permissionArray[3]) ? $permissionArray[3] : ($loadType == 'simple' && $permissionArray[0] ? $permissionArray[2] : '');
- // First, Do these groups actually exist - if not add them.
- if (!isset($permissionGroups[$permissionType][$loadType][$own_group]))
- $permissionGroups[$permissionType][$loadType][$own_group] = true;
- if (!empty($any_group) && !isset($permissionGroups[$permissionType][$loadType][$any_group]))
- $permissionGroups[$permissionType][$loadType][$any_group] = true;
- // What column should this be located into?
- $position = $loadType == 'classic' && !in_array($own_group, $leftPermissionGroups) ? 1 : 0;
- // If the groups have not yet been created be sure to create them.
- $bothGroups = array('own' => $own_group);
- $bothGroups = array();
- // For guests, just reset the array.
- if (!isset($context['group']['id']) || !($context['group']['id'] == -1 && $any_group))
- $bothGroups['own'] = $own_group;
- if ($any_group)
- {
- $bothGroups['any'] = $any_group;
- }
- foreach ($bothGroups as $group)
- if (!isset($context['permissions'][$permissionType]['columns'][$position][$group]))
- $context['permissions'][$permissionType]['columns'][$position][$group] = array(
- 'type' => $permissionType,
- 'id' => $group,
- 'name' => $loadType == 'simple' ? (isset($txt['permissiongroup_simple_' . $group]) ? $txt['permissiongroup_simple_' . $group] : '') : $txt['permissiongroup_' . $group],
- 'icon' => isset($txt['permissionicon_' . $group]) ? $txt['permissionicon_' . $group] : $txt['permissionicon'],
- 'help' => isset($txt['permissionhelp_' . $group]) ? $txt['permissionhelp_' . $group] : '',
- 'hidden' => false,
- 'permissions' => array()
- );
- // This is where we set up the permission dependant on the view.
- if ($loadType == 'classic')
- {
- $context['permissions'][$permissionType]['columns'][$position][$own_group]['permissions'][$permission] = array(
- 'id' => $permission,
- 'name' => !isset($relabelPermissions[$permission]) ? $txt['permissionname_' . $permission] : $txt[$relabelPermissions[$permission]],
- 'show_help' => isset($txt['permissionhelp_' . $permission]),
- 'note' => isset($txt['permissionnote_' . $permission]) ? $txt['permissionnote_' . $permission] : '',
- 'has_own_any' => $permissionArray[0],
- 'own' => array(
- 'id' => $permission . '_own',
- 'name' => $permissionArray[0] ? $txt['permissionname_' . $permission . '_own'] : ''
- ),
- 'any' => array(
- 'id' => $permission . '_any',
- 'name' => $permissionArray[0] ? $txt['permissionname_' . $permission . '_any'] : ''
- ),
- 'hidden' => in_array($permission, $hiddenPermissions),
- );
- }
- else
- {
- foreach ($bothGroups as $group_type => $group)
- {
- $context['permissions'][$permissionType]['columns'][$position][$group]['permissions'][$permission . ($permissionArray[0] ? '_' . $group_type : '')] = array(
- 'id' => $permission . ($permissionArray[0] ? '_' . $group_type : ''),
- 'name' => isset($txt['permissionname_simple_' . $permission . ($permissionArray[0] ? '_' . $group_type : '')]) ? $txt['permissionname_simple_' . $permission . ($permissionArray[0] ? '_' . $group_type : '')] : $txt['permissionname_' . $permission],
- 'help_index' => isset($txt['permissionhelp_' . $permission]) ? 'permissionhelp_' . $permission : '',
- 'hidden' => in_array($permission, $hiddenPermissions),
- );
- }
- }
- if (in_array($permission, $hiddenPermissions))
- {
- if ($permissionArray[0])
- {
- $context['hidden_permissions'][] = $permission . '_own';
- $context['hidden_permissions'][] = $permission . '_any';
- }
- else
- $context['hidden_permissions'][] = $permission;
- }
- }
- ksort($context['permissions'][$permissionType]['columns']);
- }
- // Check we don't leave any empty groups - and mark hidden ones as such.
- foreach ($context['permissions'][$permissionType]['columns'] as $column => $groups)
- foreach ($groups as $id => $group)
- {
- if (empty($group['permissions']))
- unset($context['permissions'][$permissionType]['columns'][$column][$id]);
- else
- {
- $foundNonHidden = false;
- foreach ($group['permissions'] as $permission)
- if (empty($permission['hidden']))
- $foundNonHidden = true;
- if (!$foundNonHidden)
- $context['permissions'][$permissionType]['columns'][$column][$id]['hidden'] = true;
- }
- }
- }
- //
- /**
- * Initialize a form with inline permissions settings.
- * It loads a context variables for each permission.
- * This function is used by several settings screens to set specific permissions.
- * @internal
- *
- * @param array $permissions
- * @param array $excluded_groups = array()
- *
- * @uses ManagePermissions language
- * @uses ManagePermissions template.
- */
- function init_inline_permissions($permissions, $excluded_groups = array())
- {
- global $context, $txt, $modSettings, $smcFunc;
- loadLanguage('ManagePermissions');
- loadTemplate('ManagePermissions');
- $context['can_change_permissions'] = allowedTo('manage_permissions');
- // Nothing to initialize here.
- if (!$context['can_change_permissions'])
- return;
- // Load the permission settings for guests
- foreach ($permissions as $permission)
- $context[$permission] = array(
- -1 => array(
- 'id' => -1,
- 'name' => $txt['membergroups_guests'],
- 'is_postgroup' => false,
- 'status' => 'off',
- ),
- 0 => array(
- 'id' => 0,
- 'name' => $txt['membergroups_members'],
- 'is_postgroup' => false,
- 'status' => 'off',
- ),
- );
- $request = $smcFunc['db_query']('', '
- SELECT id_group, CASE WHEN add_deny = {int:denied} THEN {string:deny} ELSE {string:on} END AS status, permission
- FROM {db_prefix}permissions
- WHERE id_group IN (-1, 0)
- AND permission IN ({array_string:permissions})',
- array(
- 'denied' => 0,
- 'permissions' => $permissions,
- 'deny' => 'deny',
- 'on' => 'on',
- )
- );
- while ($row = $smcFunc['db_fetch_assoc']($request))
- $context[$row['permission']][$row['id_group']]['status'] = $row['status'];
- $smcFunc['db_free_result']($request);
- $request = $smcFunc['db_query']('', '
- SELECT mg.id_group, mg.group_name, mg.min_posts, IFNULL(p.add_deny, -1) AS status, p.permission
- FROM {db_prefix}membergroups AS mg
- LEFT JOIN {db_prefix}permissions AS p ON (p.id_group = mg.id_group AND p.permission IN ({array_string:permissions}))
- WHERE mg.id_group NOT IN (1, 3)
- AND mg.id_parent = {int:not_inherited}' . (empty($modSettings['permission_enable_postgroups']) ? '
- AND mg.min_posts = {int:min_posts}' : '') . '
- ORDER BY mg.min_posts, CASE WHEN mg.id_group < {int:newbie_group} THEN mg.id_group ELSE 4 END, mg.group_name',
- array(
- 'not_inherited' => -2,
- 'min_posts' => -1,
- 'newbie_group' => 4,
- 'permissions' => $permissions,
- )
- );
- while ($row = $smcFunc['db_fetch_assoc']($request))
- {
- // Initialize each permission as being 'off' until proven otherwise.
- foreach ($permissions as $permission)
- if (!isset($context[$permission][$row['id_group']]))
- $context[$permission][$row['id_group']] = array(
- 'id' => $row['id_group'],
- 'name' => $row['group_name'],
- 'is_postgroup' => $row['min_posts'] != -1,
- 'status' => 'off',
- );
- $context[$row['permission']][$row['id_group']]['status'] = empty($row['status']) ? 'deny' : ($row['status'] == 1 ? 'on' : 'off');
- }
- $smcFunc['db_free_result']($request);
- // Some permissions cannot be given to certain groups. Remove the groups.
- foreach ($excluded_groups as $group)
- {
- foreach ($permissions as $permission)
- {
- if (isset($context[$permission][$group]))
- unset($context[$permission][$group]);
- }
- }
- }
- /**
- * Show a collapsible box to set a specific permission.
- * The function is called by templates to show a list of permissions settings.
- * Calls the template function template_inline_permissions().
- *
- * @param string $permission
- */
- function theme_inline_permissions($permission)
- {
- global $context;
- $context['current_permission'] = $permission;
- $context['member_groups'] = $context[$permission];
- template_inline_permissions();
- }
- /**
- * Save the permissions of a form containing inline permissions.
- * @internal
- *
- * @param array $permissions
- */
- function save_inline_permissions($permissions)
- {
- global $context, $smcFunc;
- // No permissions? Not a great deal to do here.
- if (!allowedTo('manage_permissions'))
- return;
- // Almighty session check, verify our ways.
- checkSession();
- validateToken('admin-mp');
- // Check they can't do certain things.
- loadIllegalPermissions();
- $insertRows = array();
- foreach ($permissions as $permission)
- {
- if (!isset($_POST[$permission]))
- continue;
- foreach ($_POST[$permission] as $id_group => $value)
- {
- if (in_array($value, array('on', 'deny')) && (empty($context['illegal_permissions']) || !in_array($permission, $context['illegal_permissions'])))
- $insertRows[] = array((int) $id_group, $permission, $value == 'on' ? 1 : 0);
- }
- }
- // Remove the old permissions...
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}permissions
- WHERE permission IN ({array_string:permissions})
- ' . (empty($context['illegal_permissions']) ? '' : ' AND permission NOT IN ({array_string:illegal_permissions})'),
- array(
- 'illegal_permissions' => !empty($context['illegal_permissions']) ? $context['illegal_permissions'] : array(),
- 'permissions' => $permissions,
- )
- );
- // ...and replace them with new ones.
- if (!empty($insertRows))
- $smcFunc['db_insert']('insert',
- '{db_prefix}permissions',
- array('id_group' => 'int', 'permission' => 'string', 'add_deny' => 'int'),
- $insertRows,
- array('id_group', 'permission')
- );
- // Do a full child update.
- updateChildPermissions(array(), -1);
- // Just in case we cached this.
- updateSettings(array('settings_updated' => time()));
- }
- /**
- * Load permissions profiles.
- */
- function loadPermissionProfiles()
- {
- global $context, $txt, $smcFunc;
- $request = $smcFunc['db_query']('', '
- SELECT id_profile, profile_name
- FROM {db_prefix}permission_profiles
- ORDER BY id_profile',
- array(
- )
- );
- $context['profiles'] = array();
- while ($row = $smcFunc['db_fetch_assoc']($request))
- {
- // Format the label nicely.
- if (isset($txt['permissions_profile_' . $row['profile_name']]))
- $name = $txt['permissions_profile_' . $row['profile_name']];
- else
- $name = $row['profile_name'];
- $context['profiles'][$row['id_profile']] = array(
- 'id' => $row['id_profile'],
- 'name' => $name,
- 'can_modify' => $row['id_profile'] == 1 || $row['id_profile'] > 4,
- 'unformatted_name' => $row['profile_name'],
- );
- }
- $smcFunc['db_free_result']($request);
- }
- /**
- * Add/Edit/Delete profiles.
- */
- function EditPermissionProfiles()
- {
- global $context, $txt, $smcFunc;
- // Setup the template, first for fun.
- $context['page_title'] = $txt['permissions_profile_edit'];
- $context['sub_template'] = 'edit_profiles';
- // If we're creating a new one do it first.
- if (isset($_POST['create']) && trim($_POST['profile_name']) != '')
- {
- checkSession();
- validateToken('admin-mpp');
- $_POST['copy_from'] = (int) $_POST['copy_from'];
- $_POST['profile_name'] = $smcFunc['htmlspecialchars']($_POST['profile_name']);
- // Insert the profile itself.
- $smcFunc['db_insert']('',
- '{db_prefix}permission_profiles',
- array(
- 'profile_name' => 'string',
- ),
- array(
- $_POST['profile_name'],
- ),
- array('id_profile')
- );
- $profile_id = $smcFunc['db_insert_id']('{db_prefix}permission_profiles', 'id_profile');
- // Load the permissions from the one it's being copied from.
- $request = $smcFunc['db_query']('', '
- SELECT id_group, permission, add_deny
- FROM {db_prefix}board_permissions
- WHERE id_profile = {int:copy_from}',
- array(
- 'copy_from' => $_POST['copy_from'],
- )
- );
- $inserts = array();
- while ($row = $smcFunc['db_fetch_assoc']($request))
- $inserts[] = array($profile_id, $row['id_group'], $row['permission'], $row['add_deny']);
- $smcFunc['db_free_result']($request);
- if (!empty($inserts))
- $smcFunc['db_insert']('insert',
- '{db_prefix}board_permissions',
- array('id_profile' => 'int', 'id_group' => 'int', 'permission' => 'string', 'add_deny' => 'int'),
- $inserts,
- array('id_profile', 'id_group', 'permission')
- );
- }
- // Renaming?
- elseif (isset($_POST['rename']))
- {
- checkSession();
- validateToken('admin-mpp');
- // Just showing the boxes?
- if (!isset($_POST['rename_profile']))
- $context['show_rename_boxes'] = true;
- else
- {
- foreach ($_POST['rename_profile'] as $id => $value)
- {
- $value = $smcFunc['htmlspecialchars']($value);
- if (trim($value) != '' && $id > 4)
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}permission_profiles
- SET profile_name = {string:profile_name}
- WHERE id_profile = {int:current_profile}',
- array(
- 'current_profile' => (int) $id,
- 'profile_name' => $value,
- )
- );
- }
- }
- }
- // Deleting?
- elseif (isset($_POST['delete']) && !empty($_POST['delete_profile']))
- {
- checkSession('post');
- validateToken('admin-mpp');
- $profiles = array();
- foreach ($_POST['delete_profile'] as $profile)
- if ($profile > 4)
- $profiles[] = (int) $profile;
- // Verify it's not in use...
- $request = $smcFunc['db_query']('', '
- SELECT id_board
- FROM {db_prefix}boards
- WHERE id_profile IN ({array_int:profile_list})
- LIMIT 1',
- array(
- 'profile_list' => $profiles,
- )
- );
- if ($smcFunc['db_num_rows']($request) != 0)
- fatal_lang_error('no_access', false);
- $smcFunc['db_free_result']($request);
- // Oh well, delete.
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}permission_profiles
- WHERE id_profile IN ({array_int:profile_list})',
- array(
- 'profile_list' => $profiles,
- )
- );
- }
- // Clearly, we'll need this!
- loadPermissionProfiles();
- // Work out what ones are in use.
- $request = $smcFunc['db_query']('', '
- SELECT id_profile, COUNT(id_board) AS board_count
- FROM {db_prefix}boards
- GROUP BY id_profile',
- array(
- )
- );
- while ($row = $smcFunc['db_fetch_assoc']($request))
- if (isset($context['profiles'][$row['id_profile']]))
- {
- $context['profiles'][$row['id_profile']]['in_use'] = true;
- $context['profiles'][$row['id_profile']]['boards'] = $row['board_count'];
- $context['profiles'][$row['id_profile']]['boards_text'] = $row['board_count'] > 1 ? sprintf($txt['permissions_profile_used_by_many'], $row['board_count']) : $txt['permissions_profile_used_by_' . ($row['board_count'] ? 'one' : 'none')];
- }
- $smcFunc['db_free_result']($request);
- // What can we do with these?
- $context['can_edit_something'] = false;
- foreach ($context['profiles'] as $id => $profile)
- {
- // Can't delete special ones.
- $context['profiles'][$id]['can_edit'] = isset($txt['permissions_profile_' . $profile['unformatted_name']]) ? false : true;
- if ($context['profiles'][$id]['can_edit'])
- $context['can_edit_something'] = true;
- // You can only delete it if you can edit it AND it's not in use.
- $context['profiles'][$id]['can_delete'] = $context['profiles'][$id]['can_edit'] && empty($profile['in_use']) ? true : false;
- }
- createToken('admin-mpp');
- }
- /**
- * This function updates the permissions of any groups based off this group.
- *
- * @param mixed $parents (array or int)
- * @param mixed $profile = null, int expected
- */
- function updateChildPermissions($parents, $profile = null)
- {
- global $smcFunc;
- // All the parent groups to sort out.
- if (!is_array($parents))
- $parents = array($parents);
- // Find all the children of this group.
- $request = $smcFunc['db_query']('', '
- SELECT id_parent, id_group
- FROM {db_prefix}membergroups
- WHERE id_parent != {int:not_inherited}
- ' . (empty($parents) ? '' : 'AND id_parent IN ({array_int:parent_list})'),
- array(
- 'parent_list' => $parents,
- 'not_inherited' => -2,
- )
- );
- $children = array();
- $parents = array();
- $child_groups = array();
- while ($row = $smcFunc['db_fetch_assoc']($request))
- {
- $children[$row['id_parent']][] = $row['id_group'];
- $child_groups[] = $row['id_group'];
- $parents[] = $row['id_parent'];
- }
- $smcFunc['db_free_result']($request);
- $parents = array_unique($parents);
- // Not a sausage, or a child?
- if (empty($children))
- return false;
- // First off, are we doing general permissions?
- if ($profile < 1 || $profile === null)
- {
- // Fetch all the parent permissions.
- $request = $smcFunc['db_query']('', '
- SELECT id_group, permission, add_deny
- FROM {db_prefix}permissions
- WHERE id_group IN ({array_int:parent_list})',
- array(
- 'parent_list' => $parents,
- )
- );
- $permissions = array();
- while ($row = $smcFunc['db_fetch_assoc']($request))
- foreach ($children[$row['id_group']] as $child)
- $permissions[] = array($child, $row['permission'], $row['add_deny']);
- $smcFunc['db_free_result']($request);
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}permissions
- WHERE id_group IN ({array_int:child_groups})',
- array(
- 'child_groups' => $child_groups,
- )
- );
- // Finally insert.
- if (!empty($permissions))
- {
- $smcFunc['db_insert']('insert',
- '{db_prefix}permissions',
- array('id_group' => 'int', 'permission' => 'string', 'add_deny' => 'int'),
- $permissions,
- array('id_group', 'permission')
- );
- }
- }
- // Then, what about board profiles?
- if ($profile != -1)
- {
- $profileQuery = $profile === null ? '' : ' AND id_profile = {int:current_profile}';
- // Again, get all the parent permissions.
- $request = $smcFunc['db_query']('', '
- SELECT id_profile, id_group, permission, add_deny
- FROM {db_prefix}board_permissions
- WHERE id_group IN ({array_int:parent_groups})
- ' . $profileQuery,
- array(
- 'parent_groups' => $parents,
- 'current_profile' => $profile !== null && $profile ? $profile : 1,
- )
- );
- $permissions = array();
- while ($row = $smcFunc['db_fetch_assoc']($request))
- foreach ($children[$row['id_group']] as $child)
- $permissions[] = array($child, $row['id_profile'], $row['permission'], $row['add_deny']);
- $smcFunc['db_free_result']($request);
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}board_permissions
- WHERE id_group IN ({array_int:child_groups})
- ' . $profileQuery,
- array(
- 'child_groups' => $child_groups,
- 'current_profile' => $profile !== null && $profile ? $profile : 1,
- )
- );
- // Do the insert.
- if (!empty($permissions))
- {
- $smcFunc['db_insert']('insert',
- '{db_prefix}board_permissions',
- array('id_group' => 'int', 'id_profile' => 'int', 'permission' => 'string', 'add_deny' => 'int'),
- $permissions,
- array('id_group', 'id_profile', 'permission')
- );
- }
- }
- }
- /**
- * Load permissions someone cannot grant.
- */
- function loadIllegalPermissions()
- {
- global $context;
- $context['illegal_permissions'] = array();
- if (!allowedTo('admin_forum'))
- $context['illegal_permissions'][] = 'admin_forum';
- if (!allowedTo('manage_membergroups'))
- $context['illegal_permissions'][] = 'manage_membergroups';
- if (!allowedTo('manage_permissions'))
- $context['illegal_permissions'][] = 'manage_permissions';
- call_integration_hook('integrate_load_illegal_permissions');
- }
- /**
- * Loads the permissions that can not be given to guests.
- * Stores the permissions in $context['non_guest_permissions'].
- */
- function loadIllegalGuestPermissions()
- {
- global $context;
- $context['non_guest_permissions'] = array(
- 'delete_replies',
- 'karma_edit',
- 'poll_add_own',
- 'pm_read',
- 'pm_send',
- 'profile_identity',
- 'profile_extra',
- 'profile_title',
- 'profile_remove',
- 'profile_server_avatar',
- 'profile_upload_avatar',
- 'profile_remote_avatar',
- 'profile_view_own',
- 'mark_any_notify',
- 'mark_notify',
- 'admin_forum',
- 'manage_boards',
- 'manage_attachments',
- 'manage_smileys',
- 'edit_news',
- 'access_mod_center',
- 'moderate_forum',
- 'issue_warning',
- 'manage_membergroups',
- 'manage_permissions',
- 'manage_bans',
- 'move_own',
- 'modify_replies',
- 'send_mail',
- 'approve_posts',
- );
- call_integration_hook('integrate_load_illegal_guest_permissions');
- }
- /**
- * Present a nice way of applying post moderation.
- */
- function ModifyPostModeration()
- {
- global $context, $txt, $smcFunc, $modSettings;
- // Just in case.
- checkSession('get');
- $context['page_title'] = $txt['permissions_post_moderation'];
- $context['sub_template'] = 'postmod_permissions';
- $context['current_profile'] = isset($_REQUEST['pid']) ? (int) $_REQUEST['pid'] : 1;
- // Load all the permission profiles.
- loadPermissionProfiles();
- // Mappings, our key => array(can_do_moderated, can_do_all)
- $mappings = array(
- 'new_topic' => array('post_new', 'post_unapproved_topics'),
- 'replies_own' => array('post_reply_own', 'post_unapproved_replies_own'),
- 'replies_any' => array('post_reply_any', 'post_unapproved_replies_any'),
- 'attachment' => array('post_attachment', 'post_unapproved_attachments'),
- );
- call_integration_hook('integrate_post_moderation_mapping', array(&$mappings));
- // Start this with the guests/members.
- $context['profile_groups'] = array(
- -1 => array(
- 'id' => -1,
- 'name' => $txt['membergroups_guests'],
- 'color' => '',
- 'new_topic' => 'disallow',
- 'replies_own' => 'disallow',
- 'replies_any' => 'disallow',
- 'attachment' => 'disallow',
- 'children' => array(),
- ),
- 0 => array(
- 'id' => 0,
- 'name' => $txt['membergroups_members'],
- 'color' => '',
- 'new_topic' => 'disallow',
- 'replies_own' => 'disallow',
- 'replies_any' => 'disallow',
- 'attachment' => 'disallow',
- 'children' => array(),
- ),
- );
- // Load the groups.
- $request = $smcFunc['db_query']('', '
- SELECT id_group, group_name, online_color, id_parent
- FROM {db_prefix}membergroups
- WHERE id_group != {int:admin_group}
- ' . (empty($modSettings['permission_enable_postgroups']) ? ' AND min_posts = {int:min_posts}' : '') . '
- ORDER BY id_parent ASC',
- array(
- 'admin_group' => 1,
- 'min_posts' => -1,
- )
- );
- while ($row = $smcFunc['db_fetch_assoc']($request))
- {
- if ($row['id_parent'] == -2)
- {
- $context['profile_groups'][$row['id_group']] = array(
- 'id' => $row['id_group'],
- 'name' => $row['group_name'],
- 'color' => $row['online_color'],
- 'new_topic' => 'disallow',
- 'replies_own' => 'disallow',
- 'replies_any' => 'disallow',
- 'attachment' => 'disallow',
- 'children' => array(),
- );
- }
- elseif (isset($context['profile_groups'][$row['id_parent']]))
- $context['profile_groups'][$row['id_parent']]['children'][] = $row['group_name'];
- }
- $smcFunc['db_free_result']($request);
- // What are the permissions we are querying?
- $all_permissions = array();
- foreach ($mappings as $perm_set)
- $all_permissions = array_merge($all_permissions, $perm_set);
- // If we're saving the changes then do just that - save them.
- if (!empty($_POST['save_changes']) && ($context['current_profile'] == 1 || $context['current_profile'] > 4))
- {
- validateToken('admin-mppm');
- // Start by deleting all the permissions relevant.
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}board_permissions
- WHERE id_profile = {int:current_profile}
- AND permission IN ({array_string:permissions})
- AND id_group IN ({array_int:profile_group_list})',
- array(
- 'profile_group_list' => array_keys($context['profile_groups']),
- 'current_profile' => $context['current_profile'],
- 'permissions' => $all_permissions,
- )
- );
- // Do it group by group.
- $new_permissions = array();
- foreach ($context['profile_groups'] as $id => $group)
- {
- foreach ($mappings as $index => $data)
- {
- if (isset($_POST[$index][$group['id']]))
- {
- if ($_POST[$index][$group['id']] == 'allow')
- {
- // Give them both sets for fun.
- $new_permissions[] = array($context['current_profile'], $group['id'], $data[0], 1);
- $new_permissions[] = array($context['current_profile'], $group['id'], $data[1], 1);
- }
- elseif ($_POST[$index][$group['id']] == 'moderate')
- $new_permissions[] = array($context['current_profile'], $group['id'], $data[1], 1);
- }
- }
- }
- // Insert new permissions.
- if (!empty($new_permissions))
- $smcFunc['db_insert']('',
- '{db_prefix}board_permissions',
- array('id_profile' => 'int', 'id_group' => 'int', 'permission' => 'string', 'add_deny' => 'int'),
- $new_permissions,
- array('id_profile', 'id_group', 'permission')
- );
- }
- // Now get all the permissions!
- $request = $smcFunc['db_query']('', '
- SELECT id_group, permission, add_deny
- FROM {db_prefix}board_permissions
- WHERE id_profile = {int:current_profile}
- AND permission IN ({array_string:permissions})
- AND id_group IN ({array_int:profile_group_list})',
- array(
- 'profile_group_list' => array_keys($context['profile_groups']),
- 'current_profile' => $context['current_profile'],
- 'permissions' => $all_permissions,
- )
- );
- while ($row = $smcFunc['db_fetch_assoc']($request))
- {
- foreach ($mappings as $key => $data)
- {
- foreach ($data as $index => $perm)
- {
- if ($perm == $row['permission'])
- {
- // Only bother if it's not denied.
- if ($row['add_deny'])
- {
- // Full allowance?
- if ($index == 0)
- $context['profile_groups'][$row['id_group']][$key] = 'allow';
- // Otherwise only bother with moderate if not on allow.
- elseif ($context['profile_groups'][$row['id_group']][$key] != 'allow')
- $context['profile_groups'][$row['id_group']][$key] = 'moderate';
- }
- }
- }
- }
- }
- $smcFunc['db_free_result']($request);
- createToken('admin-mppm');
- }
- ?>
|